Four months in, the pattern in most small practices is the same. The hard files get the attention: the trust with an overseas beneficiary, the cash deposit, the client who will not explain where the money came from. Everyone else, the plumber incorporating their business or the first-home buyer with a bank loan, gets either the full checklist out of caution or a quick tick out of fatigue.
Neither is what AUSTRAC wrote. There is a third option in the guidance, made for exactly those clients, and it is called simplified CDD. Used properly, it is the single biggest time saving in your program. Used loosely, it turns into the default low rating that falls apart when someone asks who decided it.
What simplified CDD is, in AUSTRAC's words
AUSTRAC describes it plainly: simplified CDD allows you to streamline customer identification and verification for certain low-risk customers (AUSTRAC, initial CDD overview, node 1375 (opens in a new tab), last updated 27 March 2026).
The next sentence is the one to pin above your desk. Simplified CDD isn't an exemption from your initial or ongoing CDD obligations. You must still collect all the required KYC information, and collect or verify enough of it to both identify the customer's ML/TF risk and establish the required matters on reasonable grounds (node 1375 (opens in a new tab)).
So it changes how much effort you put into each step. It does not remove any step.
The three conditions, all of them
You can apply simplified CDD only if all of the following apply (node 1375 (opens in a new tab)):
- the customer's ML/TF risk is low
- you're not required to conduct enhanced CDD
- your AML/CTF policies deal with how you'll apply simplified CDD measures.
The first condition means you need a customer risk rating before you can use it. AUSTRAC's risk rating guidance says the rating is what determines when you can apply simplified CDD (for low-risk customers) and when you must apply enhanced CDD (for high-risk customers) (AUSTRAC, assigning customer risk ratings, node 1315 (opens in a new tab)). No rating, no simplified CDD.
The second condition is a separate test, not a repeat of the first. Enhanced CDD has triggers beyond a high rating. Among them: a foreign politically exposed person among the customer, its beneficial owners or the people acting for it; a person located or formed in a high-risk jurisdiction FATF has called for enhanced CDD on; transactions that are unusually large or complex or have no apparent economic or legal purpose; and an SMR you are required to lodge on a customer you intend to keep serving (AUSTRAC, enhanced CDD, node 1321 (opens in a new tab), last updated 15 July 2026). If any of those is present, simplified CDD is off the table whatever the rating says.
The third condition is the one firms miss, because it lives in a document rather than in the file. If your policies do not say how you apply simplified measures, you have no basis for applying them, however obviously low risk the client looks.
What a simplified file actually looks like
AUSTRAC gives two worked examples, and they are the best guide to what "streamlined" means in practice.
The conveyancer's low-risk buyer. An individual, Australian resident, buying with a bank-approved loan, no representative, no medium or high risk factors and no enhanced CDD triggers. The conveyancer's policies allow these simplified initial checks (node 1315 (opens in a new tab)):
- verify full name and date of birth, and that the customer is who they claim to be, by obtaining one original primary document or a copy of it, comparing its details with what the customer gave at onboarding, and comparing the photo with the person's appearance in person or by video link
- check PEP status with an internet search and sanctions status against the DFAT Consolidated List
- if both come back negative, monitor the customer for ongoing CDD against the risk rating factors and the sector risk indicators in the program.
The accountant's low-risk plumber. A sole trader plumber wants a private company set up, with the client as sole director and shareholder, to grow the business. In AUSTRAC's accounting starter kit example, the accountant verifies name and date of birth against a driver's licence, runs an ABN search to confirm the sole trader registration, follows the sanctions and PEP check processes, records the findings, and assigns a final rating of low after confirming the client is not high risk, there are no reasonable grounds for suspicion, there are no risk factors outside the risk assessment, and nothing needs escalating to the compliance officer (AUSTRAC, accounting starter kit examples, node 1488 (opens in a new tab), last updated 2 April 2026).
Look at what is still there in both: identity verified, PEP checked, sanctions checked, a rating recorded, monitoring switched on. What is absent is everything the starter kit reserves for high-risk clients: source of funds and source of wealth checks, an adverse media check and senior manager approval (node 1486 (opens in a new tab)). That is the trim.
Where simplified CDD saves the most time: later
The bigger saving comes after onboarding. AUSTRAC's ongoing CDD guidance applies the same three conditions, and where they are met you still meet your ongoing obligations, but you may be satisfied that you can do it through less intensive monitoring activities and by updating and reverifying KYC information less frequently (AUSTRAC, ongoing CDD overview, node 1323 (opens in a new tab), last updated 27 March 2026).
The accounting starter kit puts numbers on that. In its risk table, a low-risk client gets simplified CDD and an information review every 3 years; a medium-risk client gets standard initial CDD, with simplified CDD marked "not appropriate", and a review every 2 years; a high-risk client gets enhanced CDD and an annual review (AUSTRAC, step 2: use your accounting program, node 1486 (opens in a new tab), last updated 2 April 2026). Those are the starter kit's settings. If you built your own program, your policies set your own intervals, and they need to say so.
And for a one-off job, the plumber example ends the obligation cleanly: once the services are finished and the business relationship has concluded, no further ongoing CDD or monitoring is required (node 1488 (opens in a new tab)).
For a firm whose book is mostly low risk, that difference compounds. It is a big part of what makes ongoing CDD workable without software.
The rating is not permanent
Simplified CDD is a status a client holds while the conditions hold. AUSTRAC's enhanced CDD page gives the example of a customer rated medium at onboarding who becomes high risk after changing their country of residence, and expects your policies to let you detect when a customer's risk becomes high and set out what you will do in response (node 1321 (opens in a new tab)). The conveyancer example says the same from the other side: where new risk factors arise, the policies set out steps to review and, if necessary, update the rating (node 1315 (opens in a new tab)).
In practice, the low-risk plumber who comes back two years later wanting a family trust with an overseas beneficiary is a new conversation, not a renewal.
Three things to check this week
- Your policies. Find the sentence that says when you apply simplified CDD and what it consists of. If it is not there, add it before you rely on it again. If you used an AUSTRAC starter kit, check you kept that section.
- Your low-risk files. Pick five. Each should show identity verified, a PEP and sanctions result, a recorded rating, and a note that no enhanced CDD trigger was present. If the note is missing, the file shows a quick tick, not simplified CDD.
- Your medium clients. If any were onboarded with the simplified checklist, that is the gap to close first. The starter kit is explicit that medium is not simplified.
None of this is a project. It is a sentence in a policy and a line in each file, and in return most of your clients cost you a fraction of the time the hard ones do.
This article is general information, not legal advice. For advice specific to your circumstances, consult a qualified AML/CTF professional.