The landscape of regulatory compliance in Australia has undergone its most significant transformation in two decades. With the implementation of the AUSTRAC Tranche 2 reforms, approximately 100,000 professional service providers and businesses are now officially brought under the regulatory umbrella of the Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) Act 2006.
If you are a lawyer, accountant, conveyancer, real estate agent, trust and company service provider (TCSP), precious metals/stones dealer, or virtual asset service provider (VASP), these reforms place direct legal obligations on your business. This comprehensive guide outlines everything you need to know to ensure your organisation remains compliant with the new laws.
What Are the Tranche 2 Reforms?
For nearly twenty years, Australia's AML/CTF regime only applied to "Tranche 1" entities—primarily banks, financial institutions, gambling services, and bullion dealers. However, international bodies, particularly the Financial Action Task Force (FATF), repeatedly identified a significant gap in Australia's defences: the vulnerability of "gatekeeper" professions to money laundering and terrorism financing.
The Anti-Money Laundering and Counter-Terrorism Financing Amendment Act was introduced to close these gaps. Following extensive consultation, the legislation officially commenced on 31 March 2026. The reforms bring Australia into alignment with international standards by regulating Designated Non-Financial Businesses and Professions (DNFBPs), collectively referred to in Australia as Tranche 2 entities.
Note: Under the transitional arrangements, all captured businesses were required to complete their official enrolment with AUSTRAC by 29 July 2026. If your business has not yet enrolled, this must be addressed immediately to avoid regulatory action.
Who is Captured by Tranche 2?
The Tranche 2 reforms capture seven key industry sectors. However, the obligations do not apply to every single service provided by these professionals—they only apply when a business provides a "designated service" as defined under the Act:
- Lawyers and Law Firms: Captured when assisting clients with the buying or selling of real estate, managing client money or assets, creating or managing corporate entities and trusts, or buying and selling business entities.
- Conveyancers: Automatically captured for their role in facilitating real estate transactions, representing buyers and sellers in property transfers.
- Accountants and Bookkeepers: Captured when acting as a trustee, forming companies or trusts, managing client bank accounts, or facilitating transactions on behalf of clients. General tax advice or basic bookkeeping is typically exempt unless it crosses into managing transactions.
- Real Estate Professionals: Captured when acting as an agent for the sale or purchase of real estate or businesses, as well as property developers selling their own developments.
- Trust and Company Service Providers (TCSPs): Captured for company formation, registered office services, acting as a director/secretary, or acting as a trustee for a trust.
- Precious Metals and Stones Dealers: Captured when buying or selling gold, silver, platinum, or gems where a transaction involves cash of $10,000 or more.
- Virtual Asset Service Providers (VASPs): Captured for crypto-to-fiat exchanges, crypto-to-crypto exchanges, transfer of virtual assets, and safekeeping or administration of virtual assets.
Key Compliance Obligations
If your business provides any of the designated services listed above, you must implement a comprehensive compliance framework containing the following pillars:
1. AUSTRAC Enrolment
You must enrol as a reporting entity with AUSTRAC. This gives you access to the AUSTRAC Online portal, which is used for submitting mandatory reports and receiving regulatory updates.
2. Developing a Written AML/CTF Program
You must design, implement, and maintain a written AML/CTF Program. This document must be divided into two parts:
- Part A (General): Outlines how your business identifies, mitigates, and manages money laundering and terrorism financing risks. It must include your risk assessment, customer due diligence procedures, ongoing monitoring, and staff training.
- Part B (Customer Identification): Details your specific Customer Due Diligence (CDD) and Know Your Customer (KYC) procedures.
3. Customer Due Diligence (CDD)
You must verify the identity of your clients before providing any designated service. For individuals, this involves verifying their name, date of birth, and residential address. For companies and trusts, you must verify the entity itself and identify the Ultimate Beneficial Owners (UBOs)—any individual who owns or controls 25% or more of the entity.
Warning: You must not commence providing a designated service to a client until their identity has been successfully verified. Providing services prior to completing KYC is a direct breach of the Act.
4. Suspicious Matter Reporting (SMR)
If you suspect that a transaction, client, or enquiry is related to money laundering, tax evasion, terrorism financing, or any other criminal activity, you must submit a Suspicious Matter Report (SMR) to AUSTRAC within 3 days (or within 24 hours if it relates to terrorism financing).
Penalties for Non-Compliance
AUSTRAC holds significant enforcement powers. Under the updated legislation, the civil penalties for failing to comply with your AML/CTF obligations are substantial:
- Up to $33 million per contravention for corporate entities.
- Up to $6.6 million per contravention for individuals and sole traders.
Beyond financial penalties, businesses face severe reputational damage, potential loss of professional licences, and difficulty securing professional indemnity (PI) insurance if they are found to have inadequate compliance systems.
How to Prepare Your Business
To establish a compliant framework, follow these practical steps:
- Conduct a Service Audit: Review all services your business offers to identify exactly which ones qualify as "designated services".
- Appoint a Compliance Officer: Nominate an individual within your business who will be responsible for overseeing the AML/CTF Program and acts as the primary contact for AUSTRAC.
- Implement Compliance Software: Managing KYC, beneficial ownership tracing, and PEP screening manually is highly inefficient and prone to error. Utilising a purpose-built platform like CompliDesk automates these workflows and maintains a secure audit trail.
- Train Your Staff: Ensure all customer-facing staff are trained to recognize red flags and understand your internal reporting procedures.
Ready to simplify your AML compliance?
CompliDesk guides lawyers, accountants, real estate agents, conveyancers, TCSPs, precious metals dealers and VASPs through every AUSTRAC obligation. Sign up free today.
Get Started FreeFrequently Asked Questions
Related reading: How to enrol with AUSTRAC · Preparing your business for Tranche 2 · Choosing AML compliance software · Frequently asked questions