What 14 agency principals actually told me about AUSTRAC Tranche 2

Before we built AMLHive, I spent three weeks calling independent real estate agency principals. Not to pitch anything — to listen. The product brief was written, the spec was done. I needed to know whether the problem we were solving was real or whether it existed mostly on paper.

I called 14 agencies across New South Wales, Victoria, and Queensland. Some were suburban Sydney practices with six staff. Some were regional QLD agencies that had been in business for 20 years. The smallest had three people. The largest had 12. None were franchise branches. All were independents.

I asked each principal one question: “What do you know about AUSTRAC Tranche 2, and where are you up to with getting ready?”

Here is what they said. Some quotes are lightly paraphrased for clarity. All are anonymised and reproduced with permission.

What they said

The awareness gap is wider than the industry peak bodies will tell you. This principal had received a member circular from their state association. She had opened it, scanned the subject line, and filed it. “I assumed it was the same kind of stuff we’ve always had to do.”

AUSTRAC Tranche 2 is not a variation on existing obligations. For real estate agents, it is an entirely new compliance framework — the first time they have been brought into scope of the AML/CTF Act at all.

This came up in four of the 14 conversations. Franchise principals told me their network or franchisor had communicated that a “group AML/CTF solution” was being developed. In every case, when the principal followed up, the answer was some variation of: you’re a reporting entity, your obligations are your own.

This is correct under the law. The AML/CTF Act attaches obligations to the reporting entity that provides the designated service — the individual business. A group program may assist, but it does not transfer legal responsibility. Each principal is personally accountable.

It does not count — for two reasons.

First, the AML/CTF Act did not apply to real estate agencies in 2019. A document written for a context in which the agency had no AML/CTF obligations cannot, by definition, be an AML/CTF Program under the current Act. Second, even if the 2019 document had been written correctly for a different industry, the AML/CTF Act requires your program to be based on a current ML/TF risk assessment of your business — its services, customers, channels and jurisdictions.

An AML/CTF Program is a living document. It cannot be inherited unchanged from a previous owner.

Staff training is one obligation under the AML/CTF Act. There are five others: AUSTRAC enrolment, an AML/CTF program, customer due diligence, ongoing monitoring and reporting, and record-keeping. Training alone satisfies none of these.

This is not a criticism of training providers — training is genuinely important and will be evidence of good faith if AUSTRAC comes knocking. But training is one brick, not the building. The principal who has done training and nothing else is not compliant.

This one stopped me.

The compliance officer requirement is real — the AML/CTF Act requires every reporting entity to name a person responsible for the program. For an independent with five staff, that person will almost certainly be the principal. But it does not require a full-time compliance hire, a legal team, or a specialist consultant. The role is administrative: own the program, keep the records, lodge reports when they arise.

This principal had not been told what the requirement actually involved. He had imagined something much larger than reality. After 20 minutes on the phone, he changed his mind about closing.

A PEP is a Politically Exposed Person — someone who holds or has held a prominent public position, or who is a close family member or associate of such a person. PEPs present a higher risk of corruption and bribery, and the AML/CTF Act requires you to apply Enhanced Customer Due Diligence before providing them with a designated service.

The list of people who qualify is broader than most principals assume. Foreign government ministers, senior military officials, executives of state-owned enterprises, and their spouses and adult children all potentially qualify. This matters in Australian property: overseas buyers, offshore investors and migration-linked purchases regularly involve PEPs.

By 1 July 2026, this scenario — a buyer purchasing through a family trust, SMSF, or corporate trustee — will trigger Enhanced Customer Due Diligence as a matter of course. Principals told me that trust and company structures show up in 30–50% of transactions in some markets.

ECDD for a trust means: identifying all beneficial owners (anyone with 25% or more ownership or control), reviewing the trust deed, mapping the ownership chain, and documenting source of funds. Standard CDD — passport and driver licence — is not sufficient.

It is true that AUSTRAC’s largest penalties have hit large financial institutions — Westpac paid A$1.3 billion in 2020, CBA paid A$700 million in 2018. But those cases were exceptional in scale, not in principle.

AUSTRAC has a graduated enforcement approach. For new reporting entities making honest efforts, the early response will almost certainly be education and remedial directions, not civil penalty proceedings. But “we assumed they wouldn’t come for us” is not a defence. Agencies that do not enrol, do not build a program, and do not conduct CDD will be indistinguishable — in AUSTRAC’s records — from agencies that made no attempt at all.

Three patterns from 14 conversations

1. The franchisor responsibility gap

Multiple franchise principals were waiting on a group solution that was not coming — or was not going to substitute for their individual obligations. Franchise networks have an incentive to reassure their members; members have an incentive to delegate upward. The result is an industry that feels more prepared than it is.

2. Training-only tools creating false confidence

Several agencies had purchased an AML/CTF training product and genuinely believed this completed their compliance obligations. It does not. The market has done a poor job of communicating what training covers and what it does not.

3. Urgency without a plan

Most principals knew the 1 July deadline existed. Almost none had a plan for reaching it. The gap between knowing compliance is required and knowing what steps to take was the largest single barrier I encountered. Not budget, not willingness — just not knowing where to start.

If you recognise yourself in one of these quotes

The good news: every principal I spoke to who was willing to engage with the specifics — what the Act actually requires, what the obligations actually involve — found the path considerably less daunting than they had imagined.

Four steps to start today:

• Find the AUSTRAC enrolment page — go to AUSTRAC Online (online.austrac.gov.au) and start the enrolment process. It is free. You can begin before 1 July to avoid the post-deadline queue.
• Read the AUSTRAC real estate starter kit — AUSTRAC has published a plain-English program starter kit specifically for real estate. It is not long. It tells you exactly what your program must contain.
• Identify your Compliance Officer now — for most independent agencies this will be you, the principal. Name the role. Write it down. AUSTRAC Online requires you to register this person.
• Map your trust and company buyers — look at your active pipeline and identify which transactions involve non-individual buyers. Those will be your first ECDD cases. Start there.