AUSTRAC enrolment opens 31 March — compliance deadline: 1 July 2026

New legislation — affects all financial advisors

AML Compliance for Financial Advisers — Your New Legal Obligation Starts July 1

Australia's AML/CTF Tranche 2 laws make compliance mandatory for all financial planners and investment advisors. Enrolment opens 31 March. Act now or face civil penalties up to $6.26 million.

Take the Free Readiness Quiz →

Why Financial Advisers Are Now Regulated

Financial advice and wealth management are high-risk channels for money laundering. AML/CTF Tranche 2 brings financial advisors under AUSTRAC regulation for the first time.

FATF mutual evaluation reports and AUSTRAC risk assessments have consistently identified the financial advice sector as vulnerable to money laundering. Criminals use legitimate financial advisors to move funds, structure investments, and integrate illicit wealth into the formal financial system. Investment products, superannuation accounts, and managed funds are ideal vehicles for layering illicit funds.

The vulnerability: Unlike banks and insurers, financial advisors have historically lacked mandatory AML/CTF controls. This gap allowed criminals to use your services to legitimize illicit cash through complex investment structures and portfolio moves.

Tranche 2 extends AML/CTF obligations to financial professionals including:

The impact? You are now responsible for verifying client identities, understanding the source of funds, detecting suspicious patterns, and reporting to AUSTRAC. Non-compliance can result in civil penalties, criminal charges, and loss of your AFSL or AFS licence.

What You Need to Do

Follow these 5 critical steps before 1 July 2026.

  1. 1
    Enrol with AUSTRAC
    Enrolment opens 31 March 2026. You'll need to apply as an AML/CTF reporting entity. Visit austrac.gov.au to register. This is mandatory for all financial advisors providing reportable services.
  2. 2
    Build Your AML/CTF Program
    Establish written policies and procedures covering customer due diligence, beneficial ownership verification, transaction monitoring for suspicious patterns, and reporting protocols. Document everything.
  3. 3
    Verify Clients & Source of Funds
    Conduct Customer Due Diligence (CDD) on all clients. Collect government-issued ID and verify their identity. For high-risk clients, conduct Enhanced Due Diligence including source of funds verification. Keep records for 7 years.
  4. 4
    Train Your Team
    Every staff member involved in client advice and fund management must understand AML/CTF obligations, money laundering red flags, and reporting requirements. Document all training and maintain training records.
  5. 5
    Report Suspicious Activity
    If you suspect money laundering or terrorism financing, file a Suspicious Matter Report (SMR) directly to AUSTRAC. You must report as soon as practicable, generally within 3 business days. SMRs are confidential and protected.

Financial Advisor Red Flag Scenarios

Here's what to watch for and how to respond when these situations arise.

Financial Advisor AML/CTF Compliance Checklist

Use this checklist to ensure you're ready before 1 July 2026. Click each item as you complete it.

What Happens If You Don't Comply

The stakes are real. Here's what you're facing if you don't comply.

$6.26M

Maximum civil penalty per breach for individuals. Corporations face up to $31.3 million.

Recent precedent: AUSTRAC has issued penalties of $1.3 billion to Westpac and $700 million to Crown Resorts for AML/CTF breaches. With financial advisors now under the regime, enforcement will extend to the wealth management sector.

How AMLPrep Helps

We make compliance simple. Start getting compliant in under 30 minutes.

Frequently Asked Questions

Answers to the most common questions from financial advisors.

Do I need to verify the source of every client's funds? +

For large amounts, yes. You must conduct Customer Due Diligence (CDD) on all clients and verify their identity. For clients investing large amounts (typically AUD 10,000+), you should verify the source of funds through bank statements, employment records, or other documentation. This is Enhanced Due Diligence (ECDD) and is mandatory for high-risk clients.

What about existing clients I've advised for years? +

You must still verify them. Existing clients are not exempt. You must conduct CDD on all clients providing new reportable services from 1 July 2026. This means you'll need to gather identity verification documents, verify their address, and assess risk. Grandfather provisions are limited and time-bound — plan to contact all clients well before the deadline.

What's considered "suspicious activity" for a financial advisor? +

Several patterns warrant reporting: Rapid deposits followed by immediate redemptions, unexplained large cash deposits, investments that don't match the client's profile or income, requests for unusual structures to hide beneficial ownership, clients who refuse to provide identity verification, or clients linked to high-risk jurisdictions or politically exposed persons. If you have reasonable grounds to suspect money laundering, file a Suspicious Matter Report.

Can I face personal liability if my firm doesn't comply? +

Yes, absolutely. Directors, owners, and senior managers can face personal civil and criminal penalties for failures to comply with AML/CTF obligations. You cannot simply delegate compliance to staff. You are personally responsible for ensuring your firm has adequate policies, training, and monitoring in place.

Do I need to report cash payments? +

All large cash transactions are flagged. Financial advisors receiving cash payments of AUD 10,000 or more (or equivalent) must report these to AUSTRAC within 10 days. Structuring — breaking down large amounts to avoid this threshold — is itself a criminal offence. Accept cash payments only in exceptional circumstances and always document and report them.

How should I handle clients who refuse to provide ID? +

You cannot provide advice without CDD. If a client refuses to provide identity documents, you must decline to provide financial advice. There are no exceptions for repeat clients or long-standing relationships. Document the refusal and the date you asked for ID. Do not work around this requirement.

Ready to Get Compliant?

Take our free quiz and get a personalised action plan to start your compliance journey.

Start the Free Quiz →