Is your business ready for the AUSTRAC Tranche 2 AML/CTF reforms? Here’s what you need to know.

Big changes are coming to Australia’s anti-money laundering laws, and if you’re in law, real estate, accounting, or other professional services, this affects you. The new AML/CTF Rules 2025 are part of AUSTRAC’s reform rollout, and they’re designed to tighten up how businesses handle financial crime risk.

Here’s the short version.

What’s changing?

From 1 July 2026, a new group of businesses (called Tranche 2 entities) will be required to follow AUSTRAC’s rules. This includes:

  • Law firms
  • Real estate agencies
  • Accounting practices
  • Other professional service providers

These businesses will now be considered reporting entities, meaning they’ll need to register with AUSTRAC and follow a set of compliance obligations.

Key requirements

Once the rules kick in, Tranche 2 entities will need to:

  • Enrol with AUSTRAC and keep business details up to date
  • Create an AML/CTF program that outlines how they manage risk
  • Conduct customer due diligence (CDD) including ID checks, beneficial ownership, and source of funds
  • Report suspicious activity and large cash transactions
  • Submit annual compliance reports

There are also options for businesses to form reporting groups, which lets multiple firms share one AML program under a lead entity. This can reduce duplication and make compliance more manageable.

Why it matters

If you’re running a business that deals with property, trust accounts, or financial transactions, these rules are not optional. Non-compliance can lead to serious penalties, reputational damage, and operational disruption.

But here’s the good news: you don’t have to build your compliance framework from scratch.

APLYiD takes the headache out of AML

APLYiD’s software is built to take the stress out of AML obligations. It automates ID verification, streamlines customer due diligence (CDD), and keeps your records audit-ready. Instead of juggling spreadsheets and chasing documents, you get a clean, secure system that does the heavy lifting.

With the 2026 deadline approaching, now’s the time to get ahead. APLYiD helps you stay compliant without drowning your team in admin. It’s a no brainer.

So what’s next?

The rules won’t take effect until July 2026, so there’s still time to make sure you’re prepared. We’ve outlined some of the key upcoming dates for you below:

  • October 2025: Release of AUSTRAC core guidance.
  • December 2025: Release of AUSTRAC sector specific guidance - Small Business Starter Kits, including a risk assessment and AML/CTF program.
  • 31st March 2026: Enrolment opens for Tranche 2 entities and AML/CTF obligations begin for current reporting entities and newly regulated virtual asset service providers. 
  • 1st July 2026: AML/CTF obligations take effect for Tranche 2 entities.FAQs:

What is CDD and EDD?

Customer Due Diligence (CDD) is split into two parts:

  • Initial CDD: Done at the start of a customer relationship. It involves assessing risk based on customer type, service, and geography, plus screening for politically exposed persons (PEPs) and financial sanctions.
  • Ongoing CDD: Monitoring and updating customer risk profiles throughout the relationship.

Depending on the risk level, businesses must apply either:

  • Simplified CDD: For low-risk customers, with basic know your customer (KYC) and identity verification.
  • Enhanced CDD (EDD): For high-risk customers, including foreign PEPs, complex ownership structures, or transactions involving high-risk countries. This includes verifying source of wealth and funds, and getting senior management approval.

Can CDD be delayed?

Yes, but only in limited circumstances. Delayed CDD is allowed if:

  • It’s essential to avoid disrupting business
  • You have policies to complete CDD quickly
  • The risk of delay is low and well-managed
  • You follow the specific conditions in the AML/CTF Rule

What happens with pre-existing customers?

If a customer was onboarded before the new rules, they’re considered a pre-commencement customer. You’ll need to monitor them for any changes that increase their risk level. If that happens, you must complete both the initial and ongoing CDD.

How long do I need to keep records?

Reporting Entities must keep records for 7 years after a relationship ends or a transaction is completed. This includes:

  • What data was collected
  • How risk was assessed
  • What steps were taken to verify identity

You don’t need to keep copies of ID documents - just a record of what was used (e.g. passport details). The great news is that APLYiD will securely store this information for you for the required timeframe.

What are the basics for identity verification?

You must verify both individuals and legal entities (like companies or trusts). This can be done using:

  • Reliable documents
  • Independent electronic data
  • Or a combination of both

And, you need to be confident that:

  • Individuals are who they say they are
  • Entities are legitimate and beneficial owners are identified

This is where APLYiD comes in. Our software automates this process and cuts out the admin. Keeping your business efficiently compliant and audit ready. 

What are Politically Exposed Persons (PEPs)?

AUSTRAC defines three types of PEPs:

  • Domestic PEPs (Australian officials)
  • Foreign PEPs (international government roles)
  • International organisation PEPs (e.g. UN, WTO)

Foreign PEPs are automatically high-risk. Domestic and international PEPs must be assessed individually. For high-risk PEPs, you’ll need to:

  • Get senior management approval
  • Verify source of wealth and funds
  • Monitor transactions closely

Do my staff require specific training?

All Reporting Entities must run AML/CTF training programs, which should be tailored and delivered regularly. Staff should understand:

  • The business’s legal obligations
  • What non-compliance means and what the consequences are
  • The types of risks they may encounter
  • Their role in the AML/CTF program

Using APLYiD reduces human error. Plus, it can also flag potential fraud risks.

What if I want to outsource CDD?

Working with external providers to support CDD can help manage risk and cut down admin for your team. However, you’re still accountable. Before you get started with outsourcing it’s important to check:

  • Have a written agreement approved by senior management
  • Ensure all KYC data is accessible within 7 days
  • Regularly assess the provider’s compliance and risk handling

You can rest assured that we’re keeping ahead of Tranche 2 reforms to give you total compliance peace of mind with APLYiD.

Keen to try it out? Get started in minutes today.

Read More News & Insights

Industry News

Read more
Industry News

How APLYiD increased account creation by 406% through quicker onboarding

Read more
Industry News

What you need to know about the hidden costs of non-compliance with AML laws.

Read more
Industry News

What you need to know about the new NZ Biometric Processing Privacy Code

Read more
Estate Agents

APLYiD partners with MRI Software for no-nonsense AML compliance for Australian real estate agencies

Read more
Industry News

What does ‘reasonable steps’ really mean in AML compliance?

Read more
Industry News

APLYiD delivers total AML compliance – without friction, bottlenecks or admin

Read more
Industry News

Tranche 2 AML and CFT compliance is coming – and most Australian businesses aren’t ready

Read more
Industry News

Know your customers, know your commitments: NZ mandates AML risk-rating for new customers

Starting 1 June 2025, all NZ reporting entities must assess, record and monitor the risk level of new clients.

Read more
Industry News

Tranche 2: The Next Big Step in compliance

If you are a Lawyer, Real Estate Agent, or an Accountant in Australia, you may be wondering what exactly this ‘Tranche 2’ stuff will mean for you in practical terms.

Read more
Financial Services

Press Release: APLYiD Partners with HES Fintech to Enhance Digital Identity Verification Solutions

Press Release: APLYiD Partners with HES Fintech to Enhance Digital Identity Verification Solutions

Read more
Estate Agents

Unmasking Property Fraud with Biometric AML Technology

It's not hard to scam an agency, and HMRC is on the hunt for AML negligence with £5k fines. Yikes. But there is an easy way to fix this...

Read more
Industry News

Heartbreaking Fraud

As Valentine's Day approaches, love is undoubtedly in the air, but unfortunately, so is the risk of identity theft within the online dating sphere.

Read more
Industry News

New Year, New AML regulations?

As we kick off the new year, APLYiD, a leading identity verification company, is navigating through changes in the regulatory landscape.

Read more
Industry News

The Power of Biometric Verification

In today's fast-changing world of digital security, biometric verification has become a crucial way to authenticate identities.

Read more
EDD

What is Enhanced Due Diligence (EDD)?

What is Enhanced Due Diligence and why is it so important?

Read more
EDD

Enhanced Due Diligence with Outsourced ACAMS Professionals and Software

At APLYiD our mission is to end identity fraud and digital crime – that’s why we’ve made the best biometric identity verification software on the planet. But as our technology gets more sophisticated...

Read more
Financial Services

How are hackers beating banks’ ID verification software?

At APLYiD our mission is to end identity fraud and digital crime – that’s why we’ve made the best biometric identity verification software on the planet. But as our technology gets more sophisticated...

Read more
Legal Services

From Russia with Dislike

The cost of living crisis, competitive landscape and ongoing war in Ukraine are causing major headaches for the legal industry

Read more
Vehicle Finance

New plates, same old problems

The new 2023 plate change will come in a volatile, ultra-competitive market. Here’s how to win over those harder-to-reach customers

Read more
Estate Agents

Moving on up?

There are some tiny, fragile signs that the UK Property market is recovering

Read more
Accountancy Firms

Count me out

The accounting industry is in crisis – but with one simple software tweak it could become a fun, rewarding job once more

Read more
Financial Services

Abandon(ment) hope

As interest rates continue to rise, so too do abandonment rates. By creating a better customer experience, you can cut those rates while protecting your business from fraud

Read more
Financial Services

Challenger banks: they shouldn’t stand alone

The FCA reports that the UK’s top challenger banks still don’t do enough to eliminate identity theft and cyber fraud – but there’s nothing but silence from the companies that are supposed to be protecting them.

Read more
Industry News

The best YouTube channels for Cyber Security

Watch and learn with our pick of the 14 best YouTube channels to follow if you’re serious about cyber security

Read more
Financial Services

Will this be the year of identity?

Passwords are hacked with ease, and MFAs are not the answer. Isn’t it time the biggest companies protect their clients and workforce with an identity-based perimeter?

Read more
Accountancy Firms

The beginner’s guide to Knowing Your Customer (KYC)

New to KYC? Here’s your at-a-glance guide to the ins and outs of Knowing Your Customer.

Read more
Accountancy Firms

What keeps accountants awake at night?

The entire accounting industry is changing. For some that means new opportunities for growth and diversification; but for others the change can be traumatic.

Read more
Estate Agents

How Estate Agents can beat the doom and gloom of 2023

Wherever you look the experts are predicting an annus horribilis for Estate Agents next year. But we’ve unearthed some ways you can beat the property market slump and thrive next year

Read more
Vehicle Finance

How vehicle finance companies can win in 2023

The next year is going to be a tough one, with fewer car registrations than ever. Follow our tips to make the most of every customer and drive ahead of the competition.

Read more
Accountancy Firms

Is Our Mission Impossible?

So much of the world is under threat from scammers, bad actors – and governments that give them shelter. But we can defeat the bad guys if the good guys band together.

Read more
Legal Services

How Law Firms can survive – and thrive – in a recession

Conventional wisdom predicts that legal firms do well in a recession. But that’s not always the case – unless you follow our top five tips for 2023

Read more
Legal Services

Legal Stimulants

Our complex world and its resultant threats to businesses mean General Counsel and legal firms are getting less sleep than ever. But there’s more to it than just risk: finding the right balance can give in-house

Read more
Financial Services

How will Consumer Finance be affected in the Recession of 2023?

Some predict a bumper year for consumer finance; other suggest the industry will suffer. Either way recessions can wreak havoc – but here are some ways you can navigate the choppy waters ahead.

Read more
Industry News

ID Verification With Face Matching

The safest, fastest and most trustworthy onboarding process to verify your customer’s identity.

Read more
Financial Services

The Seamless Paradox

Digital-first banks attract customers with no-fee accounts and simple, seamless setups. But their appeal to fraudsters means the more seamless they get, the more dangerous they become.

Read more
Financial Services

Why Banks Need To Start Taking Ownership

There are many reasons why elite sports stars can end up poor and homeless. Drug habits, concussions, bad investments, you name it. But Cindy Brown is different.

Read more
Industry News

The Human Cost Of Identity Theft

The myth persists that identity theft is a relatively harmless, victimless crime aimed mostly at the elderly and vulnerable… but the data doesn’t agree.

Read more
Industry News

Biometrics - The Future Of Customer Onboarding

The best customer onboarding experience… and the best defence against digital fraud.

Read more
Accountancy Firms

2023: by the numbers - Top three trends to help Accountancy Firms thrive in 2023

Well, 2022 was a bit of a hellscape, wasn’t it? Recessions, political merry-go-rounds, Royal dramas, problematic world cups, and the ever-present ghost at the feast that is Brexit have all left their mark on the

Read more
Financial Services

Everything you need to know about Knowing Your Customer

KYC is an important part of protecting yourself – and your customers – from fraud, regulatory breaches and bad actors. Luckily APLYiD makes KYC compliance quick, seamless and effective.

Read more
Accountancy Firms

2022: A perfect storm for identity fraud

Imagine returning from a well-earned holiday and putting your key in your front door only to find the locks have been changed…. then a stranger opens the door and asks who you are.

Read more

Contact us today