Where adverse media fits in the program
AUSTRAC's risk-based framework does not prescribe a single adverse-media product or source. The check supports the risk assessment: a customer or beneficial owner connected to credible allegations of financial crime may warrant enhanced due diligence, ongoing monitoring or, in some cases, a suspicious matter report. PEP and sanctions screening answer different questions, so treat adverse media as a separate control rather than a synonym for either.
Adverse media is most useful when it is current, source-based and tied to the person being screened. A search of the same name in another country, an unrelated industry or a decades-old matter may have little probative value. Record the search terms, the sources reviewed, the date and the reason a result was accepted or dismissed.
Run the check on the right subjects
Screening every related party in every file is not proportionate for every practice. Define in the AML/CTF program which subject types receive adverse media, at which risk tiers and on which events, then apply the policy consistently.
- The customer and, for non-individuals, each beneficial owner or controller
- Individuals acting on behalf of the customer where the relationship risk requires it
- Related parties and counterparties for high-risk matters, consistent with the program
- Newly identified owners or controllers discovered during a review cycle
Do not automate the conclusion
A vendor may return a match score or a risk band, but the reporting entity remains responsible for the decision. Confirm that the name, date of birth, jurisdiction and other identifiers match your customer. Distinguish an allegation from a conviction, a final judgment from a pending case, and a named entity from its similarly named relative. Where the information is genuinely adverse, decide what the program requires: enhanced due diligence, source-of-funds review, additional monitoring or refusal of the service.
Do not describe a confirmed match as automatically high risk or automatically triggering enhanced CDD. The Rules and AUSTRAC guidance connect enhanced measures to the statutory triggers and a reasoned risk assessment. Record the disposition: accepted, dismissed with reasons, escalated, or returned for more information.
Keep the evidence and the refresh cycle
Adverse media ages quickly. A clean search in January does not clear a customer in July. Use ongoing customer due diligence events, material relationship changes and risk-based review dates to re-run the check and record the refresh.
- Search date, provider or source names, and the exact terms used
- The result snapshot or citation relied on, retained in line with the program
- The analyst disposition and the rationale, including why a hit was dismissed
- The next review date or trigger event, so results do not go stale
Official sources
Use these primary AUSTRAC pages to confirm the current rules and apply them to your circumstances.
Frequently asked questions
Is an adverse-media hit the same as a suspicious matter report?
No. A hit is information to assess. An SMR is required when you form a reasonable suspicion on the statutory grounds. Assess the hit in context and follow the SMR process when the test is met, without disclosing the report where disclosure could prejudice an investigation.
Do we need a paid screening provider to run adverse media?
No. AUSTRAC does not mandate a provider. Practices may use reputable open-source research, provided they record the sources, dates and reasoning. A provider can add coverage and efficiency, but the analysis and the evidence remain the practice's responsibility.
Can adverse media alone make a customer high risk?
Not automatically. Adverse information is one input to the risk assessment. The program should define how confirmed negative information affects the rating, what enhanced measures follow and who decides. Document the reasoning rather than relying on a vendor score.
How often should adverse media be re-run?
Set risk-based frequencies in the program and re-run on trigger events such as ownership changes, new designated services, unusual transactions or doubts about KYC information. AUSTRAC does not prescribe one universal calendar; record why the selected frequency is proportionate.
Put it into practice
Cassandra AML turns these obligations into a working system: designated-service decisions, customer due diligence, screening, monitoring and reporting records — hosted in Sydney, free to start.
This guide is general information for Australian professionals. It is not legal advice and does not replace the AML/CTF Act, the AML/CTF Rules or AUSTRAC guidance. Confirm your specific obligations with AUSTRAC or a qualified legal adviser. See our editorial and correction standards.