Suspicious Matter Reporting for Australian Lawyers

From 1 July 2026, Australian law firms providing designated services under the Tranche 2 amendments to the AML/CTF Act 2006 must submit Suspicious Matter Reports (SMRs) to AUSTRAC when they form a reasonable suspicion about a client or transaction. With 42 days until the deadline, understanding when the obligation arises, what triggers an SMR in legal practice, and how the tipping-off prohibition shapes your client relationships are among the most operationally significant questions any practice principal faces right now.

What Is a Suspicious Matter Report?

An SMR is a confidential report lodged with AUSTRAC when a reporting entity suspects on reasonable grounds that a client or transaction may involve money laundering, proceeds of crime, terrorism financing, or tax evasion. The threshold is deliberately low: a lawyer does not need to conclude that wrongdoing has occurred, only that reasonable grounds for suspicion exist. AUSTRAC depends on this intelligence to identify criminal patterns before funds can be moved or concealed.

A suspicious matter exists when you reasonably suspect that: - A client is not who they claim to be, or is acting for an undisclosed principal - A transaction involves proceeds of crime or is structured to obscure the origin of funds - A client or transaction is connected to terrorism financing - Activity is designed to avoid a reporting obligation, such as structuring transactions below thresholds

Which Legal Services Create SMR Obligations?

SMR obligations arise only when your firm is providing a designated service. Under the Tranche 2 reforms, the designated services most likely to create reporting exposure for law firms are: - Real property transactions — acting on a client's behalf in purchasing, selling, or transferring residential, commercial, or rural property, including all conveyancing and settlement work - Managing client funds or assets — holding money in a trust account connected to a designated service, or managing securities or other assets on a client's instructions - Creating or managing legal persons or arrangements — forming companies, trusts, or partnerships for clients, providing registered office services, or acting as company secretary - Business acquisitions and disposals — acting on behalf of a client in buying or selling a business, a significant business interest, or shares in a private company - Nominee services — where a solicitor or firm entity acts as nominee director, secretary, or shareholder on a client's behalf A firm providing purely advisory, litigious, or employment law services without a transactional element in any of the above categories may not have SMR obligations — but a careful review of your service mix is essential before drawing that conclusion.

What Red Flags Should Law Firms Watch For?

AUSTRAC's guidance for professional services and the FATF typologies for legal practitioners identify several indicator categories relevant to Australian law firms.

Conveyancing and Property Transactions

• Third-party payments — settlement funds provided by someone other than the named purchaser, particularly from overseas accounts or entities unconnected to the sale
• Overpayment followed by a refund request — a recognised layering technique in property transactions
• Cash or cryptocurrency used for any component of a property transaction
• Complex ownership structures for a straightforward residential purchase with no commercial rationale
• Last-minute changes to settlement instructions, particularly to the destination account for sale proceeds
• Client reluctance to disclose the source of funds for a high-value purchase

Corporate and Entity Formation

• Entity formation with no identifiable business purpose or where beneficial ownership cannot be explained after reasonable enquiry
• Unusually urgent transactions — a business sale proceeding at an implausible pace without apparent commercial justification
• Multiple related entities used in a single transaction where the layered structure appears designed to obscure ultimate ownership
• Nominee arrangements where the underlying principal is located in a high-risk jurisdiction or declines to be identified

You are not required to resolve every anomaly before reporting. If you form a reasonable suspicion, the obligation arises and the Act's safe harbour protects you. Waiting to build a stronger case risks missing the three-business-day submission window and exposes the firm to a civil penalty.

How Does the Tipping-Off Prohibition Work?

The AML/CTF Act 2006 makes it a criminal offence to tell a client — or any third party — that an SMR has been submitted, is under consideration, or that AUSTRAC has made an inquiry about them. For law firms managing ongoing client relationships, this is operationally significant: you may need to continue acting on a matter as normal while a report is already lodged. Your AML/CTF programme must restrict knowledge of potential SMRs to only those staff who need to know, and should include guidance on managing client contact in the interim without triggering the prohibition. Independent legal advice is appropriate where the circumstances are complex or where you are uncertain whether other professional conduct obligations require you to cease acting.

How Do You Submit an SMR?

All SMRs are lodged via AUSTRAC Online. The firm must be enrolled as a reporting entity and should have a trained AML/CTF Compliance Officer as the primary authorised submitter. The process: 1. Document the suspicion — record the specific facts, observations, and reasoning that gave rise to the suspicion, with the date it was formed. These records must be retained for at least seven years. 2. Do not tip off the client — once a potential SMR is under consideration, all client communications must avoid any reference to the reporting process. 3. Lodge via AUSTRAC Online — complete the SMR form and attach supporting material where available. 4. Submit within the timeframe — three business days from when the suspicion is formed; 24 hours where terrorism financing is suspected. 5. Retain the record — store the lodged SMR and all supporting documentation for the statutory seven-year retention period. AMLify's compliance platform includes a guided SMR workflow that helps legal practices document suspicions, complete AUSTRAC-format reports accurately, and maintain the audit trail the Act requires — explore these capabilities at /features.

Are Law Firms Protected When They Report?

Yes. The AML/CTF Act 2006 provides statutory safe harbour for good-faith reporting. A firm that lodges an SMR honestly cannot be sued for breach of confidentiality as a result of the report, faces no civil or criminal liability for the act of reporting itself, and retains that protection even if the suspicion later proves unfounded. The asymmetry matters: reporting in good faith costs almost nothing, while the civil penalty for failing to submit a required SMR can reach $18.5 million per contravention for a corporate entity. Law firms building their SMR workflow into a compliant programme can see how AMLify supports legal practices.

Key Takeaways

• From 1 July 2026, law firms providing designated services must submit SMRs to AUSTRAC on reasonable suspicion — proof of wrongdoing is not required, only reasonable grounds
• Common legal-practice triggers include unusual settlement instructions in conveyancing, complex or opaque entity formation requests, and corporate transactions where beneficial ownership cannot be explained
• The tipping-off prohibition is a criminal offence — once an SMR is under consideration, client communications must be managed carefully and knowledge of the report confined to those who need to know
• Submit within three business days of forming the suspicion (24 hours where terrorism financing is suspected) and retain all associated records for seven years
• Safe harbour protects good-faith reporting — the civil penalty for failing to submit a required SMR far exceeds the cost of a cautious report that later proves unfounded

Frequently Asked Questions

Q: Does legal professional privilege override the SMR obligation?

Privilege does not provide an absolute exemption from the SMR obligation. Where a suspicion arises from observable facts and conduct — the structure of a transaction, a client's instructions, or the origin of settlement funds — rather than from the content of a privileged communication, the reporting obligation applies. The AML/CTF Act 2006 includes limited protections where reporting would require revealing privileged content, but these protections are narrow. Law firms should obtain specific legal advice on how privilege interacts with their AML reporting obligations rather than assuming the exemption applies broadly.

Q: What is the penalty for failing to submit a required SMR?

Failing to submit an SMR when required is a civil penalty offence under the AML/CTF Act 2006. Corporate penalties can reach $18.5 million per contravention for serious or systemic failures. AUSTRAC has stated that Tranche 2 entities will be subject to the same enforcement standards as Tranche 1 financial institutions from 1 July 2026, and the legal sector is a stated area of regulatory focus.

Q: Can a firm continue acting for a client after filing an SMR?

There is no automatic prohibition on continuing to act after an SMR is lodged — the decision depends on the circumstances, the nature of the suspicion, and your professional obligations under the relevant state law society rules. What must never happen is any disclosure to the client, or to any third party, that a report has been or may be made. Seek independent legal advice if you are uncertain about whether other professional conduct rules require you to cease acting or how to manage the ongoing matter.

Q: How long must SMR records be kept?

Records related to SMRs — the submitted report, your documented reasoning, and supporting evidence — must be retained for a minimum of seven years from the date of submission under the AML/CTF Act 2006. Records must be retrievable and producible to AUSTRAC within a reasonable timeframe on request. A purpose-built compliance platform maintains these records automatically with timestamped entries, which is significantly more reliable than ad hoc document storage.

This is general information only and not a substitute for legal advice.

Related articles