Guides · Updated

Client risk assessment for real estate agents: how to rate a vendor or buyer low, medium or high and what each rating requires

Rating each vendor's and buyer's money laundering risk is what makes a program risk-based instead of one-size-fits-all: it decides how much due diligence you do on each party and how often you look again. This guide gives an agency the factors AUSTRAC expects you to weigh, a scoring approach that stays consistent across the sales team, and the due diligence and review schedule each rating calls for.

A tidy accounting practice desk with a closed laptop, a navy ledger and client folders with teal tabs, city buildings in the window.
In short

A client risk assessment rates each vendor's and buyer's money laundering and terrorism financing risk as low, medium or high by weighing four factor groups: the client (individual, company, trust or SMSF; beneficial owners; politically exposed status; behaviour), the transaction (price, off-the-plan, rapid resale), the delivery channel (met in person or remote; third parties paying or instructing) and the countries involved (residence, incorporation, source of funds). The rating sets the due diligence (standard, or enhanced with source of funds and the principal's approval for high risk) and the review interval, commonly 24, 12 and 6 months. The rating, the date and the reasons are recorded for seven years.

Key points
  • Four factor groups: client, transaction, channel, country. Write down which ones drove the rating.
  • Heaviest factors in property: overseas buyers with unclear source of funds, cash deposits, third parties paying, politically exposed persons, entities with hidden controllers.
  • High risk means enhanced due diligence: source of funds and wealth, the principal's approval before proceeding, closer monitoring, review every 6 months.
  • Most owner-occupier vendors and local, financed buyers rate low. The rating exists to find the few that do not.
  • A suspicious matter report makes the client high risk automatically.
Customer risk rating, due diligence and review frequencyThree rows for low, medium and high risk customers, with the level of due diligence and the review interval for each.RATINGDUE DILIGENCEREVIEWLow

Standard identification and verification

Every 24 months
Medium

Standard CDD plus closer attention to purpose and funds

Every 12 months
High

Enhanced CDD: source of funds and wealth, senior manager approval

Every 6 months
The law sets no fixed interval; these are the intervals most small-firm programs adopt and the ones our compliance tool uses by default.

Why the rating matters

The regime does not ask you to treat every buyer as a suspect. It asks you to do more where the risk is higher and less where it is lower, and to be able to show why. The client risk rating is that why. Without it, enhanced due diligence has no trigger, review schedules have no basis, and an assessor has no way to see that your program is operating.

The four factor groups, for an agency

  • Client: individual, company, trust or SMSF; how hard the beneficial owners are to identify; whether the client or a close associate is a politically exposed person; behaviour (not interested in price or inspection, in a hurry, evasive about ownership).
  • Transaction: price point relative to the client's profile, off-the-plan and development sales, a property resold quickly at a very different price, a buyer purchasing several properties at once.
  • Delivery channel: met in person with documents sighted, or remote; a third party paying the deposit or giving instructions; an introducer you do not know.
  • Country: residence, incorporation, source and destination of funds. AUSTRAC and FATF publish lists of higher-risk jurisdictions.

A scoring approach that stays consistent

Ratings go wrong when they depend on which salesperson did the onboarding. A simple score fixes that: give each factor a weight, add them up, set thresholds. The estimator on this page uses weights that work for professional firms: a trust 2, a company 1, a higher-risk jurisdiction 2 to 4, a transaction over AU$750,000 1 and over AU$2 million 2, a politically exposed person 4, cash 3, remote onboarding 1, third-party involvement 2, unclear source of funds 4, no identity document sighted 2. Six or more is high, three to five medium, under three low. Your program can use different weights; what matters is that it has them, writes them down and applies them to every vendor and buyer.

What each rating requires

  • Low: standard identification and verification, purpose recorded, review every 24 months or on a trigger (most sales relationships end at settlement, so the review often never falls due).
  • Medium: standard due diligence with closer attention to the source of the deposit and purchase funds, review every 12 months.
  • High: enhanced due diligence. Establish source of funds and, where relevant, source of wealth; the principal or a director approves before the agency proceeds; monitor more closely; review every 6 months. Record every step.

Common high-risk situations in property

  • An overseas buyer whose funds arrive from several accounts or a country unconnected to them.
  • A deposit paid by a third party for no clear reason, or offered in cash.
  • A buying company or trust that will not say who controls it.
  • A buyer not interested in price, inspection or contract terms who wants to settle fast.
  • A vendor who bought recently and is selling at a very different price with no explanation.

Politically exposed persons

A PEP holds or has held a prominent public position in Australia or overseas; the definition extends to immediate family and close associates. Foreign PEPs are high risk by default; domestic and international organisation PEPs are high risk when other factors are present. Ask the question at onboarding and screen against a PEP list if your tools allow.

When to re-rate

  • A suspicious matter report about the client: the rating becomes high.
  • A change in who is buying, how they are paying or where the money comes from.
  • Funds arriving from an unexpected source or country before settlement.
  • Information that contradicts what was collected at onboarding.
  • The scheduled review, for relationships that continue.

Recording it

Keep the rating, the date, the factors and the reasons with the client's identification records for seven years after the relationship ends. The annual compliance report asks how many clients were rated high risk; your files should produce that number without a hunt. In RealtyAML the rating is calculated from the answers recorded for each vendor and buyer, the review date is set from the rating, and every change is kept in the audit trail.

Interactive

Client risk rating estimator

Answer six things about a new client and see the rating, what due diligence it calls for and when to review. Same scoring our compliance tool uses.

Estimated ratinglow riskSimplified due diligence. Review every 24 months.

An estimate to start the conversation inside your firm. Your program sets your own factors and weights; nothing you type here is stored or sent anywhere.

Questions people ask

Do we rate both the vendor and the buyer?
Yes. Both are your customers in a brokered sale. The vendor is rated at engagement; the buyer once the sale is expected to proceed, within the delayed-verification window.
Is every overseas buyer high risk?
Not automatically. An overseas buyer met through a known channel, with a clear source of funds from a low-risk country, may rate medium. An overseas buyer with unclear funds from a higher-risk jurisdiction rates high.
How often should client risk be reviewed?
The law sets no fixed interval; your program does. Common practice is every 24 months for low, 12 for medium and 6 for high, plus whenever something changes. Many sales relationships end at settlement before a review falls due.
What is enhanced due diligence in practice?
Documenting where the deposit and purchase funds came from, and where relevant the client's wealth, getting the principal's approval before proceeding, watching the file more closely and reviewing it more often.

Read next

From the AML/CTF Guide

The regime in general, with tools and infographics, on our sister site amlctfguide.com.au.

Sources

Official pages this page was checked against. The date is when we captured the page; the publisher may have updated it since.

This guide is general information for real estate agents, buyers agents, property managers, not legal advice. Check AUSTRAC's current guidance for your situation.

Set up your program in the first ten minutes.

Fourteen days free. A card is required to start; nothing is charged until day 15, and you can cancel before then.

Client risk assessment for real estate agents (AML) · RealtyAML