Updated August 2026

Field Guide · Lawyers & Law Firms

AUSTRAC AML/CTF compliance for lawyers and law firms

Tranche 2 is service-based, not entity-based. A sole practitioner doing property conveyancing may be captured; a litigation-only firm may not be. Whether particular information is subject to LPP requires assessment under the amended Act and the applicable law of privilege.
7
Steps to compliance
29 Jul
Enrolment deadline (passed)
3 days
Standard non-TF SMR deadline
$364
Penalty unit rate

Australian law firms may be regulated by AUSTRAC when they provide designated services; coverage depends on the services performed, not simply on being a lawyer or law firm. Where the obligations apply, firms must enrol, designate and notify an AML/CTF compliance officer, maintain an AML/CTF program, undertake initial and ongoing customer due diligence, train relevant personnel, retain required records and submit required reports. Legal professional privilege and tipping-off are separate considerations when suspicious-matter reporting arises.

⚠ The 29 July 2026 transitional enrolment deadline has passed  ·  Standard enrolment is generally due within 28 days after starting a designated service  ·  Compliance-officer notification is due within 14 days after designation; the historical transitional rule was the later of 29 July 2026 or 14 days after enrolmentaustrac.gov.au ↗

I. Service-Based, Not Entity-Based

Is your law firm a reporting entity?

Tranche 2 captures firms by the services they provide, not the type of practice they run.

In scope

  • Acting on a real property transaction
  • Managing or controlling client money or assets
  • Forming companies or trusts for clients
  • Acting as or arranging nominee directors/shareholders
  • Buying or selling a business entity or business assets
  • Providing registered office or company secretarial services

Generally not in scope

  • General litigation and dispute resolution
  • Criminal defence
  • Family law proceedings
  • Drafting wills and powers of attorney
  • Pure legal advice — no fund handling or transaction execution
  • Barristers providing advocacy services only

Not legal advice — confirm your specific services at austrac.gov.au ↗.

A sole practitioner conveyancer is a reporting entity. A national litigation firm with no designated services is not. Scope is determined service-by-service.

AML/CTF Act 2006, designated services

If you are unsure whether your services are captured, check whether your business may be regulated. Firms that also provide conveyancing services can review the AML/CTF guide for conveyancers.

II. Operational Requirements

What an in-scope law firm must do

The existing obligations cover enrolment, governance, the firm’s AML/CTF program, customer due diligence, reporting, personnel training, record keeping and independent evaluation.

01

Confirm your designated services

Review the AML/CTF Act 2006. It is service-based, not entity-based. A sole practitioner doing property conveyancing is captured. A litigation-only firm may not be.

02

Enrol with AUSTRAC now if not enrolled

Register at online.austrac.gov.au. You need your ABN, firm details, and designated services list.

03

Appoint and notify your compliance officer

Designate an eligible individual at management level with sufficient authority, independence and access to resources and information. The individual must meet the applicable residency and fit-and-proper requirements. Notify AUSTRAC within 14 days after designation.

04

Build your AML/CTF Program

Customise to your firm's services and clients. The AUSTRAC Starter Kit must be tailored — an unmodified Starter Kit does not satisfy your program obligation.

05

Train relevant personnel

Provide initial and ongoing AML/CTF training to personnel who perform AML/CTF functions. Training must be appropriate to their functions, relevant ML/TF risks and responsibilities under your AML/CTF policies.

06

Apply CDD and meet reporting obligations

3 days / 24 hrs

Since 1 July 2026, undertake CDD in accordance with the Act and Rules, subject to applicable exceptions. Standard SMR deadlines are 3 business days after suspicion or 24 hours for terrorism-financing suspicions; partial-LPP cases may have a 5-business-day deadline and require an LPP form. Retain program, CDD and transaction records for their applicable statutory periods.

07

Schedule your independent evaluation

Where the Part 1A obligations apply, your evaluation frequency must be appropriate to the nature, size and complexity of the business and at least once every 3 years. Transitional rules stagger the first evaluation deadline for newly regulated entities.

See what an AML/CTF program contains, the AUSTRAC enrolment guide, and how to submit a Suspicious Matter Report to AUSTRAC.

III. LPP and Tipping Off

Does privilege protect my firm from having to file an SMR?

Amended section 41 provides specific treatment where some or all information grounding a suspicion is reasonably believed to be privileged.

f a reporting entity reasonably believes that some, but not all, information required in an SMR may be privileged, the privilege belongs to another person and the other statutory conditions apply, the report is due within 5 business days after the suspicion is formed and must be accompanied by the applicable LPP form. If the reporting entity reasonably believes that all information comprising the grounds for suspicion is privileged, it may refuse to give the report. Whether particular information is privileged depends on the circumstances.

Section 123 applies where covered information is disclosed and the disclosure would or could reasonably be expected to prejudice an investigation. Statutory exceptions may apply, including the conditional crime-prevention exception for legal practitioners and legal-services businesses.

s.123, AML/CTF Act 2006

Tipping-off note

Section 123 makes it a criminal offence to disclose covered information where the disclosure would or could reasonably be expected to prejudice an investigation. Whether the test is met depends on what is disclosed, to whom and in what circumstances. The section contains exceptions, including a conditional exception for certain good-faith crime-prevention disclosures by legal practitioners and legal-services businesses.

IV. What You Get

Five documents, built for your specific firm

Not the unmodified AUSTRAC Starter Kit — documents adapted using your firm details, compliance officer and designated services.

AML/CTF Program

Firm-specific program covering legal professional privilege, tipping-off, SMR obligations, property transaction CDD, trust account controls, and your ML/TF risk assessment.

CDD Templates

Client due diligence procedures for individual clients, companies, trusts and beneficial owners, including controls for circumstances in which enhanced CDD is required.

Role-Based Staff Training + Certificate

Interactive initial and ongoing training tailored to each staff member's AML/CTF functions, relevant risks and responsibilities, with legal-sector scenarios covering red flags, tipping-off and SMR filing. Completion certificates provide evidence of training and are retained under the applicable program-record retention rule.

Compliance Officer Letter

A record of the firm's compliance-officer designation. The firm remains responsible for ensuring the designated individual meets the Act's eligibility, authority and independence requirements.

SMR Assistant

Klyvon prepares an SMR draft from the transaction details entered for review before submission. Standard deadlines are 3 business days after suspicion or 24 hours for terrorism-financing suspicions; separate LPP treatment may apply.

V. Focused Questions

Common questions from law firms

See the worked explanation of AUSTRAC’s 28-day enrolment rule.

Primary sources

Last updated 20 August 2026 · Klyvon Compliance Team

VI. How Klyvon Helps

Compliance doesn’t end at enrolment — Klyvon runs alongside your practice

Klyvon generates program, risk-assessment and CDD documents for your review. Then Klyvon keeps working — tracking staff training and review dates, drafting SMRs, and answering the questions that come up between reviews.

Risk assessment, built to your practice

A documented ML/TF risk assessment covering your designated services, client types, and delivery channels — not a generic template with your firm's name on it.

Initial and ongoing training by role

Interactive modules assigned by staff role, with legal-sector scenarios. Completion certificates provide evidence of training and are retained under the applicable program-record retention rule.

SMR drafting when suspicion arises

Prepare an SMR draft from the transaction details entered, with legal-sector red flags and tipping-off guidance included, for review before submission.

Answers instead of pointing you at a PDF

Ask a plain question about a real client situation — a privilege claim, a settlement that doesn't add up.

Get started free →

From $299/month · free to start · cancel anytime

Related resources