VOI vs KYC vs CDD: What's the Difference for Tranche 2?

Q: Does VOI satisfy my CDD obligations under Tranche 2?

No. VOI confirms identity but CDD under Tranche 2 is much broader. CDD includes identity verification plus risk assessment, beneficial ownership identification, sanctions and PEP screening, source of funds assessment, and ongoing monitoring. VOI is one input into CDD, but it is not sufficient on its own.

Q: Do I still need to do VOI if I'm doing CDD?

Yes, if VOI is required under your state property laws. CDD under the federal AML/CTF Act does not replace state-based VOI requirements. You need to satisfy both. The good news is that VOI data can be used as part of your CDD identity verification step.

Q: What does CDD require that VOI doesn't?

CDD adds: risk assessment for every customer, beneficial ownership identification for companies and trusts, screening against the DFAT Consolidated List and PEP databases, source of funds assessment, ongoing monitoring of the business relationship, and 7-year record keeping. VOI only covers the identity confirmation step.

Q: I'm a conveyancer who already does VOI — how much extra work is CDD?

You have a head start because your existing VOI process covers the identity verification component. You'll need to add: a risk assessment framework, sanctions and PEP screening at onboarding, beneficial ownership checks for companies and trusts, source of funds assessment for higher-risk clients, ongoing monitoring procedures, 7-year record keeping, staff training on AML obligations, and suspicious matter reporting procedures.

Q: Is KYC the same as CDD?

They're closely related but not identical. KYC (Know Your Customer) is a broader industry term for understanding who your customer is. CDD (Customer Due Diligence) is the specific legal term used in the Australian AML/CTF Act. In practice, when AUSTRAC talks about your obligations, they use CDD. Think of KYC as the concept and CDD as the legal requirement.

Key Takeaways

VOI (Verification of Identity) is a state-based requirement that only confirms identity. It is not an AML obligation.
KYC (Know Your Customer) is a broader industry concept covering identity + risk + source of funds.
CDD (Customer Due Diligence) is the specific legal term used by AUSTRAC under Tranche 2. It includes identity verification, risk assessment, beneficial ownership, sanctions screening, and ongoing monitoring.
VOI does not satisfy CDD. It's necessary but not sufficient.
Conveyancers who already do VOI have a head start — but need to add risk assessment, screening, source of funds, and monitoring.

In this guide

The acronym confusion What is VOI? What is KYC? What is CDD? How they compare Does VOI satisfy CDD? What changes for conveyancers who already do VOI? Frequently asked questions

The Acronym Confusion

Property professionals in Australia are drowning in acronyms right now. VOI, KYC, CDD, EDD, AML, CTF — and they all seem to mean roughly the same thing. They don't.

Understanding the differences matters because Tranche 2 introduces specific legal obligations that go well beyond what most property professionals currently do. If you assume your existing VOI process covers you, you'll have compliance gaps on 1 July 2026.

What Is VOI (Verification of Identity)?

VOI at a glance

What it is: A process to confirm a person is who they claim to be
Required by: State property laws (e.g., Real Property Act in various states)
Who does it: Primarily conveyancers, settlement agents, and lawyers
What it involves: Checking 1-2 forms of government-issued ID, often face-to-face or via video
Purpose: Prevent identity fraud in property transfers — ensure the person selling actually owns the property
AML obligation? No. VOI is about identity fraud prevention, not anti-money laundering

VOI answers one question: "Is this person who they say they are?" It does not ask where their money comes from, whether they're on a sanctions list, or whether the transaction structure is suspicious.

What Is KYC (Know Your Customer)?

KYC at a glance

What it is: A broader concept encompassing identity verification plus understanding the customer's risk profile
Required by: Industry practice and regulatory expectation (not a specific Australian legal term)
Who does it: Banks, financial institutions, and increasingly property professionals
What it involves: Identity verification, risk assessment, source of funds/wealth assessment, understanding the business relationship
Purpose: Understand who you're dealing with and assess the risk they present
AML obligation? KYC is the concept; CDD is the legal requirement in Australia

KYC is the umbrella term used globally. When someone says "KYC" in Australia, they usually mean the combination of identity checks and risk assessment that financial institutions have done for years. Under Tranche 2, the legal term is CDD.

What Is CDD (Customer Due Diligence)?

CDD at a glance

What it is: The specific legal obligation under the AML/CTF Act for reporting entities
Required by: Federal law — the AML/CTF Act 2006 (as amended by Tranche 2)
Who must do it: All Tranche 2 reporting entities (real estate agents, conveyancers, developers)
What it involves: Identifying the customer, verifying their identity, identifying beneficial owners, assessing risk level (standard, simplified, or enhanced), sanctions and PEP screening, ongoing monitoring
Purpose: Prevent money laundering and terrorism financing by knowing who your customers are, where their money comes from, and monitoring the relationship over time
AML obligation? Yes. This is the core AML obligation under Tranche 2

CDD answers multiple questions: Who is this person? Who really owns/controls this entity? Where does the money come from? Are they on any sanctions or PEP lists? Does anything about this transaction look suspicious? And it requires you to keep asking these questions throughout the business relationship — not just at the start.

How They Compare

	VOI	KYC	CDD
Purpose	Confirm identity	Understand customer	Legal AML obligation
Required by	State property laws	Industry practice	AML/CTF Act (federal)
Scope	Identity only	Identity + risk	Identity + risk + monitoring
Who must do it	Conveyancers, lawyers	All regulated entities	Tranche 2 reporting entities
Beneficial ownership	No	Sometimes	Yes — required
Sanctions screening	No	Sometimes	Yes — DFAT + PEP
Source of funds	No	Sometimes	Yes — risk-based
Ongoing monitoring	No — one-time	Varies	Yes — ongoing
Record keeping	Varies by state	Varies	7 years mandatory
Reporting obligations	None	None	SMR, TTR to AUSTRAC

Does VOI Satisfy CDD?

No. VOI is necessary but not sufficient for CDD compliance.

Think of it this way: VOI confirms that the person standing in front of you is John Smith. CDD confirms that John Smith is not on a sanctions list, that the trust he's buying through has a legitimate structure, that the $2 million purchase price is consistent with his known financial profile, and that nothing about the transaction is suspicious.

However, your existing VOI data can be used as part of your CDD process. The identity documents you collect for VOI satisfy the "identity verification" component of CDD. You just need to add everything else on top.

What Changes for Conveyancers Who Already Do VOI?

If you're a conveyancer or settlement agent, you're ahead of the game. Your existing VOI process covers the identity verification component of CDD. But under Tranche 2, you need to add:

Risk assessment framework — assess each customer's ML/TF risk at onboarding (standard, simplified, or enhanced CDD)
Sanctions and PEP screening — screen every customer against the DFAT Consolidated List and PEP databases
Beneficial ownership checks — for companies and trusts, identify who really controls the entity (not just the signatory)
Source of funds assessment — for higher-risk customers, understand where the purchase funds originate
Ongoing monitoring — periodically review the customer relationship and reschedule screening
7-year record keeping — maintain all CDD records, screening results, and compliance documents in an audit-ready format
Suspicious matter reporting — file SMRs with AUSTRAC when suspicion is formed
Staff training — train your team on AML/CTF obligations, red flags, and tipping-off rules
Written AML/CTF program — a documented, risk-based compliance program approved by your principal

The identity verification step is handled. Everything else is new. See our full AML guide for conveyancers for details.

Already doing VOI? Upgrade to full CDD

AMLTranche adds sanctions screening, risk assessment, beneficial ownership, and 7-year record keeping on top of your existing identity checks.

Start Free → Book a Demo →

Frequently Asked Questions

Does VOI satisfy my CDD obligations under Tranche 2?

No. VOI confirms identity, but CDD is much broader — it includes risk assessment, beneficial ownership, sanctions screening, source of funds, and ongoing monitoring. VOI is one input into CDD, not a substitute.

Do I still need to do VOI if I'm doing CDD?

Yes, if required by your state property laws. CDD under the federal AML/CTF Act does not replace state-based VOI requirements. You need to satisfy both. The VOI data can be used as part of your CDD process.

What does CDD require that VOI doesn't?

Risk assessment, beneficial ownership identification, DFAT sanctions and PEP screening, source of funds assessment, ongoing monitoring, 7-year record keeping, and suspicious matter reporting to AUSTRAC.

I'm a conveyancer who already does VOI — how much extra work is CDD?

You have a head start on identity verification. You'll need to add risk assessment, screening, beneficial ownership checks, source of funds assessment, ongoing monitoring, 7-year records, staff training, and an AML/CTF program. With software, this can be set up in under an hour.

Is KYC the same as CDD?

They're closely related. KYC is the broader industry concept. CDD is the specific legal term under the Australian AML/CTF Act. When AUSTRAC talks about your obligations, they use CDD. Think of KYC as the concept and CDD as the legal requirement.

Disclaimer: This article provides general information about VOI, KYC, and CDD and does not constitute legal advice. You should confirm your specific obligations with AUSTRAC or a qualified legal adviser. AMLTranche helps streamline your compliance workflows alongside your professional advisers.