One of the most common comments I've heard since Australia's new Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) reforms came into effect is this:
"We're only a small agency. Surely these laws are really aimed at the big players."
It's an understandable assumption.
After all, when we hear about money laundering, the stories usually involve luxury homes, organised crime syndicates and multi-million-dollar transactions.
But that's not how the legislation works.
Australia's AML reforms don't distinguish between a business with five offices and one with five employees. They apply because of the services a business provides, not its size.
That's an important distinction.
Every reporting entity is expected to understand the money laundering risks associated with its business, implement appropriate controls and be able to demonstrate that those controls are operating effectively.
That doesn't necessarily mean every business requires the same systems or procedures.
A boutique suburban agency and a national property group face different levels of risk. Their AML programs should reflect those differences.
What they can't do is assume that being smaller means the legislation somehow doesn't apply.
In many respects, smaller businesses face a different challenge.
Large organisations often have dedicated compliance teams, legal advisers, and internal governance functions. Smaller businesses rarely have those resources. Agency principals are frequently balancing sales, staff management, marketing, finance, and client relationships all at once.
Adding AML compliance to that list can seem overwhelming.
That's why it's important to remember what the legislation is trying to achieve.
It's not asking businesses to become financial crime investigators overnight.
It's asking them to understand their risks, implement reasonable controls and demonstrate that compliance has become part of normal business practice.
For many agencies, the biggest challenge isn't completing identity checks or screening clients.
It's creating consistent, repeatable processes that staff can follow every day.
Compliance works best when it's embedded into existing workflows rather than treated as a separate administrative exercise.
The agencies that approach AML this way are likely to spend less time chasing paperwork, reduce the risk of inconsistent decision-making and be better prepared as regulatory expectations continue to evolve.
Ultimately, these reforms are changing the way Australian businesses think about governance.
They're encouraging organisations of every size to ask a simple question:
"Can we confidently demonstrate that we're managing our compliance obligations appropriately?"
That's a question every agency should be able to answer—whether they have three employees or three hundred.
Because under Australia's new AML laws, good governance isn't measured by the size of your business.
It's measured by the strength of your processes.