Do Accountants and Bookkeepers Need an AML/CTF Program Under Tranche 2?

Detailed Explanation

Tranche 2 of Australia's AML/CTF reforms extends AUSTRAC's regulated population beyond banks and casinos to a defined list of "designated services" — and accounting and bookkeeping practices sit right on the boundary of that list, because most of what they do day to day (tax returns, BAS, financial statements, general advice) is explicitly not captured, while a smaller set of services they commonly also offer is.

What is not captured. Routine tax agent and BAS agent work — preparing and lodging tax returns and business activity statements, preparing financial statements, and giving general tax or business advice — sits outside the designated-services list. A practice that does only this work does not become an AUSTRAC reporting entity on that basis.

What is captured. The designated services most relevant to accounting and bookkeeping practices are:

• Acting as a company formation agent, or helping set up trusts and other legal arrangements on a client's behalf.
• Acting as a registered agent for a company or trust the practice helped establish (for example, being listed as the registered office or agent with ASIC).
• Assisting in planning or carrying out a transaction to buy, sell, or otherwise transfer a business on a client's behalf.
• Receiving, holding, controlling, or managing client funds, accounts, or property — a practice that operates a client trust account or otherwise takes control of client money, rather than only advising on it.

A practice can easily do both kinds of work at once. A firm that lodges tax returns for most clients but also sets up companies and trusts for a subset of them is captured for the designated-service work, even though the bulk of its billing is routine compliance work that, on its own, would not trigger anything.

The enrolment and obligation timeline. AUSTRAC opened Tranche 2 enrolment in the first half of 2026 with a deadline of 29 July 2026, and the substantive obligations — a documented AML/CTF program, a named compliance officer, customer due diligence, ongoing monitoring, and suspicious-matter reporting — took effect from 1 July 2026. A practice that determines it should have enrolled and hasn't should treat that as urgent: operating a designated service as an unenrolled reporting entity is a criminal offence under the Act, not a paperwork oversight to tidy up later.

Working Out Whether Your Practice Is Captured

1. List every service the practice actually provides, not just its core tax and bookkeeping work. Company registrations, trust deed preparation, acting as a registered agent, and any client trust account are the services to check specifically — a practice's own sense of "what we mainly do" often understates the designated-service work that's grown up alongside it.
2. Separate advisory work from execution work. Advising a client that a trust structure makes sense is not the same as being the one who sets it up and acts as its registered agent — the latter is what triggers the obligation, not the advice itself.
3. Check client trust or controlled-money accounts specifically. A practice that holds or manages client funds through any kind of trust account is squarely in "managing client property" territory, even if that's a small part of overall revenue.
4. Re-check after any service expansion. A practice that starts offering company formation or trust setup as a new add-on service, or begins acting as a registered agent for the first time, needs to re-assess its status at that point — Tranche 2 status isn't a one-time determination made in 2026 and then forgotten.
5. Get a specific legal or compliance opinion if the answer isn't clear-cut. The designated-services list has genuine edge cases (partial involvement in a transaction, referring rather than executing a company formation) that are worth a direct compliance opinion rather than a best guess, given the criminal-offence consequence of getting it wrong.

Building the Program if Captured

A captured practice needs a documented AML/CTF program (describing how it identifies and manages money-laundering and terrorism-financing risk specific to its business), a named compliance officer, customer due diligence at the point of taking on a client for a designated service, ongoing monitoring rather than a one-off check, and a workflow for staff to flag and escalate a suspicious matter. The practical difference from an industry like real estate — see how do real estate agents automate AML/CTF customer due diligence under Tranche 2 for that comparable build — is that an accounting practice usually already runs practice-management software (for client onboarding, document requests, and workflow tracking); integrating identity verification and screening into that existing system, scoped specifically to the designated-service engagements rather than every client interaction, avoids running a parallel compliance process for the whole client base when only part of it is actually in scope.

Things to Consider

• Being captured doesn't mean every client relationship needs AML/CTF treatment. The obligations attach to the designated service specifically — a client who only ever receives tax-return and BAS work from the practice doesn't need to go through customer due diligence just because the practice also offers company formation to other clients.
• This is separate from, and additional to, existing professional obligations. Tax agent and BAS agent registration, professional body membership requirements, and Privacy Act obligations all still apply in full; Tranche 2 adds a distinct AUSTRAC reporting-entity layer on top rather than replacing anything.
• Client document collection and AML/CTF due diligence are related but not identical. See how do accounting and bookkeeping firms automate client document collection for the general intake-automation pattern this compliance layer can plug into, though AML/CTF identity verification has its own specific standard the general document-collection process wasn't built to meet on its own.
• Practice size doesn't exempt a firm. A sole practitioner or small partnership providing a captured designated service has the same core obligations as a large firm, though AUSTRAC expects the program itself to be proportionate to the practice's actual size and risk.

Common Mistakes

• Assuming "we're accountants, not real estate agents or lawyers" settles the question. The obligation is triggered by the specific service provided, not the profession — plenty of accounting practices provide at least one designated service without thinking of themselves as the kind of business Tranche 2 was aimed at.
• Treating general tax and business advice as if it were execution work. Advising a client to set up a trust is not the same as being the one who forms it and acts as its registered agent — conflating the two leads a practice to either wrongly assume it's captured or, more dangerously, wrongly assume it isn't.
• Not re-checking status after adding a new service line. A practice that starts offering company registration as a convenience for existing clients, without checking whether that pulled it into Tranche 2, is a common way firms end up unknowingly non-compliant.
• Building one AML/CTF process that applies to every client rather than scoping it to the designated-service engagements. This wastes effort and creates unnecessary friction for the majority of clients who only ever receive non-captured services.
• Missing the 29 July 2026 enrolment deadline and treating it as a low-priority backlog item. Given the criminal-offence exposure for an unenrolled reporting entity, a captured practice that hasn't enrolled should escalate this immediately rather than queuing it behind routine compliance work.