AUSTRAC's published enrolment counts totalled 40,070 newly regulated businesses at 27 August 2026. That is real operational data and it is not a compliance rate, because the table carries no verified denominator. The widely quoted non-compliance percentages built on it do not survive contact with how coverage actually works.
What are the verified enrolment figures?
AUSTRAC's enrolment progress table, updated 27 August 2026, recorded the following sector counts.
| Sector | Enrolments at 27 August 2026 |
|---|---|
| Real estate | 18,070 |
| Accounting and professional services | 13,610 |
| Lawyers | 6,500 |
| Conveyancers | 1,590 |
| Jewellers and dealers in precious metals and goods | 300 |
| Total | 40,070 |
Those are counts of enrolments, published by the regulator, on a stated date. Read as that, they are useful: they show tens of thousands of businesses have entered the regime, and that implementation is running at very different scale across sectors.
Two properties of the table are worth holding on to before any of it is quoted. It counts enrolments rather than businesses, and one business can hold more than one enrolment where it operates through several legal entities. And it is a snapshot, not a running total with a fixed methodology, so the sector groupings themselves can change between publications.
Why is a sector non-compliance rate not calculable from this?
A rate needs a numerator and a denominator. AUSTRAC's table supplies the first and not the second. It does not show the number of businesses in each profession that are legally required to enrol.
That gap is not an oversight in the publication. It reflects how the regime works. Coverage depends on whether a person provides a designated service with the required connection to Australia, not on whether the person belongs to a profession. Two firms with identical professional qualifications and client bases can reach different answers depending on what they actually do.
So claims that a fixed percentage of Tranche 2 entities are non-compliant, or that a specific number of businesses are operating illegally, should not be published unless both the denominator and the method can be substantiated. Most versions circulating in market commentary cannot be.
Why is a profession-wide denominator so hard to build?
A national count of accounting firms, legal practices, real estate agencies or conveyancers is not the same thing as a count of reporting entities, for three reasons that compound.
Some organisations provide no designated service at all. Others provide several, which affects obligations but not the enrolment count. And corporate groups, partnerships and reporting groups can allocate obligations across entities in ways that make the relationship between businesses and enrolments something other than one to one.
A board paper that divides AUSTRAC enrolments by a business-registry or industry-association count and labels the result non-compliance is therefore reporting an artefact of its own arithmetic.
It is worth being explicit about the direction of that error, because it can run either way. Counting every firm in a profession as a required enroller overstates the regulated population and manufactures a compliance gap. Counting only the largest firms understates it and hides one. Neither number tells a director anything actionable about their own business.
What does the data actually show?
Two things, and both are more useful to a compliance leader than a percentage.
The first is scale and unevenness. Real estate and accounting have produced enrolment volumes an order of magnitude above jewellers and dealers in precious metals, which tells you something about where implementation effort and supervisory attention are concentrated.
Conveyancing is the sector where the small absolute number is most easily misread. A count of 1,590 enrolments looks low beside real estate, but conveyancing is a smaller profession and the comparison only means something with a denominator that does not exist. The useful conclusion is about supervisory attention, not about a rate.
The second is that the numbers now sit alongside an enforcement signal. On 28 August 2026 AUSTRAC announced it had begun issuing section 167 information-gathering notices to businesses that appeared to be providing designated services without being enrolled. Its May 2026 expectations had already said newly regulated businesses should be enrolled, hold an AML/CTF programme and a compliance officer, train relevant staff and be ready to report suspicious matters.
Published enrolment data plus active information-gathering is a clearer picture than any unverified ratio. It says the market has moved from preparation into live regulatory operation.
What should a board ask for instead?
A legal-entity and service inventory that answers five questions, each of which the business can actually establish from its own records.
Which entities or partnerships provide designated services, which of those services are provided, and from what date. Which entities have applied for and completed enrolment.
Then the governance layer: which AML/CTF compliance officer, risk assessment and programme cover each entity or reporting group. And finally the evidence layer, which is whether the business can produce records of customer due diligence, screening, reporting readiness, training and retention.
That converts a market statistic into a governance test. No business controls the sector enrolment rate. Every business controls whether its own operating perimeter is known and evidenced. Our Tranche 2 checklist works through that mapping in the order the obligations attach.
How should the figures be used over time?
As a trend signal, compared like for like, with the date kept beside every number. The available snapshots do not support describing any particular month as a plateau, and small movements between two published tables are not a reliable basis for that claim.
When AUSTRAC refreshes the table, update the figures rather than publishing another near-duplicate page about the enrolment gap. Sector groupings and publication dates both change, so two snapshots are only comparable when you have checked that they count the same thing.
For internal reporting the same discipline applies. If a compliance dashboard carries the sector figure at all, it should carry the publication date beside it and a note that it is an enrolment count rather than a compliance measure. Otherwise the number gets repeated in a board pack six months later as though it were current, which is how an unverified percentage enters an organisation's own reporting in the first place.
Where does technology fit after enrolment?
Enrolment is an administrative gateway. It does not operationalise customer due diligence and it does not create the evidence trail an enterprise needs once it is inside the regime.
The controls that follow are where the work sits: structured screening, risk assessment, ongoing monitoring and retrievable decision records across customer and business workflows. For multi-office or higher-volume organisations the objective is to move from being able to say the business enrolled to being able to show how the control operates on a given customer on a given date.
That distinction matters more as attention shifts from whether businesses entered the regime to how effectively they meet their obligations. The Tranche 2 hub routes to the sector guidance and the readiness sequence behind it.
Important information
This article provides general information about Australia's AML/CTF framework and does not constitute legal advice. Whether an obligation applies depends on the designated services provided and the circumstances of the business.
Enrolment figures are AUSTRAC's own published counts as at the date stated and will change. Check the current table before relying on them, and take your own advice on your own coverage position. Reporting entities remain responsible for meeting their obligations under the AML/CTF Act, the Rules and applicable AUSTRAC guidance, alongside its stated regulatory expectations.
