Obligations commenced on Tuesday. If you spent this week getting your head around what that means day to day, good: that is the right instinct, and we covered the full list in the day-one steps guide. But the next date with real teeth is now 26 days away. By 29 July 2026 you must apply to enrol with AUSTRAC, and notify AUSTRAC of your compliance officer. (AUSTRAC, enrol with us)
The good news: enrolment is the most mechanical obligation in the entire regime. It is a form. It does not assess your program, it does not require perfection, and it takes about 30 minutes if you sit down with the right information in front of you. This post is the sit-down.
What enrolment is, and what it is not
Enrolment is AUSTRAC's intake record: who you are, what designated services you provide, and who your compliance officer is. That is all.
It is not an audit. Nobody reads your AML/CTF program as part of enrolment, and enrolling does not certify you as compliant. It is also not "registration". Registration is a separate, heavier process for remittance providers and virtual asset service providers. If you are an accountant, lawyer, conveyancer, real estate agent or dealer in high-value goods, you almost certainly only need to enrol. (Which one applies to you)
One consequence worth spelling out: because enrolment and your program are independent obligations, you do not wait for one to finish the other. A firm whose program is still rough should enrol anyway. A firm that enrolled in April still needs a program it is actually running. (What running the program looks like)
Gather this before you open the form
The firms that find enrolment painful are almost always the ones who opened AUSTRAC Online first and went looking for information second. Reverse the order. Have these on the desk:
- Business identity. ABN (and ACN if incorporated), legal name, trading name, business structure, registered address.
- Your designated services. Which categories of designated service you provide. If you have built your risk assessment already, this is lifted straight from it. If you are not sure you provide any, the free compliance check answers it in two minutes.
- Key personnel. Directors, partners, beneficial owners: names and details.
- Your compliance officer. Name, role and contact details. This person must be at management level and part of your business. In a sole practice, it is you. (What the compliance officer actually signs up for)
- An AUSTRAC Online account. Free to create, and you will use it again for reporting, so the login is worth keeping safe.
The process itself
- Create your AUSTRAC Online account at online.austrac.gov.au.
- Start the enrolment form and work through business details, designated services and key personnel.
- Name your compliance officer. For Tranche 2 entities, notifying the CO by 29 July is part of the same deadline, so doing it inside the enrolment flow closes two obligations at once.
- Submit. You can save a partially completed form and come back to it, but a saved draft expires after 14 days, which is exactly the trap covered below.
If you begin providing a designated service for the first time after 1 July, your personal deadline is 28 days from that first service, which for everyone already trading means 29 July.
The five mistakes to avoid
Treating 29 July as the start line. It is not. Obligations have been live since 1 July: customer due diligence before designated services, a program in place, records kept. Enrolment is one item on that list, not the trigger for the rest of it.
Confusing enrol with register. Firms have burnt hours preparing for the wrong process. Professional services firms enrol. Registration is for remitters and virtual asset providers.
Naming your external consultant as compliance officer. The CO must sit inside your business. Your adviser can help you build and run the program, but the named officer, and the accountability, stays with the firm.
Waiting until the program is perfect. Some firms are holding off enrolment "until everything is ready". The two obligations are independent, and only one of them is a 30-minute form. Do the form.
Letting the 14-day draft window lapse. Half-finished enrolments expire. If you start the form on the 22nd of July with details missing, you can lose the draft and the deadline together. Gather first, then start, then finish in one or two sittings.
The calendar from here
- Today. Gather the five items above. It is one email to your bookkeeper or practice manager.
- This week or next. Create the AUSTRAC Online account and complete enrolment, including the CO notification.
- The rest of July. Back to the real work: running CDD on new matters, keeping the evidence trail, and making the program you wrote match the practice you run.
Where AML Mate fits
AML Mate includes a step-by-step AUSTRAC enrolment guide that mirrors the form, pulls the answers from the details you have already entered, and lets you copy each one straight across, so the 30-minute version is the version you actually experience. Around it sits everything else July asks of you: a risk-based AML/CTF program generated in about 15 minutes, client onboarding with CDD, dated PEP and sanctions screening, training records and seven-year record keeping. Not sure enrolment applies to you at all? The free compliance check tells you in two minutes, no login. Then start a 14-day free trial and have the enrolment done well before the deadline gets interesting.
