What AUSTRAC's Civil Penalties Mean for Accounting Firms
AUSTRAC can now issue civil penalties, infringement notices and enforceable undertakings against accounting firms. Here's what triggers each and how to respond.
AUSTRAC can now issue remedial directions, infringement notices and civil penalty orders against accounting firms that miss their Tranche 2 AML/CTF obligations. Since the 1 July 2026 deadline passed, enforcement is no longer theoretical -- firms that haven't enrolled, documented a programme, or completed customer due diligence carry real financial and reputational exposure under the AML/CTF Act 2006.
What powers does AUSTRAC have under the AML/CTF Act 2006?
AUSTRAC escalates enforcement in stages, matching the tool to how serious and how wilful a contravention looks: - Remedial directions -- a formal order to fix a specific gap within a set timeframe - Infringement notices -- on-the-spot penalties for lower-level contraventions, often the first tool used - Enforceable undertakings -- a public commitment to remediate, usually with independent oversight - Civil penalty orders -- Federal Court proceedings that can run into the millions of dollars for a body corporate in serious cases
Which gaps is AUSTRAC targeting first for accountants?
AUSTRAC has said it's prioritising the most visible failures over minor paperwork gaps. For accounting firms, that means: 1. No AUSTRAC enrolment -- practices that never registered as a reporting entity 2. No documented AML/CTF programme -- enrolled but without a partner-approved programme 3. Missing customer due diligence -- no CDD completed on existing high-risk clients 4. No suspicious matter reporting process -- unable to show how staff escalate red flags
Does AUSTRAC go straight to civil penalties?
No. AUSTRAC's stated approach is graduated -- remedial directions and education come first, with infringement notices and civil penalty action reserved for firms that ignore a direction or show wilful, repeated non-compliance. A practice that's visibly working through a remediation plan sits in a very different position to one that hasn't engaged at all.
What should accounting firms do now?
Four steps materially reduce enforcement exposure: - Confirm enrolment status -- check the practice is actually registered with AUSTRAC, not just intending to be - Document the AML/CTF programme -- an informal or unwritten programme won't satisfy a remedial direction - Backfill CDD on existing clients -- prioritise the highest-risk relationships first - Keep dated evidence of progress -- records of what's been done matter if AUSTRAC ever asks AMLify's compliance workflows are built to generate this evidence trail automatically, and practices starting from scratch can move faster with a structured trial than building a programme from a blank page.
Key Takeaways
- AUSTRAC can issue remedial directions, infringement notices, enforceable undertakings and civil penalty orders against non-compliant accounting firms
- Civil penalty orders carry the most serious financial exposure, but AUSTRAC's approach is graduated rather than immediate
- Enrolment, a documented AML/CTF programme and CDD on existing clients are the first things AUSTRAC checks
- Visible remediation progress puts a practice in a materially better position than no engagement at all
Frequently Asked Questions
Q: Can AUSTRAC fine an accounting firm without going to court?
Yes. Infringement notices and remedial directions don't require court action, though a firm can dispute them. Civil penalty orders are the only tool that goes through the Federal Court.
Q: How much can a civil penalty actually cost?
The AML/CTF Act 2006 allows civil penalties running into the millions of dollars for a body corporate in serious cases, though AUSTRAC scales penalties to the size of the business and the nature of the contravention.
Q: Is AUSTRAC actively enforcing against accountants right now?
AUSTRAC has confirmed accounting firms are an active compliance review focus following the Tranche 2 rollout, with reviews and remedial directions already underway.
Q: What's the fastest way to reduce enforcement risk?
Confirm AUSTRAC enrolment, document a formal AML/CTF programme, and complete customer due diligence on existing high-risk clients -- these are the gaps AUSTRAC checks first.
This is general information only and not a substitute for legal advice.