AML/CTF Tranche 2: Preparing for a New Regulatory Standard

Introduction

AML/CTF Tranche 2 is no longer a future reform. It is now an imminent regulatory reality.

For the first time, legal practitioners, accounting firms, and real estate agencies in Australia are being brought within the scope of anti-money laundering and counter-terrorism financing (AML/CTF) obligations.

This represents more than a compliance update. It is a structural shift in how professional services firms are expected to operate, assess risk, and demonstrate accountability.

At AML Edge 2026 in Melbourne, where Nitin Saby spoke alongside industry leaders and practitioners, a consistent theme emerged:

Firms are aware of the changes — but few are prepared for the operational implications.

The Emerging Readiness Gap

Across industries, there is a growing disconnect between awareness and execution.

While most firms acknowledge that AML/CTF obligations are expanding, their internal systems, processes, and governance frameworks often remain underdeveloped.

In practice, this gap presents in several ways:

AML/CTF treated as a procedural or “tick-box” exercise
Absence of a clearly defined AML/CTF program tailored to the business
Limited or non-existent staff training on suspicious matter reporting
Risk assessments that lack depth and would not withstand regulatory scrutiny

This is not simply a matter of incomplete compliance. It is an exposure point — one that becomes increasingly significant as regulatory oversight intensifies.

Understanding Tranche 2 Obligations

Tranche 2 reforms extend AML/CTF obligations beyond traditional financial institutions to include designated non-financial businesses and professions.

For many firms, this will be their first interaction with formal AML/CTF requirements.

Key obligations are expected to include:

Establishing and maintaining a compliant AML/CTF program
Conducting risk assessments aligned with the firm’s service offerings and client base
Implementing procedures to identify, verify, and monitor clients
Training staff to recognise and report suspicious activities
Maintaining records and demonstrating compliance during regulatory review

These requirements are not theoretical. They are operational, ongoing, and subject to enforcement.

Why Compliance Approaches Are Failing

A common misconception is that AML/CTF compliance can be addressed through documentation alone.

In reality, regulators are not assessing whether a policy exists —
they are assessing whether it works.

Firms that rely on generic templates, minimal documentation, or reactive processes are likely to encounter challenges in demonstrating compliance.

From a regulatory perspective, the following factors often indicate heightened risk:

Inconsistent or undocumented decision-making processes
Lack of integration between compliance and operational teams
Insufficient understanding of reporting obligations
Failure to align internal practices with regulatory expectations

These issues do not arise from a lack of intent. They arise from a lack of structured implementation.

The Consequences of Inaction

As enforcement activity increases, the cost of inadequate preparation becomes more pronounced.

Potential consequences include:

Regulatory investigations and ongoing monitoring
Financial penalties and enforceable undertakings
Reputational damage within the market
Operational disruption and resource strain

Importantly, these outcomes are not limited to deliberate non-compliance. They often arise from insufficient systems, unclear responsibilities, and poorly implemented processes.

A Practical Approach to Readiness

The objective for firms should not be to “complete compliance” —
but to build a system that is sustainable, defensible, and aligned with their operations.

A structured approach to AML/CTF readiness should include:

1. Designing a Fit-for-Purpose AML Program

A compliant program must reflect the firm’s actual risk profile, service lines, and client base — not a generic template.

2. Embedding Compliance into Operations

AML/CTF processes should be integrated into daily workflows, ensuring consistency in client onboarding, monitoring, and reporting.

3. Building Internal Capability

Staff must understand both the requirements and the rationale behind them, enabling informed decision-making in real scenarios.

4. Aligning Governance and Accountability

Clear roles, responsibilities, and oversight mechanisms are essential to ensure the program functions effectively.

Moving Beyond Awareness

The transition from awareness to execution is where most firms will face the greatest challenge.

Regulatory frameworks such as AML/CTF are not designed to be static.
They require continuous attention, refinement, and alignment with evolving expectations.

Firms that approach this proactively will build systems that:

Withstand regulatory scrutiny
Support operational efficiency
Enhance risk management capability

Those that delay will find themselves responding under pressure.

Conclusion

AML/CTF Tranche 2 represents a fundamental shift in the regulatory landscape for professional services firms.

The question is no longer whether these obligations will apply —
but how effectively firms will respond.

Preparation is not about meeting a deadline.
It is about building a structure that supports long-term compliance and resilience.

Is your firm ready for what Tranche 2 requires?

For more details on the event, visit: AML EDGE 2026

About Saby + Partners

Saby + Partners is a strategic advisory firm specialising in tax, compliance, and business structuring.

Led by Nitin Saby, a former ATO Tax Executive with over 20 years of experience, the firm works with businesses to design practical, commercially aligned solutions that deliver clarity and confidence.

Next Steps

If your firm is navigating AML/CTF Tranche 2 and requires a structured approach:

📞 Book a strategy session: https://calendly.com/saby-wisetaxadvisers/30min
📧 hello@sabypartners.com