A significant shift is underway in Australia’s fight against financial crime and it is about to redraw the boundaries of responsibility across entire professions.
From March 2026, AUSTRAC will begin rolling out new regulatory requirements and a fundamentally different way of engaging with the sectors it supervises. The launch of its redesigned website on 30 March, timed with the opening of enrolment for newly regulated entities, may look like a routine update. In reality, it marks the beginning of a much more hands-on, expectation-driven phase of enforcement.
For the first time, large parts of the professional services economy, including notably the legal sector, are being formally brought into Australia’s anti-money laundering (AML) and counter-terrorism financing (CTF) regime.
From trusted adviser to regulated gatekeeper
In a recent address to the Law Society of New South Wales, Brendan Thomas framed the reforms by noting that the legal profession is now part of the frontline in preventing financial crime.
For decades, lawyers have occupied a unique position in Australia. They facilitate property transactions, establish companies and trusts, and often manage client funds. These services are essential to the functioning of the economy but they also provide exactly the kind of access and legitimacy that sophisticated criminal networks seek.
That reality has not gone unnoticed. Regulators and international bodies have long pointed to professional services as a weak link in the system, particularly in jurisdictions where lawyers were not subject to the same obligations as banks. Tranche 2 closes that gap.
This is a redefinition of professional responsibility. Legal practitioners who were once outside the AML framework must now actively participate in identifying and managing financial crime risk. The consequences for failing to do so are significant, with penalties for systemic non-compliance reaching into the millions.
How criminal money moves and why it matters
At the heart of these reforms is a better understanding of how money laundering actually works in practice.
Illicit funds don’t usually enter the legitimate economy in a single step. Instead, they are moved, disguised, and reintroduced through a sequence of transactions designed to obscure their origin. It is in these later stages, when money is layered through complex structures or integrated into real assets, that professional services become valuable.
A property purchase through a corporate vehicle, the creation of a trust, or the temporary movement of funds through a client account can all appear entirely legitimate in isolation. But taken together, these activities can form part of a carefully constructed mechanism to conceal ownership, move value across borders, and ultimately legitimise criminal proceeds.
As Brendan Thomas emphasised, this is not incidental misuse. It is a deliberate business model used by organised crime. And its impact extends far beyond individual transactions. It distorts markets, inflates asset prices, and channels billions of dollars into illegal activities.
A broader net
While the legal profession is the most visible addition to the regime, it is far from the only one. The reforms reflect a broader shift toward regulating the “gatekeeper” professions or those who sit at key entry points to the financial system.
Real estate professionals, accountants, and company service providers are all part of this expanded landscape. What unites them is not their title, but the fact that they facilitate transactions, structures, and asset movements that can be exploited if left unchecked.
For businesses operating in these sectors, if your services can be used to move or legitimise value, you are part of the risk environment and now, part of the regulatory response.
Why AUSTRAC’s website overhaul matters
Against this backdrop, AUSTRAC’s upcoming website changes take on greater significance.
The redesigned platform promises a more intuitive structure, improved search functionality, and clearer guidance tailored to different types of users. For newly regulated entities, it will offer a more guided onboarding experience, helping businesses determine whether they are in scope, understand their obligations, and navigate the enrolment process.
This reflects a deliberate effort to remove ambiguity at a critical moment. As the regime expands, the regulator is making it easier for businesses to access the information they need and also harder to justify inaction. The tools for compliance are becoming more accessible at the same time as expectations are rising.
What will actually change
For many firms, the real challenge will be in translating the reforms into effective, day-to-day practice.
The shift requires embedding structured processes into everyday work such as verifying who clients really are, understanding the purpose behind transactions, and recognising when something does not quite add up. It means documenting decisions, monitoring relationships over time, and knowing when to escalate concerns.
It also means contributing to a broader intelligence framework. Suspicious matter reports submitted by reporting entities form part of a national picture, enabling regulators and law enforcement to detect patterns that would otherwise remain invisible.
Importantly, the regulator has been careful to set expectations at a realistic level. Businesses are not being asked to investigate crimes or halt legitimate activity unnecessarily. They are being asked to apply professional judgement, supported by clear processes, and to act when risks cannot be reasonably explained.
Progress, not perfection
One of the more pragmatic elements of AUSTRAC’s messaging has been its emphasis on progress over perfection.
The expectation is not that every firm will have a flawless system in place from day one. But businesses must demonstrate that they understand their risks, have identified gaps, and are taking credible steps to address them. Senior leadership involvement is not optional. It is a critical indication of accountability.
At the same time, the regulator has been equally clear about the limits of this flexibility. Where risks are left unmanaged, or where firms fail to engage meaningfully with their obligations, enforcement action will follow.
This balance between support and scrutiny is likely to define the early phase of implementation.
Preparing for a different professional environment
As March and July 2026 approach, the immediate priority for businesses is to move from awareness to readiness.
That begins with understanding whether their services fall within scope, but it quickly extends into more fundamental questions about how work is done. Many firms will find that elements of compliance already exist in informal or fragmented ways like identity checks, internal discussions about risk or controls around client funds. The task now is to bring those elements together into a coherent, documented framework that can withstand regulatory scrutiny.
Equally important is the human dimension. These reforms will only be effective if the people within organisations understand what to look for and feel confident in acting on it. That requires training, clarity, and a culture that treats financial crime prevention as part of professional responsibility rather than an administrative burden.
More than compliance
It is a mistake to see Tranche 2 as another layer of regulation that is complex, technical, and time-consuming. This is about protecting the integrity of the systems that underpin the economy. Every instance of money laundering represents not just a regulatory failure, but a real-world harm, whether through fraud, exploitation, or organised crime.
By bringing lawyers and other professional service providers into the regime, Australia is closing a critical gap. The success of that effort will depend not just on rules and enforcement, but on how those professions respond.
Our guide on Tranche 2 reforms to Australia’s AML/CTF regime, outlines when the reforms take effect, which services and entities are newly captured, and what those businesses must do, from enrolling with the regulator to developing an AML/CTF programme to conducting customer due diligence, reporting, and record-keeping. Get it here.
