Executive Summary
Financial crime represents one of the most significant risks facing Australian institutions. With AUSTRAC penalties exceeding $2.5 billion since 2017 and new AML/CTF laws expanding to cover 80,000 additional businesses from July 2026, understanding the precise definitions and implications of different financial crime types is essential for effective board governance. This article provides clear, practical definitions of the six major financial crime categories that Australian boards must understand and manage: anti-money laundering (AML), counter-terrorism financing (CTF), sanctions compliance, fraud prevention, anti-bribery and corruption (ABC), and tax evasion prevention.Anti-Money Laundering (AML)
What is Money Laundering?
Money laundering is the process of concealing the origins of illegally obtained money to make it appear legitimate. It transforms “dirty money” from criminal activities into seemingly “clean” funds that can enter the legitimate financial system without detection.The Three Stages of Money Laundering
Money laundering typically involves three stages: 1. Placement The initial entry of criminal proceeds into the financial system. This is the most vulnerable stage for detection. Examples:- Depositing large amounts of cash into bank accounts
- Purchasing high-value assets with cash
- Smuggling currency across borders
- Breaking large amounts into smaller deposits to avoid reporting thresholds (structuring)
- Transferring funds between multiple accounts
- Converting currency repeatedly
- Purchasing and selling assets
- Using shell companies and offshore accounts
- Wire transfers across multiple jurisdictions
- Investing in legitimate businesses
- Purchasing real estate or luxury goods
- Using funds for apparently legitimate business transactions
- Creating false invoices for payment justification
What Crimes Generate Money Laundering?
As AUSTRAC notes: “Money laundering enables criminal activity that causes real harm to Australians—human trafficking, child exploitation, illegal firearm sales, and drug trafficking.” Predicate offences (the crimes that generate the dirty money) include:- Drug trafficking
- Fraud and financial crime
- Corruption and bribery
- Human trafficking and modern slavery
- Terrorism financing
- Tax evasion
- Cybercrime and ransomware
- Wildlife trafficking
- Illegal gambling operations
- Organised crime activities
Australian AML Regulatory Framework
Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act), regulated entities must:- Enroll with AUSTRAC and maintain registration
- Develop and maintain an AML/CTF program appropriate to their ML/TF risk
- Identify and verify customers (Know Your Customer - KYC)
- Monitor transactions for suspicious activity
- Report to AUSTRAC:
- Threshold Transaction Reports (TTR): Physical currency ≥ $10,000 AUD
- International Funds Transfer Instructions (IFTI): All international transfers
- Suspicious Matter Reports (SMR): When there are reasonable grounds to suspect ML/TF
- Keep records for 7 years
- Conduct ongoing customer due diligence including enhanced due diligence for high-risk customers
Why AML Matters to Boards
Penalties for non-compliance are severe:- Civil penalties: Up to $1.11 million per contravention
- Criminal sanctions: Up to 25 years imprisonment for serious offences
- Reputational damage that can threaten institutional survival
- Westpac: $1.3 billion (2020) - 23 million contraventions
- Commonwealth Bank: $700 million (2018) - Risk assessment and reporting failures
- Crown Resorts: $450 million (2023) - Customer due diligence failures
Counter-Terrorism Financing (CFT)
What is Terrorism Financing?
Terrorism financing is the collection, provision, or use of funds or assets to support terrorist acts, terrorist organisations, or individual terrorists. Unlike money laundering, terrorism financing can involve both legitimate and illegitimate sources of funds.Key Distinctions from Money Laundering
Money Laundering vs Terrorism Financing:| Aspect | Money Laundering | Terrorism Financing |
|---|---|---|
| Source of funds | Always illegitimate | Can be legitimate or illegitimate |
| Direction | Making dirty money appear clean | Channeling money to fund terrorism |
| Amounts | Typically large sums | Can involve small amounts |
| Detection challenge | Volume and complexity | Small transactions, legitimate appearance |
Forms of Terrorism Financing
Sources can include:- Donations to charities that divert funds to terrorist groups
- Legitimate business revenue
- Criminal activities (drug trafficking, kidnapping, extortion)
- State sponsorship
- Crowdfunding campaigns
- Cryptocurrency transfers
- Informal value transfer systems (hawala)
- Small, frequent transfers to high-risk jurisdictions
- Use of front companies and charities
- Cash couriers
- Trade-based value transfer
- Digital currency transactions
- Exploitation of non-profit organisations
Australian CTF Requirements
Under the AML/CTF Act, entities must:- Assess terrorism financing risk as part of their ML/TF risk assessment
- Screen customers against sanctions lists and terrorism financing watchlists
- Monitor for TF indicators including:
- Transactions to conflict zones
- Links to designated terrorist organisations
- Unusual charitable donations patterns
- Connections to listed entities
- Report suspicious matters within 24 hours when terrorism financing is suspected (compared to 3 business days for money laundering)
- Comply with UN and Australian sanctions targeting terrorist entities
Why CFT Matters to Boards
The Westpac case included allegations relating to suspicious transactions potentially linked to child exploitation—illustrating how failures in transaction monitoring can inadvertently facilitate the most serious crimes. The accelerated 24-hour SMR reporting requirement for terrorism financing reflects the national security implications and demands board-level attention to detection and reporting frameworks.Sanctions Compliance
What are Sanctions?
Sanctions are restrictive measures imposed by governments or international bodies to influence the behaviour of targeted countries, entities, or individuals. They restrict or prohibit financial transactions and business relationships with designated parties.Types of Sanctions
1. Asset Freezes Prohibit making funds or assets available to designated persons or entities. 2. Trade Sanctions Restrict import/export of goods and services with targeted countries or sectors. 3. Financial Sanctions Prohibit financial transactions, loans, or investments with designated parties. 4. Sectoral Sanctions Target specific industries or sectors within a country (e.g., oil, defence, finance). 5. Travel Bans Restrict movement of designated individuals (less relevant for financial institutions but important for customer due diligence).Australian Sanctions Framework
Australia’s sanctions regime operates under:- Charter of the United Nations Act 1945 (UN sanctions)
- Autonomous Sanctions Act 2011 (Australian-imposed sanctions)
- Department of Foreign Affairs and Trade (DFAT) administers the Consolidated List
- Russia (Ukraine-related sanctions)
- North Korea
- Iran
- Myanmar
- Syria
- Targeted individuals and entities globally
Sanctions Compliance Requirements
Financial institutions must: 1. Screen all customers against sanctions lists:- DFAT Consolidated List
- UN Security Council sanctions
- Partner jurisdiction sanctions (US OFAC, UK, EU)
- Beneficiary screening
- Originator screening
- Intermediary bank screening
- Payment description screening
- Freeze assets of designated persons
- Prohibit dealings with listed entities
- Report to authorities when sanctions apply
- Customers from high-risk jurisdictions
- Complex corporate structures that may obscure beneficial ownership
- Correspondent banking relationships with jurisdictions of concern
Sanctions Violations: The Correspondent Banking Risk
The Westpac case highlighted failures in correspondent banking oversight where nested transactions obscured the ultimate originator of funds, creating sanctions evasion risk. Crown Resorts admitted to continuing relationships with customers despite awareness of links to foreign organised crime—a failure in risk-based sanctions compliance.Why Sanctions Matter to Boards
Violations carry severe consequences:- Criminal prosecution under Australian law
- Extraterritorial penalties (particularly from US OFAC)
- Correspondent banking relationship termination
- Reputational damage and loss of market access
- Personal liability for directors who fail in oversight duties
Fraud
What is Fraud?
Fraud is the intentional deception to secure unfair or unlawful gain, or to deprive a victim of a legal right. In financial services, fraud manifests in numerous forms targeting both institutions and their customers.Types of Financial Fraud
Internal Fraud
Employee Fraud:- Unauthorised account access and manipulation
- False expense claims
- Payroll fraud
- Theft of customer funds
- Data manipulation
- Insider trading
External Fraud Against Institutions
Application Fraud:- False identity documents for account opening
- Synthetic identity fraud
- Income misrepresentation for credit applications
- Payment fraud and unauthorised transfers
- Cheque fraud
- Card-not-present fraud
- Account takeover
- Over/under-invoicing
- Phantom shipments
- Double financing of the same goods
- Documentation falsification
Fraud Against Customers (Enabled by Institutions)
Investment Scams: As revealed in AUSTRAC’s crypto ATM investigation, a woman in her 70s deposited over 200,000 to what she believed was a legitimate trading firm. Romance Scams:- Criminals develop online relationships to extract money
- Often involve international transfers
- Victims convinced to invest in fake opportunities
- Victims manipulated into authorising payments
- Social engineering and impersonation
- Business email compromise
Intersection with AML/CTF Obligations
Fraud and money laundering are interconnected:- Fraud generates criminal proceeds that require laundering
- Money mules facilitate both fraud and money laundering
- Transaction patterns indicating fraud often indicate ML/TF risk
- Suspicious matter reports for transactions suspected to involve fraud proceeds
- Customer due diligence to detect fraudulent account applications
- Transaction monitoring to identify mule account behaviour
- Protection of vulnerable customers from scams
Why Fraud Matters to Boards
AUSTRAC’s regulatory shift emphasises harm prevention. Institutions that fail to detect and prevent customer scam victimisation face:- Regulatory scrutiny over inadequate transaction monitoring
- Customer remediation obligations
- Reputational damage
- Increased regulatory supervision
Anti-Bribery and Corruption (ABC)
What is Bribery and Corruption?
Bribery is offering, promising, giving, accepting, or soliciting an advantage as an inducement for an action that is illegal, unethical, or a breach of trust. Corruption is the abuse of entrusted power for private gain. It encompasses bribery but extends to other forms of dishonest conduct including embezzlement, fraud, and extortion.Australian Legal Framework
Criminal Code Act 1995 (Commonwealth):- Foreign bribery offences (Division 70)
- Bribery of Commonwealth public officials (Division 141)
- Maximum penalties: 10 years imprisonment and significant fines
- Bribery of state public officials
- Corruption in public administration
- Companies can be held criminally liable for bribery and corruption by employees, agents, and third parties
- “Adequate procedures” defence requires demonstrating robust compliance programs
Forms of Bribery and Corruption
Public Sector Corruption:- Bribing government officials for licences, permits, contracts
- Facilitation payments to expedite routine government actions
- Conflicts of interest in procurement
- Commercial bribery between businesses
- Kickbacks in supply chain relationships
- Conflicts of interest in vendor selection
- Heads of state, senior politicians, government officials
- Senior executives of state-owned enterprises
- Important political party officials
- Immediate family members and known close associates
ABC and AML/CTF Intersection
Corruption generates criminal proceeds requiring laundering, creating direct AML obligations: AUSTRAC requires enhanced due diligence for:- PEPs and their family members/associates
- Customers from high corruption-risk jurisdictions
- Transactions inconsistent with declared income/wealth
Red Flags for Corruption
Customer behaviour:- PEPs with wealth inconsistent with official salary
- Complex corporate structures obscuring beneficial ownership
- Use of shell companies and offshore vehicles
- Transactions to high corruption-risk jurisdictions
- Third-party payments not aligned with business arrangements
- Round-sum payments suggesting non-commercial purpose
- Payments described as “consultancy fees” without clear deliverables
- Unusual geographical patterns (payments to jurisdictions with no business presence)
Why ABC Matters to Boards
Regulatory expectations:- AUSTRAC’s ML/TF risk assessments must consider corruption risk
- Enhanced customer due diligence for PEPs is mandatory
- Suspicious matter reports required when corruption suspected
- Australian Federal Police (AFP) investigates foreign bribery
- Serious Financial Crime Taskforce coordinates multi-agency action
- Directors face personal liability for inadequate compliance programs
Tax Evasion
What is Tax Evasion?
Tax evasion is the illegal non-payment or underpayment of tax through deliberate concealment, false statements, or omission. It differs from tax avoidance (legal tax minimisation) by involving dishonest or fraudulent conduct.Forms of Tax Evasion
Individual Tax Evasion:- Failing to declare income
- Inflating deductions and credits
- Hiding income in offshore accounts
- Using false invoices or receipts
- Cash-in-hand economy participation
- Transfer pricing manipulation
- Treaty shopping and jurisdiction arbitrage
- Phantom transactions and false invoicing
- Beneficial ownership concealment
- Fraudulent GST claims
- Undeclared offshore accounts
- Shell companies hiding beneficial ownership
- Use of tax havens and secrecy jurisdictions
- Sham trusts and foundations
Australian Tax Compliance Framework
Australian Taxation Office (ATO) powers:- Tax Performance Board oversights major corporate taxpayers
- Project Wickenby and subsequent taskforces target offshore evasion
- Serious Financial Crime Taskforce (SFCT) coordinates multi-agency investigation
- Data matching with foreign tax authorities (OECD Common Reporting Standard)
- Imprisonment up to 10 years for tax fraud
- Significant financial penalties
- Director penalty notices for company tax debts
Tax Evasion and Money Laundering Overlap
Tax evasion generates criminal proceeds requiring laundering, creating AML/CTF implications: Fintel Alliance reported that joint operations led to arrests for:- Child exploitation
- Money laundering
- Fraud
- Tax evasion
Financial Institution Obligations
AML/CTF intersections:- Suspicious matter reports when transactions suggest tax evasion
- Enhanced due diligence for offshore structures
- Understanding source of wealth and source of funds
- Reporting unusual cash deposit patterns
- Foreign Account Tax Compliance Act (FATCA) - reporting to US IRS
- Common Reporting Standard (CRS) - automatic exchange of financial account information
- Annual reporting to ATO on foreign tax residents
Tax Evasion Red Flags
Customer structures:- Complex offshore company structures
- Unexplained use of tax havens
- Beneficial ownership obscured through nominees
- Inconsistency between declared income and transaction activity
- Large cash deposits inconsistent with business profile
- Income sources that don’t match business type
- International transfers to high-risk jurisdictions
- Round-tripping of funds
- Trade transactions with significant price variance from market value
Why Tax Evasion Matters to Boards
Regulatory coordination: The Serious Financial Crime Taskforce includes AUSTRAC, ATO, AFP, ASIC, and ACIC. Financial institutions providing services facilitating tax evasion face:- AUSTRAC penalties for AML/CTF failures
- ATO investigation and potential complicity allegations
- Reputational damage from association with criminal tax conduct
The Interconnected Nature of Financial Crime
Why Definitions Matter for Risk-Based Approach
AUSTRAC’s regulatory philosophy has shifted from box-ticking compliance to outcome-based assessment. The question is no longer “Do you have an AML/CTF program?” but rather “Is your program effectively preventing money laundering?” This requires boards to understand how different financial crime types interconnect: The Crime-to-Clean Lifecycle:- Predicate Crime (fraud, corruption, tax evasion, drug trafficking, etc.)
- Criminal Proceeds Generated (dirty money requiring laundering)
- Money Laundering (placement, layering, integration)
- Terrorism Financing (clean money funding terrorism)
- Further Crime (laundered funds finance additional criminal activity)
Cross-Cutting Risk Indicators
Effective financial crime detection requires recognising patterns that span multiple crime types: Red Flag: Customer receives funds from multiple third parties, immediately transfers to high-risk jurisdiction Potential crimes:- Money laundering (layering)
- Fraud (money mule account)
- Tax evasion (offshore concealment)
- Sanctions evasion (obscuring beneficial owner)
- Corruption (bribery proceeds)
- Money laundering (integration of corrupt payments)
- Tax evasion (offshore concealment)
- Sanctions evasion (if from designated jurisdiction)
- Fraud (customer is scam victim)
- Money laundering (facilitating criminal proceeds movement)
- Potential terrorism financing (if funds sent to conflict zone)
Strategic Implications for Boards
The Tipping Point Test
AUSTRAC’s regulatory approach asks: Would your AML/CTF controls have identified and escalated the specific fact patterns that led to recent enforcement actions? For boards, this requires: 1. Holistic Financial Crime Framework Don’t silo AML, sanctions, fraud, ABC, and tax evasion—these risks interconnect and controls should address them comprehensively. 2. Risk-Based Resource Allocation Understand which financial crime types present the highest risk for your business model and channel resources accordingly. 3. Outcome-Based Metrics Measure effectiveness by detection rates, not just policy existence. If 89% of your peer group reports zero high-risk customers, examine whether your program genuinely identifies risk. 4. Customer Due Diligence Integration KYC processes should identify:- Money laundering risk (transaction patterns)
- Sanctions risk (screening)
- Corruption risk (PEP status, wealth sources)
- Fraud risk (identity verification)
- Tax evasion risk (offshore structures, beneficial ownership)
Ten Board Questions Across Financial Crime Types
- AML: What percentage of our SMRs result from automated transaction monitoring vs manual identification?
- CFT: How do we assess whether charitable donation patterns are legitimate or potentially diverting funds to terrorism?
- Sanctions: When did we last test our sanctions screening system against false negatives? What is our miss rate?
- Fraud: What is our customer scam victimisation rate, and how does it compare to peers?
- ABC: How many PEPs do we bank, and what enhanced due diligence applies to their relationships?
- Tax Evasion: For offshore corporate structures, do we understand beneficial ownership and source of wealth?
- Integration: Does our ML/TF risk assessment genuinely consider corruption, fraud, tax evasion, and sanctions risk as interconnected?
- Red Flags: Can our transaction monitoring identify cross-cutting patterns (e.g., mule accounts facilitating both fraud and ML)?
- Training: Do our staff understand the interconnections between financial crime types, or do they view AML in isolation?
- Effectiveness: Would our controls have detected the fact patterns in recent enforcement actions across all financial crime types?
Conclusion: From Definitions to Action
Understanding the precise definitions of financial crime types is the foundation for effective risk management. But definitions alone are insufficient—boards must translate this understanding into:- Comprehensive risk assessments that identify ML, TF, sanctions, fraud, corruption, and tax evasion risk across products, customers, and channels
- Integrated controls that recognise how these crimes interconnect
- Outcome-based metrics that measure prevention effectiveness, not just policy compliance
- Active governance that interrogates whether programs genuinely prevent criminal exploitation