Suspicious Matter Reporting for Accountants: AML/CTF SMR Guide Australia 2026

For accountants newly captured by the Tranche 2 reforms, the Suspicious Matter Report (SMR) is the obligation that feels most unfamiliar — and carries the sharpest consequences for getting it wrong. You may know you have to report suspicious activity to AUSTRAC, but when exactly is the trigger pulled, how long do you have, and what are you forbidden from saying?

This is the plain-English version for accounting practices.

What an SMR is

A Suspicious Matter Report is a confidential report you lodge with AUSTRAC when you suspect, on reasonable grounds, that a client or a transaction is connected to money laundering, terrorism financing, or another serious offence such as tax evasion or fraud. The obligation sits in section 41 of the AML/CTF Act, and from 1 July 2026 it applies to accountants who provide designated services.

An SMR is not tied to a dollar threshold. It's triggered by suspicion, whatever the amount.

The trigger: "reasonable grounds to suspect"

The legal test is a suspicion on reasonable grounds — not proof, and not certainty.

It's an objective standard: would a reasonable accountant, with your knowledge and experience, form the same suspicion from the facts in front of them? You don't have to investigate like an auditor, confirm wrongdoing, or be sure. If something doesn't add up and a reasonable practitioner would be concerned, the obligation is engaged.

• You must lodge an SMR even if you decline the engagement. Turning the client away doesn't remove the reporting obligation.
• Lodging an SMR doesn't, by itself, require you to stop acting — though you'll often have separate professional reasons to reconsider the engagement.

The reporting clock

The deadline runs from the moment you form the suspicion:

• 3 business days for money laundering and most serious offences.
• 24 hours for terrorism financing — and that's 24 actual hours, weekends included.

The tipping-off prohibition

This is the rule accountants most need to internalise. Once an SMR obligation has arisen, it is an offence to disclose that fact in a way that could reasonably prejudice an investigation — the "tipping-off" prohibition in section 123 of the AML/CTF Act. (The test was reframed in 2025 around the risk of harm to an investigation, rather than the older, blanket wording.)

In practice:

• You cannot tell the client you've lodged, or are considering lodging, an SMR.
• You cannot alert anyone who doesn't need to know.
• You can discuss the matter internally with your AML/CTF compliance officer and senior management, and obtain legal advice, to manage the situation.

The practical rule: lodge the report, continue to act normally, and say nothing to the client.

Red flags accountants should recognise

A single indicator rarely proves anything — but it should prompt a closer look. Common red flags in an accounting context include:

• Transactions structured to stay just under reporting thresholds — for example, splitting cash deposits to avoid the $10,000 threshold transaction reporting point.
• Unusual trust distributions or movements of money through structures with no clear commercial purpose.
• Wealth or asset levels inconsistent with the client's declared income or lodged returns.
• Reluctance to explain source of funds or source of wealth, or to identify the real people behind a structure.
• Sudden, unexplained changes in a client's instructions, entities or banking arrangements.
• Funds flowing from or through higher-risk jurisdictions without obvious rationale.

What makes a good SMR

A useful SMR answers who, what, where, when, why and how, and is specific. The most important element is the "why" — your articulated reason for the suspicion. "The client's lodged income cannot plausibly support the value of assets being moved through this structure" is far more useful to AUSTRAC than a note that something "felt off."

How Veriqua helps

Veriqua's SMR module is designed to start a statutory countdown the moment a report is created, so the 3-business-day deadline is visible and tracked. It is designed to prevent lodgement of an incomplete report by requiring the mandatory fields, structures the six-element narrative, and maintains an audit trail of who knew what and when — kept confidential, so SMR details stay out of the general client file and the tipping-off risk is contained.

Because there's no direct API for submitting SMRs, your compliance officer lodges through AUSTRAC Online and records the reference back in the platform. Veriqua supports the workflow; the decision to report, and the responsibility for it, remains with your practice.