AML/CFT in the spotlight
What lawyers need to know about their responsibilities.
Law firms’ responsibilities as reporting entities under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 have been under the spotlight recently. The Department of Internal Affairs issued formal warnings to six firms for audit-related non-compliance in June, and two Anti-Money Laundering reform bills have come into force over the past few weeks.
The legislative changes have been made following review of the Anti-Money Laundering and Countering Financing of Terrorism (AML/CFT) regime by the Financial Action Task Force in 2019-2021 and a statutory review of the Act in 2022. They follow other amendments made in November 2025 through the Statutes Amendment Act 2025.
The stated intention behind the changes brought with these two Acts is to clarify existing obligations to provide more certainty, strengthen enforcement provisions, and provide relief for businesses and reduce compliance costs.
This Act came into force on 19 May, with changes that intend to make the AML regime more risk-based, efficient, and effective at addressing organised crime.
Definition changes in section 5(1)
Providing that reporting entities are not required to conduct certain identity verification requirements in respect of customers or persons who are trusts, if satisfied that any risks have been mitigated by conducting standard due diligence under sections 15 and 16, and enhanced customer due diligence under sections 23 and 25.
Clarifying and providing flexibility for the requirements for compliance officers in section 56, so that they must be senior managers or report to senior managers and must be natural persons.
Require that a reporting entity’s risk assessment incorporate all relevant risks that are identified by any risk assessments issued by DIA or the Financial Intelligence Unit.
This Act provides for the transition to a single supervisor (DIA) of the AML/CFT regime, replacing the existing three supervisors – the Reserve Bank, Financial Markets Authority, and DIA. New section 131 of the Act also amends the powers and functions of DIA as the sole supervisor.
New section 155A of the Act also enables a levy to be imposed on reporting entities, the purpose of which is to support a flexible and coordinated system that will deliver sector benefits. Details of the industry levy are not yet confirmed. An AML/CFT National Strategy and work programme will be introduced as part of the funding model. The Law Society has previously submitted on the levy consultation proposal, most recently the design of the levy and how it will be calculated. We will keep the profession updated as this work progresses.
New sections 80A and 80B also introduce a new censure regime, in addition to existing enforcement mechanisms of formal warnings, enforceable undertakings, injunctions, and pecuniary penalties.
This Act came into force on 1 July 2026. However, the levy will not apply immediately.
Reporting entities will need to review these new amendments to ensure their due diligence, verification and other AML/CFT processes comply.
DIA has launched the AML/CFT Regulatory Strategy 2026-30 and will update guidance on their website to reflect changes from these Acts.
Further changes to the AML/CFT regime and the regulatory settings have also been signalled, with the Government noting its intention to introduce a further Bill amending the AML/CFT Act into the House in the current parliamentary term.
See Anti-Money Laundering and Countering Financing of Terrorism on the Department of Internal Affairs website.
See the Law Society’s law reform submissions.