Legal Guide

AML Compliance for Lawyers & Legal Professionals: Your Complete Guide

For lawyers, solicitors and conveyancers, AML/CTF coverage depends on the services you provide. Work through the service definitions, protect privileged information and put a practical process in place for client checks, records and reporting.

By AML Mate Published
Updated & sources checked

Start here
Check your servicesMatch each engagement to the definitions and exceptions.
Key distinction
Privilege mattersSeparate privileged information from reportable information.
Put it into practice
Six practical stepsFrom enrolment to client checks and reporting.

Which legal services are covered?

Table 6 sets out the professional designated services. These groups are a starting point, not a substitute for the complete definitions and exceptions.

Property and business transactions

Services that directly advance a real estate transaction or a transfer of a controlling interest in a company or legal arrangement.

Client funds and property

Managing client money, accounts, securities or other property as part of a transaction. Check the specific exceptions before treating all trust account work as covered.

Financing and legal structures

Advancing financing, creation or restructuring of companies or legal arrangements, including relevant trust arrangements.

Company and address services

Selling shelf companies, nominee or officeholder arrangements, and providing a registered office or principal business address instead of the client's operating address.

Why are lawyers now covered?

A legal professional and client reviewing documents together at a desk
AI-generated illustrative scene.

Legal services can be misused to move funds or obscure who owns assets. Property transfers, trust accounts and company structures are areas where the purpose of a transaction and the source of funds deserve attention. This does not mean that every client is suspicious.

The Tranche 2 reforms brought designated professional services into the AML/CTF regime from 1 July 2026. Coverage depends on the work you do and the applicable conditions, rather than your professional title alone.

Legal professional privilege and reporting

First, identify what is privileged

Legal professional privilege is narrower than client confidentiality. Assess the particular information and the legal basis for privilege; do not classify all client records as privileged or unprivileged.

All information

If all the grounds are privileged

Where all information that would support the SMR obligation is subject to legal professional privilege, no SMR or LPP form is required.

Some information

If only some information is privileged

Report the non-privileged information and submit the LPP form where required. For SMRs, the privilege must belong to another person. The qualified non-terrorism reporting period is 5 business days after the day the suspicion forms. This does not extend the terrorism financing deadline.

Privilege can also affect information in a TTR; the LPP form is due with that report. Get independent legal advice if you are uncertain about a claim or reporting obligation.

Six practical steps for your practice

Check your designated services

Map each engagement to the relevant service definition, geographical link to Australia and exceptions. Include occasional work. Record your reasoning; the name of a practice area alone does not settle coverage.

Enrol with AUSTRAC

Existing newly regulated providers were required to enrol by 29 July 2026. If you have not enrolled, act promptly. A new provider generally applies within 28 days after the day it starts providing a designated service. Enrolment does not replace the other obligations.

The enrolment entry screen. Follow the full screenshot tutorial.Screenshots © AUSTRAC for the Commonwealth of Australia 2026, used under CC BY 4.0. AUSTRAC does not endorse AML Mate. Source · CC BY 4.0.

Appoint your compliance officer

Appoint an eligible AML/CTF compliance officer with the authority and resources to oversee the program. Check management-level, residency and fit-and-proper requirements, document the appointment and notify AUSTRAC under the applicable rules.

Create and implement your AML/CTF program

Prepare a documented risk assessment and AML/CTF policies suited to your practice before providing designated services. Obtain senior manager approval, train personnel, keep records and arrange reviews and independent evaluations.

  • Assess your services, clients, delivery channels and geographical exposure.
  • Set procedures for customer checks, ongoing monitoring, escalation, reporting and handling privilege.
  • Assign responsibilities and record how staff will apply, review and update the program.

Apply customer due diligence

Generally complete initial CDD before providing the designated service. Establish your customer's identity, representatives and authority, relevant beneficial owners, the purpose of the relationship and risk. Check relevant PEP and targeted financial sanctions status.

  • For ownership and control, identify individuals who ultimately own 25% or more, or otherwise control the customer. Control is a separate test.
  • Acting for one side of a property transaction does not automatically make the other party your customer. Identify the customer for the designated service you provide.
  • Apply enhanced CDD when a statutory trigger applies and monitor relationships over time. Check the conditions for delayed CDD and existing-customer transitions.

Know your reporting obligations

Check the reporting trigger, deadline and any privilege exception. A report is not required for every engagement. AML Mate prepares report records; it does not submit reports to AUSTRAC. Lodge through AUSTRAC Online and keep your receipt and reference.

SMR: suspicion

For terrorism financing, report within 24 hours of forming the suspicion. For other matters, report within 3 business days after the day reasonable grounds for suspicion form. Check the qualified privilege rule above.

TTR: physical currency

Receiving or paying A$10,000 or more in physical currency (or foreign equivalent) in connection with a designated service triggers a TTR. Submit within 10 business days after the day of the transaction. An electronic transfer alone is not a cash transaction.

Suspicious activity indicators for lawyers

Consider indicators in the context of the client and engagement. One indicator alone may not establish reasonable grounds for suspicion. Examine inconsistencies, record the explanation and assess whether further monitoring, enhanced CDD or reporting is required.

The client and their instructions

Look more closely when the client:

  • Avoids face-to-face meetings or is secretive in their dealings.
  • Appears to follow unexplained instructions from a third party.
  • Resists identification or provides vague or inconsistent information.
  • Ends the engagement after you request further information.
  • Shows an unusual level of knowledge about AML/CTF requirements in the context of their engagement.

Transactions and trust account use

Examine the commercial explanation for:

  • Transfers through the trust account that obscure the source of funding.
  • Complex structures that conceal beneficial ownership.
  • Companies or trusts without a clear commercial purpose.
  • Back-to-back property transfers with rapidly increasing values.
  • Requests for aged shelf companies instead of a newly formed company.
  • A series of complicated trust account transfers.

Source of funds and wealth

Investigate inconsistencies such as:

  • High-value assets with no clear source of funding.
  • Refusal to explain wealth, or false or misleading explanations.
  • Private loan agreements with an unclear source of funds.
  • Company equity from an unknown source or with a value that is difficult to establish.

Timeline and deadlines

31 March 2026
Enrolment opened for newly regulated businesses.
1 July 2026
AML/CTF obligations began for newly regulated designated services.
29 July 2026
Initial enrolment deadline for existing newly regulated providers. This date has passed; a business that missed it should act promptly.

Transitional rules apply to particular obligations and circumstances. They are not a general grace period. Check the relevant conditions and dates for your practice.

How AML Mate helps legal professionals

Create and edit a program draft, organise client checks and records, prepare report records and export your program as PDF or Word. Training modules support staff learning. You remain responsible for adapting, approving and implementing your program and lodging required reports.

Essentials starts at $49 AUD/month including GST. Compare plan limits, verification charges and the support your practice needs. Software does not establish compliance.

Frequently asked questions

Do lawyers need AML/CTF compliance in Australia?

Yes, when they provide designated services with a geographical link to Australia and no applicable exemption. Being a lawyer, solicitor or conveyancer alone is not the coverage test.

Does legal professional privilege protect lawyers from AML obligations?

Privilege is preserved, but it is not a general exemption from AML/CTF obligations. Whether reporting is required depends on which information is privileged. The privilege section explains the all-information and partial-information cases; obtain advice if uncertain.

Do lawyers need to verify both parties in a property transaction?

Not automatically. Identify your customer under the designated service definition and complete the required checks for that customer and relevant associated persons. Acting for one side does not itself require treating the other side as your customer.

What are the penalties for lawyers who don't comply?

Consequences depend on the breach and can include regulatory directions, enforceable undertakings, civil penalties or criminal enforcement. Check AUSTRAC's current enforcement guidance and obtain advice about the particular circumstances.

I only do litigation. Do I need to comply?

Review what you actually do. General advice alone does not necessarily advance a designated transaction, but a practice-area label is not an exemption. A court-order exception has specific conditions; check additional transactions, money handling and company services separately.

What if I am a sole practitioner or small firm?

Size alone does not remove obligations. The legal profession starter kit has several eligibility criteria, including a legal practising certificate and no more than 15 personnel. Check all criteria, including client and service restrictions; do not assume a conveyancing business or every small legal practice qualifies.

Resources and sources

Full AML/CTF compliance guide. Sources checked 14 October 2026. Check the official guidance against your practice and the particular engagement.

Practical follow-ups from the AML Mate blog.

The Suspicion Came From a Privileged Conversation. AUSTRAC Still Wants a Form, and It Comes With Its Own Clock.

Legal professional privilege survived the AML/CTF reforms intact. What changed on 1 July 2026 is the paperwork around it: a form that goes in whenever you withhold privileged information from a report or a notice, a five business day SMR window instead of three, and a civil penalty for skipping the form. Here is when privilege actually lets you stay silent, when it does not, and how the form works for a lawyer, and for the accountant whose client repeated what their lawyer said.

12 min read

AML/CTF Compliance for Lawyers: What Legal Practitioners Must Know Before July 2026

A practical guide for Australian lawyers and solicitors on AML/CTF obligations under AUSTRAC Tranche 2. Covers designated services, legal professional privilege, trust account risks, customer due diligence, and how to build your compliance program.

10 min read

Not a Company, Not a Trust: CDD on a Partnership, Club or Association Under Tranche 2

The two-partner practice, the farming family partnership, the tennis club selling its clubhouse. These clients fall outside the company and trust templates, and AUSTRAC has a CDD guide written for exactly them. Here is who you identify, what verifies what, why 20% can mean you skip someone, and the strata carve-out most firms have not noticed.

11 min read

You Do Not Need Transaction Monitoring Software. You Need Thirty Minutes a Month and a Record That You Spent Them.

Ongoing customer due diligence is the part of the regime that never finishes, and three months in it is the part most small firms have not started. AUSTRAC says monitoring can be manual, automated or both, and spells out what a manual routine looks like. Here is that routine for a small Tranche 2 firm: what to look for, when a client's risk rating and KYC information must be reviewed, and what to write down.

11 min read

Build your program, prepare report records and keep your client checks organised.

Eligible accounts get a 14-day free trial. A card is required at checkout. Your subscription automatically renews at your selected monthly price unless you cancel before the trial ends. During the trial you can build and use your program and records in the app. Downloading the program and audit pack unlocks with your first payment, and you can start paying early at any time. Accounts that have already used a trial, or choose to skip it, start with payment.

This guide is based on AUSTRAC's publicly available guidance. It does not constitute legal or compliance advice. Consult a licensed compliance professional for complex situations.