The final phase of New Zealand’s anti-money laundering reforms is not simply a bureaucratic milestone. It is a calculated move to protect the country’s reputation as a safe, reliable node in the global financial system.
With a small, open economy and strong ties to global banking, New Zealand cannot afford to slip in its defences against illicit finance. A perception of weakness – especially in the eyes of the Financial Action Task Force (FATF) – could trigger real consequences: heightened oversight, added friction for international transactions, and reputational damage that would ripple through the economy.
It is against this backdrop that the government will enact the third and final wave of reforms under the Anti-Money Laundering and Countering Financing of Terrorism Act on 1 June.
The reforms mark the culmination of a staggered, multi-year effort to modernise the country’s approach to financial crime prevention while aligning more closely with global standards. This final phase introduces two key changes: mandatory customer risk ratings for new customers, and new compliance obligations for online marketplaces. Both are designed to sharpen regulatory tools ahead of New Zealand’s next FATF evaluation and to head off the risk of international scrutiny or grey-listing.
Customer risk assessments now compulsory
For the first time, all reporting entities will be required to risk-rate new customers as part of their standard customer due diligence processes. These ratings must be recorded and reviewed periodically.
While simplified due diligence customers, including government bodies from low-risk jurisdictions, remain exempt, the shift toward mandatory, documented risk assessment marks a structural change in how compliance is expected to operate in practice.
Unlike previous expectations, which allowed greater discretion in the application of risk-based approaches, the new rules establish risk-rating as a non-optional control. Entities must update compliance programmes accordingly, ensure internal systems can track and reassess ratings, and train frontline staff to apply the framework consistently.
Online marketplaces face new scrutiny
The other major change is the inclusion of certain online marketplaces within the scope of the AML/CFT regime. From June, platforms that facilitate more than NZD $10,000 in transactions per customer within a 12-month period will be considered reporting entities, unless specifically exempted.
For affected marketplaces like including peer-to-peer platforms, digital intermediaries, and high-volume trading sites, this means onboarding obligations, transaction monitoring, and potential filing of suspicious activity reports. It represents a broadening of regulatory reach into digital commerce spaces that, until now, have operated with lighter oversight.
The move is also preventive. Globally, regulators are increasingly concerned about the use of online platforms to obscure ownership, disguise transactions, or move illicit funds. By formally regulating these players, New Zealand aims to future-proof its regime while responding to emerging risk typologies.
Strategic shift ahead of FATF review
Phase 3 is not just a technical compliance update. It is a strategic realignment intended to bolster New Zealand’s position ahead of FATF’s next evaluation cycle in 2028–2029.
The risk of grey-listing (as experienced by other jurisdictions with perceived enforcement or supervision gaps) carries reputational and financial consequences. These include increased scrutiny from global banks, higher transaction costs, and constrained access to international markets.
By formalising risk-based obligations and expanding coverage to include high-risk digital actors, the New Zealand government is signalling regulatory maturity. It also positions the regime to support law enforcement and financial intelligence efforts with more structured, risk-calibrated data.
Compliance now, reform later
While the June changes mark the end of the current amendment cycle, they are not the final word on AML/CFT reform.
A broader reform programme is already underway, with plans for structural redesigns, sustainable funding models, and future legislative changes flagged by the government.
Twelve proposed reforms originally drafted in earlier consultations will not proceed under the current regulation but may resurface through targeted amendments to the Act. These include definitional clarifications, extended due diligence obligations, and additional reporting requirements.
For regulators, the challenge will be managing this transition while maintaining focus on implementation quality. For reporting entities, the task is more immediate: systems, procedures, and personnel must be ready by 1 June to comply with the final phase, even as new reforms begin to take shape.
