Australia Begins New Phase of AML Reform With Sweeping Expansion of Regulated Businesses

Key Takeaways

• Transition Moves Into Implementation: Australia's updated AML/CTF laws have been in effect since March 31, 2026, with reporting entities now expected to implement revised obligations while maintaining existing AML/CTF responsibilities.
• Implementation Plans Become a Compliance Tool: Organizations unable to meet every new requirement immediately must document implementation plans that identify compliance gaps, explain interim risk controls and demonstrate sustained progress toward full compliance.
• Travel Rule Obligations Expand: Financial institutions, remitters and virtual asset service providers may need to collect, verify and transmit customer information when transferring funds or virtual assets under updated travel rule requirements.
• Pragmatic Oversight, Not Regulatory Relief: AUSTRAC says it will supervise the transition proportionately, but reporting entities are still expected to actively manage money laundering, terrorism financing and proliferation financing risks throughout the implementation period.
• Guidance Accompanies Reform: New e-learning modules, customer due diligence webinars and governance resources are intended to help organizations translate legislative changes into operational compliance.

Deep Dive

Australia's anti-money laundering regime became considerably larger , when tens of thousands of businesses will enter the scope of the country's anti-money laundering and counter-terrorism financing laws, extending compliance obligations well beyond the financial sector into industries long regarded by investigators as attractive channels for laundering illicit funds.

Real estate agents, lawyers, conveyancers, accountants, and dealers in precious metals and stones are now regulated under Australia's AML/CTF framework. AUSTRAC says those sectors routinely sit at points where criminals attempt to disguise the origin and ownership of illicit funds, particularly through property transactions and trust or company structures. For the regulator, the expansion closes what it describes as longstanding gaps in Australia's financial crime defenses. For businesses, it marks the beginning of a compliance transition that reaches far beyond enrolling with the regulator.

The country's updated anti-money laundering and counter-terrorism financing laws came into force on March 31, preserving the familiar obligations that have long defined the regime while altering enough of the underlying requirements to demand more than a routine compliance review. Organizations must still understand the money laundering and terrorism financing risks they face, maintain an effective AML/CTF program and report suspicious matters. Those duties have not moved. What has shifted is the framework around them, along with the regulator's expectations of how businesses demonstrate that their controls remain fit for purpose.

That distinction matters because compliance rarely fails at the point where legislation is published. It fails later, during the slow and imperfect process of translating new legal requirements into operational reality. AUSTRAC's latest guidance reflects an understanding that even well-governed organizations may need time to rebuild procedures, retrain staff, update technology and revise documentation before every element of the new framework is fully embedded.

The transition is not confined to businesses already operating under the regime. Organizations entering Australia's AML/CTF framework for the first time are already expected to have core compliance measures in place, including AML/CTF programs, customer due diligence procedures, staff training, recordkeeping processes and the capacity to report suspicious matters. Most newly regulated businesses must enroll with AUSTRAC by July 29, while those providing remittance or virtual asset designated services must also apply for registration. The regulator has warned that businesses continuing to provide designated services without meeting those requirements risk breaching the law and may face regulatory action.

For reporting entities already enrolled before March 31, the immediate obligations are practical rather than philosophical. Virtual asset service providers have until July 29 to update their enrollment details through AUSTRAC Online, a reminder that sectors developing at the fastest pace are also being asked to demonstrate the clearest visibility into who they are and how they operate. Businesses that cannot meet every revised obligation immediately are expected to do something more demanding than simply ask for patience. They must produce a documented implementation plan explaining where compliance gaps remain, how money laundering, terrorism financing and proliferation financing risks will be managed during the transition, and how those gaps will ultimately be closed. More importantly, the plan cannot become another document filed away to satisfy an auditor. AUSTRAC expects sustained progress against it, together with evidence that organizations continue strengthening controls while the work remains unfinished.

The revised AML/CTF Rules extend beyond transitional arrangements. Amendments affecting reporting groups, technical requirements and exemptions reshape parts of the regulatory architecture, while updated travel rule obligations place fresh operational demands on financial institutions, remittance providers and virtual asset service providers involved in transferring funds or digital assets. Depending on their role in a transaction, those organizations may now need to collect, verify and transmit customer information across the payment chain, reinforcing that transparency should travel with the transaction itself.

Recognizing that legislative reform succeeds or fails through implementation rather than publication, AUSTRAC has paired the new obligations with an expanded catalogue of educational resources, including governance training, customer due diligence webinars and practical guidance for compliance officers and senior management. The emphasis is notable because it acknowledges a reality familiar to every regulator and every regulated institution alike. New rules rarely create better compliance on their own but understanding does.

The regulator has said it will take a pragmatic and proportionate approach as businesses adjust to the revised framework, language that offers reassurance without offering relief. The expectation remains that reporting entities will continue managing money laundering, terrorism financing and proliferation financing risks throughout the transition, not after it.

AUSTRAC Chief Executive Brendan Thomas has described the reforms as a substantial strengthening of Australia's financial crime defenses, arguing that bringing more professions into the reporting regime places greater scrutiny on transactions where criminal organizations have historically sought to conceal illicit wealth. Home Affairs Minister Tony Burke said more than A$60 billion in illicit profits is laundered through the Australian economy each year, distorting legitimate markets while funding further criminal activity. The expansion of the regulated population and the revised obligations suggest Australia is no longer focused solely on strengthening compliance within its financial sector. The objective is to make it increasingly difficult for illicit money to find an unregulated path into the legitimate economy.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.