If you run a real estate agency, accounting firm, law practice, or brokerage in Australia, you already know the drill: a new business client walks through the door, you shake hands, and somewhere in the back of your mind a little compliance alarm starts ringing. You know you need to check who they are. What most people don’t know is exactly which documents actually satisfy that obligation.
That’s the gap. Plenty of guides tell you that KYB (Know Your Business) matters. Almost none tell you, what to actually put in the file.
This guide fixes that. By the end, you’ll have a clear, practical answer to one question: the documents every Australian business should collect for KYB, broken down by business structure, so you’re never left guessing during an AUSTRAC audit or a client onboarding call.
Key takeaways
KYB (Know Your Business) verifies the legal existence, structure, and ownership of a business – not just the individual you’re speaking to.
Beneficial ownership verification is often the step businesses get wrong, and it’s the one AUSTRAC cares about most.
The core document set includes an ASIC extract, ABN registration details, incorporation certificates, and beneficial ownership records.
Expired ASIC extracts and outdated shareholder registers are among the most common audit failures.
Trusts, partnerships, and SMSFs each need extra documentation beyond what a standard company requires.
A documented, repeatable KYB checklist protects your business from compliance breaches and reputational damage.
KYB documents Australia: What every business should collect
The documents every Australian business should collect for KYB include an ASIC company extract, ABN registration confirmation, certificate of incorporation, company constitution, trust deed (if applicable), identification for directors and beneficial owners, and evidence of ultimate beneficial ownership.
KYB, or Know Your Business, is the process of verifying that a business is legally registered, legitimately operating, and transparent about who actually owns and controls it. Think of it as the corporate equivalent of checking someone’s driver’s licence, except instead of one person, you’re verifying an entire legal entity and everyone standing behind it.
Here’s where people get confused: KYC (Know Your Customer) verifies an individual. KYB verifies business. If your client is a company, trust, or partnership, you’re not just checking out the person sitting across the table – you’re checking the entity they represent, the structure behind it, and the humans who ultimately control it.
Under Australia’s AML/CTF Act, and following the Tranche 2 reforms, AML/CTF obligations now apply to real estate agents, lawyers, accountants, conveyancers, and trust and company service providers, businesses that have never had to think about compliance before are now expected to apply customer due diligence to business customers, not just individuals. That’s where document collection becomes non-negotiable. Without the right paperwork, you simply can’t prove the business is who it says it is.
KYB sits right at the front door of AML compliance. It’s the foundation everything else builds on – sanctions screening, PEP checks, ongoing monitoring. If your foundation document set is wrong or incomplete, everything downstream is compromised too.
Why these KYB documents matter
It’s tempting to treat document collection as box-ticking. It isn’t. Here’s what’s actually riding on it.
- Compliance obligations: AUSTRAC expects reporting entities to apply a risk-based approach to customer due diligence, and that means having evidence – not assumptions – about who your business customers are.
- Fraud prevention: Shell companies and fake business registrations are a favourite vehicle for money laundering. A verified ASIC extract makes it much harder for a fraudulent entity to slip through.
- Beneficial ownership of transparency: Criminals hide behind layers of companies and trusts. Proper KYB documentation strips those layers back to reveal the real humans in control.
- Risk reduction: The better your documentation, the more accurately you can assess whether a business customer poses a low, medium, or high risk.
- Faster onboarding: Counterintuitively, collecting the right documents upfront speeds things up. Chasing missing paperwork mid-transaction is what actually slows deals down.
- Audit readiness: When an AUSTRAC or an external auditor comes knocking, a complete document trail is the difference between a smooth review and a stressful one.
- AUSTRAC expectations: Reporting entities are expected to keep records that demonstrate ongoing due diligence, not a one-off check at onboarding.
The complete KYB document checklist
1. ASIC Company Extract
What it is: An official record from the Australian Securities and Investments Commission showing a company’s registration status, directors, registered office, and share structure.
Why it matters: It’s the single most authoritative source confirming a company legally exists and is currently registered.
When it’s required: For every company customer, at onboarding and periodically thereafter.
Tips for collecting it: Always pull a current extract rather than relying on one the client provides – extracts can be outdated within weeks if directors or shareholders change.
2. ABN Registration
What it is: Confirmation of a business’s Australian Business Number status via the ABN Lookup register.
Why it matters: It verifies the business is registered for tax purposes and confirms the legal entity name matches other documentation.
When it’s required: For all business structures, including sole traders.
Tips for collecting it: Cross-check the ABN against the ASIC extract or trading name to catch mismatches early.
3. Certificate of Incorporation
What it is: The founding document issued by ASIC when a company is first registered.
Why it matters: It proves the company was legitimately established and confirms its original registration date.
When it’s required: Typically for newly formed companies or higher-risk onboarding scenarios.
Tips for collecting it: If the client can’t locate the original, an ASIC historical extract can often substitute.
4. Company Constitution (Where Applicable)
What it is: The internal rulebook governing how a company operates, including director powers and decision-making processes.
Why it matters: It clarifies who has authority to act on the company’s behalf, which matters when verifying signatories.
When it’s required: Where the company has adopted a constitution instead of relying solely on the Corporations Act replaceable rules.
Tips for collecting it: Ask directly whether one exists – many small companies don’t have one, and that’s perfectly normal.
5. Trust Deed
What it is: The legal document establishing a trust, naming the trustee, beneficiaries, and terms of the trust.
Why it matters: Trusts are opaque by design, so the trust deed is essential for identifying who actually controls the assets.
When it’s required: Any time your customer is operating through a trust structure.
Tips for collecting it: Request the full, current, and executed version – not a summary or draft.
6. Partnership Agreement
What it is: The document outlining how a partnership is structured, including each partner’s rights, obligations, and profit share.
Why it matters: It identifies all partners who may need to be verified as part of due diligence.
When it’s required: For partnership business structures, particularly professional partnerships like law or accounting firms.
Tips for collecting it: If no formal agreement exists, request written confirmation of the partners involved instead.
7. Business Registration Certificate
What it is: State or territory-issued confirmation of business name registration.
Why it matters: It confirms the trading name is legitimately linked to the underlying legal entity.
When it’s required: Where a business operates under a name different from its legal entity name.
Tips for collecting it: Match the business name registration against the ABN Lookup record for consistency.
8. Identification for Directors
What it is: Government-issued ID (passport, driver’s licence) for each company director.
Why it matters: Directors control the company’s decisions, making their identity verification essential to KYB.
When it’s required: For every director listed on the ASIC extract.
Tips for collecting it: Verify director details against the ASIC record, not just what the client provides.
9. Identification for Beneficial Owners
What it is: ID documentation for individuals who ultimately own or control 25% or more of the business.
Why it matters: Beneficial owners are often invisible on a company extract, especially in layered ownership structures.
When it’s required: For all business customers, regardless of structure.
Tips for collecting it: Ask directly: “Who ultimately benefits from this business?” – don’t assume the visible director is the true owner.
10. Shareholder Register
What it is: A record listing all shareholders and their respective shareholdings in a company.
Why it matters: It reveals ownership percentages needed to identify beneficial owners.
When it’s required: For companies with more than one shareholder or a complex ownership structure.
Tips for collecting it: Request the current register, not one from the date of incorporation.
11. Ultimate Beneficial Ownership Documents
What it is: Supporting evidence – often a structure chart – showing the full ownership chain down to natural persons.
Why it matters: This is where layered ownership structures (company owning company owning trust) get unpacked.
When it’s required: Whenever ownership isn’t immediately obvious from a single document.
Tips for collecting it: Ask the client to draw or provide a simple ownership diagram if the structure is complex.
12. ASIC Historical Extract (If Required)
What it is: A record showing a company’s historical changes – past directors, past addresses, past share structures.
Why it matters: Useful for higher-risk customers or where you need to confirm changes over time.
When it’s required: In enhanced due diligence scenarios.
Tips for collecting it: Order directly through ASIC or a registered information broker.
13. Board Resolution (If Required)
What it is: A formal record of a decision made by the company’s board, such as authorising a transaction or nominating a signatory.
Why it matters: It confirms the person acting on the company’s behalf has proper authority.
When it’s required: For significant transactions or when someone other than a listed director is signing.
Tips for collecting it: Request it on company letterhead, signed and dated.
14. Source of Funds Documentation (Where Appropriate)
What it is: Evidence showing where the funds involved in a transaction originated, such as bank statements or loan agreements.
Why it matters: It helps identify whether funds are legitimately sourced, a key AML risk indicator.
When it’s required: For higher-value or higher-risk transactions.
Tips for collecting it: Request documentation that traces funds back to their origin, not just the most recent account they sat in.
Different business structures require different documents
Not every business customer needs the same file. Here’s how requirements shift by structure.
- Sole Trader – ABN registration, business name registration (if applicable), individual ID.
- Partnership – Partnership agreement, ABN, ID for all partners.
- Company – ASIC extract, ABN, constitution (if applicable), director and beneficial owner ID, shareholder register.
- Trust – Trust deed, trustee identification, beneficiary information, ABN.
- SMSF – Trust deed, ABN, trustee ID (individual or corporate trustee documents).
- Corporate Trustee – ASIC extract for the trustee company, trust deed, director ID, beneficial ownership documents.
- Foreign Company – Overseas registration documents, ASIC extract (if registered in Australia), director and beneficial owner ID.
A quick real-world example: a conveyancer onboarding a company purchasing a residential property needs the ASIC extract and director ID at minimum. But if that company is owned by a discretionary trust, the conveyancer also needs the trust deed and identification for the trustee and any beneficiaries who exercise control. Skip the trust layer, and the KYB file is incomplete – even if the company-level paperwork looks perfect.
Common KYB documentation mistakes
- Expired ASIC extract. Company details change. An extract pulled six months ago might list a director who’s since resigned.
- Missing trustee information. Trusts are commonly under-documented because businesses focus on the trust deed and forget to verify the trustee itself.
- Wrong beneficial owners. Sometimes the person filling out the form isn’t actually the ultimate controller – layered structures can hide the real decision-maker.
- Incomplete trust deeds. A trust deed missing schedules or amendment pages can leave gaps in understanding who the beneficiaries actually are.
- Outdated shareholder information. Shareholdings shift, especially in growing companies. An old register can misrepresent who actually controls the business.
- Poor record keeping. Even when the right documents were collected, disorganised storage makes them useless during an audit.
How technology makes KYB easier
Manually chasing ASIC extracts, trust deeds, and director ID for every business customer is genuinely time-consuming, and it’s easy to see why so many businesses fall behind on it.
This is where purpose-built compliance technology earns its keep. Automated document collection portals let business customers upload their own paperwork securely, rather than emailing scanned PDFs back and forth. Electronic verification tools cross-check ASIC and ABN records in real time instead of relying on manual lookups. Sanctions, PEP, and adverse media screening can run automatically against a business’s directors and beneficial owners the moment their details are entered.
Ongoing monitoring flags changes to a company’s structure – a new director, a change in shareholding – without anyone having to remember to check manually. And centralised document storage with a clear, time-stamped audit trail means that if AUSTRAC ever asks for evidence, it’s a few clicks away rather than a scramble through old email threads.
Syntrico’s AML Guardian platform brings these pieces together in one workflow. Fully automated KYC and KYB checks with built-in PEP, sanctions, and adverse media screening sit alongside an AML/CTF Program Builder, risk assessment tools, ongoing monitoring, and audit-ready reporting – so compliance teams spend less time chasing paperwork and more time actually assessing risk. For businesses coming to grips with Tranche 2 obligations for the first time, that guided, five-step approach (Assess, Build, Verify, Monitor, Report) means you don’t need to be a compliance expert to get your KYB process right from day one.
Practical KYB checklist
Use this as your at-a-glance reference before onboarding a business customer:
- Current ASIC company extract obtained
- ABN verified against ABN Lookup
- Certificate of incorporation or historical extract on file
- Company constitution requested (if one exists)
- Trust deed collected (if trust structure involved)
- Partnership agreement collected (if partnership structure involved)
- Business name registration checked
- Director identification verified for all listed directors
- Beneficial owner identification obtained (25%+ ownership threshold)
- Shareholder register reviewed and current
- Ultimate beneficial ownership chain mapped
- Board resolution collected where a non-director signatory is involved
- Source of funds documentation collected for high-risk transactions
- All documents stored with a clear audit trail
- Review date set for ongoing monitoring
What’s Next?
If you’re building or refining your KYB process, start small and practical. Pull together a standard document checklist for each business structure you commonly onboard. Set a review cadence so documentation doesn’t quietly go stale. And if manual collection is eating into your team’s time, it’s worth trying a platform built specifically for this – Syntrico’s AML Guardian offers a free trial so you can generate your AML/CTF program and run your first automated KYB check in under 20 minutes.
Conclusion
Getting clear on the documents every Australian business should collect for KYB isn’t about ticking regulatory boxes for the sake of it. It’s about genuinely knowing who you’re doing business with – the company, the trust behind it, and the people ultimately pulling the strings.
Start with the fundamentals: an ASIC extract, ABN confirmation, and identification for directors and beneficial owners. Layer in trust deeds, partnership agreements, or shareholder registers depending on the structure in front of you. Keep it current, keep it organised, and you’ll be in a strong position whether it’s a routine client onboarding or an AUSTRAC review.
Compliance doesn’t have to be painful. With the right document checklist and a platform like Syntrico AML Guardian handling the automation behind the scenes, compliance becomes just another part of doing good business.
Ready to simplify your compliance process? Book a demo today or Start your free trial and see how Syntrico AML Guardian can help your team stay compliant with confidence.