Insight
AML/CTF Tranche 2: Essential Regulatory Overview
12 Aug 2026
In short
Tranche 2 entities will soon face new Anti-Money Laundering and Counter-Terrorism Financing obligations in Australia. Preparing now is critical for future compliance.
Australian businesses classified as 'Tranche 2 entities' will soon be subject to Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) obligations. This expansion of the AML/CTF regime aims to address identified vulnerabilities in sectors previously exempt, requiring proactive preparation from affected organisations.
What Does 'Tranche 2' Mean for Australian Businesses?
Australia's AML/CTF Act 2006 (Cth) currently applies primarily to financial institutions, gambling services, and bullion dealers (often referred to as 'Tranche 1' entities). The 'Tranche 2' reforms propose to extend these obligations to additional professions and businesses identified as posing a money laundering or terrorism financing risk.
These sectors typically include lawyers, accountants, real estate agents, and high-value dealers. The expansion aims to align Australia's regulatory framework more closely with international standards set by the Financial Action Task Force (FATF), closing existing loopholes.
Which Entities Are Likely to Be Affected?
While the precise scope and implementation timeline are subject to legislative changes, it is widely anticipated that the following sectors will be brought under the AML/CTF regime:
- Legal practitioners: Specifically those engaged in financial transactions for clients, such as conveyancing, trust account management, or company formation.
- Accountants: Firms providing services related to company formation, managing client money, or acting as trustees.
- Real estate agents: Involved in buying and selling property, particularly for high-value transactions.
- Trust and company service providers: Businesses that form companies, act as directors, or provide registered office addresses.
- High-value dealers: Entities trading in luxury goods, art, or other high-value assets.
Organisations in these sectors should monitor legislative developments closely. The specific activities that trigger obligations will be detailed in the updated legislation and associated rules.
What Core Obligations Will Tranche 2 Entities Face?
Once regulated, Tranche 2 entities will need to implement comprehensive AML/CTF programs similar to those currently required for Tranche 1 entities. This involves a risk-based approach to identifying, mitigating, and managing money laundering and terrorism financing risks.
Key obligations will include:
- Developing an AML/CTF Program: This document outlines an entity's internal controls, procedures, and risk assessments to manage AML/CTF risks. It must be regularly reviewed and updated.
- Customer Due Diligence (CDD): Implementing procedures to identify and verify the identity of customers and beneficial owners. This includes ongoing monitoring of customer transactions and activity.
- Reporting Obligations: Reporting suspicious matters (SMRs) to AUSTRAC, as well as threshold transaction reports (TTRs) for transactions above a prescribed amount, and international funds transfer instructions (IFTIs).
- Record Keeping: Maintaining records of customer identification, transactions, and risk assessments for a specified period, typically seven years.
- Staff Training: Ensuring all relevant staff receive regular training on AML/CTF obligations and how to identify and report suspicious activities.
Compliance with these obligations will require significant operational adjustments and investment in systems and training.
How Will Compliance Impact Business Operations?
Implementing AML/CTF compliance measures will necessitate changes across various aspects of business operations. For many Tranche 2 entities, this will represent a new regulatory burden.
Areas of impact include:
- Operational Procedures: Revising client onboarding processes to incorporate CDD requirements, including identity verification and beneficial ownership checks.
- Technology and Systems: Investing in compliance software, data management systems, and transaction monitoring tools to support reporting and record-keeping.
- Resource Allocation: Designating dedicated personnel or teams to manage AML/CTF compliance, or engaging external experts.
- Client Relationships: Managing client expectations regarding information requests for identity verification and ongoing monitoring.
- Risk Management Frameworks: Integrating AML/CTF risk assessments into broader enterprise risk management strategies.
Early preparation can help mitigate disruption and ensure a smoother transition once the new requirements are enacted.
What Are the Consequences of Non-Compliance?
AUSTRAC, as Australia's financial intelligence agency and AML/CTF regulator, has significant enforcement powers. Non-compliance can lead to severe penalties, both financial and reputational.
Penalties for contraventions of the AML/CTF Act can include:
- Civil penalties: Significant financial fines for individuals and corporations. For corporations, these can run into millions of dollars for serious breaches.
- Criminal penalties: For serious offences, individuals involved can face imprisonment.
- Reputational damage: Public exposure of non-compliance can erode client trust, impact business relationships, and lead to a loss of market share.
- Licence or registration suspension/cancellation: In some regulated professions, repeated or serious non-compliance could jeopardise professional standing.
These consequences underscore the importance of robust compliance programs and proactive engagement with the evolving regulatory landscape.
What Steps Should Tranche 2 Entities Take Now?
Proactive preparation is essential for entities anticipating Tranche 2 obligations. Businesses should begin assessing their current operations against the likely requirements.
Practical steps include:
- Stay Informed: Monitor legislative updates and guidance from AUSTRAC regarding the Tranche 2 reforms. Consult the official AUSTRAC website for current information and resources.
- Conduct a Gap Analysis: Review existing customer onboarding, due diligence, and record-keeping processes. Identify areas where current practices fall short of potential AML/CTF requirements.
- Assess Your Risk Exposure: Understand the specific money laundering and terrorism financing risks inherent in your business activities, client base, and geographic reach.
- Allocate Resources: Begin planning for the necessary budget, personnel, and technological investments. Consider whether existing software can be adapted or if new solutions are needed.
- Seek Expert Advice: Engage legal and compliance specialists to assist with interpreting the upcoming legislation and developing an effective AML/CTF program. This can be critical for navigating complex regulatory requirements, particularly concerning aspects like business contracts and startup legal structures that might involve complex ownership.
- Engage Key Stakeholders: Inform and involve senior management, boards, and relevant departmental heads about the impending changes and their implications.
By taking these steps, businesses can position themselves to meet their future obligations effectively and minimise potential disruption.
Frequently Asked Questions
What is the current status of AML/CTF Tranche 2 legislation?
The Australian government has reaffirmed its commitment to expanding the AML/CTF regime to Tranche 2 entities. While specific legislative timelines are pending, the reforms are expected to be introduced in the near future. Affected businesses should monitor official government announcements and AUSTRAC publications for the latest updates on the legislative process and implementation dates.
How does Tranche 2 compliance differ for a small business versus a large enterprise?
The core obligations of AML/CTF compliance, such as risk assessment, customer due diligence, and reporting, apply to all regulated entities. However, the scale and complexity of the AML/CTF program will be risk-based and proportionate to the size, nature, and ML/TF risks of the business. Smaller businesses may implement simpler controls but still need a robust framework.
Can foreign entities providing services in Australia be affected by Tranche 2?
Yes, if a foreign entity provides designated services in Australia or to Australian customers, it may be subject to Australian AML/CTF obligations. The jurisdiction of application typically depends on where the service is provided and to whom. Businesses with international operations should seek advice on their cross-jurisdictional compliance obligations under Australian law and other relevant regimes.
What is AUSTRAC's role in Tranche 2 compliance?
AUSTRAC is Australia's financial intelligence agency and regulator responsible for AML/CTF. For Tranche 2 entities, AUSTRAC will develop regulatory guidance, register reporting entities, monitor compliance, and enforce the AML/CTF Act. They will be the primary body for receiving suspicious matter reports and other financial intelligence reports, overseeing the integrity of the financial system.
Talk to us
Ready to talk it through?
Send us a note about what you're working on. We'll respond within one business day and, if we're a fit, book a free 15-minute consultation with a senior lawyer.
