AUSTRAC says it's being 'supportive'. What that actually means for your agency.
AUSTRAC has described its Tranche 2 approach as 'supportive but firm'. Here's what each of those words means in practice — and what your agency needs to have done before 1 July 2026.
AUSTRAC has consistently described its approach to Tranche 2 enforcement as "supportive but firm." That phrase gets quoted a lot. What it means in practice — especially with 40 days until 1 July 2026 — is less often explained.
Here is a plain-English reading of both words, and what they imply for an agency that is still getting its program in order.
What "supportive" actually means
AUSTRAC has done something unusual for a regulator: it published free, detailed guidance specifically for small real estate agencies.
The Program Starter Kit includes a customisable risk assessment document, a program template, and a process guide — all designed for agencies with 15 or fewer staff providing one designated service. This is not a summary of the law. It is a working template you can actually use.
No major regulator globally had done this before AUSTRAC did it for Tranche 2.
AUSTRAC has also been explicit that it will work with businesses making genuine, good-faith efforts. It is not looking for perfect programs on day one. It is looking for evidence that your agency has taken the obligations seriously and has a documented, operational foundation in place.
"Supportive" means: help is available, guidance is free, and the regulator is not setting a perfection standard.
What "firm" actually means
The "firm" part is equally clear.
1 July 2026 is not moving. AUSTRAC has stated publicly that no extension is planned. The July 2026 FATF evaluation of Australia's financial crime framework makes a last-minute softening politically unlikely — Australia is being assessed on whether its AML regime is robust, and granting extensions to newly regulated sectors would work against that.
AUSTRAC is also actively using its enforcement powers right now, before the real estate deadline. In May 2026, it ordered an external audit of Bankstown District Sports Club under s 162 of the AML/CTF Act 2006, citing concerns that its controls were not strong enough to stop organised crime. This is the same audit-order mechanism available to AUSTRAC for any reporting entity — including, from 1 July, real estate agencies.
Under the AML/CTF Act 2006, civil penalties for non-compliance can reach up to A$33 million per contravention for a body corporate (100,000 penalty units at the current rate of A$330 per unit), and up to A$6.6 million per contravention for an individual (20,000 penalty units). These are not the only enforcement tools available. AUSTRAC can also issue infringement notices, accept enforceable undertakings, and apply for injunctions.
"Firm" means: the deadline is real, penalties exist, and the regulator has demonstrated it will use its powers.
What "good faith" looks like on 1 July
The gap between "supportive" and "firm" is where most agencies are sitting right now.
AUSTRAC's good-faith posture does not mean agencies can wait until July 2, or August, or "after the rush." It means agencies that can show they have genuinely engaged with the requirements — enrolled, documented a risk assessment, put a program in place, appointed a compliance officer — are in a materially different position to those that have done nothing.
Practically, the minimum agencies are expected to have operational from 1 July includes:
- Enrolment with AUSTRAC (enrolment is open now; deadline to complete is 29 July 2026)
- A documented AML/CTF program — covering risk assessment, CDD procedures, governance, staff training, and record-keeping obligations
- A designated compliance officer at senior management level (notification to AUSTRAC required by 29 July 2026)
- A working CDD process for verifying customer identity before providing the designated service
These are not aspirational targets. Under the AML/CTF Act 2006, reporting entities are required to have these in place from the date their obligations commence.
The gap AUSTRAC is watching for
Agencies that turn up on 1 July with a documented program, an enrolled status, and a working CDD process are in a defensible position — even if the program is not yet perfect.
Agencies that turn up with nothing, or with an off-the-shelf PDF that has not been customised to their actual business, are not.
The distinction matters because AUSTRAC's stated approach is to support genuine effort. A generic, uncustomised template is harder to defend as genuine effort than a program that reflects your actual client mix, service area, and risk profile.
What to do with the next 40 days
If your program is not yet documented:
- Enrol with AUSTRAC Online if you have not done so.
- Use AUSTRAC's Program Starter Kit to produce a customised risk assessment and program document.
- Appoint a compliance officer — this can be an existing senior staff member.
- Put a CDD process in place for client verification from 1 July.
- Record every step — AUSTRAC requires records to be kept for at least 7 years under the AML/CTF Act 2006.
One option for agencies that haven't yet completed this work is AML Simple. The tool generates a customised AML/CTF program from your agency's details, walks you through client CDD workflows, and keeps your records in one place. It gives you a documented starting point for your program — not a guarantee of compliance, but a structured foundation built around the AUSTRAC Starter Kit framework.
The DIY path using AUSTRAC's free templates is entirely viable. If you have staff time to customise the Word documents, verify the logic against your client types, and build a record-keeping process, that approach works. The tool is for agencies that want to complete the setup in less time.
The bottom line
"Supportive but firm" is not a contradiction. It means AUSTRAC will work with agencies that are clearly trying — and will not extend leniency to those that are not.
The line between those two positions runs through documentation. An agency with a customised program, enrolled status, and a working CDD process is on the right side of it. An agency with none of those things is not — regardless of intent.
Forty days is enough time to get the foundation in place. It is not enough time to wait and see.
This post describes the regulatory framework under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) as amended by the Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024. It is general information only, not legal or compliance advice. Every agency's circumstances differ — consult a qualified AML/CTF compliance professional for advice specific to your situation.