The KYC Check You Did in Your Head
AML/KYC verification and PBC requests get treated as gut-feel and email chains. Here's how to make onboarding a documented, repeatable step in your client accounting workflow.
You've onboarded a new client. You've seen their driver's licence, you know the referral source, and something about the arrangement felt fine. So you got started. Six months later, someone asks whether you actually verified the beneficial owner of the trust — and you realise the answer lives entirely in your memory of a phone call.
This is how AML/KYC and document collection usually work in a growing practice: informally, inconsistently, and impossible to audit. It works right up until it doesn't. With tranche-two AML reforms extending obligations to accountants and other professional services providers in Australia, the days of the mental checklist are ending. The good news is that fixing this isn't about buying a specialist compliance tool — it's about treating verification and PBC collection as a standard, documented step in your client onboarding.
Two jobs that get muddled into one
New-client onboarding actually contains two distinct document exercises, and firms routinely blur them:
- KYC / customer due diligence. Who is this client, really? Identity of individuals, structure of entities, beneficial ownership, and a sensible view of the risk they present. This protects the firm and, increasingly, is a regulatory requirement.
- PBC (prepared-by-client) requests. The working documents you need to actually do the job — prior-year returns, bank statements, asset registers, loan documents, whatever the engagement demands.
They feel similar because both involve chasing paperwork from a new client at the same moment. But they answer different questions and carry different consequences. Missing a PBC item delays the work. Missing a KYC step exposes the firm. When both flow through the same ad-hoc email thread, the important one gets lost behind the urgent one.
Why the mental checklist fails at scale
When you're doing five onboardings a year, you can hold the process in your head. At fifty, you can't — and the cracks show up in predictable ways:
- Verification gets done differently depending on who onboarded the client.
- ID documents live in email inboxes, personal folders, or someone's phone camera roll.
- Nobody can produce, on request, a clean record of what was verified and when.
- PBC lists are rebuilt from scratch each time instead of being reused.
- Work starts before verification finishes, because the two aren't linked.
The last one is the quiet risk. If your client accounting workflow lets a job progress while KYC is incomplete, you've made verification optional in practice, whatever your policy says on paper.
Make onboarding a runway, not a scramble
The fix is structural. Treat every new client as passing through the same defined sequence, with verification and document collection as explicit, trackable stages — not favours people remember to do.
1. Standardise the KYC step
Decide, once, what verification looks like for each client type: sole trader, company, trust, partnership, SMSF. What ID you collect, how you confirm entity structure, how you identify beneficial owners, and how you record your risk assessment. Turn that into a checklist that appears automatically on every onboarding, so no one has to remember it. This is exactly the kind of repeatable structure good account practice management software should carry for you.
2. Build reusable PBC templates
Your PBC list for a company tax client is largely the same every time. Write it once as a template tied to the service, then generate the request for each new client rather than composing it from memory. The client sees a clear list of what you need; you see, at a glance, what's outstanding.
3. Collect through a portal, not email
ID documents and financial records should never sit in an inbox. A client portal gives clients a single, secure place to upload everything, keeps the documents attached to the client record, and shows both sides what's still missing. It also spares your team the half-answered request — the reply that arrives with three of the five items and no note about the rest. The Finye client portal collects KYC documents and PBC items against the client and the specific job, so the record builds itself as material arrives.
4. Gate the work on verification
The onboarding board should make it visible when KYC is incomplete, so work items don't quietly progress past a client who hasn't been verified. When verification and job status live in the same accounting client management software, you stop relying on individuals to hold the line — the system shows you the client isn't cleared to proceed.
5. Keep the audit trail automatically
Every document received, every verification completed, every request sent should be timestamped and stored against the client without anyone doing extra admin. When a regulator, a professional body, or your own quality reviewer asks what you did and when, the answer is a record, not a reconstruction.
Where this pays off beyond compliance
Firms often adopt structured onboarding to satisfy AML obligations and then discover it solves problems they'd stopped noticing. A standardised runway means:
- Faster starts. The job begins the moment documents are complete, not two weeks later when someone finally chases the missing bank statement.
- Consistent quality. Every client gets the same verification regardless of who onboarded them.
- A cleaner handoff. The preparer inherits a complete document set instead of hunting through email threads.
- Less awkwardness. Asking for ID feels less intrusive when it's plainly part of a professional, standardised process every client goes through.
None of this requires a separate compliance platform bolted onto your client accounting tools. The point of good practice management software is that onboarding, verification, document collection and the work itself live together. Your KYC checklist, your PBC templates, your portal and your job board aren't four systems — they're one runway a client travels down, with nothing left to memory.
Start with one client type
You don't have to redesign everything at once. Pick your most common client type — say, company tax clients — and write down the exact KYC steps and PBC list you'd want done every time. Turn it into a reusable onboarding template. The next client through the door proves the process; the one after that proves it scales.
The KYC check you did in your head worked because you're careful. But careful doesn't survive growth, staff turnover, or an auditor's question twelve months later. A documented process does.