With Tranche 2 commencement set for 1 July 2026, Australian law firms now have just over forty days to enrol with AUSTRAC, finalise their AML/CTF programme, and stand up the operational workflows the regime requires. The mood across industry bodies has shifted in May from preparation to execution. A series of late-stage updates from AUSTRAC, the Law Council of Australia and ALPMA suggest that while the regulatory architecture is now largely settled, the operational readiness gap across the profession remains uneven.

The AUSTRAC enrolment window opened on 31 March 2026 and closes on 29 June 2026. From 1 July, any practice providing one or more designated services under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (the AML/CTF Act) without being enrolled will be operating in breach. AUSTRAC has been explicit that supervisory tolerance does not equate to enforcement immunity.

ALPMA's May update signals a final-stretch programme

The Australasian Legal Practice Management Association (ALPMA) published its May 2026 AML/CTF Support Update on 4 May, setting out a clear cadence of monthly events through to commencement.

A particularly noteworthy session came from Juliana Warner, Chair of the Law Council of Australia's AML Working Group, who has been leading the consultation on amendments to the Australian Solicitors' Conduct Rules. Warner's session covered the mapping of designated services by practice area, a piece of work that is becoming the de facto reference for firms still scoping whether their litigation, commercial or family practice teams trigger reporting obligations.

AUSTRAC's guidance is in place — but ambiguity persists

By May, AUSTRAC has published the full slate of cross-sector and sector-specific guidance for Tranche 2 entities. The Program Starter Kits, including the Legal Profession Starter Kit and a separate Conveyancing Starter Kit, were released in early 2026, and on 9 February the regulator issued exposure-draft amendments to the AML/CTF Rules designed to operationalise the Act and recast the reporting group framework.

That said, industry feedback has not been universally positive. CPA Australia's regulations and standards lead, Belinda Zohrab-McConnell, has publicly warned of a "substantial grey area" between the legislation and AUSTRAC's guidance over which services constitute "designated services". For practices with mixed work, for example, a commercial firm that occasionally handles share transfers or trust restructures - that ambiguity is operationally significant, because it determines whether customer due diligence (CDD) and reporting obligations attach to those engagements at all.

The compliance officer question is now urgent

The AML/CTF Act requires every reporting entity to appoint an AML/CTF Compliance Officer at management level. For sole practitioners and small firms, that role typically sits with the principal. For mid-sized and larger firms, the question of whether to recruit externally, redeploy from an adjacent risk or compliance function, or train internally has become one of the more consequential structural decisions of the year.

ALPMA's whitepapers on hiring an AML Compliance Officer and the New Zealand salary benchmarks (where the role has existed for several years) have become heavily referenced as Australian firms try to size the market. With forty days to commencement, firms that have not yet appointed an officer are unlikely to be able to recruit; in practice, that means a senior internal appointment with external advisory support.

Operationalising before 1 July

Beyond enrolment and the compliance officer appointment, three operational workstreams need to be live by 1 July:

Customer due diligence at onboarding. Identity verification, beneficial ownership checks, source-of-funds enquiries and politically exposed person (PEP) screening must be embedded in client intake. From 1 July, the CDD clock is running for every new matter.

Suspicious matter and threshold reporting. Suspicious Matter Reports (SMRs) are due within three business days of forming a suspicion (24 hours for terrorism-financing matters). Threshold Transaction Reports (TTRs) are due within ten business days for any cash transaction at or above AUD 10,000.

Record-keeping. Detailed records of client identification, CDD outcomes and transaction monitoring must be retained for at least seven years.

Modern client lifecycle management platforms like Legl can absorb a significant share of this operational load, particularly the identity, source-of-funds, risk assessment and ongoing-monitoring workstreams.  Whilst the the AML/CTF programme is owned by the firm, technology leaders like Legl can go a long way to supporting firms with consistent, clear processes that meet regulatory clients whilst providing a strong end-client experience.

Key Takeaways

Enrol by 29 June 2026. Late enrolment is not a paperwork issue after 1 July; it is an enforcement risk.

Lock in your AML/CTF Compliance Officer this month. At forty days out, internal appointment with external support is the realistic path.

Treat ambiguity in designated services as a documented decision. Where AUSTRAC guidance is unclear, record your interpretation and rationale for each practice area.

Pressure-test your CDD workflow before 1 July. Make sure you’ve processed the firm’s active clients through these workflows.

Use the final ALPMA and AUSTRAC sessions. The 19 June Brendan Thomas webinar and 16 June Q&A are the last formal opportunities for live regulator-led clarification before commencement.

Looking Ahead

Expect the final six weeks to be dominated by three things: a final AUSTRAC push of supplementary guidance and FAQ refreshes, finalisation of the exposure-draft Rules amendments from February, and the Law Council's consultation outputs on the Solicitors' Conduct Rules. AUSTRAC has signalled that its 2026–27 regulatory expectations will be published in the new financial year and will likely include the first thematic priorities drawn from Tranche 2 enrolment data. From 1 July, supervisory engagement will move from educative to operational, and firms that have done the work in May and June will find the transition materially easier than those that wait.