Verifying an SMSF: what entity CDD actually involves

A principal at a single-office agency recently worked through verifying his entire client book, around a dozen clients, against the customer due diligence obligations that came in under Tranche 2. Most were straightforward individuals. One was a self-managed super fund with a corporate trustee and two directors.

That one client took him longer than everyone else combined, and it changed how he approached the rest of the file. What he ran into is the same thing most principals are about to hit the first time an SMSF client shows up.

The fastest way to get an entity file right

The fix for entity CDD is having a structured way to capture the right people and the right paperwork, and a record of how each check was actually done, not just that it was done.

Sign up, around 2 minutes. Enter your ABN and AML Simple pulls your registered business details from the ABR automatically.
Add the client as a trust: your agency records the trust itself (via its trust deed), the trustee, and each beneficial owner as a separate party on the file. Where the trustee is a company, it gets identified and verified as its own company, ACN included, in addition to the trust-level fields.
Verify each person, and record how: for each beneficial owner, run identity verification and store the method (document upload, video call, or DVS check) against the file with a timestamp.

The client file ends up with the trust's own evidence, the trustee's company details, and every director verified as a person, each with a recorded method. That's the part that's easy to skip when you're doing it by hand under deadline pressure.

Why a photo of a licence isn't verification

The principal started the way most people do: clients photographed their licence or passport and emailed it through. It's the fastest option, and for a while it looks like it's doing the job.

The problem is that a photo of a document and a photo of a photo of a document look identical once they land in your inbox. AI-fabricated identity documents, passports and licences convincing enough to pass a visual check, are a real and growing risk, not a theoretical one.

He moved to video calls for clients he couldn't see in person, where the client holds the physical original up to the camera and he confirms the face matches. For one file, he met the client in person. Neither of those is more paperwork. Both give him something a photo doesn't: a live, verifiable moment where the document and the person were in front of him at the same time.

An SMSF isn't verified the way a person is

The fund itself has no face, no licence, no passport. There's nothing to photograph or put on a video call. What gets identified and verified is everyone standing behind it.

For an SMSF with a corporate trustee, that means treating it as a trust structure with these separate parts:

The trust itself: identified through its trust deed, or an extract of it, plus the fund's basic identifying details.
The corporate trustee: verified as its own company in full, not as an extension of the trust. Current guidance points to the trustee company's own ACN and evidence of the company's existence, typically an ASIC extract, the same standard applied to any company client. Confirm the specific field list against your own AML/CTF program before relying on it for a given file.
The directors: current guidance points to each director of the corporate trustee being treated as a beneficial owner in their own right, individually identified and verified the same as an individual client.

Where a document can't be sighted directly, a video call or an accredited third-party electronic verification service are legitimate routes for verifying the people involved. What matters is that every layer, fund, trustee company, and each director, ends up with its own evidence on file, not just the fund's name and an ABN if it has one.

Recording how you verified matters as much as verifying

The least obvious lesson, and the one worth taking most seriously, is what "verified" actually needs to look like on the file afterwards.

"Verified" with no method and no date attached is a thin record. If AUSTRAC or an internal reviewer ever asks how a director's identity was confirmed, the file needs to answer that directly: which method was used, on what date, and what the outcome was. A note like "video call, client presented original passport, face matched" is evidence. A checkbox with no detail behind it is not.

That distinction is what separates a file that looks done from one that survives being read by someone who wasn't in the room. Every record has to be kept for 7 years under the general record-keeping obligation in the AML/CTF Act 2006 s 107, and a record with no method attached is a weaker version of that obligation, not a compliant one.

Doing it yourself

The same structure applies whether or not you're using a tool for it:

Record the trust deed (or an extract) against the fund's own client record
Verify the corporate trustee as a full company client, ACN and ASIC extract included
Add each director as a separate beneficial owner and verify each one individually
For every person verified, log the method used, the date, and the outcome, not just a pass or fail flag
Where you can't sight an original document, use a live video call or an accredited third-party electronic verification service, and record which one you used

What this looked like once it was done

By the end, the fund's client file had four linked records: the trust itself, the trustee company, and each of the two directors, every one of them with its own evidence and its own verification method attached. That's a heavier file than an individual buyer's, and it should be. An SMSF with a corporate trustee has more real people and more paperwork behind it than a single name on a contract.

For the wider question of how beneficial ownership works once you're past the trust structure itself, see beneficial ownership in real estate. For how AUSTRAC guidance treats trust-owned property more broadly, including where a trust has no ABN, see CDD for trust-owned property.

Get started free and have a structured entity file in place before the next SMSF client walks in.