Legal practitioners are one of the sectors brought into Australia's AML/CTF regime under Tranche 2, with obligations applying from 1 July 2026 — and the reasons why go directly to what legal services can, without any wrongdoing by the lawyer involved, enable for a client who intends to misuse them.
Why are legal services specifically vulnerable to exploitation?
A lawyer's professional services can be used to conceal the proceeds of crime, place assets beyond easy legal reach to dodge future liabilities, obscure beneficial ownership through intricate layered structures, bypass regulatory oversight, lend legitimacy to unlawful activity, and help disguise the connection between criminal proceeds and the people who generated them. None of this requires a complicit lawyer — the services themselves are simply well-suited to these purposes, which is exactly why FATF and AUSTRAC treat the sector as a genuine gap in AML coverage worth closing.
Which specific legal services does Tranche 2 actually cover?
AUSTRAC's professional designated services table is the authoritative list. Designated services include: preparing and executing property transactions (buying, selling, transferring); preparing and executing transactions involving legal entities; managing a client's financial assets, including money, accounts, securities, digital assets, and property; creating, operating, or managing legal entities on a client's behalf; acting as director, secretary, holder of power of attorney, partner, trustee, or nominee shareholder; and providing a registered office or administrative address for a business entity. Exempt services include financial statement audits, representing a client in legal proceedings, and purely advisory work with no underlying transaction — barrister work, guidance on directors' duties, or employment law advice among them.
What does AUSTRAC actually require of law firms now?
AUSTRAC publishes a legal profession program starter kit and risk insights for legal professionals. Firms providing designated services must register with AUSTRAC as reporting entities, establish and maintain an AML/CTF compliance programme, conduct customer due diligence both at the start of a relationship and continuously afterward, report suspicious transactions and activity, and maintain comprehensive records of all of it. This mirrors what other DNFBP sectors face under the same reforms — the obligations are consistent across Tranche 2 entities, even though the specific services that trigger them differ by profession.
What should law firms actually be doing now?
Adapting quickly matters — these are firms building AML capability from a standing start, without years of accumulated process. Maintaining professional and regulatory integrity while meeting the new obligations, rather than treating them as an unwelcome afterthought, is what actually protects the profession's credibility and Australia's broader defence against financial crime. See MemberCheck's legal industry page for how client due diligence, beneficial ownership verification, and screening apply specifically to legal practice.
