An incomplete CDD file needs a precise explanation, not just a red status. The next action differs when a document is missing, a name conflicts with a registry or a person cannot be identified on reasonable grounds. Record the matter that remains unresolved and the work affected. This helps staff ask useful questions and prevents a commercial deadline from becoming an undocumented reason to proceed.
Name the matter that has not been established
Write the outstanding conclusion in plain language: the customer's legal identity, a representative's authority, a relevant control link or another applicable CDD matter. Identify the information already held and why it is insufficient. A passport missing from a folder is not the same problem as evidence suggesting a different person. Classify the issue accurately so a reviewer can see what additional information could resolve it and what would remain uncertain afterwards.
Control the service while the gap is assessed
Initial CDD ordinarily precedes a designated service. Where required matters cannot be established, do not treat a pending provider response or an unchecked declaration as completion. Consider any lawful delayed or other applicable treatment separately, including its conditions and restrictions. Allocate the decision to the responsible person under the program and record what staff may do meanwhile. An internal due date cannot create a legal permission to provide the service.
Ask a focused and accessible question
For example, a company extract may identify directors while the instruction comes from a different employee. Request information about that employee's authority instead of automatically asking every director for a fresh identity image. Explain the practical information needed and offer the methods permitted by your policies. If standard identification is unavailable for a legitimate reason, assess appropriate alternatives under current guidance. Avoid treating an inaccessible digital process as evidence of suspicious intent.
Close the gap with a reasoned decision
Record the response, corroboration, reviewer and conclusion. Update the risk assessment if the facts justify it. Distinguish a resolved administrative discrepancy from ongoing doubt about identity or conduct. Consider reporting obligations when the relevant suspicion threshold is reached; a missing attachment alone does not prove crime. Keep the chronology and outstanding restrictions visible so the next staff member does not infer approval from the arrival of one new document.
Official sources
Confirm the current rules against these primary sources, last checked .
Questions
Does a pending provider check satisfy CDD?
No. Pending means the result is not yet established. Decide what the applicable rules and your policies permit while it remains unresolved.
Is missing information automatically an SMR?
No. Assess the facts and the statutory reporting grounds. Record and escalate concerns without assuming every administrative gap proves suspicious conduct.
Can a deadline justify delayed CDD?
Not by itself. The specific lawful delay conditions must be satisfied and recorded; customer inconvenience is not a general exception.
General information for Australian professionals, not legal advice. It does not replace the AML/CTF Act, the Rules or AUSTRAC guidance. See our editorial standards.
Keep reading
- CDD explained4 min
Customer due diligence under the amended AML/CTF Act: verifying individuals and entities, finding beneficial owners (UBOs), PEP and sanctions screening, risk rating, and when enhanced due diligence applies.
- A delayed-CDD decision record3 min
Document the applicable delay provision, permitted outstanding verification, risk controls, completion deadline and stop conditions before providing a service.
- Refusal and exit4 min
When Australian reporting entities must refuse a service or exit a relationship because CDD cannot be completed, and how to record the decision safely.