Tranche 2 is the second phase of Australia's AML/CTF Act reforms, extending obligations to non-financial businesses and professions. AUSTRAC's list of newly regulated sectors is legal professionals, accountants, conveyancers, real estate professionals, and dealers in precious metals, stones and products, with obligations applying from 1 July 2026. Gambling services are not part of this cohort; they were already reporting entities under the existing regime. Beyond what it means for those specific sectors, it's a useful signal for where AML/CTF regulation is heading more broadly.
What is actually changing under Tranche 2?
Sectors newly subject to AML/CTF requirements must implement customer identification procedures, maintain records, and report suspicious activity to AUSTRAC — obligations covered in detail across lawyers, accountants, real estate, precious metals dealers, and trust and company service providers.
What does Tranche 2 signal for global compliance generally?
Three things stand out. Convergence toward comprehensive coverage — FATF's recommendations are steadily pushing jurisdictions to regulate sectors that used to sit outside AML/CTF scope entirely, and Australia closing this gap brings it into closer alignment with the UK, EU, and Singapore, all of which already regulate similar designated non-financial businesses and professions. Rising technology expectations — manual processes simply won't scale to meet continuing obligations across a large client base, which is exactly why RegTech adoption has become central to how newly-regulated sectors actually comply rather than just a nice-to-have. Collaboration across sectors — extending obligations to professional services expands the pool of information available to law enforcement, since money laundering risk has always extended well beyond the traditional financial sector, exploiting exactly the gaps in regulatory coverage that existed before reforms like this closed them.
How should a business actually prepare?
Conduct a genuine gap analysis against current practice rather than assuming existing processes are close enough. Assess what technology investment is actually needed rather than retrofitting a manual process. Develop clear policies specific to the business's own services. Train staff properly, not just circulate a document. And engage directly with AUSTRAC's own guidance rather than relying solely on secondhand interpretation.
What's the cost of not taking this seriously?
Penalties, potential prosecution, reputational damage, and direct regulatory action — the same enforcement toolkit already applied to long-regulated financial institutions, now extending to sectors encountering it for the first time. Professional compliance providers can meaningfully shorten the gap between "newly regulated" and "genuinely compliant," but the underlying shift Tranche 2 represents — regulation following risk into whichever sector it's actually concentrated in — isn't specific to Australia, and isn't likely to reverse.
