Disclaimer: The content on this website is general and is not legal advice. Before you make a decision or take a particular action based on the content on this website, you should check its accuracy, completeness, currency and relevance for your purposes. You may wish to seek independent professional advice.
[Updated 21 January 2026]
AUSTRAC has outlined the key obligations for businesses that will be regulated under Australia’s expanded AML/CTF laws. These include:
- Enrolling and registering (when required) with AUSTRAC
- Developing and maintaining an AML/CTF program tailored to your business
- Conducting initial and ongoing customer due diligence
- Reporting certain transactions and suspicious matters / activities
- Making and keeping required records
Navigating AUSTRAC’s enrolment and registration process can be overwhelming, especially for businesses newly captured under the expanded regulatory framework. In this article we’ll provide a clear, step-by-step breakdown to help ensure compliance and understanding. Note this is not legal advice, but rather general guidance intended to assist with understanding the process.
Check if you'll be regulatedAustralia’s AML/CTF laws will expand to capture new designated services and sectors:
If your business provides any of these services and has a geographical link to Australia, you may need to comply with AML/CTF laws. AUSTRAC offers an online tool to help you assess whether your services fall within scope. Tranche 2 entities that provide new designated services will be able to enrol with AUSTRAC from 31 March 2026. |
Why you need to enrol and register
Under the expanded AML/CTF regime, AUSTRAC requires businesses that provide designated services with an Australian nexus to enrol before offering those services.
Enrolment
- Establishes your regulatory identity and confirms who within your organisation is responsible for AML/CTF compliance.
- Enables AUSTRAC to oversee your compliance and monitor risks.
- Forms the foundation for your other AML/CTF obligations, such as reporting and customer due diligence.
If you provide virtual asset services, you must also register with AUSTRAC (in addition to enrolment) before you start providing those services.
Failing to enrol or register when required can expose your business to compliance action, including penalties.
Why enrol and register with AUSTRAC
Enrolling with AUSTRAC makes your business part of Australia’s financial intelligence network, supporting the detection and disruption of money laundering, terrorism financing and other serious crime.
It establishes your regulatory standing, enables AUSTRAC to supervise your compliance, and ensures your AML/CTF obligations are applied consistently in practice.
Enrolment also helps reduce legal, financial and reputational risk by demonstrating that your business meets its regulatory responsibilities and contributes to the integrity of the Australian financial system.
Step 1: Do you need to enrol?
If you provide a designated service with a geographical link to Australia, you will need to enrol with AUSTRAC.
AUSTRAC guidance makes clear that:
- Enrolment opens on 31 March 2026 for newly regulated sectors.
- You must enrol before you start providing a designated service, or within 28 days of starting the service, depending on how your business operates.
Key designated services that trigger enrolment include:
- Virtual asset services – e.g. exchanging virtual assets for money or other virtual assets, providing virtual asset custody or safekeeping.
- Real estate services – such as brokering or assisting in buying or selling property.
- Professional services – lawyers, accountants and conveyancers assisting with transactions or holding client funds in connection with designated activities.
- Dealers in precious metals, stones and products – e.g. accepting cash or virtual assets of $10,000 or more in purchase/sale transactions.
AUSTRAC’s reforms guidance provides detail on what qualifies as a designated service and how these services trigger obligations.
Helpful linksAUSTRAC "Check if you'll be regulated" online checker AUSTRAC “New industries and services to be regulated’ page |
Step 2: Do you need to register?
If you provide virtual asset services, the answer is yes. If not, go to Step 3.
For businesses providing virtual asset services (see above), additional registration with AUSTRAC is mandatory before 31 March 2026. Operating without registration after this date carries criminal penalties.
How to register
1. Who must register
You must enrol and register if you provide:
- Remittance services
- Digital currency exchange (DCE) services
You must not provide these services until AUSTRAC has confirmed your registration. Operating without registration is unlawful and penalties may apply. If you do not provide these services, registration does not apply and you can proceed to Step 3.
2. What registration involves
Registration is completed after enrolment via AUSTRAC Online and requires additional information, including:
- the services your business provides
- your business structure and ownership
- business contact details key personnel (such as directors and officeholders)
- ABN/ACN and any foreign registration details
- financial statements for the most recent financial year
- any criminal, civil or enforcement action relating to the business or key personnel
AUSTRAC may request further information as part of the assessment.
3. Police checks and approval
You must provide an official police check for each key person, issued within 6 months of applying. Acceptable documents include a National Police Certificate or equivalent.
AUSTRAC can take up to 90 days to assess registration and may refuse, suspend or cancel registration if it considers the business poses an unacceptable financial crime risk.
You must not provide remittance or DCE services unless registration is approved.
4. Remittance network affiliates
If you operate as an affiliate of a registered remittance network provider, the network provider is responsible for registering you. You should only register yourself if you also operate independently.
Step 3: Enrolling with AUSTRAC
Key dates
Tranche 2 entities that provide new designated services will be able to enrol with AUSTRAC from 31 March 2026.
- If you start providing virtual asset or intermediary transfer services on 31 March 2026, you must enrol by 28 April 2026.
- If you start providing other designated services on 1 July 2026 (e.g., real estate, professional services), you must enrol by 29 July 2026
What enrolment involves
Enrolling with AUSTRAC means providing accurate details about your business, including:
- Business structure and identity
- legal entity details
- ABN/ACN (if relevant)
- principal place of business
- Designated services you provide or plan to provide
- Key personnel and contacts
- Details of your AML/CTF Compliance Officer (AMLCO)
- directors, partners, or senior management responsible for compliance
- Where applicable, reporting group information if you operate as part of a corporate group
AUSTRAC’s guidance notes that the AUSTRAC Business Portal will be used to submit enrolment information, and businesses need to create an account to access the portal.
Updating your details
Once enrolled, you must:
- Keep your enrolment up to date
- Notify AUSTRAC promptly when:
- your designated services change
- key personnel change
- your business structure changes
AUSTRAC expects updated enrolment information to be provided within the statutory timeframe (generally within 28 days of the change).
Tips and tricks for enrolling successfully
- Don't leave it to the last minute: Procrastination can lead to unnecessary stress, especially since AUSTRAC's systems may experience high traffic during peak times. Submitting your enrollment early gives you time to resolve any issues that may arise.
- Familiarise yourself with the process: Before you start, take the time to read through AUSTRAC's guidelines and resources - they are sending out information very frequently. Understanding the requirements and steps involved can save you from confusion during the process.
- Have all required documentation ready: Before starting the enrolment process, ensure you have all the necessary documents and information, such as your business details, the nature of your services, and responsible persons. This will make the process smoother and faster.
- Verify your details carefully: Mistakes in your business information can delay the registration process. Double-check everything, especially your ABN (Australian Business Number), business structure, and the responsible persons associated with the company.
- Utilise AUSTRAC's support resources: If you encounter any problems, don’t hesitate to contact AUSTRAC’s support team or consult their FAQs. They can provide guidance on common issues and offer advice on navigating the site.
- Consider seeking professional advice: If you're unsure about the details of your enrolment, consider working with a compliance consultant or legal professional who has experience with AUSTRAC registration. This can save you time and ensure accuracy.
- Stay informed about updates: AUSTRAC has committed to supporting Australian companies to get on board with AML/CTF requirements as easily as possible.
a. Subscribe to their newsletter
b. Check their website regularly for any changes that may affect your business.
c. Speak to your industry association as they are also working closely with AUSTRAC. - Test the site before peak periods: When it’s available, access AUSTRAC's enrolment site outside of high-volume periods, such as during weekends or early mornings, to familiarise yourself and ensure the site functions smoothly and avoids any potential delays.
By being proactive and organised, this first step to AML compliance will be simple.
AUSTRAC Compliance Timeline
|
31 March 2026 |
Obligations for virtual asset services commence |
Businesses providing virtual asset services must be compliant with AUSTRAC regulations starting from this date. |
|
1 July 2026 |
New regulations commence |
Tranche 2 businesses (real estate, lawyers, conveyancers, accountants, trust and company service providers) must comply with new AUSTRAC regulations from this date. |
|
29 July 2026 |
Enrolment deadline for newly captured services |
All businesses providing newly captured services must complete their enrolment with AUSTRAC by this date. |
About First AML
First AML comes from the perspective of both a technology provider, but also as compliance professionals. Prior to releasing, First AML’s all-in-one AML workflow platform, we processed over 2,000,000 AML cases ourselves. Understanding the acute problem that faces firms these days as they try to scale their own AML, is in our DNA.
That's why First AML now powers thousands of compliance experts around the globe to reduce the time and cost burden of complex and international entity KYC. Source stands out as a leading solution for organisations with complex or international onboarding needs. It provides streamlined collaboration and ensures uniformity in all AML practices.
Keen to find out more? Book a demo today!