For New to AML/CTF Compliance

What is AUSTRAC Tranche 2? AML/CTF obligations for Australian businesses — plain English guide

Millions of Australian businesses are learning about AML/CTF obligations for the first time. If you are an accountant, conveyancer, real estate agent, or lawyer who has never heard of AUSTRAC, this is where to start.

Compliance Challenges for New to AML/CTF Compliance

Just discovered your business may need AML/CTF compliance? This guide explains AUSTRAC Tranche 2, what a reporting entity is, and exactly what you need to have in place by 1 July 2026.

The acronyms are daunting before anything else

AML/CTF, AUSTRAC, SMR, TTR, CDD, EDD, ECDD, PEP — the compliance world runs on abbreviations. Before you can assess your obligations, you need to understand the language. Most small-business owners have never encountered this framework before.

Which guidance applies to your specific business?

AUSTRAC publishes hundreds of pages of guidance, typology reports, and regulatory bulletins. Without a compliance background, identifying which parts are legally binding for your specific services — versus general guidance — is a genuine research challenge.

The starting point is not obvious

The compliance project has a clear deadline — 1 July 2026 — but no obvious starting point for a business owner who has not done this before. Enrolment, risk assessment, program drafting, staff training: the sequence matters and the dependencies are not explained on AUSTRAC's website.

Cost uncertainty creates paralysis

Searching online suggests compliance programs cost $5,000–$25,000+ with consultants. For a small business that did not budget for this, that price tag can lead to procrastination — which compounds the risk as the deadline approaches.

What New to AML/CTF Compliance Need for Compliance

The AML/CTF Act 2006 (Cth) and the AML/CTF Rules require all reporting entities to maintain these documents and procedures.

Determine whether your services are 'designated services' under s 6 of the AML/CTF Act
Enrol with AUSTRAC before commencing a designated service (or by the commencement date for Tranche 2)
Complete an ML/TF Risk Assessment scoped to your services and customer base
Build an AML/CTF Program (Part A and Part B) adopted by the board or principals — s 81
Establish Customer Due Diligence (CDD) procedures for client onboarding
Set up Suspicious Matter Reporting (SMR) procedures — s 41
Create a staff training program — required even for sole practitioners
Appoint a compliance officer and document the role with a reporting line to senior management

Deadline & Applicability

Businesses providing designated services under AUSTRAC Tranche 2 must be fully compliant by 1 July 2026 under the AML/CTF Amendment Act 2024. Affected industries include accountants, real estate agents, lawyers, conveyancers, jewellers, and trust and company service providers. If you are unsure whether you are captured, the most reliable check is reviewing your service list against Table 1 and Table 2 of s 6 of the AML/CTF Act.

Last reviewed: · Information is general guidance, not legal advice.

How AutoAML Helps New to AML/CTF Compliance

AI-Generated Documents

Our 25-question onboarding quiz determines your obligations, risk profile, and designated services. Our AI then generates all 13 required compliance documents in plain English — no legal jargon.

Team & Audit Trail

Even as a sole practitioner you need documented training. AutoAML generates training materials you can actually understand and tracks your completion, producing the evidence AUSTRAC expects.

Ongoing Compliance

Free until 1 July 2026. Start with the compliance readiness quiz, understand your obligations, and upgrade when you are ready to generate your full compliance program.

Frequently Asked Questions

New to AML/CTF Compliance & AUSTRAC: common questions

What is AUSTRAC Tranche 2 and does it affect my business?
Tranche 2 refers to the AML/CTF Amendment Act 2024 (Cth), which extends Australia's Anti-Money Laundering and Counter-Terrorism Financing regime to professional service providers for the first time. It affects accountants, real estate agents, lawyers, conveyancers, trust and company service providers, and others providing designated services from 1 July 2026. The first tranche — which covered banks, financial institutions, casinos, and digital currency exchanges — has been in place since 2006.
What is a 'reporting entity'?
A reporting entity is any business or individual that provides one or more designated services listed in Table 1 or Table 2 of s 6 of the AML/CTF Act 2006 (Cth). Being a reporting entity means you must: enrol with AUSTRAC, build an AML/CTF program under s 81, conduct Customer Due Diligence on your clients, submit Suspicious Matter Reports (SMRs) when you suspect money laundering or terrorism financing, submit Threshold Transaction Reports (TTRs) for applicable cash transactions, and keep records for seven years.
What is an AML/CTF program and why do I need one?
An AML/CTF program is the documented compliance framework required under s 81 of the AML/CTF Act 2006 (Cth). It has two parts: Part A covers your internal risk-management systems (compliance officer, training program, employee due diligence, independent review, board oversight), and Part B covers customer-facing procedures (Customer Due Diligence, enhanced due diligence for high-risk customers, ongoing monitoring). The program must be adopted by the board or principals and kept current as your business changes.
What does AML/CTF compliance involve day-to-day after July 2026?
After commencement, day-to-day obligations include: verifying client identities before providing a designated service (CDD); screening new and existing clients against PEP and sanctions lists; monitoring ongoing transactions for suspicious activity; lodging SMRs within statutory timeframes when suspicion arises; lodging TTRs for applicable cash transactions; maintaining 7-year records; delivering staff training and refreshers; and reviewing and updating your AML/CTF program when your business changes.
How long does setting up AML/CTF compliance take?
With a compliance consultant, initial program development typically takes 6–12 weeks and $5,000–$25,000 in fees. With AutoAML, a draft of all 13 required documents tailored to your business is generated in under 10 minutes from the onboarding questionnaire. You should then allow time for the principals to review, adopt, and sign off on the program — and organise staff training before 1 July 2026.
Is there a penalty for not knowing about these obligations?
Ignorance of the law is not a defence under the AML/CTF Act. AUSTRAC can take enforcement action regardless of intent — contraventions are strict-liability in many cases. Civil penalties under Part 15A can reach $22.2 million per contravention for body corporates. AUSTRAC has stated it will take a proportionate approach to early Tranche 2 enforcement, but 'I didn't know' is not a mitigating factor that eliminates liability.

Find out exactly what you need in 5 minutes

Built for Australian businesses navigating AUSTRAC Tranche 2. Free until 1 July 2026.

Free until the 1 July 2026 AUSTRAC deadline. Cancel anytime.