For trust & company services
Company and trust formation CDD checklist for Australian TCSPs
From 1 July 2026, creating or restructuring a company or legal arrangement in the course of business can be a professional designated service. For item 6 company formation, the AML/CTF customer population can extend beyond the person giving instructions to the proposed beneficial owners and directors. For an express trust, it can include the proposed trustee, settlor and beneficiaries. A trust and company service provider therefore needs a formation workflow that identifies the service and every relevant customer before documents are lodged or executed. This checklist turns that requirement into a practical file sequence. It is deliberately broader than an identity-document list: sound initial customer due diligence also establishes authority, ownership or control, purpose, risk and the basis for any simplified or enhanced measures.
See the trust and company services AML/CTF workspaceStep-by-step process
Scope the formation service
Describe the requested work, decide whether it directly advances company or trust creation, and record every other designated service in the engagement.
Define every customer
List the instructing person and the directors, beneficial owners, trustee, settlor, beneficiaries or other people the item 6 customer definition brings into scope.
Establish identity and authority
Collect and verify KYC information using reliable, independent material and establish the authority of each representative who engages with the TCSP.
Map ownership and control
Follow each company, trust and nominee layer to the natural persons who ultimately own or control the proposed structure.
Assess and respond to risk
Consider purpose, service, customer, jurisdiction and delivery-channel risks, apply enhanced measures where required, and document approvals.
Approve and retain the evidence
Proceed only when the required matters are established or a lawful delayed process applies, then retain the scope, CDD, screening and risk record together.
Confirm the formation work is a designated service
Start with the facts of the engagement. AUSTRAC's professional designated-services guidance says item 6 covers assisting a person to plan or execute, or otherwise acting for a person in, the creation or restructuring of a body corporate or legal arrangement. Drafting formation documents, preparing appointments and taking other steps that directly advance creation can be captured. General information that merely influences a later decision may not be, but labels such as advisory, secretarial or filing support do not decide the issue.
Record when the service starts, what structure will be created, who instructed the work and which activities directly advance the outcome. Express trusts are covered, while testamentary trusts and trusts created solely by operation of law are treated differently in the designated-service provisions. Do not use item 6 as a catch-all for TCSP work: table 6 separately covers selling or transferring a shelf company under item 5, specified role services under item 7, nominee-shareholder services under item 8 and registered-office or principal-place-of-business address services under item 9. Items 1 to 4 may also apply where the TCSP directly advances the transaction they describe.
For items 7 and 8, identify the nominator and test the statutory role rather than relying on the word nominee. AUSTRAC says item 7 does not capture an ordinary agent performing only administrative or procedural steps. For an acting director, the nominator must retain control over fulfilment of the role and the director acts on the nominator's wishes and instructions. Item 8 applies where a person holds shares or an interest on another's behalf and either exercises the associated voting rights according to that person's instructions or receives dividends on their behalf. Arranging or preparing for another person to act can also be covered.
Item 9 applies when a registered-office or principal-place-of-business address is provided to a body corporate or legal arrangement in the course of carrying on a business. A one-off or free address service can still be in the course of business where it furthers the business, but merely receiving correspondence or sharing an address outside a business setting is not automatically the designated service. Record the address use, customer and business context instead of assuming every address reference is captured.
Identify the customer set before collecting documents
The customer for AML/CTF purposes is not always identical to the name on an engagement letter. For creating a company, identify the instructing person and the proposed beneficial owners and directors described in item 6. For creating an express trust, identify the instructing person and the proposed trustee, settlor and beneficiaries. Where a beneficiary cannot yet be individually identified because the trust uses a class, collect an accurate description of the class and apply the current Rules and AUSTRAC trust guidance to the verification required.
Also identify each individual who deals with you for a non-individual customer and establish their authority. A director, employee, lawyer or adviser presenting documents is not automatically the beneficial owner. Keep the representative, the person on whose behalf a service is received, the legal customer and the ultimate owners or controllers as separate concepts in the file.
Company formation CDD checklist
Do not allow a clean registry search to replace ownership analysis. Proposed companies may not yet have a completed public record, and nominee or layered holdings may make the apparent shareholder different from the individual who ultimately owns or controls the customer. Preserve the source, date and result of every verification step so another reviewer can reproduce the conclusion.
- Record the proposed company name, legal form, jurisdiction, registered office, principal place of business and intended business activity.
- Identify proposed directors, beneficial owners and any person exercising control through voting rights, agreements, appointment powers or another mechanism.
- Map direct and indirect ownership through every intermediate entity until the relevant natural persons are established on reasonable grounds.
- Verify identity and authority using reliable and independent documents or data appropriate to the assessed risk; an ASIC or ABR result does not by itself verify every individual behind the structure.
- Establish the nature and purpose of the relationship and expected services. Collect or verify source-of-funds or source-of-wealth information when required by the current PEP or enhanced-CDD rules, or when the risks and documented policies call for it; it is not a universal formation-document requirement.
- Check relevant people for politically exposed person status and targeted financial sanctions, then apply the response required by your AML/CTF policies.
Express trust formation CDD checklist
- Obtain the draft or executed deed and amendments, and record the trust type, purpose, governing law and intended activities.
- Identify the trustee, settlor, appointor, protector, guardian and other individuals responsible for governance or executive decisions where those roles exist.
- Identify each beneficiary or accurately describe each beneficiary class when individual identification is not possible because of the nature of the trust.
- For a corporate trustee, map and verify the company's ownership and control structure rather than stopping at the corporate trustee's name.
- Establish who is providing instructions, their authority, the origin of settled property and the commercial or family purpose for creating the arrangement.
- Resolve inconsistencies between the deed, onboarding answers, registry information and instructions before treating the CDD file as complete.
Make and evidence the risk decision
Assess customer, service, delivery-channel and jurisdiction risks together. Formation work, a nominee, an address service or a complex structure does not by itself make every customer high risk or automatically require enhanced CDD. Unexplained layers, opaque control, a structure or transaction that is unusually complex, relevant high-risk-jurisdiction exposure, unexplained wealth or pressure to form immediately can change the assessment. Apply enhanced CDD when a current statutory trigger is met, including a high customer ML/TF risk rating, and tailor the measures to the risk. Record the evidence, rating, trigger, measures and approval.
Initial CDD is generally completed before providing the designated service. Delayed CDD is available only in defined circumstances and under compliant policies; urgency or a looming registration deadline is not enough. If the required matters cannot be established, pause and escalate the file. Keep the scope decision, identity evidence, ownership map, screening results, risk assessment and approval together so the organisation can demonstrate what it knew when formation proceeded.
Official sources
Use these primary AUSTRAC pages to confirm the current rules and apply them to your circumstances.
Frequently asked questions
When does a TCSP start providing a company or trust formation service?
The answer depends on the facts, but AUSTRAC says item 6 can start when the provider accepts instructions and acts on them in a way that directly advances creation or restructuring. Preparatory steps required for formation can be included. Record the point at which your work moved from general information to acting on a specific formation instruction.
Is the person who signs the engagement letter the only AML/CTF customer?
Not necessarily. Item 6 identifies additional customers for company and express-trust creation. Depending on the service, proposed directors and beneficial owners, or the proposed trustee, settlor and beneficiaries, can form part of the customer set. Your file should identify each person required by the Act and Rules rather than relying only on the engagement name.
Can an ASIC or ABR search complete company formation CDD?
No single registry search is enough in every case. Registry information can help establish that an entity exists and corroborate identifiers, offices or officeholders. You must still establish the relevant ownership, control, representative authority, purpose, risk and individual identities on reasonable grounds using information appropriate to the circumstances.
Can formation proceed before all CDD is complete?
Only rely on delayed initial CDD where the statutory conditions, the current Rules and your documented AML/CTF policies permit it. A commercial deadline alone is not permission. If you cannot establish required matters and no lawful delayed process applies, stop the formation work and escalate the decision before providing the designated service.
Is every director, nominee or registered-office engagement a designated service?
No. Apply the exact table 6 test. Item 7 requires acting or arranging for a listed role on behalf of a nominator, with AUSTRAC's control and wishes-or-instructions analysis relevant to an acting director. Item 8 has a specific nominee-shareholder test. Item 9 requires provision of the relevant address in the course of carrying on a business. Record each conclusion separately.
Put it into practice
Cassandra AML turns these obligations into a working system: designated-service decisions, customer due diligence, screening, monitoring and reporting records — hosted in Sydney, free to start.
This guide is general information for Australian professionals. It is not legal advice and does not replace the AML/CTF Act, the AML/CTF Rules or AUSTRAC guidance. Confirm your specific obligations with AUSTRAC or a qualified legal adviser. See our editorial and correction standards.