Bravishi Logo

AML Compliance for Law Firms in Australia

A comprehensive guide to AML compliance for law firms under Australia’s Tranche 2 reforms

AML Compliance for Law Firms

AML Compliance for Law Firms in Australia

Australia’s Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) reforms, commonly referred to as the Tranche 2 reforms, will introduce new regulatory obligations for certain legal services from 1 July 2026.
 
These reforms expand the scope of Australia’s AML regime to include several professional service sectors that have historically operated outside the regulatory framework.
 
For law firms, this represents a significant regulatory development. Firms that provide certain designated services may become reporting entities under the AML/CTF Act and will need to implement systems to identify, assess and manage money laundering and terrorism financing risks.
 
Law firms providing designated services will be able to enrol with AUSTRAC from 31 March 2026, with full compliance required by 1 July 2026.
 
Further information on the reforms is available from AUSTRAC:
AML/CTF Reform

Why the Legal Sector Is Included in AML Regulation

Legal professionals play a key role in facilitating financial transactions and establishing corporate structures.
 
While these services are essential to legitimate economic activity, they may also be misused by individuals seeking to conceal the origins of illicit funds or obscure beneficial ownership.
 
International organisations such as the Financial Action Task Force (FATF) have long recommended that countries extend AML obligations to legal professionals involved in certain financial and corporate services.
 
The Tranche 2 reforms aim to ensure that law firms providing these services implement appropriate safeguards to reduce the risk of financial crime.

Legal Services That May Be Captured Under Tranche 2

Not all legal services will fall within the AML regime.
 
Routine legal work such as litigation, family law, employment law or criminal defence will generally remain outside the scope of the AML/CTF Act.
 
However, legal services connected with financial transactions or corporate structures may be considered designated services.
 
Examples may include:
 

  • assisting clients with property transactions
  • establishing companies or trusts
  • managing client funds through trust accounts
  • facilitating business or asset acquisitions
  • providing registered office services

 
Where these services are provided, law firms may need to comply with AML obligations.

Financial Crime Risks in Legal Services

Understanding financial crime risks is an important part of AML compliance.

The legal sector may face several risks due to the nature of services provided.

Misuse of Trust Accounts

Law firm trust accounts are designed to hold funds on behalf of clients.

However, criminals may attempt to misuse these accounts to move funds through the financial system.

For example, funds may be deposited into a trust account and then transferred to other parties, creating the appearance of legitimate financial activity.
 

Complex Corporate Structures

Lawyers often assist clients in establishing corporate entities or trusts.

These structures can be legitimate tools for business or estate planning, but they may also be used to conceal beneficial ownership.

Multi-layered structures involving companies, trusts and nominee arrangements can make it difficult to identify the individuals who ultimately control assets.
 

High-Value Asset Transactions

Law firms frequently assist with transactions involving high-value assets such as property or businesses.

These transactions may present opportunities for criminals to introduce illicit funds into the financial system.
 

Cross-Border Transactions

Transactions involving international clients or overseas jurisdictions may present additional AML risks.

Jurisdictions with weaker regulatory frameworks may pose higher risks of corruption or financial crime.

AML Compliance Requirements for Law Firms

Law firms that provide designated services may need to implement a range of AML compliance measures.
 
These requirements are designed to ensure businesses can identify and manage financial crime risks.

AUSTRAC Enrollment

Firms providing designated services must enrol with AUSTRAC as reporting entities.

Enrolment allows AUSTRAC to supervise compliance and provide guidance to regulated entities.
 

ML/TF Risk Assessment

Firms must conduct a Money Laundering and Terrorism Financing (ML/TF) risk assessment.

This assessment considers risks associated with:

  • client types
  • services provided
  • geographic exposure
  • transaction characteristics

The risk assessment forms the foundation of the AML compliance framework.
 

AML/CTF Compliance Program

Law firms must implement an AML/CTF compliance program outlining policies, procedures and controls designed to manage financial crime risks.

The program typically includes:

  • internal governance structures
  • staff responsibilities
  • training requirements
  • monitoring and reporting procedures

 
AML Compliance Lifecycle for Law Firms
 
Risk Assessment

AML Compliance Program

Customer Due Diligence

Transaction Monitoring

Suspicious Matter Reporting

Ongoing Compliance Review
 
This lifecycle reflects the risk-based approach that underpins the AML regime.
 

Customer Due Diligence (CDD) for Law Firms

Customer Due Diligence is a critical component of AML compliance.

CDD ensures that law firms understand the identity of their clients and the nature of the legal services being provided.
 
CDD procedures may include:

  • verifying client identity
  • identifying beneficial owners of corporate entities
  • understanding the purpose of the transaction
  • assessing client risk levels

 
CDD should generally be completed before providing a designated service.
 
AUSTRAC guidance on CDD is available here:
Customer Due Diligence
 

Beneficial Ownership Identification

One of the key objectives of AML compliance is to identify the individuals who ultimately control an entity.

Where a client is a company or trust, law firms may need to determine:

  • who owns the entity
  • who exercises control over the entity
  • who benefits from the entity’s activities

This information helps ensure transparency in financial transactions.
 

Ongoing Monitoring of Client Activity

AML compliance is not limited to client onboarding.

Businesses must also monitor client relationships and transactions throughout the course of the engagement.
 
Monitoring may involve reviewing:

  • unusual transaction patterns
  • changes in ownership structures
  • transactions inconsistent with the client’s profile

 
Ongoing monitoring helps identify suspicious activity that may not be apparent during the initial client onboarding process.
 

Red Flags in Legal Transactions

Examples of potential red flags include:

  • clients unwilling to provide identification documentation
  • complex corporate structures without clear commercial purpose
  • transactions involving unexplained third-party funding
  • clients requesting unusually complex transaction arrangements
  • transactions involving jurisdictions known for financial crime risks

 
When such indicators arise, businesses should conduct additional review.
 

Suspicious Matter Reporting

If a law firm forms a suspicion that a transaction may involve money laundering or terrorism financing, it may be required to submit a Suspicious Matter Report (SMR) to AUSTRAC.
 
SMRs provide critical financial intelligence used by law enforcement agencies to detect and disrupt criminal activity.
 
Further information on reporting obligations can be found here:
Reporting

Preparing Law Firms for Tranche 2 Compliance

Preparing for the Tranche 2 reforms will require law firms to review their services and operational processes.
 
Steps may include:
 

  • assessing whether the firm provides designated services
  • identifying financial crime risks associated with those services
  • developing AML policies and procedures
  • implementing client due diligence systems
  • training staff on AML obligations

 
Early preparation can help ensure a smooth transition to the new regulatory framework.

How Bravishi Advisory Supports Law Firms

Bravishi Advisory works with professional service firms to translate regulatory obligations into structured operational systems.
 
Our approach focuses on helping organisations understand the regulatory framework and implement practical compliance measures that align with their existing governance processes.
 
This may include:
 

  • Tranche 2 readiness assessments
  • ML/TF risk assessments
  • AML/CTF program design
  • Customer due diligence frameworks
  • Transaction Monitoring and Reporting arrangements
  • Staff training and compliance guidance

 
The objective is to help firms integrate AML compliance into their operations in a practical and manageable way.

Discuss Your Tranche 2 Readiness

If your law firm provides services that may fall within the scope of the Tranche 2 reforms, understanding the new regulatory requirements is an important first step.
 
Bravishi Advisory can assist you in assessing how the reforms apply to your business and developing a structured approach to AML compliance.
 
If you would like to understand more about the Tranche 2 reforms or discuss your firm’s requirements, please feel free to contact us.

Have additional questions?

+61 403 729 914

+61 403 729 914

Melbourne, Victoria

Melbourne, Victoria

Book A Consultation