Course sources and how we build it.
Every fact with a number or a legal rule comes from a public document we have stored with its date and digital fingerprint. The test questions are our own.
How we build the course
- We read the original: the Act and the Rules on the Federal Register of Legislation, and AUSTRAC’s own guidance pages, not other people’s summaries.
- We keep a copy of each document, with the date and its SHA-256 fingerprint, so we can show what it said.
- Every fact carries a word-for-word phrase. An automatic check confirms the phrase is in the stored copy; if it is not, the site is not published.
- The questions are ours. We do not copy questions from any exam or course. Scam examples use invented businesses and people.
- Reading times are counted from the real text of each lesson, at 180 words a minute.
- Drafted with AI, then checked automatically against the stored copies, as the line at the foot of every page says. If you spot a mistake, email hello@aptiaskills.com and we will fix it.
What the law says about this training, and what this course is
We are a private training provider, not a public body. This course helps a business meet the training duty. It is not approved by AUSTRAC and it does not make a business compliant.
- The Federal Register of Legislation lists the AML/CTF Rules 2025 as in force, with the latest version dated 31 March 2026. [T1]
- AUSTRAC says businesses that provide the newly regulated services "will be regulated by us from 1 July 2026". [S36]
- The rule on training (AML/CTF Rules 2025, section 5-9(2)): "The AML/CTF policies of the reporting entity must deal with both initial training upon a person’s employment or engagement and ongoing training during a person’s employment or engagement." [S2]
- The rule on how training is tailored (AML/CTF Rules 2025, section 5-9(3)): "The AML/CTF policies of the reporting entity must require that the training provided to a person: (a) is appropriate having regard to: (i) the particular function performed by the person; and (ii) the particular risks of money laundering, financing of terrorism and proliferation financing that are relevant to the person’s function; and (iii) the particular responsibilities of the person under the AML/CTF policies; and (b) is readily understandable by the person." [S2]
- AUSTRAC: you may outsource training, "However, you remain responsible for making sure training is tailored, appropriate and understandable to your personnel." [S1]
- AUSTRAC says its own e-learning modules "can be used as part of your AML/CTF training but can’t be relied on solely to meet your training obligations". [S1]
AUSTRAC’s own e-learning
AUSTRAC publishes self-paced modules. It says they can form part of your training but cannot be relied on solely, because training must fit each person’s role. Read the comparison.
Sources
Checked on 2026-11-02. Rules: compilation 1 of 31 March 2026. Act: compilation 63 of 1 October 2026. Lesson 7 uses the shared scam content core; its sources are listed with an SC prefix.
- [S1] AML/CTF training. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
fbfb589fabf1a367…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/personnel-due-diligence-and-training/amlctf-training - [T1] Anti-Money Laundering and Counter-Terrorism Financing Rules 2025 (register entry). Federal Register of Legislation. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
a903a2c49a59aacb…
https://www.legislation.gov.au/F2025L01026/latest/text - [S2] Anti-Money Laundering and Counter-Terrorism Financing Rules 2025 (compilation 1, 31 March 2026). Federal Register of Legislation. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
6bd50c668524ae26…
https://www.legislation.gov.au/F2025L01026/2026-03-31/2026-03-31/text/original/epub/OEBPS/document_1/document_1.html - [S3] Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (compilation 63, 1 October 2026). Federal Register of Legislation. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
0d85790ce0ffc80a…
https://www.legislation.gov.au/C2006A00169/2026-10-01/2026-10-01/text/original/epub/OEBPS/document_1/document_1.html - [S4] e-learning. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
9d02a96ec39967a8…
https://www.austrac.gov.au/industry-and-business/education-and-resources/e-learning - [S5] Identifying personnel roles that require due diligence and training. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
8c25fa3796784669…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/personnel-due-diligence-and-training/identifying-personnel-roles-require-due-diligence-and-training - [S6] Examples of personnel due diligence and training in practice. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
7a7ea5bd93a521d4…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/personnel-due-diligence-and-training/examples-personnel-due-diligence-and-training-practice - [S7] Designated services for newly regulated entities. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
33cac63e29428210…
https://www.austrac.gov.au/new-austrac/designated-services-newly-regulated-entities - [S8] Real estate designated services. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
271f970558fec1fd…
https://www.austrac.gov.au/new-austrac/designated-services-newly-regulated-entities/real-estate-designated-services - [S9] Professional designated services. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
e7c880990ace720a…
https://www.austrac.gov.au/new-austrac/designated-services-newly-regulated-entities/professional-designated-services - [S10] Precious metals, stones and products designated services. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
07f974c88aeeb890…
https://www.austrac.gov.au/new-austrac/designated-services-newly-regulated-entities/precious-metals-stones-and-products-designated-services - [S11] Suspicious matter reports. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
efd094cb5e8131c2…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/reporting-us/suspicious-matter-reports - [S12] Tipping off. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
31371a364bf12a9e…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/reporting-us/tipping-off - [S13] Threshold transaction reports. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
0d1f310774c60c44…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/reporting-us/threshold-transaction-reports - [S14] Record keeping overview. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
be4db7833e6d37c4…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/develop-your-amlctf-programs/record-keeping/record-keeping-overview - [S16] Overview of initial customer due diligence. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
04567bc5e4dd517e…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/customer-due-diligence/initial-customer-due-diligence/overview-initial-customer-due-diligence - [S17] Overview of ongoing customer due diligence. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
79c1f38b4a352101…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/customer-due-diligence/ongoing-customer-due-diligence/overview-ongoing-customer-due-diligence - [S18] Enhanced customer due diligence. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
c6ccf8b4b6ef8216…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/customer-due-diligence/enhanced-customer-due-diligence - [S19] AML/CTF compliance officer. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
06770fd746e7b15e…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/develop-your-amlctf-programs/step-1-establish-your-governance-framework/amlctf-compliance-officer - [S20] Senior manager. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
6a374623ec6bae7d…
https://www.austrac.gov.au/industry-and-business/obligations-and-guidance/your-amlctf-program/develop-your-amlctf-programs/step-1-establish-your-governance-framework/senior-manager - [S36] About the reforms. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
2c67f4fd18224b66…
https://www.austrac.gov.au/industry-and-business/about-amlctf-reforms/about-reforms - [S37] Indicators of suspicious activity for real estate. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
8a95caaa96079238…
https://www.austrac.gov.au/industry-and-business/education-and-resources/publications-and-resources/risk-insights-and-indicators-suspicious-activity-real-estate-sector - [S38] Indicators of suspicious activity for accountants. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
49de11418bd5aaa4…
https://www.austrac.gov.au/industry-and-business/education-and-resources/publications-and-resources/risk-insights-and-indicators-suspicious-activity-accountants - [S39] Indicators of suspicious activity for legal professionals. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
104e8a09eee4d28d…
https://www.austrac.gov.au/industry-and-business/education-and-resources/publications-and-resources/risk-insights-and-indicators-suspicious-activity-legal-professionals - [S40] Indicators of suspicious activity for dealers in precious stones, metals and other products. AUSTRAC. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
2517f9c330e44dff…
https://www.austrac.gov.au/industry-and-business/education-and-resources/publications-and-resources/risk-insights-and-indicators-suspicious-activity-dealers-precious-stones-metals-and-other-products - [SC-S1] Targeting scams: report of the National Anti-Scam Centre on scams data and activity 2025 (March 2026). National Anti-Scam Centre, Australian Competition and Consumer Commission. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
9d21086dedca93f0…
https://www.scamwatch.gov.au/system/files/targeting-scams-report-2025.pdf - [SC-S4] Protect your small business from invoice email scams (16 Aug 2016). Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
52ed3a5a4ee2b19a…
https://www.scamwatch.gov.au/about-us/news-and-alerts/protect-your-small-business-from-invoice-email-scams - [SC-S5] Invoice email scam now targeting Australian businesses (21 Jan 2015). Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
e3d6bb8ee5a9fc12…
https://www.scamwatch.gov.au/about-us/news-and-alerts/invoice-email-scam-now-targeting-australian-businesses - [SC-S6] False billing: John updated supplier details and it ended up costing thousands. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
8690814edb65f0a1…
https://www.scamwatch.gov.au/stop-check-protect/real-life-stories/false-billing-john-updated-supplier-details-and-it-ended-up-costing-thousands - [SC-S7] How scammers use technology and AI. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
a5312102ac849c8f…
https://www.scamwatch.gov.au/stop-check-protect/help-to-spot-and-avoid-scams/how-scammers-use-technology-and-ai - [SC-S8] Recover from business email compromise (8 Sep 2026). Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
ec3d93b13ef375f6…
https://www.cyber.gov.au/guidance/recover-from-business-email-compromise - [SC-S9] Protecting against business email compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
6f0de95cdcce305b…
https://www.cyber.gov.au/business-government/protecting-devices-systems/hardening-systems-applications/email-hardening/protecting-against-business-email-compromise - [SC-S10] Learn about account compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
7b35d9b14725d7aa…
https://www.cyber.gov.au/guidance/learn-about-account-compromise - [SC-S11] Learn about phishing scams. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
cd2a70740cbbda07…
https://www.cyber.gov.au/guidance/learn-about-phishing-scams - [SC-S14] Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (I-120324-PSA, 3 Dec 2024). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
5f652fda93b8482a…
https://www.ic3.gov/PSA/2024/PSA241203 - [SC-S15] Senior US Officials Impersonated in Malicious Messaging Campaign (public service announcement, 15 May 2025). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
d7af19215c731bc5…
https://www.ic3.gov/PSA/2025/PSA250515 - [SC-S16] 2025 IC3 Annual Report. FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
7d1fe453237654d2…
https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf - [SC-S17] FBI Warns of Scammers Impersonating the IC3 (I-072026-PSA, 20 Jul 2026). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
e352c731551538d4…
https://www.ic3.gov/PSA/2026/PSA260720 - [SC-S19] How To Avoid a Scam. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
eb66f787ba27f9cd…
https://consumer.ftc.gov/articles/how-avoid-scam - [SC-S21] Scammers use AI to enhance their family emergency schemes (March 2023). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
53ae7928777dcecd…
https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes - [SC-S22] Fighting back against harmful voice cloning (April 2024). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
2a030317d1640a8f…
https://consumer.ftc.gov/consumer-alerts/2024/04/fighting-back-against-harmful-voice-cloning - [SC-S23] How To Avoid Imposter Scams. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
783f3c028eded810…
https://consumer.ftc.gov/features/how-avoid-imposter-scams - [SC-S24] Phishing attacks: defending your organisation. UK National Cyber Security Centre. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
9ab741811dfdec48…
https://www.ncsc.gov.uk/guidance/phishing - [SC-S28] Steal, deal and repeat: how cybercriminals trade and exploit your data (IOCTA 2025). Europol. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
8feae25dde74a8f2…
https://www.europol.europa.eu/cms/sites/default/files/documents/Steal-deal-repeat-IOCTA_2025.pdf - [SC-S30] Facing reality? Law enforcement and the challenge of deepfakes. Europol Innovation Lab. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
1e48071951f58c63…
https://www.europol.europa.eu/cms/sites/default/files/documents/Europol_Innovation_Lab_Facing_Reality_Law_Enforcement_And_The_Challenge_Of_Deepfakes.pdf - [SC-S31] FinCEN Alert FIN-2024-Alert004: Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (13 Nov 2024). US Treasury, Financial Crimes Enforcement Network (FinCEN). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
5e02f6647ee023ff…
https://www.fincen.gov/system/files/shared/FinCEN-Alert-DeepFakes-Alert508FINAL.pdf - [SC-S34] Fraude del CEO: el engaño que puede vaciar la cuenta de tu pyme. INCIBE (Instituto Nacional de Ciberseguridad de España). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
c3977d5f89991274…
https://www.incibe.es/empresas/blog/fraude-del-ceo-el-engano-que-puede-vaciar-la-cuenta-de-tu-pyme - [SC-S35] Suplantación del CEO utilizando la técnica de inteligencia artificial deepvoice. INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
3ba736a024d2e3fe…
https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/suplantacion-del-ceo-utilizando-la-tecnica-de-inteligencia-artificial-deepvoice - [SC-S36] Una empresa sufre una estafa millonaria al suplantar al CEO vía Teams. INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
1cbfb18fb417f1d4…
https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/una-empresa-sufre-una-estafa-millonaria-al-suplantar-al-ceo-teams - [SC-S38] Deepfake (Explorador INCIBE). INCIBE. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
93ca5da41381afc1…
https://www.incibe.es/exploradorincibe/deepfake - [SC-S39] ¿Qué es el voice hacking?. INCIBE, blog para la ciudadanía. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
4cd1c2d5e14e6fdb…
https://www.incibe.es/ciudadania/blog/que-es-el-voice-hacking - [SC-S40] Cómo evitar una estafa. Comisión Federal de Comercio de Estados Unidos (FTC), Consumidor. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
d9fc7ce2c9f324c5…
https://consumidor.ftc.gov/articulos/como-evitar-una-estafa - [SC-S42] Autoridad Nacional de Protección de Datos Personales brinda recomendaciones ante nueva modalidad de estafa por clonación de voz. Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
c92ce49edb198cf6…
https://www.gob.pe/institucion/minjus/noticias/805436-autoridad-nacional-de-proteccion-de-datos-personales-brinda-recomendaciones-ante-nueva-modalidad-de-estafa-por-clonacion-de-voz - [SC-S44] ¡Cuidado con la suplantación de identidad! Recomendaciones para proteger tu información personal. Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
5e4176179ac7d182…
https://www.gob.pe/institucion/minjus/noticias/1163916-cuidado-con-la-suplantacion-de-identidad-minjusdh-te-brinda-recomendaciones-para-proteger-tu-informacion-personal - [SC-S45] Suplantación de identidad: orientación. Ministerio Público Fiscalía de la Nación del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy:
b497fd983a29bf0f…
https://www.gob.pe/25712-suplantacion-de-identidad