Find your course
Menu

Course sources and how we build it.

Every fact with a number or a rule comes from a public document we have stored with its date and digital fingerprint. The test questions are our own.

How we build the course

  1. We read the originals: the regulation on the Federal Register of Legislation, and the pages and guidance of the Australian Securities and Investments Commission and the Australian Taxation Office, not other people’s summaries.
  2. We keep a copy of each document, with the date and its SHA-256 fingerprint, so we can show what it said.
  3. Every fact carries a word-for-word phrase. An automatic check confirms the phrase is in the stored copy; if it is not, the site is not published.
  4. The questions are ours. We do not copy questions from any exam or course. The scam examples use invented names and web addresses.
  5. Reading times are counted from the real text of each lesson, at 200 words a minute.
  6. Written with AI, checked against the sources: we draft with AI from the sources above, and every fact passes the word-for-word check. If you spot a mistake, email hello@aptiaskills.com and we will fix it.

How the 2 hours are counted

The hours come from the content, not from how long you take. Reading is 57 minutes (11,566 words at 200 words a minute, rounded down). The 39 review questions and 25 test questions in one sitting count 1 minute each (64 minutes). The total is 121 minutes, rounded down to the half hour. Reading is about 47% of that total.

The certificate also prints the study time your own browser measured. These are our figures, not ASIC’s: you decide how to record the activity, using the rules below.

What ASIC says about CPD, and what this course is

We are a private training provider, not a public body. This course is free to study, with an optional certificate of completion. We cannot promise that any activity counts for your CPD: the regulation sets a test and leaves the judgement to you.

What each lesson draws on

This table is part of the training record that comes with each certificate.

Lessons, their reading time and the bodies whose sources they cite
LessonReadingSources from
1. What the SMSF auditor CPD rules ask, and where this course fits3 minASIC, ATO, Legislation
2. Investment scams that target your trustees4 minASIC, ATO
3. Stolen identities and fake SMSFs4 minATO
4. False documents and false audit evidence3 minASIC, ATO
5. Gatekeepers: trustees, regulators and what auditors are held to3 minASIC, ATO
6. Four files to practise on4 minASIC, ATO
7. Payment redirection and business email compromise6 minACCC, ACSC, FBI Internet Crime Compl, INCIBE
8. AI-written phishing and impersonation by email, SMS and chat7 minACCC, ACSC, Banco de la Nación del P, Europol, FBI Internet Crime Compl, US Federal Trade Commiss
9. Verification habits that stop most of these scams6 minACCC, ACSC, Comisión Federal de Come, FBI Internet Crime Compl, INCIBE, US Federal Trade Commiss
10. Account takeover, passwords and MFA fatigue6 minACCC, ACSC, FBI Internet Crime Compl, US Cybersecurity and Inf
11. Synthetic identities and fake documents6 minACCC, Europol, Europol Innovation Lab, FBI Internet Crime Compl, INCIBE, Ministerio Público Fisca, Ministerio de Justicia y, US Treasury
12. Voice clones and deepfake video calls: an emerging risk7 minACCC, ACSC, Europol Innovation Lab, FBI Internet Crime Compl, INCIBE, Ministerio de Justicia y, US Federal Trade Commiss, US Treasury
13. When it happens: the first hour5 minACCC, ACSC, Banco de la Nación del P, FBI Internet Crime Compl, INCIBE

Sources

Checked on 2026-11-02. Names of public bodies appear here only as plain text, to say where a fact comes from.

  1. [S2] Your ongoing obligations as an SMSF auditor. Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 7c2b38e2edef31ff…
    https://www.asic.gov.au/for-finance-professionals/self-managed-superannuation-fund-smsf-auditors/your-ongoing-obligations-as-an-smsf-auditor
  2. [S3] SMSF auditor professional requirements. Australian Taxation Office (ATO). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: e830ec78345f118f…
    https://www.ato.gov.au/tax-and-super-professionals/for-superannuation-professionals/smsf-auditors/smsf-auditor-professional-requirements
  3. [S4] Superannuation Industry (Supervision) Regulations 1994, regulation 9A.04 (compilation 158, 21 April 2026). Federal Register of Legislation (legislation.gov.au). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 659bdc27836e9ccb…
    https://www.legislation.gov.au/F1996B00580/2026-04-21/2026-04-21/text/original/pdf/1
  4. [S5] 25-040MR ASIC announces action against 17 SMSF auditors. Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 4328105e11c617a8…
    https://www.asic.gov.au/about-asic/news-centre/find-a-media-release/2025-releases/25-040mr-asic-announces-action-against-17-smsf-auditors/
  5. [S6] SMSFA National Conference speech, 21 April 2022 (SMSF emerging issues: what the research says). Australian Taxation Office (ATO). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 3bdbff93a8eec010…
    https://www.ato.gov.au/media-centre/smsf-emerging-issues-what-the-research-says
  6. [S7] Help for identity theft. Australian Taxation Office (ATO). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1f71ead50e9d62ea…
    https://www.ato.gov.au/online-services/scams-cyber-safety-and-identity-protection/help-for-identity-theft
  7. [S8] ATO launches new protections against rising tide of fraud (28 November 2023). Australian Taxation Office (ATO). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: f1f0a75b706d3302…
    https://www.ato.gov.au/media-centre/ato-launches-new-protections-against-rising-tide-of-fraud
  8. [S9] Scam alert: Self-managed super fund rollover (13 May 2021). Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: a3766cfdae00c4ab…
    https://www.asic.gov.au/about-asic/news-centre/news-items/scam-alert-self-managed-super-fund-rollover
  9. [S10] 25-290MR Banned SMSF Auditor charged with continuing to act while disqualified. Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 07f246439d72f7e8…
    https://www.asic.gov.au/about-asic/news-centre/find-a-media-release/2025-releases/25-290mr-banned-smsf-auditor-charged-with-continuing-to-act-whilst-disqualified-and-falsifying-documents/
  10. [S11] ASIC calls out superannuation trustees for weak scam and fraud practices. Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 57441843ee201bbc…
    https://www.asic.gov.au/about-asic/news-centre/news-items/asic-calls-out-superannuation-trustees-for-weak-scam-and-fraud-practices
  11. [S12] 26-010MR ASIC acts against 28 SMSF auditors, flags increased scrutiny on in-house audit breaches. Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 3efc09798e17923f…
    https://www.asic.gov.au/about-asic/news-centre/find-a-media-release/2026-releases/26-010mr-asic-acts-against-28-smsf-auditors-flags-increased-scrutiny-on-in-house-audit-breaches
  12. [S13] Regulatory Guide 243 Registration of self-managed superannuation fund auditors (March 2019). Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 174b25933c63320a…
    https://download.asic.gov.au/media/5020894/rg243-published-4-march-2019.pdf
  13. [S14] SMSF regulator update to the TIA (speech, 30 March 2023). Australian Taxation Office (ATO). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1d811e1c4f48eabf…
    https://www.ato.gov.au/media-centre/smsf-regulator-update-to-the-tia
  14. [S15] Appendix 1 to Report 824: Other ASIC activity relating to SMSFs (6 November 2025). Australian Securities and Investments Commission (ASIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: f9a9ce61a519004b…
    https://download.asic.gov.au/media/3lyhtj0d/appendix-1-to-rep824-published-6-november-2025.pdf
  15. [S90] Repair, replace, refund, cancel. Australian Competition and Consumer Commission (ACCC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: e81cb29d865ba13c…
    https://www.accc.gov.au/consumers/problem-with-a-product-or-service-you-bought/repair-replace-refund-cancel
  16. [S91] Small business and the Privacy Act. Office of the Australian Information Commissioner (OAIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 67f60c5d8f044044…
    https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/small-business
  17. [KS1] Targeting scams: report of the National Anti-Scam Centre on scams data and activity 2025 (March 2026). National Anti-Scam Centre, Australian Competition and Consumer Commission. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 9d21086dedca93f0…
    https://www.scamwatch.gov.au/system/files/targeting-scams-report-2025.pdf
  18. [KS2] Phishing scams. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: fd34428361dd1f71…
    https://www.scamwatch.gov.au/types-of-scams/phishing
  19. [KS3] Account or identity takeover scams. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: ce0bdeb5f2e0d31b…
    https://www.scamwatch.gov.au/types-of-scams/remote-access-scams
  20. [KS4] Protect your small business from invoice email scams (16 Aug 2016). Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 52ed3a5a4ee2b19a…
    https://www.scamwatch.gov.au/about-us/news-and-alerts/protect-your-small-business-from-invoice-email-scams
  21. [KS6] False billing: John updated supplier details and it ended up costing thousands. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 8690814edb65f0a1…
    https://www.scamwatch.gov.au/stop-check-protect/real-life-stories/false-billing-john-updated-supplier-details-and-it-ended-up-costing-thousands
  22. [KS7] How scammers use technology and AI. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: a5312102ac849c8f…
    https://www.scamwatch.gov.au/stop-check-protect/help-to-spot-and-avoid-scams/how-scammers-use-technology-and-ai
  23. [KS8] Recover from business email compromise (8 Sep 2026). Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: ec3d93b13ef375f6…
    https://www.cyber.gov.au/guidance/recover-from-business-email-compromise
  24. [KS9] Protecting against business email compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 6f0de95cdcce305b…
    https://www.cyber.gov.au/business-government/protecting-devices-systems/hardening-systems-applications/email-hardening/protecting-against-business-email-compromise
  25. [KS10] Learn about account compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 7b35d9b14725d7aa…
    https://www.cyber.gov.au/guidance/learn-about-account-compromise
  26. [KS11] Learn about phishing scams. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: cd2a70740cbbda07…
    https://www.cyber.gov.au/guidance/learn-about-phishing-scams
  27. [KS13] Scattered Spider advisory. Australian Signals Directorate, cyber.gov.au (reproducing a joint advisory). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2e388db94d443aff…
    https://www.cyber.gov.au/advisory/scattered-spider
  28. [KS14] Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (I-120324-PSA, 3 Dec 2024). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5f652fda93b8482a…
    https://www.ic3.gov/PSA/2024/PSA241203
  29. [KS15] Senior US Officials Impersonated in Malicious Messaging Campaign (public service announcement, 15 May 2025). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d7af19215c731bc5…
    https://www.ic3.gov/PSA/2025/PSA250515
  30. [KS16] 2025 IC3 Annual Report. FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 7d1fe453237654d2…
    https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf
  31. [KS17] FBI Warns of Scammers Impersonating the IC3 (I-072026-PSA, 20 Jul 2026). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: e352c731551538d4…
    https://www.ic3.gov/PSA/2026/PSA260720
  32. [KS18] Senior US Officials Continue to be Impersonated in Malicious Messaging Campaign (I-121925-PSA, 19 Dec 2025). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2009970fa1c67fe0…
    https://www.ic3.gov/PSA/2025/PSA251219
  33. [KS19] How To Avoid a Scam. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: eb66f787ba27f9cd…
    https://consumer.ftc.gov/articles/how-avoid-scam
  34. [KS21] Scammers use AI to enhance their family emergency schemes (March 2023). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 53ae7928777dcecd…
    https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes
  35. [KS22] Fighting back against harmful voice cloning (April 2024). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2a030317d1640a8f…
    https://consumer.ftc.gov/consumer-alerts/2024/04/fighting-back-against-harmful-voice-cloning
  36. [KS23] How To Avoid Imposter Scams. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 783f3c028eded810…
    https://consumer.ftc.gov/features/how-avoid-imposter-scams
  37. [KS24] Phishing attacks: defending your organisation. UK National Cyber Security Centre. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 9ab741811dfdec48…
    https://www.ncsc.gov.uk/guidance/phishing
  38. [KS25] Phishing scams: how to spot and report them. UK National Cyber Security Centre. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d82fb6ea424f5759…
    https://www.ncsc.gov.uk/guidance/suspicious-email-actions
  39. [KS27] The near-term impact of AI on the cyber threat. UK National Cyber Security Centre (NCSC Assessment). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: da8e2361bf216f78…
    https://www.ncsc.gov.uk/report/impact-of-ai-on-cyber-threat
  40. [KS28] Steal, deal and repeat: how cybercriminals trade and exploit your data (IOCTA 2025). Europol. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 8feae25dde74a8f2…
    https://www.europol.europa.eu/cms/sites/default/files/documents/Steal-deal-repeat-IOCTA_2025.pdf
  41. [KS30] Facing reality? Law enforcement and the challenge of deepfakes. Europol Innovation Lab. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1e48071951f58c63…
    https://www.europol.europa.eu/cms/sites/default/files/documents/Europol_Innovation_Lab_Facing_Reality_Law_Enforcement_And_The_Challenge_Of_Deepfakes.pdf
  42. [KS31] FinCEN Alert FIN-2024-Alert004: Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (13 Nov 2024). US Treasury, Financial Crimes Enforcement Network (FinCEN). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5e02f6647ee023ff…
    https://www.fincen.gov/system/files/shared/FinCEN-Alert-DeepFakes-Alert508FINAL.pdf
  43. [KS32] Implementing Phishing-Resistant MFA (fact sheet, October 2022). US Cybersecurity and Infrastructure Security Agency (CISA). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 0f8fff1a8208b305…
    https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
  44. [KS33] Implementing Number Matching in MFA Applications (fact sheet, October 2022). US Cybersecurity and Infrastructure Security Agency (CISA). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 0b752a0400d4ff03…
    https://www.cisa.gov/sites/default/files/publications/fact-sheet-implement-number-matching-in-mfa-applications-508c.pdf
  45. [KS34] Fraude del CEO: el engaño que puede vaciar la cuenta de tu pyme (page in Spanish). INCIBE (Instituto Nacional de Ciberseguridad de España). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: c3977d5f89991274…
    https://www.incibe.es/empresas/blog/fraude-del-ceo-el-engano-que-puede-vaciar-la-cuenta-de-tu-pyme
  46. [KS35] Suplantación del CEO utilizando la técnica de inteligencia artificial deepvoice (page in Spanish). INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 3ba736a024d2e3fe…
    https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/suplantacion-del-ceo-utilizando-la-tecnica-de-inteligencia-artificial-deepvoice
  47. [KS36] Una empresa sufre una estafa millonaria al suplantar al CEO vía Teams (page in Spanish). INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1cbfb18fb417f1d4…
    https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/una-empresa-sufre-una-estafa-millonaria-al-suplantar-al-ceo-teams
  48. [KS38] Deepfake (Explorador INCIBE) (page in Spanish). INCIBE. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 93ca5da41381afc1…
    https://www.incibe.es/exploradorincibe/deepfake
  49. [KS39] ¿Qué es el voice hacking? (page in Spanish). INCIBE, blog para la ciudadanía. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 4cd1c2d5e14e6fdb…
    https://www.incibe.es/ciudadania/blog/que-es-el-voice-hacking
  50. [KS40] Cómo evitar una estafa (page in Spanish). Comisión Federal de Comercio de Estados Unidos (FTC), Consumidor. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d9fc7ce2c9f324c5…
    https://consumidor.ftc.gov/articulos/como-evitar-una-estafa
  51. [KS42] Autoridad Nacional de Protección de Datos Personales brinda recomendaciones ante nueva modalidad de estafa por clonación de voz (page in Spanish). Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: c92ce49edb198cf6…
    https://www.gob.pe/institucion/minjus/noticias/805436-autoridad-nacional-de-proteccion-de-datos-personales-brinda-recomendaciones-ante-nueva-modalidad-de-estafa-por-clonacion-de-voz
  52. [KS43] Una llamada de tu Banco, podría no serlo: spoofing telefónico (page in Spanish). Banco de la Nación del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1cc4ae2cf8f2bb09…
    https://www.gob.pe/institucion/bn/noticias/821482-una-llamada-de-tu-banco-podria-no-serlo-spoofing-telefonico-suplantacion-de-numero-telefonico
  53. [KS44] ¡Cuidado con la suplantación de identidad! Recomendaciones para proteger tu información personal (page in Spanish). Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5e4176179ac7d182…
    https://www.gob.pe/institucion/minjus/noticias/1163916-cuidado-con-la-suplantacion-de-identidad-minjusdh-te-brinda-recomendaciones-para-proteger-tu-informacion-personal
  54. [KS45] Suplantación de identidad: orientación (page in Spanish). Ministerio Público Fiscalía de la Nación del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: b497fd983a29bf0f…
    https://www.gob.pe/25712-suplantacion-de-identidad