The Tranche 2 enrolment portal has now been live for six weeks. AUSTRAC opened it on 31 March 2026, and from that date around 90,000 professional services entities became eligible — and required — to enrol. (AML Intelligence — enrolment opens for lawyers, accountants and real estate)
The deadlines from here are unforgiving:
- 1 July 2026 — Full AML/CTF obligations commence. Reporting, CDD, transaction monitoring, the lot.
- 29 July 2026 — Final deadline to enrol with AUSTRAC for any entity providing designated services.
Eleven weeks. That's the working window.
Six weeks of enrolment data isn't yet enough for AUSTRAC to publish a public count, but the early picture from advisers across the sector is consistent: enrolment is front-loaded by the largest firms, the long tail of sole practitioners and 2-5 partner firms is largely waiting, and many of those firms still don't realise they personally need to act. (First AML — step-by-step enrolment guide)
This post is for the long tail. Specifically: what enrolment is, what it isn't, and why finishing it in May rather than late July is the difference between a manageable Q3 and a painful one.
Who Has to Enrol
The simple test: if you provide a designated service after 1 July 2026, you must be enrolled. (Tranche 2 explained)
For most readers of this blog that means one of the following:
| Profession | Trigger for enrolment |
|---|---|
| Accountants and tax agents | Forming companies, acting as trustee, managing client money, certain advisory and structuring work (Sector guide) |
| Lawyers and conveyancers | Real estate transactions, trust account operations, company formations, equity transactions (Sector guide) |
| Real estate agents | Buying or selling real estate (residential or commercial) on behalf of a client (Sector guide) |
| Jewellers and dealers in precious metals/stones | Buying or selling at A$10,000+ in a single transaction or linked transactions (Sector guide) |
If you're in any of those buckets, enrolment is not optional and the consultancy you've spoken to is not enrolled for you. The enrolment sits on the reporting entity — your firm.
What Enrolment Actually Requires
Enrolment itself is administrative. The AUSTRAC portal asks for, broadly:
- Business identity — ABN, ACN, trading name, business structure.
- Designated services — which categories of designated service the entity will provide.
- Key personnel — directors, partners, beneficial owners.
- AML/CTF Compliance Officer — name, role, contact details. This person must be inside the firm, not the external consultant. (Why this matters — full breakdown)
- Compliance Officer attestation — confirmation that the named officer accepts the role and obligations.
That's enrolment. Notably, it is not:
- Approval of your AML/CTF program (AUSTRAC does not pre-approve programs — you must have one but you submit it on request, not at enrolment).
- Verification that your CDD process works.
- Confirmation that you can file SMRs and TTRs.
This is why "we've enrolled" is the start of compliance, not the end. (What an AML/CTF program looks like in practice)
The Five-Week Trap
Here is the predictable failure pattern that catches small firms.
Week 1-2 (early-to-mid June): Partner reads a sector newsletter. Realises enrolment is required. Decides to do it themselves.
Week 3 (mid June): Partner discovers they need to nominate a Compliance Officer with attestation. Realises that role is bigger than expected. Quick call to consultant — costs jump, lead time is now 4-6 weeks.
Week 4 (late June): Consultant has work pipeline through to early August. Firm enrols without an operational program in place. Files designated service from 1 July with no functioning CDD process.
Week 5+ (July onwards): First high-risk client onboarding lands. No documented procedure. No transaction monitoring rules calibrated. Partner is now exposed under the new individual penalty regime — up to A$6.26 million per contravention for officers, even where the firm itself is small.
That's the trap. It runs in five weeks. It is currently running, this week, in hundreds of small firms.
The way out is to compress the timeline by acting on enrolment before building the program — not waiting until the program is "ready". You can enrol now, on a Compliance Officer you've nominated, and have until 1 July to mature the program around it.
Why Enrolling Early Is Materially Cheaper
Three concrete reasons.
1. Consultant capacity collapses in July. Every Tranche 2 consultancy in Australia is currently quoting 3-6 week lead times. Those will be 8-10 weeks by mid-June. Firms that enrol and begin program work in May will have completed at June rates what June and July firms will be paying premium for.
2. AUSTRAC outreach is still gentle. AUSTRAC's stated posture is "we don't expect perfection immediately, but we expect to see genuine effort to comply". That tolerance is loudest in May and June. It narrows once obligations are live and the regulator's data feed shows entities providing designated services without enrolment records.
3. Your first SMR or TTR will be easier. Reporting infrastructure — including who at your firm has AUSTRAC Online access, what the workflow is, who reviews before submission — is the kind of thing that takes a week of low-effort decisions and three weeks of fire-drill panic. The first option is available to you now. The second is what awaits a July-enrolled firm with a high-risk transaction in front of it. (SMR walkthrough) (TTR guidance)
A Two-Hour Plan You Can Run Today
For a small firm partner reading this, here is the most efficient sequence:
- Twenty minutes — Confirm you provide a designated service. (Free compliance check takes about two minutes and answers this definitively.)
- Twenty minutes — Decide who in the firm is the AML/CTF Compliance Officer. For most firms with fewer than 10 partners this is the managing partner or principal. (Compliance Officer role)
- Forty minutes — Enrol via AUSTRAC Online. The form is straightforward once you have ABN, key personnel and Compliance Officer details ready.
- Forty minutes — Block out the calendar slots for program drafting, training and CDD rollout between now and 1 July. (What needs to be in the program)
If you've read this far, the first two are decisions you can make in this session. The portal can wait until tomorrow morning. The decisions cannot.
What Happens If You Miss 29 July
This isn't a soft deadline. The penalty exposure for operating a designated service while unenrolled sits with the entity and with the responsible officers personally.
The realistic enforcement scenario is not an immediate civil penalty proceeding — those are reserved for serious or repeated breaches. The realistic scenario is:
- An AUSTRAC notice to produce in late 2026, requesting records to demonstrate compliance from 1 July.
- A finding that enrolment was late or absent.
- An audit notice under s.162(2), with the auditor's scope set by AUSTRAC, the cost paid by the firm, and the auditor's report becoming the foundation for any later action. (Why MHITS matters)
Audit notices in this regime have been arriving roughly every four to six months. There is no reason to expect that cadence will slow once Tranche 2 obligations are live and AUSTRAC has 90,000 new entities to look at.
The One-Sentence Summary
Enrolment is the cheapest part of Tranche 2 compliance, and it gets dramatically more expensive every week you wait — not because the fee changes, but because everything that has to be in place around it gets harder to source.
The portal is open. It costs nothing to enrol. The Compliance Officer attestation is a single signature. Move this week.
Run a free compliance check — two minutes, no signup, confirms whether you need to enrol and what your timeline looks like. Or start a 14-day free trial and have a Compliance Officer-ready program, risk assessment and CDD workflow drafted in the same afternoon.
Sources: AML Intelligence — AUSTRAC opens AML enrolment; First AML — step-by-step AUSTRAC enrolment guide; Bartier — getting ready to enrol with AUSTRAC; BGL — AUSTRAC enrolment guide (22 April 2026); NSW Small Business Commissioner — Tranche 2 overview.