AML/CFT guide · Australia

Australia AML/CFT Regulation

A reference guide to Australia's anti-money-laundering and counter-terrorism-financing framework: AUSTRAC as combined regulator and FIU, the AML/CTF Act 2006, the DFAT sanctions regime, and the 2024 'Tranche 2' reforms expanding the regime to non-financial businesses.

Last updated 2026-06-20

Australia AML/CFT Regulation

Australia is unusual in fusing the AML/CTF regulator and the Financial Intelligence Unit into a single body, AUSTRAC. The core statute is the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. The sanctions regime is administered separately by the Department of Foreign Affairs and Trade (DFAT).

General information, not legal advice. This material is provided for general informational purposes and reflects publicly available sources as of 20 June 2026. It is not legal advice and may not reflect the most recent changes. Confirm any obligation against the relevant primary authority before relying on it.


1. Australian AML/CFT bodies and roles

BodyRole
AUSTRAC (Australian Transaction Reports and Analysis Centre)The national AML/CTF regulator and the Financial Intelligence Unit, combined in one agency. Receives suspicious-matter, threshold-transaction, and international-funds-transfer reports; supervises and enforces.
Attorney-General's Department (AGD)AML/CTF policy lead; led the "Tranche 2" reform legislation.
Department of Home AffairsNamed as administering agency on the AML/CTF Act register entry.
DFAT — Australian Sanctions Office (ASO)Administers Australian sanctions law and maintains the Consolidated List.
Australian Federal Police (AFP)Receives asset-freeze information and investigates sanctions breaches.

For screening purposes, two surfaces matter: AUSTRAC reporting-entity obligations and the DFAT Consolidated List screened against by regulated businesses.


2. History timeline

YearLaw / eventWhat it changed
1988Financial Transaction Reports Act 1988 (FTR Act)The first federal cash-reporting regime; created the agency that preceded AUSTRAC. (AUSTRAC's current pages refer to the Financial Transaction Reports Act 1988.)
1989AUSTRAC establishedStood up as a statutory authority and FIU under the FTR Act framework.
2006Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act)Came into effect 12 December 2006. A modern risk-based regime introducing the reporting-entity model, designated services, AML/CTF programs, CDD, and suspicious-matter/threshold/international-transfer reporting; extended the regime to terrorism financing.
2007–2008AML/CTF Rules and phased commencementDetailed obligations set out in the AML/CTF Rules (delegated legislation made by the AUSTRAC CEO).
2018Commonwealth Bank penaltyA Federal Court order (20 June 2018) of A$700 million for late reporting of threshold transactions — then the largest Australian civil penalty.
2020Westpac penaltyA Federal Court penalty (21 Oct 2020) of A$1.3 billion — the largest civil penalty in Australian corporate history, including a failure to report international funds transfers.
2024AML/CTF Amendment Act 2024 ("Tranche 2")Royal Assent 10 December 2024. Extends AML/CTF obligations to designated non-financial businesses and professions (DNFBPs) and tightens digital-asset rules. Phased commencement 2025–2026.
2025FTR Act 1988 repealed (effective 7 January 2025)Legacy "cash dealer" obligations rolled into the modernised AML/CTF Act framework.
2026Tranche 2 commencementExisting entities and VASPs: 31 March 2026. New DNFBP sectors: obligations from 1 July 2026 (enrolment/registration deadline 29 July 2026).

3. Current framework (AML/CTF Act 2006 and AML/CTF Rules)

"Reporting entities" providing "designated services" are covered — currently financial, gambling, remittance, digital-currency-exchange, and bullion sectors (expanding to DNFBPs from 1 July 2026; see §5).

ObligationDetail
Customer due diligence (CDD)Initial identification and verification before providing a designated service; ongoing monitoring; simplified or enhanced procedures based on risk.
AML/CTF programA mandatory risk-based program: risk assessment, written policies, a designated compliance officer, and governing-body oversight.
Suspicious Matter Reports (SMRs)Report transactions or customers suspected of money laundering or terrorist financing to AUSTRAC.
Threshold Transaction Reports (TTRs)Report physical-currency (and equivalent) transactions of A$10,000 or more.
International Funds Transfer Instructions (IFTIs)Report cross-border value transfers; post-reform extends to certain virtual-asset transfers.
Beneficial ownershipCDD requires identifying beneficial owners; Tranche 2 strengthens these obligations as part of FATF alignment.
PenaltiesA civil penalty regime enforced by AUSTRAC in the Federal Court (precedents include the Commonwealth Bank and Westpac penalties above).

4. Sanctions screening (DFAT)

Australia's sanctions regime is legally distinct from AML/CTF but is screened together inside a reporting entity's risk-based program.

ElementDetail
DFAT Consolidated ListA single list of all persons and entities subject to targeted financial sanctions under Australian law, maintained by the Australian Sanctions Office within DFAT.
Legal basisThe Charter of the United Nations Act 1945 (UN-mandated sanctions) plus the Autonomous Sanctions Act 2011 and Autonomous Sanctions Regulations 2011 (Australia's independent regimes).
Screening obligationFirms must integrate DFAT-list screening into their risk-based AML/CTF programs; this applies beyond banks to remitters, exporters, and any organisation with international counterparties.
Asset-freeze reportingAsset holders must report freezable or controlled assets to the AFP.

Both UN-derived and autonomous Australian listings flow through this single list, which covers Australia's full targeted-financial-sanctions surface.


5. The 2024 "Tranche 2" reforms

The Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 received Royal Assent on 10 December 2024, closing Australia's long-standing "Tranche 2" gap and aligning with FATF recommendations.

What changes:

  • Extends AML/CTF obligations to DNFBPs: lawyers, conveyancers, accountants, real-estate professionals, dealers in precious metals and stones, and trust and company service providers.
  • Strengthens and modernises digital-asset (VASP) obligations, including reporting on transfers involving unverified virtual-asset wallets.
  • Simplifies and modernises core obligations for all reporting entities.
  • Repealed the FTR Act 1988 (effective 7 January 2025).

Phased commencement:

DateWhat commences
7 January 2025FTR Act 1988 repealed.
31 March 2026Reformed obligations for existing reporting entities and VASPs; Tranche 2 enrolment opens.
1 July 2026AML/CTF obligations commence for new DNFBP sectors.
29 July 2026Enrolment/registration deadline for newly regulated entities.

The reforms bring a large number of newly regulated businesses — predominantly DNFBPs — into scope, with figures commonly reported in the order of tens of thousands of entities. From mid-2026, these businesses must run CDD and sanctions screening for the first time.


6. Sources and primary authorities

Primary sources preferred; accessed 2026-06-20 unless noted.

Legislation

AUSTRAC

Home Affairs / AGD

DFAT / sanctions


← All AML/CFT guides