AML/CTF for Real Estate Agents: Your Tranche 2 Obligations Explained

9 min read · General information, not legal advice · Updated 2026-06-12

If you run or work in an Australian real estate agency, a decision is heading your way that you cannot delegate to settlement: do you start building an AML/CTF compliance capability now, or do you wait and risk scrambling? The Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (“Tranche 2”) brings real estate professionals into Australia's AML/CTF regime, with new obligations due to commence on 1 July 2026.

This article is written for the principal, licensee-in-charge or agent who needs a clear answer to one question: what does my agency actually have to do? We will walk through which of your activities count as “designated services”, the core obligations that follow, and a practical sequence for getting ready. This is general information, not legal advice — your specific obligations depend on the designated services you provide, so confirm the detail with AUSTRAC or a qualified adviser.

What Tranche 2 is, in plain terms

Australia has operated an AML/CTF regime for years, but it has mostly applied to banks, casinos and financial-service businesses. “Tranche 2” is the long-discussed expansion of that regime to additional sectors — made law through the Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024.

The regulator is AUSTRAC (the Australian Transaction Reports and Analysis Centre). AUSTRAC oversees the regime, and the things you will eventually need to do — enrol, and lodge reports — happen through AUSTRAC Online. The headline date to anchor your planning around is that new obligations for Tranche 2 entities are due to commence on 1 July 2026. That is not a date to discover at the last minute; the work to be ready takes months, not days.

Who and what it applies to: designated services

A common misconception is that Tranche 2 captures “real estate agents” as a job title. It does not work like that. The regime applies to businesses that provide one or more designated services. You become a “reporting entity” because of what you do, not the sign on the door.

The Tranche 2 sectors are:

• Real estate professionals — the focus of this article.
• Dealers in precious metals and precious stones.
• Certain professional service providers — lawyers, conveyancers, accountants, and trust & company service providers — when they provide specified designated services.

For a real estate agency, the relevant designated services centre on the activities at the heart of buying and selling property — for example, acting for a buyer or seller in the sale or transfer of real estate. The precise list of captured services for your business is being set out as the AUSTRAC rules are finalised, so the safe approach is to map your service lines against the final rules rather than assume one part of your business is in or out. If you do provide a designated service, the obligations below apply.

The core obligations you will carry

Once your agency provides a designated service, you take on the standard obligations that every reporting entity carries. They are not exotic, but they are non-negotiable:

• Enrol with AUSTRAC via AUSTRAC Online, so the regulator knows you are a reporting entity.
• Develop and maintain an AML/CTF program — this is the backbone. It covers your governance arrangements, a documented ML/TF risk assessment (money laundering and terrorism financing risk), and the policies, procedures, systems and controls that flow from that risk picture.
• Conduct customer due diligence (CDD/KYC) — verify who your customer is, including ongoing CDD and transaction monitoring rather than a one-off check at the start.
• Report to AUSTRAC — lodge suspicious matter reports (SMRs) when something doesn't add up, and threshold transaction reports (TTRs) for physical currency of AUD 10,000 or more.
• Keep records — generally for 7 years.
• Appoint an AML/CTF compliance officer (AMLCO) — a named person accountable for the program.

Failure to meet these obligations can attract significant civil and criminal penalties, so they deserve board- or principal-level attention rather than being parked with one busy team member.

A practical sequence to get ready

You don't have to do everything at once, but you do need to do things in a sensible order. Here is a checklist a principal can work through:

• Confirm your status. Map your agency's activities against the designated services to decide whether — and where — you are captured.
• Nominate your AMLCO. Pick the person who will own this. They need standing in the business and time to do the work.
• Run a risk assessment. Document your ML/TF risks across customers, the services you offer, delivery channels and geography. Everything else hangs off this.
• Write the AML/CTF program. Turn the risk assessment into governance, policies, procedures and controls that your people can actually follow.
• Set up your CDD process. Decide how you will verify identity, when you re-check (ongoing CDD), and how you will monitor transactions for red flags.
• Build reporting muscle memory. Make sure staff know what an SMR and a TTR are, and how to escalate. Plan to enrol with AUSTRAC and lodge through AUSTRAC Online.
• Train your team and keep records. Document training, decisions and verifications, and store them for the retention period.
• Schedule a review. Treat the program as living — update it as your business and the AUSTRAC rules change.

Common mistakes to avoid

The agencies that struggle tend to make the same handful of errors. Recognising them early saves a lot of rework:

• Treating it as a settlement-day task. AML/CTF is a standing program, not a checkbox at the point of sale. The risk assessment and program must exist before you rely on them.
• Buying a generic template and stopping there. A program that hasn't been tailored to your actual risks and services is a document, not a defence. The risk assessment is what makes it yours.
• Confusing one-off ID checks with ongoing CDD. Verifying a buyer once is not the same as monitoring the relationship over time.
• Leaving the AMLCO under-resourced. Naming someone is easy; giving them authority, training and time is what makes the role work.
• Poor record-keeping. If you can't show what you did and why, you can't demonstrate compliance. Keep records for the full retention period.
• Waiting for perfect certainty. Some detail will keep firming up as the AUSTRAC rules are finalised, but the foundational steps — status, AMLCO, risk assessment — can and should start now.

Where a template kit can save you time

You do not have to build every document from a blank page. A well-structured, audit-ready template kit — covering the AML/CTF program, a risk-assessment framework, CDD procedures, and reporting and record-keeping templates — gives you a credible starting point that you then tailor to your agency's risks. The value is in the time saved on structure and wording, not in pretending compliance is a copy-and-paste exercise. Whatever you start from, the program still has to reflect your real business, and the risk assessment still has to be yours. Used that way, a kit shortens the path; it does not replace the thinking.

The bottom line for principals

Tranche 2 is not a maybe. With obligations due to commence on 1 July 2026, the agencies that come out of this calmly are the ones that start the groundwork in the months beforehand: confirm whether their services are captured, appoint an AMLCO, complete a risk assessment, and build a program around it. The day-to-day obligations — CDD, reporting SMRs and TTRs, and record-keeping — become routine once that foundation is in place.

Again, this is general information rather than legal advice, and your exact obligations depend on the designated services your agency provides. Confirm the specifics with AUSTRAC at austrac.gov.au or a qualified adviser before you finalise your approach.