--- title: "AI and automated tools in the AML/CTF program: control standard" url: "https://ailawframework.com/precedents/aml-ctf-the-practice-as-a-reporting-entity/ai-controls-amlctf-program" type: "precedent" site: "AI Law Framework" id: "a52ob-ai-controls-amlctf-program" area_id: "A52OB" kind: "policy" ai_level: "yellow" version: 1 law_stated_as_at: "2026-10-17" --- # AI and automated tools in the AML/CTF program: control standard > Control standard to insert into a legal practice's AML/CTF program covering e-verification, screening, document checks and generative AI: approval and validation, deepfake and synthetic document risks, human review,… Canonical page: https://ailawframework.com/precedents/aml-ctf-the-practice-as-a-reporting-entity/ai-controls-amlctf-program Law stated as at: 2026-10-17 Site index for agents: https://ailawframework.com/llms.txt Control standard to insert into a legal practice's AML/CTF program covering e-verification, screening, document checks and generative AI: approval and validation, deepfake and synthetic document risks, human review, records, change control and tipping-off safeguards. ## Key facts - Kind: Policy. A policy or procedure for a firm or client. - Practice area: [AML/CTF — the practice as a reporting entity](https://ailawframework.com/precedents/aml-ctf-the-practice-as-a-reporting-entity.md) - Jurisdictions: Australia - AI level: Yellow. AI can help in set ways. A lawyer checks specific points before use. - Law stated as at: 2026-10-17 - Status: Maintained. Checked on 2026-10-17 against the 8 authorities it cites, for Australia. ## When to use it Adopt as part of the AML/CTF policies (s 26F) of any practice that uses electronic verification, screening, monitoring or generative AI tools in its AML/CTF work, or offers remote or AI-assisted onboarding. Review whenever a tool, vendor or model changes. ## How AI may be used AI may support CDD record-building, document indexing and alert triage under these controls, but the compliance officer approves tools and thresholds, and people make every risk, match, escalation and reporting decision. **AI may:** - Populate CDD records from documents already collected and list fields without a source. - Index a file into a dated chronology for the practitioner preparing an SMR, inside an approved secure environment. - Summarise screening alerts for human review, showing the matching data. **AI must not:** - Must not write any part of a suspicious matter report or decide whether to report. - Must not receive suspicion or SMR information in any external or general-purpose AI tool. - Must not draft communications to a client after a suspicion has formed. **The lawyer checks:** - Each tool was validated before use and after each material change, with results recorded. - Every alert and potential match was reviewed by a person with reasons recorded. - Access to AML/CTF information in tools is limited to those with a need to know. ## Authorities - [Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) ss 26C(3)(a) and (c), 26D and 26F (risk assessment must consider new or emerging technologies in services and delivery channels; review; AML/CTF policies)](https://www.legislation.gov.au/C2006A00169/latest/text) - [Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) ss 28(3)(d) and 37 (verification using reliable and independent data; reporting entity remains liable for agents)](https://www.legislation.gov.au/C2006A00169/latest/text) - [Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) s 41 (suspicious matter reports) and s 123 (tipping off)](https://www.legislation.gov.au/C2006A00169/latest/text) - [Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) ss 111 and 116 (records, including analysis and decision-making)](https://www.legislation.gov.au/C2006A00169/latest/text) - [Anti-Money Laundering and Counter-Terrorism Financing Rules 2025 (Cth)](https://www.legislation.gov.au/F2025L01026/latest) - [AUSTRAC, Tipping off (guidance, including outsourcing to external service providers)](https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/reporting-us/tipping-off) - [AUSTRAC, Money laundering update 2026 (artificial intelligence)](https://www.austrac.gov.au/industry-and-business/education-and-resources/publications-and-resources/money-laundering-update-2026) - [Privacy Act 1988 (Cth) Sch 1 APPs 1.7 to 1.9 (from 10 December 2026), 8 and 11](https://www.legislation.gov.au/C2004A03712/latest/text) ## Official form [Official form](https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/reporting-us/tipping-off) ## Full text and drafting notes The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/aml-ctf-the-practice-as-a-reporting-entity/ai-controls-amlctf-program and through the signed-in MCP connector https://ailawframework.com/mcp/firm. *Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*