Once a buyers agent has enrolled with AUSTRAC, the next question is usually the same: what actually needs to happen at the client onboarding stage? Identity verification — often shortened to "CDD," or customer due diligence — sits at the centre of Tranche 2 compliance, and it's the part of the process clients will actually experience.

"This is the moment compliance stops being a back-office concern and becomes part of the client relationship. How you handle it says something about your agency, for better or worse."

Why identity verification exists

The purpose of CDD isn't paperwork for its own sake. It's designed to confirm that the person you're representing is who they say they are, and — depending on risk level — to understand where the funds behind a purchase are coming from. For most buyers agent clients, this is straightforward. For a smaller number of higher-risk cases, it requires more.

What "standard" verification typically involves

For most individual clients, standard due diligence generally means:

Verifying full name, date of birth, and residential address — using reliable, independent documentation or electronic verification.
Confirming the client's identity before or during the transaction — not after the fact.
Recording how verification was done — which documents or checks were used, and when.

"Agents sometimes assume a driver's licence and a quick look is enough. What actually matters is that the verification is documented in a way that would hold up if AUSTRAC asked to see it."

When enhanced due diligence applies

Some clients require a deeper look. This typically includes:

Clients purchasing through trusts, companies, or complex structures.
Politically exposed persons (PEPs).
Clients assessed as higher risk under your agency's risk framework.
Cases involving unusually large cash components or unclear source of funds.

Enhanced due diligence means going beyond identity alone — understanding beneficial ownership, source of funds, and the broader risk profile of the client relationship.

Verifying on behalf of entities and trusts

Buyers agents increasingly deal with clients purchasing through a trust or company structure, which changes what "identity" means. In these cases, verification extends to beneficial owners — the individuals who ultimately control or benefit from the entity — not just the entity itself.

"Trust structures are where a lot of the real complexity hides. The entity might look straightforward on paper, but you still need to know who's actually behind it."

Manual verification vs. software-assisted verification

Identity verification can be done manually — sighting original documents, keeping copies, recording the process — or through electronic verification services that check documents and identity data against independent sources in real time.

Manual processes work for very low client volumes but scale poorly. As client numbers grow, the administrative burden of manual CDD — and the risk of inconsistent record-keeping — grows with it.

The record-keeping obligation doesn't end at onboarding

Whichever method you use, verification records need to be retained for seven years, and monitored for changes over the life of the client relationship — not filed away and forgotten once a transaction settles.

Getting the initial check right matters. Keeping it consistent, documented, and retrievable for years afterward is where most of the ongoing effort actually lives.