AML Mate / Journal
Practical articles and guides for Australian professionals working through AML/CTF obligations.
104 articles Page 4 of 9
Eight days out, every Tranche 2 firm that hasn't enrolled is quietly asking the same question: what happens if I just don't? Here is the honest answer. The theoretical penalties, the realistic enforcement ladder, why enrolment is the cheapest genuine-effort evidence you will ever buy, and what to do if the date has already passed by the time you read this.
Nine days out from the 29 July enrolment deadline, the firms still unenrolled mostly are not refusing. They are picturing a bigger job than it is. Enrolment is one online form, roughly twenty minutes if you sit down with the right details in front of you. Here is exactly what to gather before you open the form, the step-by-step through AUSTRAC Online, the receipt-versus-confirmation trap that catches people who leave it to the last day, and the one other thing due on the same date.
Half the client files in an Australian accounting or legal practice have a discretionary trust in them, and trusts are where Tranche 2 CDD gets genuinely hard. AUSTRAC rated trusts a high national money laundering risk, and the new rules ask for more than the trustee's driver licence. Here is who you actually have to identify on a family trust file, what verifies what, and the discretionary trust wrinkle that trips people up.
With days left to the 29 July AUSTRAC enrolment deadline, the question that stalls the most firms is the first one: am I actually captured? The mistake is answering it by profession. Tranche 2 captures you service by service, not job title by job title. Here is the test that actually decides it, with real examples for accountants, lawyers, real estate and dealers.
An AUSTRAC examination is only painful if you are not ready for it. It asks for a predictable set of documents. If they live in one place and are current, an audit is an afternoon. If they are scattered, or your program was a write-once PDF, it becomes a scramble that can turn into an external audit order you pay for. Here is the list they work from.
With two weeks to the AUSTRAC enrolment deadline, five comfortable beliefs are quietly steering Australian firms into missing it: that it is too late, that a small firm is invisible, that an ID check is enough, that a software vendor covers you, and that you can wait for AUSTRAC to make contact. Here is the reality on each.
AUSTRAC's regulated population jumped roughly five-fold overnight. It cannot audit everyone, so it will triage by risk and by signal. Here is how that triage actually works, why 'a firm my size will never get looked at' is the wrong bet, and the cheapest move that puts you on the right side of it before 29 July.
AUSTRAC's CEO told the non-bank lending sector that suspicious matter reporting is rising, but many businesses still file none. The real message for every Tranche 2 firm: a clean sheet of zero SMRs is no longer read as proof you are low-risk. It is something AUSTRAC now reverse-checks.
Most Tranche 2 coverage stops at AUSTRAC. But the same law that made you a reporting entity also stripped away the Privacy Act small business exemption for your CDD data. From 1 July 2026, a solo accountant or one-agent real estate office is bound by the Australian Privacy Principles regardless of turnover. Here is what actually changed, what you now have to have, and the one scope nuance that keeps it from being as big as it sounds.
The FATF updated its grey list on 19 June 2026, adding Iraq and Bosnia and Herzegovina and removing Algeria and Namibia. Here is the full current list, what a high-risk jurisdiction actually means for your Tranche 2 obligations, and when a country connection pushes a client into enhanced due diligence.
On 3 July 2026 AUSTRAC finalised its enforceable undertaking with Sportsbet, confirming after an independent external audit that the bookmaker had remediated the AML/CTF failings the regulator flagged in 2024. The concerns clustered in three areas: risk assessment, customer monitoring and suspicious matter reporting. Those are the same three areas every Tranche 2 firm is now expected to have working.
Screening a client and getting a hit is the moment most firms dread. But a match is not a verdict. Here is how to tell a false positive from a real one, what a PEP match actually requires, why a sanctions match is different, and when a match becomes a report to AUSTRAC.
