Quick Summary of Intermediary Institution
- Meaning: An intermediary institution receives and passes on transfer messages but does not accept the payer’s instruction and does not make the value available to the payee.
- Key point: There can be zero or multiple intermediary institutions in a value transfer chain.
- Why it matters: Intermediaries must monitor for missing information and decide whether to pass on the transfer message or take other risk based actions. AUSTRAC
What Is an Intermediary Institution?
AUSTRAC defines an intermediary institution as a business that receives a transfer message and passes it on to the next business in the value transfer chain, without accepting the payer’s instruction or making the value available to the payee. The role sits between an ordering institution and a beneficiary institution, and it cannot exist outside that chain.
This distinction matters because a lot of businesses move payment information but are not actually intermediary institutions. AUSTRAC specifically says that a business is not an intermediary institution if it only provides the infrastructure used to pass on the message. That means the legal test is about the function the business performs, not just whether it touches the data.
What Is a Transfer Message?
A transfer message is the message that carries the payer’s instructions for the value transfer. It includes details about the payer and payee, and it is passed from one institution to the next in the value transfer chain. The exact information required depends on the circumstances of the transfer.
In practical terms, this means intermediary institutions are not just moving payment traffic. They are part of a regulated information chain, and the quality of the transfer message affects compliance for the whole transaction.
Practical Examples of an Intermediary Institution
A business that receives a transfer message from an ordering institution and passes it to the next institution in the chain is acting as an intermediary institution. That is the core example AUSTRAC uses to explain the role.
A business that only provides the communications infrastructure used to carry the message is not an intermediary institution. AUSTRAC gives SWIFT as the clearest example of infrastructure that sits outside the intermediary role.
Another useful example is a transfer where money moves into Australia from overseas and the intermediary institution passes the transfer message through BECS, BPAY or DEFT. In those cases, the intermediary institution must monitor for the required information, pass on the relevant tracing information and keep a record.
Legal and Regulatory References
AUSTRAC’s travel rule guidance sets out the practical obligations for intermediary institutions, including how to monitor for missing information, how to pass on transfer messages and what records to keep. The guidance says policies, procedures, systems and controls must support these obligations, and that your AML/CTF policies meet the requirement if they require information to be provided within 3 business days after receiving sufficient information from the relevant institution.
The guidance also explains that intermediary institutions must make and keep records of individual transactions, AML/CTF policies and evidence showing they met their travel rule obligations. That record trail is important because it demonstrates both process and decision-making, not just output.
Travel Rule Obligations for Intermediary Institutions
As an intermediary institution, your first task is to take reasonable steps to monitor whether you have received all required information. If the transfer message is missing information and you do not have it, you must either refuse to send the transfer message to the next business or take other risk-based actions described in your AML/CTF policies.
When passing on the message, the information you send depends on the type of transfer and your AML/CTF program. In the general case, AUSTRAC says this can include the payer’s information, the payee’s full name and tracing information received from the previous institution in the chain.
For some domestic transfers using BECS, BPAY or DEFT, the intermediary institution may only need to monitor for tracing information and pass that information on. AUSTRAC’s guidance also notes that the actions required can change depending on the transfer type, so businesses should not treat all value transfers the same way.
Best Practices for Intermediary Institution
Monitoring for missing information should be built into the workflow, not left to manual judgment at the end of the process. A simple checklist of required fields, combined with a clear escalation path when something is missing, can reduce error and show that the business is applying reasonable steps.
Record keeping should prove what was received, what was missing, what was requested and what was passed on. That evidence is especially useful when the institution decides to take a risk-based action rather than pass the message through immediately.
It also helps to document clear decision rules. Your team should know when to pass the transfer message, when to request more information and when to pause because the risk is too high or the information is still incomplete. AUSTRAC’s guidance makes it clear that the policies should describe these choices.
Common Compliance Challenges for Intermediary Institutions
A common mistake is treating intermediary checks as a purely administrative task. AUSTRAC’s guidance shows that intermediary obligations are a genuine control point in the travel rule framework, because they are designed to stop incomplete information from moving through the chain unchecked.
Another challenge is confusing a messaging provider with an intermediary institution. AUSTRAC draws a clear line between the two, and that distinction is important when reviewing your operating model, vendor arrangements and transfer architecture.
Businesses also need to remember that the travel rule applies to international or domestic transfers of value of any amount, and that a transfer of value means a transfer of money, virtual assets or property. It does not include physical currency or other tangible property, and it does not generally apply to securities or derivatives unless they are also virtual assets.
How Tranche 2 Consultants Can Help
At Tranche 2 Consultants, we help businesses navigate complex AUSTRAC AML/CTF requirements including travel rule obligations for intermediary institutions that receive and pass on transfer messages within a value transfer chain.
We provide tailored AML/CTF frameworks, risk-based monitoring processes, policies and training designed to meet AUSTRAC’s expectations for monitoring missing information, decision rules and record keeping. Our practical, scalable compliance support ensures your team stays confident and compliant as regulatory standards evolve.
Concluding Remarks
Intermediary institutions are the link that keeps the value transfer chain moving, but they are also a key compliance checkpoint. Their role is not just to pass messages through the system; it is to monitor for missing information, apply policy-based decisions and keep evidence that the travel rule obligations were met. That is why a strong process around monitoring, passing on information and record keeping is essential.
“Bookmakers sit at a natural convergence point for cash, speed and anonymity. AUSTRAC’s focus reflects the reality that wagering platforms can be misused as value transfer mechanisms if risk controls are not actively applied.”
FAQs on Intermediary Institution Obligations
Can a non-financial institution be an intermediary institution?
Yes. AUSTRAC’s definition is based on the function performed in the value transfer chain, not on whether the business is a bank or another narrow category of financial institution. If the business receives and passes on transfer messages, it may fall within the definition.
Do intermediary institutions have to pass on information within a timeframe?
Yes. AUSTRAC says intermediary institution policies meet the requirement if they require information to be provided within 3 business days after receiving sufficient information from the relevant institution.
What if the transfer message is missing information?
If you detect missing information and do not already have it, you must either refuse to send the message to the next business or take other risk-based actions set out in your AML/CTF policies.
Is an infrastructure provider automatically an intermediary institution?
No. AUSTRAC says a business is not an intermediary institution if it only provides the infrastructure used to pass on the transfer message.
Strengthen Your AML Controls
Avoid regulatory gaps by ensuring your intermediary institution processes meet AML/CTF standards, including due diligence and transaction monitoring.


