AUSTRAC Tranche 2: What Australian Accountants and Bookkeepers Must Do Before July 29, 2026

If your firm holds client money in a trust account, helps set up companies, or acts as a nominee director for a client's business, you may be a day away from a legal deadline you've never had to think about before. Starting July 1, 2026, thousands of Australian accountants, bookkeepers, and tax agents became AUSTRAC "reporting entities" under a law that used to apply only to banks and casinos. If your practice provides one of nine specific services, you have until July 29, 2026 to enroll — or you're already in breach.

This is the long-delayed "Tranche 2" expansion of Australia's Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) regime, and it's one of the biggest compliance shifts the accounting profession has faced in years. Here's what actually triggers the obligation, what you need to do before the deadline, and what happens if you miss it.

Why Accountants Are Suddenly "Reporting Entities"​

Australia has regulated banks, remittance providers, and casinos under AML/CTF law since 2006. But the "gatekeeper" professions — accountants, lawyers, real estate agents, and dealers in precious metals — were left out, even though international watchdogs (the Financial Action Task Force) had flagged Australia for years as an outlier among developed economies for not covering them.

Tranche 2 closes that gap. As of July 1, 2026, if your firm provides a "designated service," you're legally a reporting entity with the same category of obligations — just scaled to your size — as a bank branch: customer due diligence, ongoing monitoring, suspicious activity reporting, and a written AML/CTF program.

The Trigger Is the Service, Not Your Job Title​

This is the detail that trips people up: being an accountant or bookkeeper doesn't automatically pull you in. What matters is whether you provide one or more of AUSTRAC's defined "designated services." A firm that only prepares tax returns and does compliance-only bookkeeping likely sits outside scope. But a firm that provides any of the following is almost certainly captured:

1. Receiving, holding, or managing client money, securities, or assets (this catches most trust accounting)
2. Managing bank, savings, or securities accounts on a client's behalf
3. Organizing client contributions for the creation, operation, or management of a company
4. Creating, operating, or managing trusts or other legal arrangements
5. Buying or selling business entities or legal arrangements on behalf of a client
6. Acting as a director, trustee, partner, or nominee shareholder for a client's structure
7. Providing a registered office or business address for a company
8. Arranging corporate appointments or acting in a nominee capacity
9. Conveyancing or settlement services connected to real property transactions

If any of these describe part of your practice — even a small part, even for a handful of clients — you're a reporting entity for the whole firm, not just that service line. A two-partner bookkeeping practice that sets up three trusts a year is captured just as fully as a national mid-tier firm.

Don't guess. AUSTRAC provides an online self-assessment tool specifically because "sounds like it might apply" and "actually applies" are different questions with expensive consequences for getting wrong. If you're unsure after checking the tool, it's worth a short call with an AML/CTF consultant before the deadline rather than after an audit.

The Three Dates That Matter​

• March 31, 2026 — AUSTRAC's enrollment portal opened
• July 1, 2026 — AML/CTF obligations formally commenced for newly regulated entities
• July 29, 2026 — Deadline to enroll if you were already providing a designated service before July 1

If you start providing a designated service after July 1 (say, you take on your first trust-administration client in September), the clock works differently: you get 28 days from the date you begin providing that service to enroll, not a fixed calendar date.

What Enrollment Actually Requires​

Enrollment happens through AUSTRAC Online and is separate from — and comes before — building your full AML/CTF program. The business profile form asks for:

• Legal and trading names, ABN/ACN/ARBN details, and business structure
• Registered office and principal place of business
• Director and officer identification details
• Employee count, annual turnover, and website domains
• A description of each designated service you provide, including when you started providing it
• Whether you belong to a reporting group with related entities
• Any prior criminal, civil, or enforcement action against the business or its key people

Once enrolled, you're required to notify AUSTRAC of material changes to that information within 14 days — this isn't a one-time form you file and forget.

Building the Program: What Comes After Enrollment​

Enrollment gets you registered. It doesn't get you compliant. Every reporting entity needs a written AML/CTF program with two parts:

• Part A — the risk framework. How your business identifies, assesses, and manages its money-laundering and terrorism-financing risk, scaled to the size and nature of your client base. A sole practitioner doing occasional trust work has a very different risk profile — and a much shorter Part A — than a firm managing dozens of corporate structures for offshore clients.
• Part B — customer due diligence procedures. How you verify who your clients (and their beneficial owners) actually are, including checks for politically exposed persons (PEPs) and targeted financial sanctions lists, before you provide a designated service.

AUSTRAC's guidance explicitly builds in flexibility for small practices: a sole trader or two-partner firm can have one person hold the AML/CTF compliance officer role alongside their other duties, rather than needing a dedicated compliance hire. AUSTRAC's accounting-sector starter kit — templates, a risk-assessment framework, and a compliance checklist — is designed to be adapted down to that scale rather than assuming big-firm resourcing.

The Cost of Getting This Wrong​

AUSTRAC's enforcement powers here aren't symbolic. Civil penalties under the AML/CTF Act can reach up to 20,000 penalty units for an individual and 100,000 penalty units for a body corporate, per contravention — at the current $364 Commonwealth penalty unit value, that's a maximum of roughly $7.3 million for an individual and $36.4 million for a corporation. Failing to enroll at all carries its own daily fines, reported at roughly $18,780 per day for firms and $3,756 per day for individuals for as long as the breach continues.

Those are ceiling figures a court could impose for serious, repeated conduct — not what a first-time, good-faith late enrollment will trigger. But AUSTRAC has been explicit that it intends to actively enforce Tranche 2 rather than treat the first year as a grace period, and the agency's own enforcement actions register shows it isn't shy about naming firms publicly when it does act.

A Practical Checklist Before July 29​

1. Run AUSTRAC's designated-service self-assessment for every service line your firm offers, not just the ones you assume are covered.
2. Enroll online if any service triggers the obligation — even one client, even one service.
3. Start (or finish) your AML/CTF program, using AUSTRAC's starter kit as the scaffolding rather than building from a blank page.
4. Decide who holds the compliance-officer role — for a small practice, this can be an existing partner or manager, not a new hire.
5. Calendar the 14-day notification window for any future changes to your enrollment details.

Keeping Your Own Books Audit-Ready​

If Tranche 2 is pushing your firm to formalize client due diligence and record-keeping, it's worth applying the same discipline to your own books. Plain-text accounting with Beancount gives you a complete, version-controlled history of every transaction — the kind of clear, auditable trail that makes both your own compliance reviews and your clients' due diligence conversations easier. Beancount.io offers free hosted plain-text accounting with full transparency and no vendor lock-in — a natural fit for a profession that's about to spend a lot more time thinking about record integrity. Get started for free and see the difference a fully auditable ledger makes.