If you run a law firm, an accounting practice, a real estate agency or a precious-metals business, you have probably seen two dates attached to the AML/CTF reforms: 1 July 2026 and 29 July 2026. A lot of firms have quietly assumed they are the same deadline, or that the later one is the real one and the earlier one is a soft launch.
They are not the same, and the gap between them matters. One date governs what you do. The other governs your paperwork with AUSTRAC. With about three weeks until the first of them, it is worth being precise about which is which.
1 July 2026: The Day Your Obligations Switch On
1 July 2026 is the day the AML/CTF obligations begin for newly regulated (Tranche 2) businesses. From that date, if you provide a designated service, you are a reporting entity and the full obligations apply to you. (AUSTRAC, summary of obligations for Tranche 2 entities)
The part firms underestimate is that this is not a "start working on it" date. It is the date the work has to already be done. From 1 July, before you provide a designated service, the following need to exist and be in use:
An AML/CTF program. A single, risk-based program that sets out how you identify, manage and reduce the money laundering, terrorism financing and proliferation financing risks in your business. This is the spine of everything else.
A risk assessment. Your assessment of ML, TF and PF risk across your services, customers, delivery channels and the jurisdictions you deal with. The program flows from this, so it has to come first.
An AML/CTF compliance officer. A named person responsible for the program. Smaller firms can appoint someone internal, including the principal, but the role has to be filled, not left blank.
Customer due diligence in practice. A working process for identifying and verifying customers before you provide the service, with enhanced checks where the risk is higher.
Reporting readiness. From 1 July you are expected to lodge suspicious matter reports and threshold transaction reports when they are triggered. (How SMR and TTR reporting works)
The short version: 1 July is about your conduct. On that day you behave like a reporting entity, which means the program has to be sitting underneath you, not in a draft folder.
29 July 2026: The Day You Must Be Enrolled
29 July 2026 is a different kind of deadline. It is the date by which you must have enrolled with AUSTRAC. Because your obligations commence on 1 July, you have a 28-day window to get on the register, and that window closes on 29 July. (AUSTRAC, find out when to enrol and register)
Enrolment opened back on 31 March 2026, so this is not something that becomes available at the last minute. You can enrol now. Enrolment is an administrative step done through AUSTRAC Online: you provide your business details, the designated services you offer, and your compliance officer. (AUSTRAC, enrol with us)
What enrolment is not is proof that you are compliant. Being on the register tells AUSTRAC you exist and what you do. It says nothing about whether your program is any good. That is why 29 July is the easier of the two dates to meet and the more dangerous one to treat as your main deadline.
The Enrol Versus Register Trap
There is a second piece of vocabulary that trips firms up: enrol and register are not the same word for the same thing.
Most Tranche 2 businesses only need to enrol. Registration is an additional step that applies to specific services, mainly remittance (money transfer) and digital currency or virtual asset exchange. If you are a law firm, an accounting practice, a real estate agency or a jeweller, the standard path is enrolment, and you should not assume you need to register unless you actually provide one of those extra services. (What enrolment and registration involve)
Getting this wrong in either direction wastes the time you do not have, so it is worth confirming your specific services rather than guessing from a headline.
Why The Order Matters
Put the two dates together and the sensible sequence becomes obvious, and it is the opposite of what the calendar suggests.
The later date, 29 July, is the one most firms anchor to, because it sounds like the final deadline. But you cannot honestly enrol a business whose program does not exist, and your obligations under that program bite on 1 July, three to four weeks earlier. If you wait until late July to start, you spend the first month of the regime non-compliant while you scramble.
The order that actually works:
- Build your risk assessment and AML/CTF program now, and appoint your compliance officer.
- Have all of that genuinely in place by 1 July, because that is when you start operating under it.
- Complete your AUSTRAC enrolment any time before 29 July, with a real program already standing behind it.
The program is the long pole. The enrolment is the quick administrative confirmation at the end.
What AUSTRAC Actually Expects On Day One
None of this means your program has to be flawless on 1 July. AUSTRAC has been explicit that it is not expecting perfection from a standing start. Its stated position is that it does not expect everything to be perfect immediately, but it does expect to see genuine effort to comply. (AUSTRAC, preparing for the changes if you are newly regulated)
The distinction that matters is between a firm that has a real, risk-based program it is actively working and improving, and a firm that has nothing and is hoping the deadline slides. The first is exactly what the regulator has asked for. The second is the position that draws attention, because a complete absence of a program is not an imperfection, it is a failure to start. (What ignoring a routine AUSTRAC obligation cost two small firms)
Three Weeks Out: The Honest Summary
Two dates, two jobs.
1 July 2026 is your conduct deadline. From that day you operate as a reporting entity, which means your risk assessment, your AML/CTF program and your compliance officer must already be in place.
29 July 2026 is your paperwork deadline. By that day you must be enrolled with AUSTRAC, an administrative step you can complete now and should not leave to the wire.
If you only remember one thing: the program is what makes 1 July real, and the program is the part that takes the time. Enrolment is the easy bit at the end.
If your program does not yet exist, the fastest honest way to see where you stand is a free compliance check, and from there you can build a full risk-based AML/CTF program in about fifteen minutes rather than weeks. Start your free compliance check, or read what a complete Part A to F program covers before you begin.