Eight days from now, on 29 July 2026, two administrative clocks run out at once: the deadline to enrol with AUSTRAC, and the deadline to notify AUSTRAC of your AML/CTF compliance officer. If you have already done both, close this tab, you're fine.
If you haven't, you are probably somewhere between "I'll do it this week" and a quieter question you wouldn't ask out loud: what actually happens if I just... don't?
Fair question. Here is the honest answer, without the sirens.
Where the date comes from
The 29 July deadline is not a campaign slogan, it is arithmetic. Under the amended Act, a business must enrol with AUSTRAC no later than 28 days after the day it starts providing a designated service. Tranche 2 obligations switched on for accountants, lawyers, conveyancers, real estate professionals and dealers in precious metals and stones on 1 July 2026. If you were providing designated services on that day, your 28 days end on 29 July. (AUSTRAC, enrol with AUSTRAC (reform))
Two things follow from that. First, if your firm genuinely provides no designated service (plenty of tax-compliance-only practices do not, check the designated service test), no enrolment is due, and none of this applies to you. Second, if you started providing designated services later than 1 July, your own 28-day clock runs from that later date. The 29th is the deadline for the day-one cohort, which is most established firms.
One clarification worth having: for Tranche 2 professions, enrolment is not a licence. Unlike remitters and virtual asset providers, who must be registered before they may operate, an accounting or legal practice that misses enrolment is not suddenly banned from serving clients. The breach is the failure to enrol on time, and it keeps being a breach until you fix it. That is bad news dressed as good news: nothing dramatic happens on the 30th, which is exactly why some firms will drift.
The theoretical ceiling
Failing to enrol on time is a contravention of the Act, and the Act's enforcement toolkit is genuinely heavy at the top end. AUSTRAC can seek civil penalty orders in the Federal Court, and the ceilings run to 20,000 penalty units for an individual and 100,000 for a body corporate, per contravention. From 1 July 2026 a penalty unit is $364, so the theoretical maximum for a company is $36.4 million. (AUSTRAC, consequences of not complying)
Nobody sensible believes AUSTRAC will open August by dragging a three-partner suburban firm to the Federal Court over a late form. Those numbers exist for the Westpacs and Crowns. Quoting them as your likely fine would be scare-mongering, and we won't.
The realistic ladder
What the toolkit actually looks like for a small firm sits well below the courtroom:
- Remedial directions. A formal written direction to do the thing you should have done. Ignoring one escalates quickly.
- Infringement notices. Fixed fines, no court required.
- A written notice requiring an external audit. AUSTRAC can order you to appoint an external auditor at your own cost to review your compliance. For a small practice this is the punishment that hurts: weeks of disruption and a bill that makes the $49 software you were putting off look like a rounding error. It has used this power on clubs and remitters already.
- Enforceable undertakings. A public, binding commitment to fix your compliance. Public is the operative word: they are published, and your professional body and clients can read them.
And beneath all of that sits the quietest consequence: you would be starting your relationship with a new regulator as a name on the wrong list. AUSTRAC has been handed roughly 90,000 new entities and has said, repeatedly, that it will meet genuine effort with patience. (AUSTRAC, about the reforms) Enrolment is how it finds out you exist. The firms that never show up are not exercising a low-risk strategy, they are self-selecting into the group the regulator looks at first, with no goodwill in the bank when it does.
The genuine-effort math
We wrote before 1 July about what AUSTRAC's "genuine effort" posture really covers: it protects firms that are demonstrably moving, not firms that haven't started. That analysis has a sharp edge here.
A half-finished program, thin training records, a risk assessment you want another pass at: all of that fits inside genuine effort, because those things legitimately take time to mature. Enrolment does not. It is a web form. AUSTRAC's own guidance describes gathering your ABN, business details, key personnel and designated services, and submitting through AUSTRAC Online, and our step-by-step walkthrough times the whole exercise at about 20 minutes.
That makes enrolment the cheapest genuine-effort evidence you will ever buy, and missing it the loudest possible signal of the opposite. No regulator will accept "we ran out of time" for a 20-minute form with a four-month window and a fixed, well-publicised date. Every argument you might later need ("we were working on our program in good faith") gets harder to make when the first checkbox is empty.
While you are in there: the same sitting should cover your compliance officer notification, which shares the 29 July deadline. Same portal, same login, five extra minutes.
If the date has already passed
Maybe you are reading this on 3 August with a small knot in your stomach. The answer does not change, it just gets more urgent: enrol now, late. A breach that ran for five days and ended voluntarily is a different conversation with a regulator than one that is still running when they find it. Late enrolment starts the clock on your side of the story; absence leaves the story entirely to them.
Practically: do the enrolment and CO notification today, keep a note of why it was late and what you did the moment you realised, and get the rest of your program evidence in order so the late form is the only blemish, not the tip of an iceberg.
The 20-minute close
Eight days is not a countdown that calls for panic. It calls for a calendar entry this week:
- Work through the enrolment walkthrough: gather details, submit via AUSTRAC Online.
- Notify your compliance officer details in the same sitting.
- If your program behind the enrolment is the part that's thin, that is the genuine-effort work for the weeks after, on the record, as you go.
Not sure you even need to enrol? The free compliance check takes two minutes and tells you whether your services are designated, no signup. If they are, AML Mate generates the program that should sit behind your enrolment: risk assessment, CDD with screening, compliance officer appointment, all audit-ready. Start a 14-day free trial, cancel anytime.
This is general information drawn from AUSTRAC's published guidance as at July 2026, not legal advice. Enforcement decisions are AUSTRAC's alone; confirm your position with a qualified adviser.