AML Tranche 2 goes live 1 July 2026: the final readiness countdown

Australia's AML/CTF "Tranche 2" obligations commence on 1 July 2026. From that date, a large group of newly regulated businesses — broadly described as professional service providers and high-value dealers — must comply with the *Anti-Money Laundering and Counter-Terrorism Financing Act 2006* in the same way banks and remitters already do. The practical message for affected firms in mid-2026 is straightforward: the substance of your AML/CTF framework needs to be built and operating by go-live, not merely planned.

This explainer sets out who is captured, what the regulator expects on day one, how the enrolment timing works, and the readiness steps to close out before the deadline. The primary source is the AML/CTF Act and AUSTRAC's reform guidance, and you should confirm any specific date or figure against AUSTRAC before relying on it.

What happens on 1 July 2026

On 1 July 2026, the AML/CTF regime extends to additional "designated services" delivered by professions and dealers that were previously outside the framework. This is the long-anticipated second tranche of reforms.

The core obligations that switch on for these entities mirror those that have applied to existing reporting entities for years:

• maintaining a compliant AML/CTF program built around a money laundering and terrorism financing (ML/TF) risk assessment
• carrying out customer due diligence (identifying and verifying customers and, where relevant, beneficial owners)
• ongoing monitoring of customers and transactions
• reporting suspicious matters and certain threshold transactions to AUSTRAC
• record-keeping to evidence the above.

The commencement date is fixed by legislation, but the operational expectation is what matters in practice: your controls must be capable of functioning from go-live. A program that exists only on paper, or a risk assessment that has not actually shaped your customer onboarding, will not meet the standard.

Who becomes a reporting entity

Whether you are captured depends on the services you provide, not simply your industry label. The newly regulated groups commonly described as Tranche 2 entities include:

• legal practitioners and conveyancers (for certain transactional services, such as acting in property transfers or managing client money)
• accountants and other professional service providers (for specified financial and transactional services)
• real estate professionals (for buying and selling real estate)
• trust and company service providers
• dealers in precious metals and precious stones (above the relevant value threshold).

The dividing line is whether you provide a designated service as defined in the Act. Many firms will provide some captured services and some that are not captured, so scoping is the first analytical step rather than an afterthought. You can work through your service lines against the captured categories using the AML Tranche 2 scope tool, then confirm the boundaries against AUSTRAC's published guidance for your sector.

If you provide even one designated service, you are a reporting entity for that service and the full obligation set follows.

The three things AUSTRAC expects on day one

AUSTRAC has signalled that, by commencement, newly regulated businesses should have three foundational elements in place. These are the practical anchors of the regime:

1. An AML/CTF program — your documented framework, grounded in a risk assessment of the ML/TF risk your business reasonably faces, with policies and procedures to identify, mitigate and manage that risk. See the AML/CTF program obligation for the components this needs to cover.
2. A nominated AML/CTF compliance officer — a designated person, at management level, accountable for the program's operation and for liaison with AUSTRAC. See the AML compliance officer obligation.
3. Trained staff — employees who understand their obligations, can recognise red flags and know how to escalate. Training is not a one-off; it should be ongoing and risk-appropriate.

To help smaller, lower-complexity businesses, AUSTRAC has released Program Starter Kits intended to assist with building a compliant program. These are a useful starting structure, but they do not remove the need to tailor your program to your own risk profile.

Enrolment and registration timing

Enrolment is separate from compliance and runs on its own timeline. The key milestones:

• Enrolment opened in advance of commencement. AUSTRAC opened enrolment for Tranche 2 entities ahead of the 1 July 2026 start so businesses could register before obligations began.
• Compliance starts at go-live. Your program, compliance officer and trained staff are expected to be operational from 1 July 2026.
• A short enrolment window extends past go-live. AUSTRAC has indicated newly regulated entities must complete enrolment shortly after commencement (a late-July 2026 cut-off has been referenced — verify the exact date and your category's deadline directly with AUSTRAC).

The important distinction: enrolling does not make you compliant, and the brief post-go-live enrolment window is not a grace period for the substantive obligations. Treat 1 July as the operational deadline regardless of when your enrolment paperwork is finalised. See the AML/CTF enrolment obligation for what the registration step involves.

What to do in the final countdown

With go-live close, the priority is converting plans into working controls. A focused checklist:

• Finalise your scoping. Confirm exactly which of your services are designated services. This determines the size of your obligation.
• Complete the risk assessment. It must be specific to your customers, products, delivery channels and geographies — not generic.
• Operationalise the program. Make sure onboarding, verification and monitoring procedures are actually embedded in how staff work, with the systems and templates to support them.
• Confirm the compliance officer appointment. Document the role, authority and reporting line.
• Run staff training before go-live and schedule the refresh cycle.
• Test customer due diligence end to end on a sample of real onboarding scenarios.
• Complete enrolment within AUSTRAC's window.
• Set up suspicious matter and threshold reporting channels so you can report from day one.

For broader context on the regime and related obligations, see the AML/CTF topic hub.

Common pitfalls in the run-up

A few recurring traps are worth flagging as the deadline approaches:

• Treating enrolment as compliance. Registering with AUSTRAC is administrative; it does not satisfy your program, due diligence or reporting duties.
• Generic, off-the-shelf programs. Adopting a template without tailoring it to your actual risk profile is a frequent weakness. The Starter Kits are a scaffold, not a finished program.
• Under-scoping or over-scoping services. Misjudging which services are captured leads either to gaps or to wasted effort.
• Leaving the compliance officer role nominal. The role needs genuine authority, time and seniority.
• Forgetting beneficial ownership. For many Tranche 2 services, identifying the people behind a customer entity is central, not optional.
• Assuming a soft landing. The post-commencement enrolment window can create a false sense that obligations start later. They do not — the substantive duties apply from 1 July 2026.

The reforms represent a significant expansion of Australia's financial-crime framework into the professions. Firms that have built and tested a working program — rather than a documented intention — will be best placed at go-live. Where any specific date, threshold or category affects your business, confirm it directly with AUSTRAC before acting.