What are some common AML myths?

Myth: "I only deal with respectable clients, so I don't need AML compliance."

Reality: Criminals specifically target respectable businesses. Many use stolen identities or legitimate-looking company structures.

Myth: "I'll just refuse suspicious clients, so I don't have to report anything."

Reality: If you form a suspicion, you must report it even if you refuse service. Plus, refusing service without proper checks can itself be suspicious.

Myth: "Small businesses don't get audited." 

Reality: AUSTRAC audits businesses of all sizes. Small businesses often have worse compliance, making them higher priority targets.

Myth: "AML compliance is too expensive for small businesses." 

Reality: Basic compliance costs far less than a single AUSTRAC fine. Most requirements are about good business practices you likely have anyway - knowing your clients and keeping proper records.

Myth: "AML is too complicated - I need to hire expensive consultants."

Reality: While complex businesses might need help, most small-medium businesses can handle basic compliance themselves with the right tools and guidance. Start with your risk assessment and build from there.

Myth: "If I don't handle cash, I don't need AML compliance." 

Reality: Cash is just one risk factor. Money laundering happens through bank transfers, property purchases, complex corporate structures, and trust accounts - all without touching physical cash.

Myth: "I can just copy another business's AML program."

Reality: Your AML program must reflect YOUR specific risks, clients, and services. A generic copied program won't pass an audit and shows you don't understand your own business risks.

Myth: "If I report something and I'm wrong, I'll get in trouble." 

Reality: You're legally protected when making genuine suspicious matter reports. It's better to report and be wrong than not report and miss something.

Myth: "AML is a 'set and forget' - once I'm compliant, I'm done."

Reality: You must review your risk assessment annually, update procedures when your business changes, maintain ongoing training, and continuously monitor clients. Compliance is ongoing, not one-time.