As of yesterday, 29 July 2026, the first hard compliance milestone of Australia's "Tranche 2" anti-money laundering and counter-terrorism financing (AML/CTF) reforms is behind us. Any legal practice providing a "designated service" when the new obligations commenced on 1 July 2026 was required to enrol with the Australian Transaction Reports and Analysis Centre (AUSTRAC) by 29 July — 28 days after commencement. For thousands of Australian law firms, the question is no longer whether the regime applies, but whether their programme, risk assessment and day-to-day controls can withstand scrutiny.

This is the largest single expansion of Australia's AML/CTF perimeter since the regime began in 2006. The reforms, made by the Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (Cth) (Act No. 110 of 2024, assented 10 December 2024), amend the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) to bring "gatekeeper" professions — lawyers, accountants, conveyancers, real estate professionals, trust and company service providers, and dealers in precious metals and stones — into scope. AUSTRAC estimates roughly 80,000 to 90,000 new reporting entities are now captured.

What actually triggers an obligation

A recurring point of confusion is that the obligation attaches to the activity, not the job title. A firm becomes a reporting entity when it provides one or more designated services with a geographical link to Australia in the course of carrying on a business. For legal practitioners, that typically means assisting a client to buy, sell or transfer real estate, managing client money in connection with a transaction, or creating, restructuring or operating companies and trusts.

AUSTRAC's core guidance, released on 16 October 2025, was pointed on where the line sits. To be "assisting" for the purposes of the new Table 6 designated services, a practitioner's actions must be sufficiently linked to the outcome — they must directly advance the relevant transaction. Merely influencing how a client proceeds, giving general or hypothetical advice, or making a simple referral is not enough. A solicitor advising on the legal effect of contract terms without taking steps to execute the transfer is generally outside scope; a practitioner preparing the contract, conducting title searches or holding funds in trust is not. Pure litigation and advisory-only work that does not advance a transaction remain excluded.

The obligations that now bite

The substantive duties mirror what banks and money services businesses have carried for years. A captured firm must enrol with AUSTRAC, complete a money laundering and terrorism financing (ML/TF) risk assessment, and maintain an AML/CTF programme with a named, senior, Australian-based AML/CTF compliance officer, staff training and independent evaluation. Customer due diligence (CDD) must be completed before the designated service is provided, with enhanced due diligence for higher-risk clients and politically exposed persons (PEPs).

Reporting is the second shift. Suspicious matter reports (SMRs) have no monetary threshold and are due within three business days — or 24 hours where terrorism financing is suspected. Threshold transaction reports (TTRs) apply to cash dealings of A$10,000 or more and are due within ten business days. Records must be kept for seven years and produced to AUSTRAC on request, and "tipping off" a client that a report has been made is itself an offence. These are exactly the workflows that compliance technology — Legl among the providers serving Australian firms — is built to standardise, so CDD, screening and record-keeping run consistently on every relevant matter.

Enforcement posture and the unsettled edges

AUSTRAC has signalled an education-first approach, and chief executive Brendan Thomas has publicly stressed that the regulator has not penalised small businesses for administrative mistakes. That is not an amnesty. Civil penalties reach up to A$31.3 million per contravention for a corporation, and AUSTRAC retains discretion to act on serious failures from day one.

Genuine uncertainty remains at the edges. Legal professional privilege complicates suspicious matter reporting, and the boundary between a reportable suspicion and a privileged communication is not fully settled in practice. The Law Council of Australia had argued for the legal-sector start date to be deferred to 1 July 2027 — a call the Government did not adopt — and AUSTRAC has flagged further sector-specific guidance for lawyers through 2026.

Key Takeaways

• If you were providing a designated service on 1 July 2026 and have not yet enrolled, the 29 July deadline has passed — enrol immediately and document the reason for any delay.
• Map your services against the Table 6 designated services; the obligation follows the activity, so review engagements matter-by-matter.
• Stand up the four programme foundations now: ML/TF risk assessment, written AML/CTF programme, a named compliance officer, and independent evaluation.
• Operationalise CDD, sanctions and PEP screening before service, plus SMR (three business days) and TTR (ten business days) reporting — and never tip off a client.
• Retain customer and transaction records for seven years in a form you can produce to an examiner.

Looking Ahead

The scramble to enrol is over; the harder task of embedding evidenced controls has begun. Watch for AUSTRAC's tailored legal-sector guidance, any clarification on the privilege–reporting interface, and the regulator's first enforcement signals once the education window narrows. With Australia's next Financial Action Task Force (FATF) mutual evaluation on the horizon, how convincingly the profession beds down these obligations will shape both the country's international standing and each firm's own risk exposure.

Sources

• AUSTRAC — Newly regulated businesses: get ready for the reforms
• Law Council of Australia — Proposed 2026 amendments to the AML/CTF Act
• Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (No. 110, 2024)

‍