AML/CTF software for Australian virtual asset service providers
Check which virtual-asset services are designated, then keep customer due diligence, beneficial ownership, screening, suspicious-matter reporting and AML/CTF program evidence in one workspace.
Five situations, in plain words
Illustrations of questions virtual asset service providers meet. Not customers, and not a decision for your file.
Swapping crypto for dollars is covered. Know the customer before the trade.
Swapping one crypto for another is covered, even when no bank account is involved.
Sending crypto on a customer's instruction is covered. Keep the wallet and the counterparty.
Holding a customer's crypto for them is covered. Record who can move it.
A transfer you cannot explain is a reason to stop and write down what you saw.
Work that can be covered
- Exchanging virtual assets for money, or arranging that exchange
- Exchanging one virtual asset for another, or arranging that exchange
- Accepting instructions to transfer virtual assets or making transferred value available
- Providing a virtual-asset safekeeping service
- Providing financial services connected with a virtual-asset offer or sale while participating in that offer or sale
What to keep on the file
- AUSTRAC VASP registration or application reference and service catalogue
- Customer, representative, beneficial-owner and authority records
- Service scope decisions with rule references
- Screening, risk and escalation decisions
- Suspicious-matter report preparation and lodgement records
Guides for virtual asset service providers
- VASP AML/CTF guide7 min
A practical guide to Australia's virtual asset designated services, registration, AML/CTF program, CDD, travel rule, monitoring, reporting and record-keeping obligations.
- VASP registration transition6 min
What Australian virtual asset businesses must do after the 29 July 2026 transition deadline, including registration, legacy DCE transition and commencement dates.
- Virtual asset travel rule6 min
A role-based guide to payer, payee and tracing information, custodial and self-hosted wallets, secure transfer messages and travel-rule records in Australia.
- Self-hosted wallet due diligence5 min
A practical, risk-based workflow for classifying self-hosted wallets, identifying controllers, assessing blockchain exposure and documenting transfer decisions.
- VASP CDD and ownership6 min
A practical CDD workflow for VASP customers, representatives and beneficial owners, including purpose, expected activity, PEPs and enhanced CDD triggers.
- VASP monitoring and red flags6 min
How Australian VASPs combine on-chain and off-chain monitoring, design risk-based alerts, investigate red flags and escalate suspicious matters.
- VASP reporting and records7 min
A current guide to SMRs, TTRs, IFTIs, future IVTS and self-hosted-wallet reports, plus seven-year transaction, CDD and travel-rule records.
- Stablecoin AML guide3 min
How Australian issuers, exchanges and platforms should classify stablecoins, apply VASP designated services and manage the risks unique to pegged assets.
- Wallet screening3 min
How Australian VASPs use wallet screening and blockchain analytics, what evidence to retain and why provider results are not automatic decisions.
- Counterparty due diligence3 min
What Australian VASPs must know about counterparties under the travel rule: discovery, verification, information exchange and failure handling.
- NFTs and collectibles3 min
How Australian businesses should decide whether an NFT or collectible token is a virtual asset, and the designated services that follow.
- Travel-rule information exceptions3 min
Identify the institution's role, required information and mismatch, then retain a controlled request, risk-based response and decision trail.
Questions virtual asset service providers ask
Are all virtual asset service providers regulated by AUSTRAC?
No. It depends on whether the business provides a designated service with the required Australian link, not on the professional title. Assess each service and take advice where the boundary is uncertain.
What should virtual asset service providers keep for an AML/CTF review?
The scope decision, customer and beneficial-owner evidence, the risk assessment, screening and escalation decisions, approvals, reporting records, training and the current AML/CTF program.
Does Cassandra AML replace legal advice?
No. It organises compliance work and evidence. It does not give legal advice, guarantee compliance or imply AUSTRAC endorsement.