days leftTranche 2 is live — Compliance Kickstart: 30% off for 6 months. Ends 31 July 2026.
AMLify logoAMLify
Industry Insights

Why Accounting Firms Are AUSTRAC's Next Enforcement Target

15 July 20263 min readAMLify Team
Why Accounting Firms Are AUSTRAC's Next Enforcement Target

Tranche 2 is now law and AUSTRAC's supervisory focus is shifting to accountants. Here's why the sector is a target and how to cut enforcement risk.

Accounting firms are now firmly in AUSTRAC's supervisory sights, because Tranche 2 obligations under the AML/CTF Act 2006 became fully enforceable on 1 July 2026 -- moving accountants from a soon-to-be-regulated sector to one AUSTRAC can audit and penalise today.

What changed for accountants on 1 July 2026?

Accountants providing designated services -- forming companies or trusts, managing client money, or acting as a buyer's or seller's agent in certain transactions -- are now reporting entities under the AML/CTF Act 2006. AUSTRAC enrolment, a board-approved AML/CTF programme, a documented ML/TF risk assessment, ongoing due diligence, and suspicious matter reporting are no longer future obligations. They're live requirements, and AUSTRAC's supervisory powers apply from day one.

Why is AUSTRAC prioritising the accounting sector?

AUSTRAC has flagged accounting and trust services as high-risk for years, because accountants sit close to company formations, trust structures, and large client-held funds -- exactly the mechanisms used to layer and integrate illicit money. Newly regulated sectors also draw early supervisory attention, as AUSTRAC uses the months after commencement to test whether firms have actually operationalised their obligations, not just enrolled on paper.

What will an AUSTRAC compliance check look for?

  • Enrolment and programme approval -- a current AML/CTF programme approved by an AMLCO
  • A firm-specific ML/TF risk assessment, not a generic template
  • CDD records -- identity verification and beneficial ownership evidence per client
  • Ongoing monitoring -- proof that risk ratings and transactions are reviewed, not assessed once
  • Suspicious matter reporting -- a working process for lodging SMRs within statutory timeframes
  • Staff training records, not just delivered training

How can accounting firms reduce their enforcement risk now?

  1. Confirm enrolment is complete -- an outdated or partial AUSTRAC enrolment is an easy gap for a supervisor to spot
  2. Audit existing client files against CDD requirements before AUSTRAC does
  3. Stress-test the SMR process -- confirm staff know what to escalate and how fast
  4. Document staff training, not just deliver it -- undocumented training counts as no training
  5. Centralise compliance evidence in one system rather than inboxes and spreadsheets

How does AMLify help accounting firms stay audit-ready?

AMLify for accountants builds the risk assessment, CDD workflow, ongoing monitoring, and SMR process into one system, and timestamps every record against the client it relates to. If AUSTRAC asks for evidence, it's an export, not a reconstruction. See pricing to start a free trial.

Key Takeaways

  • Tranche 2 obligations are enforceable now, not pending -- accountants are reporting entities from 1 July 2026
  • AUSTRAC typically prioritises newly regulated sectors in its early supervisory activity
  • A compliance check tests operation, not just paperwork -- an approved programme that isn't followed won't hold up
  • The biggest risk is undocumented practice -- training, monitoring, and SMR decisions that happen but aren't recorded
  • AMLify centralises the evidence AUSTRAC asks for -- see pricing for a free trial

Frequently Asked Questions

Q: Is Tranche 2 still relevant now that the 1 July 2026 deadline has passed?

Yes -- more relevant, not less. The deadline was the start of enforceable obligations, not the end of the compliance task. Firms are now judged on whether their AML/CTF programme actually operates day to day.

Q: Can AUSTRAC audit an accounting firm without a prior complaint?

Yes. AUSTRAC's supervisory powers allow it to review a reporting entity's compliance at any time, independent of whether a complaint or suspicious matter report has been filed.

Q: What's the most common gap AUSTRAC finds in new reporting entities?

A generic risk assessment that doesn't reflect the firm's actual client base, paired with CDD or training that isn't documented well enough to prove it happened.

Q: Do small accounting practices face the same scrutiny as large firms?

Yes. Obligations under the AML/CTF Act apply to any firm providing a designated service, regardless of size, though AUSTRAC scales its expectations to firm size.

This is general information only and not a substitute for legal advice.