AML Compliance for Lawyers Australia | Tranche 2 Obligations

Why Lawyers Are Now Regulated

Trust accounts, corporate structures, and large property transactions make legal services a high-risk channel for money laundering.

AUSTRAC and FATF assessments have consistently identified legal services as a vulnerability in Australia's AML/CTF regime. Lawyers handle significant sums through trust accounts, establish complex corporate and trust structures, and facilitate high-value transactions — all attractive to those seeking to conceal illicit funds.

The Risk Profile: Legal practices manage client funds, advise on entity formation and property settlement, and interact with complex beneficial ownership structures. This creates multiple money laundering pathways if proper controls aren't in place.

This is precisely why Tranche 2 of the AML/CTF Act now extends AML/CTF obligations to legal practitioners. Affected professionals include:

Solicitors and barristers in private practice
In-house counsel at law firms
Lawyers handling property transactions
Lawyers managing trust accounts
Lawyers advising on corporate formation and restructures

The impact? You must now verify client identities, understand the source of funds flowing through your trust account, detect suspicious activity, and report to AUSTRAC. Non-compliance risks criminal charges, loss of your practising certificate, and penalties up to $6.26 million.

What You Need to Do

Follow these 5 critical steps before 1 July 2026.

1
Enrol with AUSTRAC

Enrolment opens 31 March 2026. You'll need to apply as an AML/CTF reporting entity. Visit austrac.gov.au to register. This is mandatory for all legal practitioners offering designated services.
2
Build Your AML/CTF Program

Establish written policies and procedures covering trust account management, customer due diligence, beneficial ownership identification, transaction monitoring, and suspicious activity reporting. Document everything.
3
Verify Identities & Beneficial Ownership (CDD)

Conduct Customer Due Diligence on all clients. For corporate clients, trusts, and property transactions, identify the beneficial owner. Collect ID documents and verify them. Keep records for 7 years. This is critical for trust account activity.
4
Monitor Trust Account Activity

Implement transaction monitoring systems. Flag unusual activity: unexplained deposits, rapid fund movements, cash deposits to client trust accounts, or funds from unknown sources. Document all reviews.
5
Train Your Team & Report Suspicions

Every staff member must understand AML/CTF obligations and red flags. If you suspect money laundering, file a Suspicious Matter Report (SMR) directly to AUSTRAC within 3 business days. Do not tip off the client.

Lawyer-Specific Scenarios

Here's what to do when you encounter these common situations.

Scenario 1: Trust Account Misuse — A client deposits large cash sums into your trust account for a property settlement, but the justification is vague. Why cash instead of bank transfer? Where did the money come from? Request statutory declarations confirming the source. Conduct enhanced due diligence. If the story doesn't add up, file a Suspicious Matter Report.
Scenario 2: Complex Corporate Structure — A client asks you to establish multiple shell companies or trusts to purchase property. Multiple entities can be legitimate — but they can also hide beneficial ownership. Identify the true owner. Understand the purpose of each entity. If the structure appears designed solely to obscure beneficial ownership, report it.
Scenario 3: Last-Minute Changes to Structures — A settlement is underway, then the client suddenly changes the purchasing entity or adds new beneficial owners shortly before completion. Last-minute changes to avoid scrutiny are a red flag. Ask why the change. If the client refuses to explain or becomes evasive, consider reporting.
Scenario 4: Unexplained Client Refusals — A client refuses to provide proper identification, won't disclose beneficial ownership, or insists on cash payments. You cannot proceed. Refusal to cooperate with CDD is itself suspicious. Document the refusal and consider filing a Suspicious Matter Report.

Lawyer AML/CTF Compliance Checklist

Use this checklist to ensure you're ready before 1 July 2026. Click each item as you complete it.

Enrol with AUSTRAC by 1 July 2026
Document AML/CTF policies covering trust account management
Appoint an AML/CTF Compliance Officer
Conduct CDD on all clients, including beneficial owner verification
Verify government-issued ID in person or by video
Understand the source of all funds in trust accounts
Keep CDD and transaction records for at least 7 years
Implement trust account transaction monitoring
Train all staff on AML/CTF obligations and red flags
File SMRs with AUSTRAC when required

What Happens If You Don't Comply

The stakes are real. Here's what you're facing if you don't comply.

$6.26M

Maximum civil penalty per breach for individuals. Corporations face up to $31.3 million.

Criminal charges — Up to 2 years imprisonment for tipping off, 5 years for structuring offences, life for serious money laundering
Loss of practising certificate — Law Society or Bar can suspend or revoke your licence
Professional liability — Civil lawsuits from clients, professional indemnity claims, or regulatory proceedings
Reputational damage — Public reporting of enforcement action by AUSTRAC and your legal regulator
Ongoing scrutiny — AUSTRAC audits and inspections of your trust account and client records

Recent precedent: AUSTRAC has issued penalties of $1.3 billion to Westpac and $700 million to Crown Resorts for AML/CTF breaches. With legal services now under the regime, enforcement will target law firms that fail to implement proper controls.

How AMLPrep Helps

We make compliance simple. Start getting compliant in under 30 minutes.

📋
Free Readiness Quiz — 15 questions to assess your current compliance gaps and get a customized action plan.
📚
Lawyer-Specific Guides — Guides on trust account management, beneficial ownership verification, and suspicious activity reporting for legal practitioners.
📄
Ready-Made Templates — AML/CTF policies, client due diligence checklists, trust account monitoring templates, and SMR checklists for law firms.
🎓
Training Course — Comprehensive online course for you and your team. Certificate of completion for AUSTRAC compliance.
⚙️
Software & Tools — Automate CDD, trust account monitoring, and suspicious activity reporting with our platform designed for legal practices.
👥
Expert Consultants — Talk directly with AML/CTF compliance specialists who understand legal practice requirements.

Frequently Asked Questions

Answers to the most common questions from Australian lawyers.

Does this apply to all lawyers or just those handling property? +

It applies to most legal practitioners. Tranche 2 applies to lawyers offering "designated services" including: property transactions, corporate establishment, trust creation, and any service where you handle client funds through a trust account. Sole practitioners in small practices may have limited obligations, but most law firms are covered. Check AUSTRAC's guidance for your specific practice area.

What counts as a trust account transaction that requires monitoring? +

All client funds held in trust. This includes: deposits for property purchases, settlement funds, advance fees, and court deposits. You must understand where the money came from and where it's going. Large cash deposits are particularly risky. Rapid fund movements, funds from overseas, or deposits that don't align with the stated transaction purpose are all red flags requiring further investigation and potentially reporting.

Can I refuse to act for a client who won't provide ID? +

Yes — you must. Customer Due Diligence is mandatory. If a client refuses to provide proof of identity or won't disclose beneficial ownership, you cannot take them on as a client. Do not make exceptions. Document the refusal in your file. This protects you legally and prevents you from becoming a conduit for money laundering.

What if I suspect money laundering but I'm not certain? +

You must still report. You don't need proof — you just need to suspect on reasonable grounds. If something feels off — unusual transaction patterns, vague explanations, reluctance to provide information, or structuring — file a Suspicious Matter Report to AUSTRAC. It's better to report and be wrong than to stay silent and unknowingly facilitate crime. You're protected from liability if you report in good faith.

What's the difference between CDD and identifying beneficial owners? +

CDD verifies the client's identity. Beneficial ownership identification goes further — it establishes who actually owns or controls a company, trust, or other entity. For legal services, you must do both. When a company or trust purchases property, you can't just verify the entity; you must identify the real people behind it. This is critical for trust account management and transaction monitoring.

Do I have to report to AUSTRAC every time I'm suspicious? +

Yes, if you suspect on reasonable grounds. File a Suspicious Matter Report (SMR) to AUSTRAC within 3 business days. You must file even if you're unsure, as long as you have a reasonable basis for suspicion. Your SMR is confidential. AUSTRAC will investigate. You're not making an accusation — you're reporting a suspicion based on your professional judgment.

AML Compliance for Lawyers — Your New Legal Obligation Starts July 1