AUSTRAC · CDD vs SMR

CDD or SMR?
Or both?

Two AML obligations, two different triggers — and one patron interaction that often fires both at once. A working reference for floor staff and AML compliance officers in Australian registered clubs, updated for the post-31-March-2026 framework. Not legal advice.

Working reference, not legal advice

CDD and SMR obligations turn on the specific facts of each transaction and on the structure of the venue's AML/CTF program (the venue's ML/TF risk assessment and its AML/CTF policies, under AML/CTF Act Part 1A as amended by the AML/CTF Amendment Act 2024). For a definitive view, talk to an AML lawyer or your external AML consultant.

Side-by-side

The two obligations compared.

Trigger
CDDProvision of a designated service — for gaming-machine cash-out / winnings payout, initial CDD attaches at $5,000 or more per qualifying transaction (post-31-March-2026 framework, transitional arrangements may apply)
SMRReasonable suspicion that a transaction relates to ML/TF or other relevant offence — judgment-based, any dollar amount
Threshold sensitivity
CDDAttaches to the relevant designated-service transaction (not a session running total); program-driven monitoring may prompt CDD/ECDD ahead of any single-transaction threshold
SMRJudgment-based — the test is reasonable suspicion, not a dollar threshold
What you do
CDDIdentify and verify the customer (full name, date of birth, residential address — verified against a reliable independent source) and assess the ML/TF risk they present
SMRFile a report to AUSTRAC within 24 hours (terrorism financing) or 3 business days (other matters)
Tipping-off restriction
CDDStandard confidentiality applies
SMRStrict — disclosure that would or could reasonably be expected to prejudice an investigation is an offence (AML/CTF Act 2006 (Cth) s 123 , subject to statutory exceptions)
Frequency at registered clubs
CDDRoutine where qualifying cash-outs / winnings payouts arise; program-driven monitoring sets the cadence for ongoing and enhanced CDD
SMRVariable — clean operations may file zero a quarter; a venue surfacing AML indicators may file several a month
Disposition options
CDDComplete identification and verification — or document patron refusal and escalate per the venue's program
SMRFile the SMR (suspicion formed) or document the considered-and-rejected rationale (no suspicion)
Record retention
CDDSeven years from the day the business relationship with the customer ends (AML/CTF Act 2006 (Cth) s 111 )
SMRSeven years for transaction records (s 107 ) and program records (s 116 ), with tipping-off protection on the SMR's existence
Common failure mode
CDDTreating CDD as a one-time onboarding step and missing the ongoing-CDD obligation, or relying on a session running-total rule rather than the per-designated-service trigger
SMRHesitation — letting the suspicion-formation moment pass without documenting the decision either way
When both fire

The overlap zone.

A patron whose play surfaces AML indicators very often requires both obligations to be worked at once — initial or ongoing CDD on the identification side, an SMR on the suspicion side. Three example patterns:

  1. Qualifying cash-out with structuring indicators. A patron buys in, plays briefly, then takes a single cash-out of $5,500. The cash-out is a qualifying gaming-machine designated service at or above the post-reform $5,000 threshold, so initial CDD applies; the brief-play / immediate-cash-out shape is also a structuring-style indicator. CDD satisfies the identification and risk-assessment requirement; the SMR captures the suspicious pattern.
  2. Refusal of standard CDD.A patron asked to complete CDD on a qualifying payout refuses to provide identification. The refusal is a recognised suspicion indicator for gaming venues (AUSTRAC's Pubs & Clubs guidance lists identification-avoidance among ML indicators). Document the refusal, escalate per the venue's program, and form the SMR separately from the identification step.
  3. Third-party direction or program-driven ECDD. A patron whose play is being funded by a companion, or whose pattern has tripped the venue's transaction-monitoring rules, may need ongoing or enhanced CDD ahead of any single qualifying transaction — and third-party direction is a strong AML indicator. The two obligations sit alongside each other; filing only the CDD understates the picture.

Completing CDD does not discharge the SMR obligation. The identification and risk-assessment step satisfies one requirement; the suspicion-formation step is evaluated separately.

A note on TTRs

TTRs sit alongside the CDD line.

Threshold Transaction Reports (TTRs) sit at $10,000 cash — any single physical-cash transaction at or above that amount (AML/CTF Act 2006 (Cth) s 43 , lodged within 10 business days).

The TTR line and the initial-CDD line are separate triggers on separate facts. The post-reform $5,000 initial-CDD threshold attaches to a qualifying gaming-machine cash-out or winnings payout (Table 3 items 8/9/10, s.39E item 17); the $10,000 TTR threshold attaches to a single physical-cash transaction. Both can fire on the same patron interaction: a $50,000 cash transaction with structuring indicators would be a TTR (over threshold), a CDD trigger, and an SMR (suspicion).

At many NSW registered clubs, EGMs have low per-transaction cash limits and large prize payouts typically go out by cheque or bank transfer, which shapes how often the TTR line is hit. For floor staff, the operational pair to hold in mind is the $5,000 initial-CDD trigger on qualifying cash-outs / winnings payouts (per the post-31-March-2026 framework) and the suspicion-based SMR obligation.

FAQs

Common questions about CDD and SMR.

What's the simplest difference between CDD and an SMR?

Initial customer due diligence (CDD) is triggered at the provision of a designated service. For a gaming-machine venue, the cash-out / winnings-payout designated services in Table 3 of the AML/CTF Act carry an initial-CDD exemption that applies only where the relevant payout is less than $5,000 (s.39E item 17), meaning initial CDD attaches to a single cash-out or winnings-payout transaction of $5,000 or more (per the post-31-March-2026 framework — see FAQ 2 below). A Suspicious Matter Report (SMR) is judgment-based — it's filed when reasonable suspicion forms that a transaction may relate to money laundering, terrorism financing, or another relevant offence, regardless of dollar amount. Initial CDD centres on identifying and verifying the customer and assessing the ML/TF risk they present; an SMR is a report to AUSTRAC.

Can completing CDD also require filing an SMR?

Yes — and this is the overlap zone that matters most in practice. If a patron triggers initial CDD on a qualifying cash-out or winnings-payout, or if the venue's program calls for enhanced or ongoing CDD for any other reason, and the patron is also displaying indicators of suspicious behaviour (structuring, third-party direction, refusal of standard CDD, threshold-adjacent cash-outs), both obligations apply: complete CDD to satisfy the identification and ML/TF-risk-assessment requirement, and file an SMR to satisfy the suspicion-formation reporting requirement. Completing CDD does not discharge the SMR obligation, and filing an SMR does not substitute for CDD.

What about TTRs — are they relevant for registered clubs?

Threshold Transaction Reports (TTRs) sit at $10,000 cash — a single physical-cash transaction at or above that amount (AML/CTF Act s.43). The two obligations sit alongside each other: TTRs cover the $10,000 physical-cash transaction reporting line; initial CDD for gaming-machine cash-outs / winnings payouts attaches at the post-reform $5,000 threshold (per s.39E item 17 and the post-31-March-2026 framework). At many NSW registered clubs, EGMs have low per-transaction cash limits and large prize payouts typically go out by cheque or bank transfer, which shapes how often the TTR line is hit in practice — but the obligation applies whenever a single physical-cash transaction reaches $10,000.

How does the $5,000 CDD threshold work for gaming-machine venues?

From 31 March 2026, the AML/CTF reforms reduced the gambling-sector CDD exemption threshold from $10,000 to $5,000. Some existing reporting entities may be able to continue using applicable legacy customer-identification procedures until 31 March 2029 under transitional arrangements. Clubs should confirm whether they are relying on transition, document that position, and be ready to apply the $5,000 post-reform threshold. Regardless of threshold, suspicious or high-risk activity may require enhanced CDD and/or suspicious matter reporting. The threshold attaches to the relevant designated service — for gaming-machine venues, that's a qualifying cash-out or winnings payout under Table 3 items 8/9/10 — not a session running total. Aggregation-like patterns (multiple smaller transactions, structuring-shaped behaviour) remain relevant for the venue's ongoing CDD, transaction monitoring, ECDD and SMR analysis, but they are not the initial-CDD trigger itself.

What counts as 'reasonable suspicion' for SMR purposes?

The legal standard is below 'belief' and above 'mere conjecture': would a reasonable person, looking at the facts the venue has, suspect the transaction may relate to a relevant offence. AUSTRAC's published guidance gives examples — structuring patterns, atypical buy-in behaviour, refusal of standard CDD, third-party funds, sudden changes in patron pattern — but the test is always context-specific. Importantly, the SMR obligation can form at any dollar amount. A patron buying $200 cash in chips and displaying multiple structuring indicators can trigger an SMR even though no CDD obligation exists.

What's the lodgement timeframe for an SMR?

Two timeframes depending on the nature of the suspicion: within 24 hours of forming reasonable suspicion if the suspicion involves terrorism financing, and within 3 business days if it involves any other matter. The clock starts when reasonable suspicion is formed — not when the transaction occurred. This is why the AMLCO's documentation of the suspicion-formation timeline matters: it establishes when the 3-day window opened.

Who has to complete CDD and file SMRs?

The reporting entity — for an Australian club operating EGMs, that's the club. The AMLCO is the operational point of contact for SMR filings (AML/CTF Act ss.26J–26M); CDD on a qualifying gaming-machine cash-out or winnings payout is typically a floor-staff or cage-staff action, governed by the venue's AML/CTF policies. SMR filings go through AUSTRAC Online. The obligation and accountability sit with the club regardless of whether filing is delegated to an external AML consultant.

What records have to be kept after CDD and after an SMR?

Both CDD records and SMR records, along with all supporting documentation — the underlying transaction logs, observation notes, threshold-rule outputs, alternative-explanation analysis — must be retained for seven years and be accessible to AUSTRAC on request. CDD records are retained for seven years from the end of the business relationship with the customer (AML/CTF Act s.111); transaction records for seven years from the day the record is made (s.107); AML/CTF program records for seven years after the record is no longer relevant to Part 1A compliance (s.116). SMR records have an additional protection: disclosure of SMR-related information (including the existence of the SMR) is an offence under s.123 of the AML/CTF Act where the disclosure would or could reasonably be expected to prejudice an investigation. There are statutory exceptions — for example, disclosures to staff or senior management for the purpose of the venue's AML/CTF program, and to lawyers for legal advice — but the operational rule for floor staff is straightforward: do not discuss a filed SMR with the patron or anyone outside the AML chain.

What happens if a venue files an SMR that turns out to be wrong?

Nothing adverse, provided the suspicion was formed in good faith on a reasonable basis. The Act explicitly protects reporting entities from civil liability for filings made under the regime. AUSTRAC's posture is that over-reporting is a far smaller problem than under-reporting: the cost of an unnecessary SMR is administrative; the cost of a missed SMR is a regulatory breach.

Related

Working references.

AUSTRAC · SMR drafting

AUSTRAC SMR drafting →

How to draft a defensible Suspicious Matter Report under the post-31-March-2026 AML/CTF framework.

AUSTRAC · AMLCO role

The AMLCO role explained →

Whether your Australian club needs an AML Compliance Officer, what the role does, how the post-31-March-2026 framework sharpened expectations.

Free tool · Obligation tree

Browse the obligation tree →

The Australian club compliance obligation tree — AUSTRAC, NSW, Cth obligations with plain-English summaries.

Make the CDD decision a one-tap action.

Qualifying cash-outs and winnings payouts surfaced on the floor, patron identification and ML/TF risk assessment captured in one place, every disposition recorded in a seven-year audit trail. First three months free, no card up front.