Of the roughly 17,000 law firms in Australia, the majority will become reporting entities under Tranche 2 — not because they are 'law firms', but because the services they provide most often (real estate settlements, company formation, trust establishment, management of client money) are designated services under the AML/CTF Act.
What's a designated service for a law firm?
- Acting in the buying or selling of real estate.
- Managing client money or other assets in the course of providing legal services.
- Acting in the formation, operation or management of a body corporate or partnership.
- Acting in the establishment, operation or management of a trust.
- Selling or transferring a body corporate or business entity (including the shells used for asset structures).
If your firm does any of these things — and most do at least one — you are a reporting entity from 1 July 2026 and need a documented program in place before that date.
Customer due diligence in a legal practice
CDD has three components: identifying the client, verifying that identification with reliable independent data, and where the client is not a natural person, identifying the beneficial owners. For a sole trader buying a house this is easy. For a discretionary trust with overseas trustees buying a development site, it is significantly harder.
Most modern AML platforms automate the simple cases (electronic biometric ID for individuals) and provide structured workflows for the harder cases (entity unwrapping for corporate and trust clients). The goal is a defensible audit trail that an AUSTRAC supervisor could follow if they ever asked you to.
Suspicious matter reporting in practice
An SMR is required when, in the course of providing a designated service, you form a suspicion on reasonable grounds that the matter may relate to money laundering, terrorism financing, or another serious offence. The threshold is 'suspicion on reasonable grounds' — lower than a balance of probabilities but higher than a vague unease.
Common red flags in legal practice include: source of funds inconsistent with the client's apparent profile, unusual urgency around settlement, third parties paying purchase deposits, and clients reluctant to provide identification. Your AML program should document the red flags relevant to your service mix and the escalation path from fee-earner to compliance officer.
Legal professional privilege does not exempt you
Legal professional privilege coexists with AML obligations. Privilege protects communications for the dominant purpose of obtaining legal advice, but it does not protect you from making an SMR about facts you observe during the engagement. The Law Council of Australia and most state law societies have published guidance on managing the overlap.
What providers handle for legal firms
- Pre-built program templates calibrated for legal practice.
- Client onboarding and electronic identity verification embedded in your matter system.
- Sanctions, PEP and adverse media screening.
- Beneficial ownership unwrapping for corporate and trust clients.
- Training tailored to fee-earners and support staff.
- SMR and TTR workflow with reviewer/approver controls.