As Australia prepares to implement the long-awaited Tranche 2 AML/CTF reforms, businesses across legal, accounting, real estate, conveyancing and precious-metal sectors will soon face new AUSTRAC obligations. Consequently, many firms must enrol or register with AUSTRAC, develop a compliant AML/CTF Program and appoint a governance structure that satisfies regulatory expectations. Because these obligations are detailed and time-sensitive, this guide walks you through every step — from understanding deadlines, AUSTRAC registration steps to building your compliance framework — while also highlighting how Compliance7 can support your transition efficiently and cost-effectively.
Why AUSTRAC Tranche 2 Compliance Matters
While many firms assume Tranche 2 obligations are merely procedural, the reality could be more serious. In recent years, AUSTRAC has significantly intensified enforcement and as a result, businesses that fail to comply often face heavy remediation costs, reputational harm and regulatory pressure. Furthermore, clients increasingly expect compliance maturity as a baseline requirement, meaning that firms risk losing business if they fall behind.
Therefore, preparing early is essential. By establishing processes before the regulatory deadlines, your organization can confidently adapt to the new regime, avoid rushed submissions and demonstrate trustworthiness to clients and stakeholders.
Who Needs to Comply?
Although Tranche 2 reforms apply to a wide range of professional service providers, the largest impacted groups include:
- Accounting firms and bookkeepers
- Law firms and legal practitioners
- Conveyancers and property settlement agents
- Real-estate agencies and property professionals
- Trust & company service providers (TCSPs)
- Dealers in precious metals or stones
- Virtual asset and remittance service providers
Because many of these businesses have never been regulated under AML/CTF laws before, transitioning into compliance may feel overwhelming. Therefore, understanding your obligations now will help you navigate the process smoothly.
Step-by-Step: AUSTRAC Registration Steps for Tranche 2 Entities
To help you follow a structured and efficient path, the following step-by-step instructions incorporate all key deadlines, requirements and transition points.
Step 0 — Quick Readiness Checklist
Before logging into AUSTRAC Online, it is important to gather your business documentation. By doing so in advance, you minimize delays and avoid incomplete submissions.
Checklist items include:
- ABN/ACN, legal and trading names
- Beneficial ownership and corporate structure
- Name, Address, Phone
- Description of designated services
- Director and key personnel details
- Recent financial statements
- Police checks (required for RSP/VASP)
- Draft AML/CTF Program components
Since missing information is one of the most common causes of submission delays, we recommend preparing all documents in one secure folder.
1. Confirm Whether You Are a Regulated Tranche 2 Entity
To begin, determine whether your services fall under the newly regulated Tranche 2 categories. If your business provides designated services in Australia under these reforms, you must enroll with AUSTRAC. Moreover, if your organization operates as an RSP or VASP, you must register — not merely enroll.
This distinction is critical because registration involves additional checks and suitability assessments.
2. Understand the Key Deadlines
To comply successfully, you must meet the following deadlines:
- 31 March 2026 – Enrolment window opens
- 1 July 2026 – Tranche 2 obligations commence
- 29 July 2026 – Typical enrolment deadline for existing service providers
- Within 28 days – Enrolment deadline for businesses commencing designated services later
Because these deadlines are strict, planning early ensures your business stays compliant.
3. Gather All Required Documents before Enrolling
Next, collect all documentation needed for the enrolment process. Doing this proactively ensures a smooth AUSTRAC Business Profile Form (ABPF) submission and reduces the risk of AUSTRAC requesting additional information later.
Required documents include:
- Legal identity and registration details
- Organizational chart or governance summary
- Beneficial ownership information
- Financial statements
- Foreign regulatory registrations (if any)
- Key personnel details
- Suitability assessments for RSP/VASP roles
- AML/CTF Program (draft or final)
Because AUSTRAC emphasizes transparency, your provided information must be accurate and complete.
4. Create AUSTRAC Online Account & Submit ABPF (Enrolment)
After gathering your documents, you can move on to creating an AUSTRAC Online account. Once logged in, complete the AUSTRAC Business Profile Form (ABPF). This form captures essential information about your business model, structure, personnel and designated services.
Additionally, you may save your progress temporarily while reviewing your data. Finally, submit your form and securely store the confirmation email, since it forms part of your compliance records.
5. Apply for Registration (If You Are an RSP or VASP)
If your business operates remittance or virtual asset services, you must register with AUSTRAC after enrolment. Because registration requires additional suitability checks, such as police certificates, you will need extra time to gather those documents.
Importantly, you cannot operate these services until AUSTRAC approves your registration. Consequently, applying early helps ensure you do not delay business operations.
6. Build Your AML/CTF Program (Mandatory)
Enrolment is only one stage; every Tranche 2 entity must also develop an AML/CTF Program. This program outlines how your business manages ML/TF risks through governance, policies and controls.
A complete AML/CTF Program includes:
- ML/TF risk assessment
- CDD & EDD procedures
- Governance structure
- Appointment of AML/CTF Compliance Officer
- Staff training
- Sanctions & PEP screening
- Transaction monitoring
- Suspicious Matter Reporting (SMR)
- Record keeping (7-year minimum)
- Independent review (every 2–3 years)
Because creating a program from scratch is time-consuming and complex, you can take support from firms like Compliance7 for templates and expert support.
7. Maintain & Update Your Compliance over Time
Finally, after enrolment and program development, your business must continually maintain, update and review its AML/CTF Program.
This includes:
- Updating AUSTRAC within 14 days for key changes
- Conducting ongoing staff training
- Reviewing CDD and EDD processes
- Documenting all monitoring and reporting activities
- Scheduling periodic internal and external reviews
Since compliance is an ongoing obligation, documenting every step helps demonstrate your commitment to AUSTRAC.
Why Partner With Compliance7?
Because Tranche 2 compliance introduces new and complex obligations, you can partner with Compliance7 for specialized support. Our team provides comprehensive solutions, ensuring that businesses transition smoothly into the new regulatory environment.
Compliance7’s Key Services Include:
- Outsourced & Fractional Compliance Officer – ideal for firms lacking internal resources
- AML/CTF Program Development – including risk assessments and governance frameworks
- CDD/EDD & KYC Program Setup – to ensure compliant onboarding
- Sanctions & PEP Screening Consulting – with tool selection guidance
- SMR and Grievance Support – including regulatory communication consulting
- Independent Reviews – required every 2–3 years
Because our approach is practical, tailored and scalable, we help you achieve compliance without disrupting your core business.
Frequently Asked Questions (FAQ)
- What is AUSTRAC enrolment for Tranche 2 entities?
AUSTRAC enrolment is the process of submitting your business details through the AUSTRAC Business Profile Form (ABPF) to declare that you provide designated services under the AML/CTF Act.
- When must Tranche 2 entities enroll?
Most must enroll by 29 July 2026 or within 28 days of starting designated services.
- Do all Tranche 2 entities require registration?
No – registration is only required for RSP and VASP operators.
- What information does the ABPF require?
It requires legal names, ABN/ACN, business structure, key personnel and designated services.
- How long does registration take?
Registration can take weeks or months depending on complexity.
- What happens if you do not enroll on time?
You risk regulatory action, penalties and business disruption.
- What must an AML/CTF Program include?
It must include a risk assessment, CDD/EDD procedures, governance, training and monitoring.
- Can multiple entities share one AML program?
Yes, via a reporting group model.
- What is CDD for Tranche 2?
It involves identifying, verifying and risk-assessing clients.
- How long must records be kept?
Records must be kept for at least seven years.
- Who can be the AML Compliance Officer?
A senior competent person or an outsourced officer.
- How does outsourcing help?
It provides expert oversight without full-time hiring.
- Which deadlines matter most?
31 March 2026, 1 July 2026 and 29 July 2026.
- Is enrolment free?
Yes, although some registrations may incur costs.
- How do groups handle compliance?
Through a lead-entity reporting group model.
- Are transitional rules expected?
They may be issued; you must monitor AUSTRAC’s updates.
- Must existing clients be updated?
Yes, ongoing CDD requires periodic reviews.
- Can Compliance7 build my program?
Yes, including documentation, training and governance.
- How should NSW firms prepare for AUSTRAC Tranche 2 obligations??
NSW firms should map their services to identify Tranche 2 activities, gather all required enrolment documents and establish CDD procedures for onboarding and ongoing monitoring. Preparing these steps early helps ensure a smooth and timely transition into compliance.
- Where to get police checks?
From the Australian Federal Police or accredited providers.
You now have a complete understanding of AUSTRAC Tranche 2 obligations. However, achieving full compliance requires accuracy and timely action. Therefore, partnering with Compliance7 ensures your firm meets every requirement without unnecessary burden.
Disclaimer
This article is for general informational purposes and does not constitute legal advice. For tailored guidance, please consult Compliance7 or a qualified legal professional.
