Identify your role and the exact gap
Determine whether the business acts as ordering, intermediary or beneficiary institution for the transfer. Identify the required payer, payee and tracing information under the applicable rules, and record what is missing or inconsistent. AUSTRAC distinguishes monitoring for missing information from the beneficiary institution's additional monitoring for an inaccurate payee name. Do not apply the same checklist to every role or invent a counterparty institution for a self-hosted-wallet transaction.
Keep the original message and request a controlled correction
Preserve the relevant message and transfer reference with access controls appropriate to the personal information. Verify the counterparty contact or exchange channel before requesting or sending details. Record the request, response and relationship to the original transfer. A corrected message should not silently overwrite the original evidence. Avoid sending customer data through an unverified email address merely because a party asks for a quick solution under time pressure.
Apply the risk-based response for the role
Use the applicable requirements and AML/CTF policies to decide whether to seek information, delay, reject or take another permitted action. Record the basis and any approval. A missing field and a substantive identity conflict may require different investigation. Assess sanctions, CDD and suspicious-matter implications separately; completion of a message exchange does not resolve every transaction risk. Do not manufacture a verified status because a transfer identifier or blockchain confirmation exists.
Reconcile the actual transfer and exception outcome
For example, a response may provide a new spelling but still lack enough information to resolve a payee mismatch. Record that remaining issue and the action taken. Link the final message, decision, transfer state and any continuing restriction. Keep a review of recurring counterparty failures so policy responses can reflect the pattern. A recordkeeping application can support this evidence; it does not itself provide blockchain attribution or a travel-rule messaging network.
Official sources
Use these primary sources to confirm the current rules and apply them to your circumstances.
Sources checked .
Frequently asked questions
Does a confirmed on-chain transfer prove travel-rule compliance?
No. The transfer and information obligations are distinct. Establish the required message handling, information and records for the applicable role.
Must every missing field lead to the same response?
No. Apply the role-specific law and risk-based policies. Record the gap, decision and permitted action rather than assuming a universal response.
Can an internal verified entry replace a counterparty response?
No. Record what actually occurred and the evidence received. A status in your own register does not prove an external exchange or verification.
Put it into practice
Cassandra AML turns these obligations into a working system: designated-service decisions, customer due diligence, screening, monitoring and reporting records — hosted in Sydney, free to start.
This guide is general information for Australian professionals. It is not legal advice and does not replace the AML/CTF Act, the AML/CTF Rules or AUSTRAC guidance. Confirm your specific obligations with AUSTRAC or a qualified legal adviser. See our editorial and correction standards.