For an accounting partnership the enrolment form is the easy part. The difficulty is defining the regulated perimeter across a mixed service book and several legal entities, and that work has to be done before enrolment means anything. Four roadblocks account for most of the delay.
Why is the perimeter harder than the paperwork?
Accounting firms typically deliver a mix of tax, audit, bookkeeping, restructuring, corporate advisory, transaction support, and trust or company services. Under the reformed AML/CTF regime the relevant question is not whether the organisation is an accounting practice. It is whether a person is providing one or more designated services covered by the Act.
That distinction creates a real scoping problem for partnerships and multi-office firms, because two teams can use similar language for work with different regulatory consequences. A tax adviser may discuss a transaction without directly advancing it, while a different engagement moves into arranging or carrying out activity that falls inside a designated service.
A reliable enrolment process therefore begins with a service inventory and matter-level examples rather than a profession-wide assumption. If the mapping cannot explain how a real engagement crosses from advice into a regulated service, it is not yet usable.
There is a second-order problem in mixed practices that is worth naming early. The same client often buys several services across a year, some designated and some not, from teams that do not share a matter file. Scope is a property of each service rather than of the relationship, so a client-level answer will be wrong in both directions at once.
Roadblock one: inconsistent service definitions
The first failure mode is letting each partner or office decide scope independently. That produces different interpretations of the same service, and it makes establishing a commencement date very difficult later, which matters because the commencement date drives the enrolment deadline.
The fix is a controlled service catalogue that links the firm's own commercial service names to the relevant AUSTRAC designated-service descriptions. For ambiguous areas, record concrete examples of what is in scope, what is out, and what must be escalated before work proceeds.
Own the catalogue centrally but test it against real engagements. A mapping written only in regulatory language will be reinterpreted locally the first time it meets an unusual matter.
A useful test of whether the catalogue is finished is to hand it to a partner who was not involved in writing it, with three recent matters, and ask them to classify each one. If two reviewers disagree, the catalogue has an ambiguity that will otherwise be resolved differently in every office.
Roadblock two: mapping the service to the right entity
Large accounting networks may operate through partnerships, incorporated entities, trusts or service companies, and engagements can move between offices or specialist teams. Enrolment and AML/CTF obligations need to attach to the person that provides the designated service, taking account of any reporting-group structure and the partnership provisions in the Act.
For each service, record the following and reconcile it to source systems rather than to an organisational chart.
| Field | Source to reconcile against |
|---|---|
| Contracting entity | Engagement letters |
| Delivery entity | Practice-management records |
| Responsible partner | Matter ownership data |
| Office or location | Practice-management records |
| Customer type | Client onboarding records |
| Date the regulated activity began | Engagement letters, invoices, ledger activity |
Engagement letters, billing data and practice-management records will disagree with each other in places. Those disagreements are the point of the exercise, because they are where the commencement date is genuinely uncertain.
Resolve them in favour of what the records show happened rather than what the engagement letter anticipated. Delivery frequently differs from the scope originally agreed, and it is delivery that determines whether a designated service was provided.
Roadblock three: using risk appetite as a substitute for legal scope
A firm can decide not to provide certain higher-risk services, or to impose additional approvals. That is legitimate risk management. It cannot redefine a service that the law treats as designated.
The sequence should be to determine legal scope, identify the ML/TF risks associated with the service, decide whether and how the firm is willing to provide it, then design controls proportionate to that risk.
Governance gets considerably clearer when legal applicability and commercial appetite are documented as two separate decisions with two separate owners. Collapsing them produces a scope document that quietly reflects what the firm wanted the answer to be.
Roadblock four: appointing a compliance officer without operating authority
Newly regulated businesses are expected to have an AML/CTF compliance officer. In a partnership, the role needs access to matter data, partner sponsorship, escalation authority and enough resource to challenge inconsistent practice.
The compliance officer should also not be the only person who understands the programme. Service-line leaders need defined responsibilities for customer due diligence, exceptions, suspicious matter escalation, records and training, and partnership leadership retains an oversight role.
A single appointment with no authority and no distributed responsibility is the version of this that passes an internal check and fails a real one. It also concentrates the whole programme in one person's knowledge, which is a continuity risk quite apart from the compliance question.
What should an enrolment readiness pack contain?
Before management treats enrolment as complete, the firm should be able to produce a short pack covering the legal-entity map and reporting-group position, the service catalogue and its designated-service mapping, commencement dates and enrolment evidence, and the ML/TF risk assessment.
It should also cover programme approval and the compliance officer appointment, the customer due diligence and escalation workflows, and staff training status with record-keeping controls.
That pack is what converts a portal submission into an operating model capable of being reviewed by management, internal assurance or AUSTRAC. Assembling it also tends to surface the gaps a self-assessment misses, because each item has to be produced rather than asserted.
Keep it as a live document with an owner and a review date. A readiness pack that describes the firm as it was at enrolment becomes misleading the first time a service line, office or entity structure changes, and in a growing practice that is usually within months. Our Tranche 2 checklist sets out the same sequence step by step, and the accounting sector guidance covers how the obligations land on a practice.
Where does technology fit, and where does it not?
Once the firm has determined which services and entities are in scope, the customer and business screening, risk assessment, monitoring and evidence layer is where a platform earns its place. Structured workflows matter most where several partners or offices need to reach consistent review decisions and leave comparable audit records.
No platform decides whether a particular accounting activity is a designated service. That legal scope has to be established first and then translated into system and process design, in that order. Configuring a system against an unresolved scope question simply encodes the ambiguity, and it becomes considerably harder to unpick once matters have been processed through it. The Tranche 2 hub routes to the rest of the programme.
Important information
This article provides general information about Australia's AML/CTF framework and does not constitute legal advice. Whether an obligation applies depends on the designated services provided and the circumstances of the business.
Scope questions in professional services turn on specific facts, so take your own legal advice on your own service lines and entity structure. Reporting entities remain responsible for meeting their obligations under the AML/CTF Act, the Rules and applicable AUSTRAC guidance, alongside its published regulatory expectations.
