InternationalAML/CTF and the Legal Profession: What Tranche 2 Actually Means for Practitioners

18 June 2026

For years, the Australian legal profession has operated on the periphery of the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act). While financial institutions have long been on the frontline, the "Tranche 2" reforms are set to bring lawyers, accountants, and real estate agents—often referred to as "gatekeepers"—fully into the regulatory fold.

This shift represents more than just an administrative hurdle; it is a fundamental change in how legal practitioners must assess client risk and fulfill their role in protecting the integrity of the financial system.

The Core Pillars of Tranche 2 Compliance

Under the reforms, legal practitioners will be required to implement several key compliance measures:

  • Know Your Customer (KYC) & Customer Due Diligence (CDD): Beyond simple identity checks, practitioners must verify the identity of clients and, crucially, identify the "beneficial ownership" of corporate entities to ensure transparency.
  • Risk Assessment: Firms must formally identify and manage the specific money laundering and terrorism financing risks inherent in their client base and service offerings.
  • Reporting Obligations: This includes submitting Suspicious Matter Reports (SMRs) to AUSTRAC. Navigating this requirement will be a critical challenge, particularly in balancing compliance with traditional legal professional privilege.

The Critical Role of the Sanctions List

A cornerstone of any robust AML/CTF program is the mandatory screening of clients against the Australian Sanctions Consolidated List. Maintained by the Department of Foreign Affairs and Trade (DFAT), this list identifies individuals and entities subject to targeted financial sanctions.

As of June 2026, the scale of this list highlights the complexity of the task facing practitioners:

  • Total Listings: There are currently 11,046 active entries that must be monitored. (15 in total of Australian citzenship with cancelled passports)
  • Individuals (~7,177 entries): This includes persons associated with global terrorist organisations and those designated under autonomous sanctions regimes (such as those related to the conflict in Ukraine).
  • Entities (~3,607 entries): These range from state-owned enterprises to front companies used for illicit financing.
  • Vessels (~262 entries): Sanctions also extend to maritime assets to prevent the transport of prohibited goods.

For a legal practitioner, facilitating a transaction for a sanctioned party without authorisation is a strict liability offence. Automated, regular screening against this data is no longer optional—it is a necessity.

Moving from Burden to Benefit

While the administrative requirements of Tranche 2 are significant, they also offer an opportunity to modernise firm operations. By adopting digital KYC solutions and automated sanctions screening, firms can:

  1. Enhance Reputation: Align with global ethical standards and demonstrate a commitment to the rule of law.
  2. Mitigate Risk: Protect the firm from being unwittingly used to facilitate financial crime or becoming the subject of an AUSTRAC enforcement action.
  3. Improve Efficiency: Replace manual, paper-based onboarding with streamlined digital workflows that provide a better experience for legitimate clients.

Conclusion

Tranche 2 represents the most significant regulatory shift for the Australian legal profession in decades. By understanding the data—such as the 11,000+ entries on the Consolidated List—and preparing for new due diligence requirements, practitioners can ensure they remain compliant while continuing to provide high-quality legal services in an increasingly complex global environment.


Disclaimer: This post provides general information and does not constitute legal advice. Practitioners should consult the latest AUSTRAC guidance and the AML/CTF Act for specific compliance requirements.