The Tipping Off Offence: What You Must Never Tell Your Clients

When you lodge a Suspicious Matter Report (SMR) with AUSTRAC, there is one rule you must never break: do not tell your client. The tipping off offence is one of the most serious provisions in Australia's AML/CTF framework, and breaching it can result in imprisonment. This article explains what the offence covers, how it applies in practice, and how to protect yourself.

What Is the Tipping Off Offence?

Under Section 123 of the AML/CTF Act, it is a criminal offence to disclose information that would indicate, or be reasonably likely to indicate, that:

• A suspicious matter report has been, is being, or will be made
• Any information relating to a suspicious matter report has been communicated to AUSTRAC

The offence applies to anyone — not just the person who lodged the report. If a compliance officer tells a colleague, and that colleague tells the client, both individuals may have committed the offence.

The Penalties

Tipping off is punishable by up to 2 years' imprisonment, or a fine, or both. For a body corporate, the penalties are significantly higher.

These are criminal penalties, not civil. A conviction creates a criminal record and can result in the loss of professional licences and registration. For accountants, lawyers, real estate agents, and conveyancers, the consequences extend well beyond the courtroom — a tipping off conviction effectively ends a career.

What Constitutes Tipping Off

The offence is broadly drafted. You do not need to explicitly say "I reported you to AUSTRAC" to be guilty. Any disclosure that would allow a reasonable person to infer that a report has been made can constitute tipping off. This includes:

• Direct disclosure: Telling the client that you have lodged an SMR or are considering doing so
• Indirect disclosure: Saying something like "I'm not able to proceed because of compliance concerns" in a way that implies a report
• Behavioural changes: Suddenly refusing to act for a client, becoming evasive, or changing your usual communication patterns in a way that alerts the client to the fact that something has changed
• Third-party disclosure: Telling a colleague, family member, or friend about the report in circumstances where the information could reach the client

What You Can and Cannot Say

You CANNOT say:

• "We have reported this transaction to AUSTRAC"
• "I'm required to make a suspicious matter report about your account"
• "There's been a report filed about your activities"
• "I can't tell you why, but AUSTRAC is looking into this"
• "Our compliance team has flagged your transaction"

You CAN say:

• "We need some additional information to complete our due diligence" — requesting documents or information as part of your standard CDD process is not tipping off
• "I'm unable to proceed with this matter at this time" — a general statement that does not reference AUSTRAC, reporting, or suspicions (though be careful with context)
• "Our standard procedures require verification of these details" — framing your enquiries as routine compliance

The key distinction is between routine compliance communication and disclosure of reporting activity. You can ask for information. You can apply your CDD procedures. You can even decline to act. What you cannot do is link any of this to the existence or possibility of a suspicious matter report.

Common Scenarios

Scenario 1: Client Asks Why You Need More Information

A client questions why you are requesting additional identification documents. You can explain that your business has AML/CTF obligations and that identity verification is a standard requirement for all clients. You cannot say that their specific transaction has raised concerns.

Scenario 2: Colleague Asks About a Client

A colleague in your practice asks why you have flagged a particular client file. You can share information with colleagues on a need-to-know basis for the purpose of fulfilling your AML/CTF obligations. However, you should limit the disclosure to what is necessary and ensure the colleague understands their own obligations not to disclose further.

Scenario 3: Client Becomes Suspicious

A client notices that their transaction is being delayed and directly asks whether you have reported them. You must not confirm or deny. Redirect the conversation to standard processing timelines or general compliance requirements. If the client becomes aggressive, remain calm and do not disclose anything about the report.

Scenario 4: Ending a Client Relationship

You may decide to exit a client relationship after lodging an SMR. You are entitled to end a professional relationship for any reason, but you must not cite the SMR or your suspicions as the reason. Generic reasons such as "we are unable to continue acting" or "our practice is no longer able to assist with this matter" are safer, though you should seek legal advice if the situation is complex.

Protecting Yourself and Your Team

Limit Knowledge

Only those who need to know about an SMR should know. The compliance officer and, where necessary, senior management should handle SMRs. Other staff should not be informed unless they are directly involved in the compliance process.

Train Staff

All employees must understand the tipping off offence as part of their AML/CTF training. Staff should know what they cannot say and how to handle client questions about compliance procedures.

Use Secure Processes

SMRs and related documents should be stored in a secure system with restricted access. They should never be placed in the general client file where other staff or external parties might see them.

Seek Legal Advice When Unsure

If you are uncertain whether a particular communication would constitute tipping off, seek legal advice before making any disclosure. It is always better to err on the side of caution.

Exceptions to the Offence

There are limited exceptions where disclosure is permitted:

• Disclosure to AUSTRAC (obviously)
• Disclosure to your legal adviser for the purpose of obtaining legal advice about the report
• Disclosure to a law enforcement agency in connection with the performance of their duties
• Disclosure required by court order

Outside of these exceptions, treat the existence of an SMR as strictly confidential.

Build Safe Communication Into Your Workflow

Managing tipping off risk is easier when your AML/CTF processes are structured and consistent. ComplyReady keeps SMR records separate from client files, restricts access to authorised personnel, and provides staff with compliant communication templates — reducing the risk of accidental disclosure.

Start your free trial and protect your team from tipping off risk.