For years, tranche 2 has hovered in the background of the Australian legal sector, frequently discussed, often delayed, and so easy to ignore. Many lawyers have been hearing about it for over a decade but they filed it away as a future problem, and carried on with business as usual.
That is no longer an option.
From 1 July 2026, large parts of the Australian legal profession will be brought into the scope of the anti-money laundering and counter-terrorism financing (AML/CTF) regime for the first time. Law firms providing certain services will become regulated entities, with obligations that go beyond traditional professional conduct rules.
This is a structural change in how legal services intersect with financial crime risk and it will reshape how many firms onboard clients, manage transactions, and document their decisions.
Why now?
The introduction of tranche 2 is the result of sustained international pressure and a long-recognised regulatory gap.
Globally, lawyers are considered “gatekeepers” to the financial system. They facilitate property transactions, establish companies and trusts, manage client funds, and advise on complex financial structures. These are essential services in any modern economy but they are also services that can be exploited if the right safeguards are not in place.
International bodies, especially the Financial Action Task Force (FATF), have been pointing this out for years. Australia has stood out as one of the few developed jurisdictions where lawyers were not fully captured by AML regulation. That gap has become increasingly difficult to justify.
There is also a clear timing driver. Australia’s next FATF mutual evaluation is expected around 2026, and regulators want to ensure that the legal sector is no longer outside the regime by then. Essentially, tranche 2 is Australia aligning itself with global standards already embedded in places like the UK, Canada and across Europe.
The key dates law firms cannot ignore
While the policy discussion has been long-running, the implementation timeline is now very real.
The first key milestone is 31 March 2026, when enrolment opens for tranche 2 entities. Around the same time, AUSTRAC is rolling out updates to its systems and guidance to support newly regulated sectors.
The headline date is 1 July 2026. From that point, certain legal services will formally fall within the AML/CTF regime. Law firms providing those services will be required to comply with obligations including client due diligence, transaction monitoring and suspicious matter reporting.
There is also a practical deadline shortly after. Firms must complete enrolment with AUSTRAC by 29 July 2026.
It’s important to note that the period before July 2026 is not a grace period but rather an implementation window. Firms that wait until the deadline to act will find themselves under significant pressure.
Not all lawyers, but many
One of the most common misconceptions about tranche 2 is that it applies to all lawyers equally. It does not. The regime is not based on professional titles. It is based on the services a firm provides.
Legal work that involves higher-risk financial activity is the focus. This includes areas such as property transactions, company and trust formation, managing client funds beyond routine fees, and facilitating certain financial arrangements. Firms working in conveyancing, corporate structuring or private client practice are therefore much more likely to be captured.
By contrast, lawyers whose work rarely involves financial transactions such as litigators or criminal defence practitioners, may find that the impact is limited.
The practical takeaway is that firms need to look closely at what they actually do. Two departments within the same firm may face very different obligations under the new regime.
What changes in practice?
For many lawyers, the most tangible impact of tranche 2 will be felt at the very start of a matter.
Consider a familiar scenario. A client approaches a firm to purchase an investment property through a newly established company. Today, the process might involve opening a file, carrying out basic identity checks, and proceeding with the transaction.
Under the new regime, there is an additional layer. Before providing the service, the firm will need to conduct customer due diligence. This goes beyond verifying identity. It includes understanding who ultimately owns or controls the company, assessing the risk profile of the client, and identifying any red flags.
If the ownership structure is straightforward and the funds are coming from a low-risk source, the matter can proceed as normal. But if there are complexities, such as multiple layers of ownership or links to higher-risk jurisdictions, the firm may need to carry out enhanced due diligence.
The key point is that the transaction itself is not prohibited. What changes is the process around it. Law firms will need to apply a structured, risk-based approach before proceeding.
Less daunting than it sounds?
One of the more intimidating aspects of tranche 2 is the requirement to implement an AML/CTF programme. For many firms, this conjures images of lengthy compliance manuals and rigid procedures. But in reality, the expectation is more practical.
An AML programme is essentially a documented framework that reflects how a firm understands and manages its exposure to financial crime risk. It has two core components, a risk assessment, and the policies and procedures used to mitigate those risks.
For law firms, this should feel familiar. It starts with understanding the nature of the work the firm undertakes, the types of clients it acts for, and the jurisdictions it deals with. It then translates that understanding into clear processes for client onboarding, monitoring, escalation and record keeping.
Regulators are not looking for a one-size-fits-all template. They are looking for something that makes sense in the context of the firm’s actual practice.
Risk is where theory meets reality
If there is one area where firms often struggle, it is risk assessment. A good risk assessment is not an abstract document filled with generic statements about money laundering. It is grounded in the reality of the firm’s day-to-day work.
That means asking practical questions. What types of transactions does the firm handle? Are clients onboarded remotely? Are there cross-border elements? How often does the firm deal with complex ownership structures?
It also means recognising patterns that may indicate elevated risk. These might include unexplained third-party funding, transactions that do not align with a client’s profile, or a sense of urgency that lacks a clear commercial rationale.
AUSTRAC’s guidance points directly to these kinds of real-world indicators. The expectation is not perfection, but awareness and the ability to identify where risk is most likely to arise in practice.
The tension with privilege
For lawyers, no discussion of AML obligations is complete without addressing legal professional privilege. The good news is that privilege remains protected under the regime. Firms are not required to disclose information that is genuinely privileged.
However, the boundary is not always straightforward. Legal advice may be privileged, but the underlying facts of a transaction, such as the movement of funds, are generally not.
This creates a need for careful internal processes. Firms will need to distinguish between what can and cannot be reported, and ensure that staff understand those distinctions.
There is also the issue of “tipping off”. Once a suspicious matter report is made, it is an offence to inform the client. This is a significant shift for many lawyers and will require both awareness and discipline in practice.
What does this mean for the legal sector?
Tranche 2 represents more than a compliance exercise. It reflects a broader shift in how the role of lawyers is viewed in the context of financial crime. Lawyers are no longer seen as peripheral to the system. They are seen as participants within it, with a responsibility to recognise and respond to risk.
For some firms, this will require substantial changes to processes and culture. For others, the adjustments may be more modest. But for all firms within scope, they should start preparing early. This means mapping their services, assessing their risks, and building practical systems. That will ensure they will be in a far stronger position when the regime comes into force.
Those that delay may find themselves trying to retrofit compliance under pressure.
A final thought
Tranche 2 has been a long time coming, but it is now firmly on the horizon. The introduction of AML obligations into the legal sector brings Australia into line with global practice, but it also raises important questions about how legal services are delivered and regulated.
At its core, this is about trust in the legal profession, in the financial system, and in the rule of law. For lawyers, the challenge is not simply to comply, but to adapt in a way that preserves professional values while meeting new regulatory expectations.
The clock is now ticking toward July 2026.
Australia’s tranche 2 AML/CTF reforms will bring law firms into scope for the first time, creating major new obligations around due diligence, reporting, monitoring and governance. Our guide explains what the reforms mean for the legal sector, where the highest risks sit, and the practical steps firms should take now to prepare for July 2026. Get it here.
Don’t miss our webinar-on-demand, AML tranche 2 healthcheck: your last-minute checklist. Watch it here.
