Three Months Into Tranche 2: Where TCSPs Fall Short

Three months after the 1 July 2026 Tranche 2 deadline, AUSTRAC's early checks on trust and company service providers (TCSPs) keep turning up the same gaps: programmes finalised but never put into practice, ownership records untouched since onboarding, and independent reviews promised but never booked. These are follow-through failures, and they're the easiest things for a reviewer to spot.

What gaps is AUSTRAC finding in TCSPs three months in?

A programme that looked complete on 1 July often hasn't kept pace with real client activity since. The recurring patterns: - Static ownership records -- a beneficial ownership chain captured at onboarding but never revisited as structures change - Monitoring that exists on paper only -- a documented process with no evidence it's actually run - No independent review booked -- the AML/CTF Act 2006 requires periodic independent review, and many TCSPs still haven't scheduled one - Thin SMR records -- no documented escalation path, even where staff say they'd "just flag it"

Why does ongoing monitoring matter more than the initial programme?

AUSTRAC judges a programme on the evidence it produces after the deadline, not the policy dated 1 July. Ownership structures move -- a nominee is replaced, a trust gains a beneficiary, a holding company changes hands -- and a static onboarding-day file stops reflecting reality within weeks. A reviewer asking for a client's current structure expects an answer that's current, not historical.

What does an independent review need to cover?

Under the AML/CTF Act 2006, the review tests whether the programme is actually working, not just whether it exists: 1. Enrolment and governance -- is the business still correctly enrolled, with a current AMLCO? 2. CDD and ownership records -- are beneficial ownership chains current for active clients? 3. Monitoring evidence -- can the business produce dated records showing monitoring happened? 4. SMR escalation -- is there a process staff actually use, not just one that's written down?

How should a TCSP close these gaps now?

Catching up doesn't mean rebuilding the programme -- it means generating the evidence a reviewer will ask for: refresh ownership records on active clients, book the independent review if none is scheduled, and confirm monitoring produces dated records rather than a policy that just says it should. AMLify for trust and company service providers keeps ownership chains current and logs monitoring automatically. See pricing to start a free trial.

Key Takeaways

• Three months post-deadline, AUSTRAC keeps finding the same gaps in TCSPs -- static ownership records, paper-only monitoring, unbooked independent reviews
• A programme is judged on the evidence it produces after 1 July, not the policy dated on deadline day
• Independent review must test whether the programme actually works, covering enrolment, CDD, monitoring, and SMR escalation
• Ownership records need refreshing on active clients, not just at onboarding
• AMLify keeps ownership chains current automatically -- see pricing for a free trial

Frequently Asked Questions

Q: How soon after the deadline does a TCSP need an independent review?

The AML/CTF Act 2006 requires periodic independent review, with the interval reflecting the business's risk profile. Three months post-deadline without one scheduled is worth closing now, before it's the first thing a reviewer asks about.

Q: Do beneficial ownership records need updating after onboarding?

Yes. Ownership chains change -- new beneficiaries, replaced nominees, changed holdings -- and AUSTRAC expects records to stay current for active clients, not rely on an onboarding-day snapshot.

Q: What counts as evidence that monitoring is actually happening?

Dated records showing monitoring occurred -- reviews logged, alerts actioned, structure changes captured -- not just a policy describing what monitoring should involve.

This is general information only and not a substitute for legal advice.

Related articles