What AUSTRAC's First Real Estate Agency Reviews Are Finding
AUSTRAC's first post-deadline reviews of real estate agencies are surfacing the same gaps: incomplete CDD, no real programme, unverified ownership.
AUSTRAC's first compliance reviews of real estate agencies since the 1 July 2026 Tranche 2 deadline are turning up the same handful of gaps: incomplete customer due diligence files, no documented AML/CTF programme, and settlement staff who were never trained on suspicious matter reporting.
Why is AUSTRAC reviewing real estate agencies now?
A month after the Tranche 2 deadline, AUSTRAC has shifted from checking who enrolled to checking how agencies actually operate. Agencies that rushed to enrol by 1 July but treated the AML/CTF Act 2006 as a one-off task are the ones now hearing from AUSTRAC, since its stated approach is to prioritise reviews where enrolment data suggests a programme exists on paper only.
What gaps are AUSTRAC reviewers finding?
Reviewers are seeing the same handful of issues across agencies of every size: - Incomplete CDD files — vendor and purchaser identity documents on file, but no verification of source of funds for cash-heavy settlements - No real AML/CTF programme — a generic template downloaded once, never adapted to the agency's actual risk profile or reviewed since enrolment - Unverified beneficial ownership — corporate or trust buyers accepted without confirming who ultimately controls the entity - No suspicious matter reporting training — sales and settlement staff who can't describe what an SMR is or when one is required - Patchy record-keeping — client files split across email, paper, and personal drives that won't survive the seven-year retention requirement
How does an AUSTRAC review actually unfold?
The process follows a consistent pattern: 1. Formal notice — AUSTRAC writes requesting the agency's AML/CTF programme, risk assessment, and a sample of client files 2. Document review — reviewers check whether CDD, record-keeping, and reporting obligations were actually followed, not just documented 3. Interviews — compliance officers and often frontline sales staff explain how a transaction would be handled in practice 4. Findings letter — the agency receives a written list of deficiencies with a remediation deadline, typically 30 to 90 days 5. Follow-up — failure to remediate escalates to formal enforcement action, including civil penalties
What should agencies do before AUSTRAC calls?
Treat every file as if it will be the one a reviewer pulls. That means auditing existing CDD records for gaps, confirming the AML/CTF programme reflects how the agency genuinely operates, and checking beneficial ownership evidence for every corporate or trust vendor. AMLify for real estate agents builds this evidence trail automatically, so agencies aren't reconstructing files under pressure once a review notice arrives.
Key Takeaways
- AUSTRAC has shifted from enrolment checks to substantive compliance reviews of real estate agencies
- The most common findings are incomplete CDD, undocumented programmes, and unverified beneficial ownership
- Reviews follow a set process: notice, document review, interviews, findings letter, and a remediation deadline
- Agencies get 30 to 90 days to fix deficiencies before enforcement action follows
- Audit-ready records now are far cheaper than a rushed remediation later
Frequently Asked Questions
Q: What triggers an AUSTRAC review of a real estate agency?
AUSTRAC prioritises agencies whose enrolment data or transaction patterns suggest higher risk, such as high cash-settlement volumes, or where a reportable entity's programme appears generic or untested since enrolment.
Q: How long does an agency have to fix issues found in a review?
Findings letters typically set a remediation deadline of 30 to 90 days, depending on the severity of the gaps identified.
Q: Can an agency be penalised even if it enrolled with AUSTRAC on time?
Yes. Enrolment only satisfies the registration obligation. AUSTRAC can still take action under the AML/CTF Act 2006 if the agency's actual CDD, record-keeping, or reporting practices don't meet the required standard.
Q: Does a small agency need a full-time compliance officer to pass a review?
No, but the agency does need a designated AML/CTF compliance officer, a documented and risk-based programme, and evidence that staff are trained and files are complete — a part-time or shared role can meet this if the substance is there.
This is general information only and not a substitute for legal advice.