In late 2025, a joint AFP and NSW Police Force operation dismantled a Sydney money laundering syndicate accused of washing more than $150 million of criminal proceeds tied to the illicit tobacco trade. Fourteen search warrants across western Sydney. Ten tonnes of illegal tobacco. A money counting machine and over $200,000 cash seized. Bank accounts frozen with help from AUSTRAC's Fintel Alliance.
But the most interesting detail isn't the cash — it's how the money moved.
The syndicate allegedly relied on a tactic every Tranche 2 gatekeeper needs to know about: straw directors.
What Is a Straw Director?
A straw director is a person who appears on a company's ASIC register as a director — but who is a director in name only. They don't run the business. They often don't know what the business does. The actual control sits with someone else, usually for the express purpose of distancing the real beneficial owner from the activity in the company's bank accounts.
In the Sydney case, police allege the syndicate recruited people to register fake businesses and open bank accounts, then took over those accounts to receive criminal proceeds. One alleged high-ranking member is accused of managing multiple straw directors and laundering about $23 million through the structure he controlled. He was charged with three counts of dealing with proceeds of crime worth $1,000,000 or more (s400.3(2B) of the Criminal Code). A second man, 29, from Merrylands, was charged on 14 November 2025 with laundering more than $7.8 million.
This isn't a niche tactic. AUSTRAC's typology reports have flagged shell companies and nominee directors as one of the most common money laundering structures used in Australia.
Why This Case Matters for Tranche 2
From 1 July 2026, Australia's AML/CTF regime expands to cover Tranche 2 reporting entities — accountants, tax agents, lawyers, conveyancers, real estate agents, and dealers in precious metals and stones. (What is Tranche 2?)
Look at where a syndicate like this intersects with the real economy:
| Stage of the laundering structure | Tranche 2 entity that touches it |
|---|---|
| Register a Pty Ltd company, get an ABN | Accountant / tax agent |
| Draft a trust deed or shareholder agreement | Lawyer |
| Open a business bank account (KYC referrals) | Accountant signing as referee |
| Convert cash into property | Real estate agent, conveyancer |
| Convert cash into high-value assets | Jeweller / precious metals dealer |
Every one of those touchpoints is a designated service under the reformed Act. From 1 July, you are legally required to perform customer due diligence (CDD) — including identifying the ultimate beneficial owner (UBO) — before providing the service.
In other words: if a syndicate like this walks into your office on 2 July 2026 and you set up the company without scrutinising who actually controls it, you are the regulated gatekeeper that should have caught it. Not the bank. Not AUSTRAC. You.
The 5 Red Flags This Case Reveals
If you read between the lines of the allegations, the structure has fingerprints all over it. These are the exact red flags AUSTRAC expects Tranche 2 entities to recognise:
1. The "director" can't explain the business
A genuine business owner can describe the business model, the customers, and the suppliers — usually with enthusiasm. A straw director typically can't. They give vague answers, defer to "my partner" or "my accountant", or read from notes.
What to do: Ask open-ended questions during onboarding. "Walk me through how the business actually makes money." If the answer is rehearsed or contradictory, escalate.
2. The director profile doesn't match the business
A 22-year-old with no industry experience suddenly registers as the sole director of a logistics company importing tobacco. A pensioner is the sole director of a property development trust. A recent migrant on a student visa is the sole director of a six-figure import business.
These are the classic profiles syndicates recruit. Vulnerable, low-income, or transient — people who can be paid a few hundred dollars a month to sign forms.
3. Multiple companies registered to the same residential address
ASIC searches are free. Run one. If the "director" is listed at the same residential address as ten other unrelated companies — or as the registered office of multiple shell entities — that's a structural pattern, not a coincidence.
4. Bank account opened immediately after company registration, then high-volume activity
Legitimate businesses ramp up. Straw-director companies often go from $0 to seven-figure monthly throughput in weeks, with no employees, no inventory, no premises, and no customer base that the gatekeeper can identify.
5. The instructions come from someone who isn't the director
The "director" signs the engagement letter — but every email, every phone call, every instruction comes from a third party. That third party is often the actual beneficial owner. CDD obligations don't stop at whoever's name is on the form.
What Your AML/CTF Program Needs to Cover
Under the reformed regime, your AML/CTF program must address each of these red flags in writing. Specifically:
- Part C — Customer Due Diligence: Procedures for identifying the customer, the beneficial owner, and the source of funds. Not just collecting an ID — actually verifying who controls the entity.
- Part D — Transaction Monitoring: Triggers for unusual patterns (sudden volume spikes, transactions inconsistent with stated business).
- Part E — Reporting Obligations: When and how to lodge a Suspicious Matter Report (SMR). A straw-director suspicion is a reportable matter — even if you decide not to take the client on.
If you're not sure how to identify a UBO in a complex trust or company structure, our Beneficial Ownership Verification Guide walks through the thresholds and the verification steps.
"But I Just Set Up a Company — I'm Not Investigating Crime"
This is the most common pushback we hear from accountants and lawyers, and it's worth addressing directly.
You are not being asked to be a detective. You are being asked to do what a reasonable professional in your position would do — collect identity documents, ask sensible questions about the business, and notice when something doesn't add up.
AUSTRAC's expectation, repeated by CEO Brendan Thomas, is:
"We don't expect perfection on day one, but we do expect sustained effort, strong leadership, and genuine progress."
What AUSTRAC does expect is that if you onboarded a straw-director company without asking a single question about beneficial ownership, you can't later say "I had no idea." The Act requires you to have asked.
What Happens When You Don't
The penalties under the reformed Act are not theoretical. (Full breakdown of AUSTRAC penalties)
- Failure to have an AML/CTF program: up to $31.3 million for a body corporate
- Failure to conduct CDD: up to $31.3 million
- Individual liability for officers and directors: up to $6.26 million
- Tipping off a client about an SMR: criminal offence, imprisonment
For a sole-trader accounting practice, even an infringement notice in the $75,000–$200,000 range is a business-ending event.
What to Do This Week
If you're a Tranche 2 entity and you haven't started, here is the minimum-viable list before 1 July 2026:
- Enrol with AUSTRAC. Enrolment is open now. (Registration guide)
- Document a written AML/CTF program covering Parts A–F. AML Mate generates this from AUSTRAC's official starter-kit templates in about 15 minutes.
- Set up a CDD process that captures beneficial ownership for every new company, trust, or partnership client — not just the named director.
- Train your staff on the five red flags above. Everyone who onboards clients needs to recognise them.
- Have an SMR pathway. Decide now who in your firm files SMRs and how. The rules give you only 3 business days for a money laundering suspicion.
The Sydney syndicate didn't fall apart because the banks caught it. It fell apart because AFP, NSW Police, AUSTRAC, and the Illicit Tobacco Taskforce ran a coordinated investigation over months. From July, AUSTRAC will be looking upstream — at the gatekeepers who set up the companies, opened the doors, and signed the forms.
The question Tranche 2 entities should be asking is simple: if my client list was reviewed today, would the beneficial-ownership records hold up?
Run a free compliance check — no signup, two minutes, see exactly where your firm sits relative to your obligations. Or start a 14-day free trial and have your AML/CTF program drafted before lunch.
Sources: AFP joint media release, NSW Police Force media release. Allegations are as reported by police; charges have not been determined by a court.
