Why we're asking you to verify your identity

If you've had an email from us asking you to confirm your identity, it's genuine — and this page explains what's behind it, what's involved, and how to satisfy yourself that the request really came from us.

Image of Australian Cash (AUD)

The law changed on 1 July 2026

Australia's anti-money laundering and counter-terrorism financing rules were extended to cover accountants, lawyers, conveyancers, real estate agents and a handful of other professions. The reforms are usually called Tranche 2, and they took effect on 1 July 2026.

One of the obligations that comes with them is customer due diligence: before we provide certain services, we have to satisfy ourselves that you are who you say you are. It applies to new clients and existing clients alike — so you may well be asked even though we've acted for you for years. It isn't personal, and it doesn't mean anything is wrong.

The regulator is AUSTRAC, a Commonwealth government agency. They publish their own explanation for members of the public at austrac.gov.au, which is worth a look if you'd like to confirm all this independently of us.

How to tell our request is genuine

  • Genuine:

    The email comes from Francis A Jones, sent through CAS360 — the secure verification service we use. CAS360 is run by BGL, an Australian software company used widely across the profession.

  • Genuine:

    The button in the email goes to cas360.com. Hover over it before you click, and check the address starts with that. If it points anywhere else, don't click it — send it to us instead.

  • Genuine:

    It names your partner or manager at FAJ. A scammer sending in bulk generally can't.

  • Genuine:

    Still unsure? Don't use a phone number from the email — call our office on the number published on this website. We'll confirm it in a moment.

We will never ask you for

  • We will never:

    A payment, transfer or fee of any kind to complete the verification

  • We will never:

    Your internet banking password, PIN or one-time security code

  • We will never:

    Remote access to your computer or phone

  • We will never:

    Your myGov or ATO login details

If anyone contacts you claiming to be from FAJ and asks for any of these, it is not us. Hang up, and call us on 08 9335 5211.

What's involved

About five minutes, on a phone or a computer. There's nothing to download.

  1. 01

    Open the link in your email

    It takes you to the CAS360 verification page. The link is unique to you and lasts 21 days.

  2. 02

    Photograph two forms of ID

    Usually your driver's licence, plus a passport or Medicare card. You take the photos with your phone camera as you go.

  3. 03

    Take a quick selfie

    This is matched against the photo on your ID to confirm the document belongs to you. That's the whole process.

What you'll need

Accepted Identity Documents

DocumentCounts asNotes
Australian passportPrimary photo IDCan be up to two years expired
Driver's licencePrimary photo IDMust be current; front and back
Foreign passportPrimary photo IDMust be current
Medicare cardSecondaryUse with a primary photo ID
Birth certificateSecondaryFull certificate, not an extract

If you don't hold any of these, that's not a dead end — there are alternative ways to verify identity, and AUSTRAC expects us to accommodate them. Give us a call and we'll work through it with you.

Common questions

Because the obligation is new, and it applies to existing clients as well as new ones. Every accounting firm in Australia is working through the same exercise right now. Knowing you well, unfortunately, isn't something we're able to record as verified identity — the law asks for documents.

The images are handled by CAS360 through an encrypted connection and used only to confirm your identity. We keep a record of the verification result, as the legislation requires us to. Your information isn't sold, shared for marketing, or used for anything unrelated to this check.

The AML/CTF rules require identity records to be retained for seven years after we stop acting for you.

Not at all — links lapse after 21 days as a security measure. Call us or reply to any email from your usual FAJ contact and we'll issue a new one.

You're welcome to. Make a time with your usual contact and bring your documents to 154 High Street and we'll verify them in person. The electronic process is faster for most people, but it isn't compulsory.

We'd rather talk it through than leave it there — give us a call. But we should be straight with you: where the law requires verification before we provide a service, we're not permitted to continue acting until it's complete. It isn't a position we've chosen.

For a company, trust or SMSF, we're required to verify the entity itself and also the individuals behind it — directors, trustees, and anyone who ultimately owns or controls it. So several people connected to the same entity may each get their own request. Your manager can walk you through who needs to do what.

Not sure? Ring us.

We'd far rather field a call than have you click something you're uneasy about. Ask for your usual partner or manager — or whoever picks up can confirm whether a request was sent to you.

08 9335 5211

Monday to Friday, 8.30am – 5.00pm.
154 High Street, Fremantle WA 6160.