4 months to go: Real Estate's AML/CTF deadline

Australian real estate businesses now have four months until they must comply with the AML/CTF Act, with the Tranche 2 reforms coming into force on 1 July 2026. 

While it’s tempting to think of this as just an administrative update, the reality of complying with AML/CTF is much more. What sits ahead is the construction of an entirely new compliance framework that touches governance, operations, systems, staff capability, and reporting lines.

If you have not begun, you are already short on time.

Enrolment with AUSTRAC, and your AMLCO

Enrolment with AUSTRAC is the formal entry point into the regulated environment. However, obligations under the AML/CTF Act are triggered when a business provides a designated service, not simply when it enrols. Enrolment ensures AUSTRAC can identify reporting entities operating in the regulated sector, and allows them access to AUSTRAC reporting systems.

You must appoint an AML/CTF Compliance Officer with genuine authority and capability. The individual who owns this role carries responsibility for overseeing the design, implementation, and ongoing effectiveness of your AML/CTF Program, as well as reporting to senior management and, where required, AUSTRAC.

Your Risk Assessment is the foundation

Every reporting entity must undertake a formal money laundering and terrorism financing risk assessment. It must analyse your client types, the services you provide, your delivery channels, geographic exposure, and the nature of your transactions, having regard to the nature, size and complexity of your business

From that risk assessment, you must build your AML/CTF Program. This Program sets out how your business will identify and verify clients, risk-rate them at onboarding, apply enhanced due diligence where required, detect and escalate suspicious behaviour, maintain records, vet staff, and conduct ongoing monitoring.

The regulator will expect clear alignment between your identified risks and your operational controls. Downloading a template and lightly editing it will not withstand scrutiny if it does not reflect how your agency actually operates, nor will it meaningfully help you to practically comply with AML/CTF obligations. AUSTRAC expects agencies using its template pack to customise it to the actual business risks and resulting policies, procedures, systems, and controls.

Operational change, not just paperwork

Compliance will alter your day-to-day processes, and you must implement systems capable of managing the load.

You will need to conduct and record Know Your Customer. This includes collecting and verifying identification information, identifying beneficial owners, assessing client risk levels, screening for politically exposed persons (PEPs), documenting enhanced due diligence decisions and verifying the information collected, and maintaining complete audit trails.

Client risk rating must occur at onboarding, using a documented methodology. That rating determines the level of scrutiny applied and the intensity of ongoing monitoring. Without a consistent system, risk assessment becomes subjective and exposed to challenge.

You must have a structured mechanism for internal escalation of suspicious matters and the ability to lodge Suspicious Matter Reports within statutory timeframes. Staff need to understand common AML/CTF typologies in the real estate context, what constitutes a red flag, and how to escalate concerns appropriately.

Staff vetting processes must be introduced, and training must be delivered across the business. This training must be role-specific to directors, compliance officers, salespeople, and administrative staff, as they all have different responsibilities. Training must move beyond theory and address what AML/CTF looks like in the context of property transactions.

Don't underestimate the workload

All of these requirements represent a significant adjustment to internal business processes and workflows.

You are designing a compliance architecture that must be documented, embedded into operations, supported by systems, understood by staff, overseen by leadership, and defensible under regulatory review. That takes time, coordination, and specialist expertise.

Four months can disappear quickly once you factor in procurement decisions, drafting, internal approvals, system implementation, training scheduling, and change management. Agencies that delay will find themselves rushing documentation, overloading staff, and exposing themselves to regulatory risk.

AUSTRAC has demonstrated in other sectors that it expects evidence that controls operate in practice. So, are you ready?

Why an end-to-end approach makes sense

Attempting to construct this internally will involve AML/CTF expertise, and significant resources and time. It will require legal understanding, operational design, technology implementation, and training capability.

AMLHUB provides a complete framework designed to meet these obligations in practice.

Our software system centralises KYC onboarding, PEP and sanctions screening, client risk rating, enhanced due diligence documentation, suspicious activity logging, record-keeping, reporting, and more. Instead of fragmented spreadsheets and manual processes, you operate within a structured and auditable platform that has been proven by servicing real estate AML/CTF in New Zealand since 2018.

Where onboarding volumes create pressure, our KYC outsourcing team can conduct identity verification, assess beneficial ownership, complete enhanced due diligence, and ensure documentation is defensible. This provides your team with relief without compromising your compliance standards.

We also deliver role-specific AML training to ensure your directors understand governance responsibilities, the compliance officer understands oversight requirements, and operational staff understand how to apply obligations in daily transactions.

As part of our solution, we also create your tailored risk assessment and AML/CTF Program that is aligned to your actual business model and risk profile, ensuring coherence between documented controls and real-world practice.

Making a decision

If you have not appointed a capable compliance lead, started your risk assessment, selected and implemented appropriate systems, and begun staff training, you need to act immediately.

The agencies that move decisively now will be well prepared to enter the new regulatory environment. Those that wait will find themselves attempting to build a compliance framework under pressure.

The deadline is fixed. The workload is substantial. The prudent course of action is to begin now with the right partner supporting you through the process.

Speak to your AMLHUB specialist today.