If you’re operating in New Zealand under AML/CFT obligations, there’s one phrase that tends to make people pause:
“Supervisor review.”
Not because it’s complicated.
But because it signals scrutiny.
And if your documentation, processes, or controls aren’t where they should be, this is where gaps get exposed.
Let’s walk through what an AML supervisor review actually involves and how to stay ahead of it.
Who Are AML Supervisors in New Zealand?
In New Zealand, AML/CFT compliance is overseen by three regulators:
- Department of Internal Affairs (DIA)
- Financial Markets Authority (FMA)
- Reserve Bank of New Zealand (RBNZ)
Each one supervises different types of businesses.
For example:
- DIA → casinos, real estate agents, many reporting entities
- FMA → financial service providers, issuers, brokers
- RBNZ → banks, insurers, large financial institutions
If your business falls under any of these, you’re a reporting entity under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
What Is an AML Supervisor Review?
An AML supervisor review is when your regulator assesses whether your business is actually complying with AML/CFT requirements.
This isn’t just a paperwork check.
They look at whether your systems work in practice, not just on paper.
What Do Supervisors Typically Review?
1. Your AML/CFT Risk Assessment
This should clearly explain:
- Your business model
- Customer types
- Geographic risks
- Products and services
If it’s generic or outdated, it’s a red flag.
2. Your AML/CFT Programme
This is your operational playbook.
Supervisors check whether you have:
- Customer due diligence (CDD) processes
- Ongoing monitoring procedures
- Suspicious activity reporting systems
- Staff training frameworks
And most importantly, whether your team actually follows them.
3. Customer Files and CDD Records
Expect sampling.
They’ll review:
- Identity verification
- Source of funds checks
- Enhanced due diligence (EDD) where required
Inconsistencies here are one of the most common issues.
4. Transaction Monitoring and Reporting
They want to see:
- How you identify unusual activity
- Whether alerts are investigated
- Whether reports are filed correctly and on time
5. Independent Audit Reports
Under the AML regime, businesses must have periodic independent audits.
Supervisors will check:
- Whether audits are done on time
- Whether findings were addressed
- Whether improvements were implemented
How Does the Review Process Work?
Typically, it follows a structured path:
Step 1: Initial Request
You’ll receive a request for documents and information.
Step 2: Offsite Review
The supervisor reviews your submissions.
Step 3: Onsite Visit (if required)
They may visit your premises or conduct interviews.
Step 4: Findings Report
You’ll receive:
- Identified gaps
- Required actions
- Timeframes for remediation
Common Issues Found During Reviews
Here’s where many businesses slip up:
- Copy-paste risk assessments that don’t reflect reality
- Outdated AML programmes
- Weak or inconsistent CDD processes
- Lack of documented decision-making
- Ignoring previous audit recommendations
None of these are rare.
But all of them are avoidable.
What Happens If You Get It Wrong?
Supervisors can take action, including:
- Formal warnings
- Enforceable undertakings
- Civil penalties
- Public enforcement actions
And beyond penalties, there’s reputational risk.
Once trust is damaged, it’s hard to rebuild.
How to Prepare (Without the Panic)
Here’s the practical approach that actually works.
1. Treat Your Risk Assessment as a Living Document
Update it regularly as your business evolves.
2. Align Practice with Policy
Your programme should reflect what your team actually does, not what looks good on paper.
3. Fix Audit Findings Properly
Don’t just acknowledge them.
Resolve them and document how.
4. Keep Clean, Consistent Records
If it’s not documented, it didn’t happen.
Supervisors rely heavily on evidence.
5. Train Your Team
Your frontline staff are your first line of defence.
If they don’t understand AML, your system breaks.
Where Aurora Financials Fits In
At Aurora Financials, we work with reporting entities to prepare for AML supervisor reviews with clarity and structure.
We help you:
- Strengthen your risk assessment
- Align your AML programme with real operations
- Identify and fix compliance gaps early
- Prepare documentation that stands up to scrutiny
The goal is simple:
no surprises when the supervisor reviews your business.
Final Thought
An AML supervisor review isn’t something to fear.
It’s a checkpoint.
But whether it feels routine or stressful depends entirely on how prepared you are.
If your systems are solid, your documentation is clear, and your processes actually work, the review becomes just another step in running a well-governed business.
FAQs
How often do AML supervisor reviews happen in NZ?
There’s no fixed schedule. Reviews are risk-based and can happen at any time.
Are all businesses reviewed?
Not all at once, but all reporting entities are subject to supervision.
Is an independent audit enough to pass a review?
No. Audits help, but supervisors assess your full compliance framework.
Can small businesses be reviewed?
Yes. Size doesn’t exempt you from AML obligations.
Ready for Your Next AML Review?
If you want confidence going into an AML supervisor review, it starts with knowing where you stand today.
Let’s get your systems aligned, your risks covered, and your documentation review-ready.
