Rule · AUSTRAC · 24 Apr 2026
Financial institutions with Australian permanent establishments must assess ML/TF risks, conduct due diligence on ownership and AML/CTF controls, and obtain senior officer approval before entering correspondent relationships involving vostro accounts. They must not engage with shell banks or terminate such relationships within 20 days of discovering shell bank involvement. Ongoing assessments are required at least every two years, with written records kept within 10 business days of completion.
Learn about correspondent banking relationships, and what you must do when entering or continuing a correspondent banking relationship that will involve a vostro account.
This section refers to section 5 of the Act
A correspondent banking relationship involves a financial institution (the correspondent) providing banking services to another financial institution (the respondent) located in another country.
The respondent may be a subsidiary or related company of the correspondent. The concepts of related company and subsidiary are described in sections 46 and 50 of the Corporations Act 2001.
Correspondent banking relationships enable the respondent to provide its own customers with cross-border products and banking services that it can’t provide itself, typically in a jurisdiction that the respondent doesn’t have a presence in.
Due to the high money laundering, terrorism financing and proliferation financing risks (we refer to these as ML/TF risks) of these relationships, appropriate due diligence of the relationship is essential to make sure you comply with your obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (the Act).
Services can include providing a current or other liability account and related services such as:
The scope of a relationship and extent of products and services supplied depend on the needs of the respondent, and the correspondent’s ability and willingness to supply them.
In the context of a correspondent banking relationship, the correspondent broadly acts on behalf of or as an intermediary for the respondent and executes and processes payments or other transactions for customers of the respondent.
The underlying customers of the respondent financial institution may be:
Correspondent banking relationships may be used in various ways. You should be aware of and assess the ML/TF risks arising from these arrangements.
In this type of arrangement, a correspondent financial institution opens and maintains an account for a respondent financial institution and handles payments. This allows the respondent to provide equivalent services to its own customers. However, the customers of the respondent don’t have direct access to the correspondent banking account.
Downstream correspondent clearance (or nesting) involves a number of indirect respondent financial institutions using a direct respondent financial institution’s correspondent relationship to conduct transactions and obtain access to other financial services from the correspondent.
Indirect respondent financial institutions don’t have the direct relationship with the correspondent and they indirectly access financial services in the target jurisdiction through their direct respondent’s account with the ultimate correspondent.
The indirect respondent financial institutions conduct transactions and obtain access to other financial services without being direct customers of the correspondent.
This is different from traditional correspondent banking because there is an additional financial institution (the respondent) mediating between the indirect respondent financial institutions and the correspondent financial institution. While an Australian correspondent financial institution isn’t required to conduct due diligence assessments on indirect respondents, you must assess the higher ML/TF risks associated with these types of arrangements.
In this type of arrangement, the account that the respondent financial institution holds with the correspondent financial institution is accessible to its customers. Customers can directly conduct their transactions in this account by making deposits and writing cheques on the account.
Source: Closing the loop: AML/CFT supervision of correspondent banking,Rodrigo Coelho, Jonathan Fishman, Amer Hassan and Rastko Vrbaski, Bank for International Settlements, September 2020.
A vostro (Latin for ‘yours’) account is an account provided by the correspondent financial institution to be held by a respondent financial institution under a correspondent banking relationship.
You should understand this term to have its ordinary meaning, including by reference to the Wolfsberg Anti-Money Laundering Principles for Correspondent Banking.
Even if an account isn’t described as a ‘vostro account’ by the correspondent or respondent institution, if it fulfils such a purpose in practice it’s a vostro account. In determining if an account is a vostro account, we caution financial institutions against taking an overly narrow or technical approach.
A nostro (Latin for ‘ours’) account refers to an account that a financial institution holds in a foreign currency in another financial institution.
The requirement to conduct due diligence assessments under Part 8 of the Act is triggered by the provision of a vostro account. The due diligence assessment is focused on ensuring that you understand the:
Correspondent banking relationships are recognised globally as being vulnerable to exploitation for ML/TF.
A correspondent typically has limited information about the respondent financial institution’s customers and the nature of their transactions. They rely on their understanding of the respondent’s AML/CTF policies to satisfy themselves of the levels of ML/TF risk. This can expose the correspondent financial institution to weaknesses in the respondent’s AML/CTF risk policies, increasing the associated risks.
The correspondent often has no direct relationship with the underlying parties to a transaction and doesn’t carry out customer due diligence (CDD) on the respondent’s customers. Correspondents often have limited information about the nature or purpose of the underlying transactions, particularly when processing electronic payments.
The ML/TF risks and vulnerabilities may be higher where the respondent is located in a foreign country assessed under the Financial Action Task Force’s (FATF) Mutual Evaluation processes as having weak AML/CTF laws, or poor or limited supervision of those laws.
Correspondent banking relationships, if poorly managed, can allow other financial institutions with inadequate AML/CTF policies, and customers of those institutions, direct access to international banking systems.
For any correspondent, the highest risk correspondent banking relationships involve providing a vostro account to respondents that are any of the following:
Correspondent banking due diligence complements other AML/CTF obligations like CDD.
For example, opening a vostro account involves providing designated service Item 1 of Table 1 in subsection 6(2) of the Act (opening an account as an ADI). Providing other services under a correspondent banking relationship may constitute other designated services.
For these services, you must comply with other AML/CTF obligations in respect of the respondent and its beneficial owners (if any), such as initial and ongoing customer due diligence, and submitting reports to us when required.
Under section 39E of the Act a correspondent financial institution is exempt from conducting initial customer due dligence on a customer if the designated service meets all of the following:
When these services are offered to a respondent that’s itself a downstream correspondent clearer, we expect you to:
You must also implement AML/CTF policies to ensure the respondent doesn’t have its own correspondent banking relationships with shell banks, or allow its accounts to be used by shell banks.
Refer to the Wolfsberg Correspondent Banking Due Diligence Questionnaire (February 2018).
This refers to sections 94A and 95 of the Act
You must not enter into correspondent banking relationships with any of the following:
You must terminate a correspondent banking relationship within 20 days (unless our CEO allows a longer period) of becoming aware that the respondent is any of the following:
If the respondent permits its accounts to be used by a shell bank, you may ask the respondent to terminate its correspondent banking relationship with the shell bank rather than terminating your correspondent banking relationship with the respondent.
If the respondent hasn’t complied with the request to terminate the relationship 20 business days after you made the request, you must terminate your relationship with the respondent within a further 20 days (unless our CEO allows a longer period).
This is an absolute prohibition against any form of correspondent banking relationship. It’s not limited to the provision of a vostro account.
For example, holding a nostro account with a shell bank is prohibited, regardless of whether the shell bank holds a vostro account.
This section refers to section 100 of the Act
You can only be subject to the correspondent banking provisions of the Act if you do any of the following:
Permanent establishment is defined in section 21 of the Act, and includes provision for agents, mobile services and electronic communications.
This section refers to section 96 of the Act and section 7-1 of the Rules.
Before entering a correspondent banking relationship that will involve a vostro account you must:
Learn more about each of these requirements below.
We consider that a financial institution enters into a correspondent banking relationship at the earlier of:
You must consider the factors listed below in your due diligence assessment before you enter into a correspondent banking relationship that will involve a vostro account.
You must also consider these factors when you conduct ongoing due diligence assessments.
You must consider the ownership, control and management structures of the respondent financial institution and its ultimate parent (if any). For example:
You must consider the nature, size and complexity of the respondent’s business, including the:
You must also consider both the:
The type of business the respondent engages in and the type of markets it serves, will help you assess the ML/TF risk the respondent presents.
You must consider the foreign countries in which the respondent operates or is a resident.
If the ultimate parent company of the respondent has group-wide AML/CTF systems and controls that the respondent operates within, you must consider the country or countries the ultimate parent operates in or is a resident of.
In relation to any foreign country or countries identified, you must consider both the:
For example, consider the quality of supervision by the primary AML/CTF regulatory body responsible for overseeing or supervising the respondent.
You must assess the appropriateness of the respondent’s AML/CTF policies, procedures, systems and controls.
Consider whether the respondent is regulated for AML/CTF and, if so, whether the respondent is required to verify the identity of its customers and apply other AML/CTF controls to FATF or equivalent standards.
if you are undertaking due diligence on a branch, subsidiary or affiliate, consideration may be given to the parent having robust group-wide controls, and whether the parent is regulated for AML/CTF to FATF or equivalent standards.
You may also wish to use established industry questionnaires (for example, the Wolfsberg Correspondent Banking Due Diligence Questionnaire or similar tools to meet this requirement. Additionally, you may also wish to speak with representatives of the respondent to determine if senior management recognise the importance of AML/CTF controls.
You must consider publicly available information about the reputation of:
This includes whether the respondent or any of those members has been the subject of:
If you’ll provide a vostro account that can be directly accessed by the customers of the respondent (payable-through accounts), you must consider whether the respondent will both:
Note: If the respondent is unable to provide this data and documentation, then you must not provide a payable-through-account.
This section refers to section 96 of the Act and section 7-2 of the Rules
A senior officer of your financial institution must give approval before you enter into a correspondent banking relationship.
For the purposes of correspondent banking relationships, a senior officer doesn’t have to be a person in executive management. You can determine who is a senior officer, depending on the size and complexity of your organisation.
We expect your senior officer to have sufficient knowledge of your ML/TF and serious crime risk exposure, and sufficient authority to make decisions affecting your risk exposure.
When deciding to approve entering into a correspondent banking relationship, the senior officer must consider both the:
If you’re to maintain payable-through accounts, the senior officer must also consider if they’re satisfied that the respondent:
If you enter into a correspondent banking relationship with another financial institution that involves a vostro account, you must prepare a written record within 20 business days after the day of entering into the relationship that sets out both:
This includes any other AML/CTF-related expectations you have concerning your respondent institutions. What these expectations are will depend on your circumstances, including the size, nature and complexity of your respondent’s business, and the results of your due diligence assessments.
This section refers to section 96 of the Act and sections 7-3 and 7-4 of the Rules.
You must conduct ongoing due diligence in relation to your correspondent banking relationships involving a vostro account. You must conduct these assessments at times you determine are appropriate based on:
At a minimum, you must carry out a due diligence assessment at least every 2 years.
You must also conduct a due diligence assessment and review the correspondent banking relationship if either:
We expect your policies, systems, controls and procedures relating to your correspondent banking relationship to be reviewed and updated in line with your AML/CTF policies.
Your ongoing due diligence assessments must consider the same factors that are required for due diligence assessments before entering a correspondent banking relationship.
Additionally, you must also consider and address any material changes to those risks (for example, changes in the respondent financial institution’s business model) or to your business relationship with the respondent, including the types of transactions carried out as part of the relationship.
You should be satisfied that the respondent continues to have in place and maintain appropriate risk-based systems and controls to mitigate and manage ML/TF and serious crime risks.
Other factors to consider include, but aren’t limited to:
You must prepare a written record on completion of each ongoing due diligence assessment of your correspondent banking relationships within 10 business days of completing the assessment.
Initial and ongoing due diligence assessments
When conducting initial and ongoing due diligence assessments, consider both the direct use accounts and other exchange relationships or other types of accounts that can be transacted through.
Examples to consider include:
This guidance sets out how we interpret certain Australian legislation, along with associated Rules and regulations. Australian courts are ultimately responsible for interpreting these laws and determining if any provisions of these laws are contravened.
The examples and scenarios in this guidance are meant to help explain our interpretation of these laws. They’re not exhaustive or meant to cover every possible scenario.
This guidance provides general information and isn't a substitute for legal advice. This guidance avoids legal language wherever possible and it might include generalisations about the application of the law. Some provisions of the law referred to have exceptions or important qualifications. In most cases your particular circumstances must be taken into account when determining how the law applies to you.
Last updated:
28 Apr 2026
Was this page helpful?
Was this page helpful?
Yes
No
Why or why not? (optional)
Please note that feedback you provide here will be used only for the purpose of improving our website. If you have a specific question about your AML/CTF obligations, please contact us.
Leave this field blank
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
RegAlert holds no document that amends or replaces this one. This is not a check that it is in force: confirm with the regulator.
“The concepts of related company and subsidiary are described in sections 46 and 50 of the Corporations Act 2001.”
More like this from AUSTRAC
AUSTRAC published 3 documents in the last 30 days. We email you each new one the day it's published.
Source: Australian Transaction Reports and Analysis Centre — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated