AML/CTF Compliance for Lawyers: What Legal Practitioners Must Know Before July 2026

Lawyers have always been trusted gatekeepers of the financial system. From 1 July 2026, that trust comes with formal AML/CTF obligations. If you're a solicitor, barrister, or legal practitioner providing designated services in Australia, you are now a reporting entity under AUSTRAC's Tranche 2 reforms.

This guide covers everything you need to know — including the unique complexities around legal professional privilege that make legal compliance different from every other sector.

Why Lawyers Are Now Regulated

Australia's legal sector has been a gap in AML/CTF coverage for over a decade. While banks, remittance dealers, and casinos have been regulated since 2006, lawyers were exempt — despite handling some of the highest-risk activities for money laundering:

• Trust accounts move billions of dollars annually with limited external oversight
• Company and trust formation can create opaque structures to hide beneficial ownership
• Property transactions involve large sums and complex ownership arrangements
• Professional legitimacy — a lawyer's involvement gives transactions an appearance of propriety

The FATF has repeatedly flagged Australia's lack of coverage for legal professionals. Tranche 2 brings Australia in line with the UK, EU, Canada, and New Zealand — all of which already regulate lawyers under AML/CTF law.

Which Services Trigger Your Obligations?

Not all legal work is covered. Your AML/CTF obligations are triggered only when you provide designated services:

What's Not Covered?

General legal advice, litigation, dispute resolution, family law (excluding property settlements involving designated services), criminal defence, and employment law are generally not designated services.

However, if any of those matters involve trust account transactions, company/trust formation, or property transfers, those specific activities within the matter are caught.

Key point: It's the nature of the service, not the area of law. A family lawyer who handles a property settlement through their trust account is providing a designated service for that part of the engagement.

Legal Professional Privilege and Reporting

Legal professional privilege (LPP) is narrower than client confidentiality. It is preserved by the AML/CTF Act, but it is not a general exemption from AML/CTF obligations. Assess the particular information and the legal basis for the claim rather than assuming that all records of a particular kind are privileged or unprivileged.

When Privilege Affects an SMR

• If all the information that would support the SMR obligation is privileged, no SMR or LPP form is required.
• If only some information is privileged, report the non-privileged information and submit the LPP form where required. For SMRs, the privilege must belong to another person.
• The qualified non-terrorism reporting period is 5 business days after the day the suspicion forms. This does not extend the terrorism financing deadline of 24 hours.

Other Records and Obligations

Privilege can also affect information in a TTR or a response to an AUSTRAC notice. The LPP form and its timing depend on the reporting or notice obligation. Privilege does not remove the need to assess your other obligations, including customer due diligence and ongoing monitoring.

Obtain independent legal advice if you are unsure whether information is privileged or a report is required. See AUSTRAC's legal professional privilege guidance (opens in a new tab), checked 14 October 2026, and our explanation of the LPP form.

Identify Your Customer in a Property Transaction

Acting for one side of a property transaction does not automatically make the other party your customer. Identify the customer under the designated service definition and complete the required CDD for that customer and relevant associated persons.

Your risk assessment may still require you to examine counterparties or the broader transaction. That is different from a blanket rule that every lawyer must treat both sides as customers. See AUSTRAC's professional designated services (opens in a new tab) and initial CDD requirements (opens in a new tab), checked 14 October 2026. The legal profession guide brings these service, customer and reporting distinctions together.

Key Deadlines

Your 7-Step Compliance Roadmap

Step 1: Audit Your Service Lines

Go through your practice areas and identify which ones involve designated services. Common triggers for law firms:

• Property/conveyancing team — almost certainly caught
• Corporate/commercial team — company and trust formation, M&A with trust account use
• Wills and estates team — trust establishment, trust account management
• Family law team — property settlements through trust accounts
• General practice — any matter that touches trust accounts or entity formation

Step 2: Enrol with AUSTRAC

Register at AUSTRAC Online (opens in a new tab) with your ABN, firm details, and designated services. Free, takes 20-30 minutes.

Step 3: Appoint a Compliance Officer

For sole practitioners, this is you. For firms, it should be a partner or senior associate with sufficient authority to implement the program and allocate resources.

The compliance officer doesn't need to be a specialist — but they need to understand the program and have management support.

Step 4: Conduct Your Risk Assessment

Assess ML/TF risks across four categories:

Customer risk:

• International clients or clients with connections to high-risk jurisdictions
• Complex corporate or trust structures
• Clients with no clear connection to Australia
• High-net-worth individuals with opaque sources of wealth

Service risk:

• Trust account exposure (volume and frequency)
• Company/trust formation volume
• Property transaction values
• International elements in transactions

Geographic risk:

• Client connections to FATF high-risk jurisdictions
• Cross-border transactions
• Foreign-owned entities

Delivery channel risk:

• Non-face-to-face client engagements
• Referrals from intermediaries in high-risk jurisdictions
• Instructions from third parties rather than the client directly

Step 5: Build Your AML/CTF Program (Parts A-F)

AUSTRAC's Legal Profession Starter Kit is designed for firms with 15 or fewer staff. Larger firms will need to expand significantly.

Step 6: Implement Trust Account Monitoring

Your trust account is your highest-risk area. Monitor for:

• Funds received with no clear connection to the legal matter
• Funds disbursed to third parties not involved in the matter
• Round-dollar amounts or amounts just below $10,000
• Multiple transactions for the same client in a short period
• Funds passing through trust and being returned to the client without a transaction completing
• Unexplained delays — money sitting in trust with no progress on the matter

Step 7: Train Your Staff

All staff who provide designated services or handle trust account transactions must be trained. Tailor the training to your practice:

• Fee earners: Red flags, CDD procedures, SMR triggers, LPP considerations
• Trust account staff: Transaction monitoring, threshold reporting, structuring awareness
• Support staff: Basic awareness, escalation procedures
• Partners/management: Governance obligations, program oversight

Red Flags for Legal Practitioners

Client Behaviour

• Client is reluctant to provide ID or provides inconsistent identity documents
• Client instructs you through an intermediary who is evasive about the client's identity
• Client has no clear connection to the jurisdiction where the transaction takes place
• Client wants to use your trust account as a bank — depositing and withdrawing funds unrelated to legal services
• Client is unconcerned about costs or the commercial merits of a transaction
• Client changes the ownership structure of a transaction at the last minute

Trust Account Red Flags

• Deposits from unknown third parties
• Requests to pay settlement proceeds to a different entity than expected
• Funds received before you've been formally engaged
• Client asks you to hold funds for an extended period with no clear purpose
• Multiple small deposits that aggregate to a large sum
• Instructions to transfer funds internationally with no connection to the matter

Transaction Red Flags

• Property purchased significantly above or below market value
• Back-to-back transactions — property bought and immediately resold
• Complex structures used for straightforward transactions
• Client insists on cash settlement or cash payments to your trust account
• Transaction involves entities in secrecy jurisdictions

Penalties

AUSTRAC's enforcement powers apply equally to legal practitioners:

• Civil penalties: Up to $36.4 million per contravention for firms (100,000 penalty units) or $7.28 million for individuals (20,000 penalty units)
• Criminal penalties: For serious offences including tipping off and false reporting
• Professional consequences: State law societies may take disciplinary action for AML/CTF failures, separate from AUSTRAC enforcement

The Law Society Angle

State law societies and the Law Council of Australia have been engaging with AUSTRAC on implementation. Key points:

• Law societies acknowledge the obligations and are not challenging the reforms
• Most are developing guidance materials and CPD programs for members
• Trust account audit requirements may be expanded to incorporate AML/CTF checks
• Professional indemnity insurers are starting to ask about AML/CTF compliance in renewal applications

This is not going away. The profession has accepted the reforms — the question is whether individual practitioners are prepared.

How AML Mate Helps Legal Practitioners

AML Mate is designed for Tranche 2 professionals, with features specifically relevant to lawyers:

• Legal-specific AML/CTF Program — Parts A-F built from AUSTRAC's legal profession starter kit, with LPP considerations baked in
• Risk assessment — identifies your ML/TF risk profile based on your services, client types, and trust account exposure
• Client CDD records: organise identification and checks for the customers you provide designated services to
• Sanctions screening and PEP checks — automated DFAT and PEP screening on every client
• SMR and TTR forms — complete and export for AUSTRAC submission
• Staff training — 5 modules with quizzes and certificates, covering legal-specific scenarios
• Audit-ready export — complete compliance pack for regulatory examinations or law society audits

Start your free compliance check →

This guide is for general information only and does not constitute legal advice. For specific guidance on your obligations, refer to AUSTRAC's website (opens in a new tab), your state law society, or a qualified AML/CTF professional.