Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Australia AU

Domains (D1–D6)
5
Sources
7
Role actions
8
Horizon <90d
1
Jurisdiction profile
Largely CompliantTier ARisk: ImprovingMixed

AML/CTF Act 2006 supervised by AUSTRAC covers banks, remitters, gambling and bullion; DNFBPs (lawyers, accountants, real estate agents, TCSPs) remain outside obligations until Tranche 2 reforms commence 1 July 2026, alongside new VASP registration, transaction-monitoring and Travel Rule requirements.

Key deficiencies
  • Lawyers, accountants, real estate agents, precious-stone dealers and TCSPs not yet subject to AML/CTF obligations pending Tranche 2 commencement
  • No dedicated public beneficial ownership register; company registers capture legal not beneficial ownership
  • As of March 2024, Australia remains partially compliant with 6 and non-compliant with 4 of the FATF 40 Recommendations
  • Casino/junket-channel money laundering vulnerability persists structurally despite large penalties against individual operators
Recent developments (18m)
  • AUSTRAC ordered Binance Australia to appoint an external auditor over AML/CTF program concerns (August 2025)
  • Australia joined OFAC/UK in coordinated sanctions on Russian cybercrime infrastructure: Zservers (Feb 2025), Evil Corp (Oct 2025), Media Land/Aeza Group (Nov 2025)
  • Australia sanctioned Kremlin-linked fund Pravfond following an OCCRP/ABC investigation (June 2025)
  • AUSTRAC's AML/CTF transitional VASP rules commenced (31 March 2026) ahead of Travel Rule effective 1 July 2026
  • First major Australian crypto-laundering conviction secured under Operation Taipan against a Chinese organised-crime money laundering syndicate
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Australia has delivered the first operational enforcement test of its historically delayed Tranche 2 anti-money-laundering coverage. AUSTRAC began issuing infringement notices, worth up to AUD 21,840 for companies and AUD 4,368 for individuals and accruing daily, to real estate, accounting and jewellery businesses that failed to enrol under the AML/CTF regime following its 1 July 2026 expansion to designated non-financial businesses and professions. By 1 October 2026, registered real-estate agencies had risen to 18,350 and accounting and professional firms to 13,780, a registration response that suggests the enforcement signal is producing rapid compliance effect across sectors the Financial Action Task Force has repeatedly identified as a historic gap in Australia's AML architecture.

The significance of this development is structural rather than episodic. Australia has long been criticised internationally for excluding lawyers, accountants, real estate agents and other gatekeeper professions from AML obligations that apply in most comparable jurisdictions. The Tranche 2 expansion closed that statutory gap on paper from 1 July 2026; this cycle is the first evidence that AUSTRAC is prepared to use infringement powers, rather than education alone, to drive enrolment.

Other Developments

Digital-asset licensing transition deadline passed. ASIC's sector-wide no-action position for digital-asset financial-product and financial-service providers expired on 30 September 2026, pushing firms that previously relied on the administrative accommodation onto the standard Australian Financial Services licence track. Over 45 licence applications had been logged by ASIC's 2 September 2026 final-call notice, up from roughly 30 in late June 2026, indicating the market is responding to the closing window even as the broader legislative picture for the sector remains incomplete.

Crypto-ATM restriction power remains pending. A proposed AUSTRAC CEO power to restrict or prohibit categories of high-risk products or services, with crypto ATMs cited as the illustrative example, remains at the proposed legislative stage with no confirmed commencement date. The gap between an active administrative licensing transition and a still-pending category-wide AML tool is itself notable: Australia is tightening its digital-asset perimeter incrementally through general financial-services licensing machinery rather than through AML-specific instruments built for the sector.

Gambling sector customer due diligence threshold holds. The lower AUD 5,000 initial customer due diligence threshold for gambling designated services, down from AUD 10,000 and in force since 31 March 2026 alongside a three-year transitional period, remains the standing position for wagering reporting entities. No change was identified to this threshold this cycle.

Cross-Monitor Connections

The AUSTRAC Tranche 2 enforcement wave touches payments and e-money intermediaries that interact with real estate settlement and professional-services payment flows, a natural point of contact with payments-sector monitoring of financial-crime obligations for designated non-bank entities. The ASIC digital-asset licensing transition is relevant to any monitor tracking crypto-asset market access conditions, since the lapse of no-action relief changes which entities may lawfully operate pending full licensure. Neither connection is elaborated further here; it is noted as a routing signal only.

Outlook

The near-term test for Australia's enabler-jurisdiction standing is whether AUSTRAC's infringement-notice wave is sustained and escalates to higher-value enforcement, or whether it settles into a one-off registration push. The crypto-ATM restriction power is not expected to commence before 2027 given its current proposed stage and the half-year uncertainty band attached to it; until it does, AUSTRAC's AML toolkit against high-risk digital-asset delivery channels remains confined to existing registration and transaction-reporting duties applied operator by operator rather than by category. The ASIC licensing transition should be watched for whether the volume of logged applications converts into granted licences, or whether a backlog persists past the deadline.

weekly_brief_draft · JID AU
Domain intelligence (D1–D6)

D1 Sanctions

Australia maintains a US/UK-aligned autonomous sanctions coordination axis, evidenced by trilateral designations of Zservers, Evil Corp, and Media Land/Aeza Group in 2025; risk trajectory stable.

D2 Beneficial Ownership

Australia has no dedicated public beneficial ownership register; Tranche 2 AML/CTF reforms (effective 1 July 2026) extend CDD/BO-identification duties to lawyers, accountants, real estate agents and TCSPs for the first time.

D3 Enabler Jurisdictions and Professional Facilitators

Enabler Jurisdictions and Professional Facilitators

Continue reading

Australia's designated non-financial businesses and professions sector has moved from a long-standing statutory gap to its first live enforcement test within the same calendar year. The AML/CTF Amendment Act 2024 extended enrolment obligations under the AML/CTF Act 2006 to real estate, legal services, accounting, conveyancing, trust and company services, and dealing in precious stones and metals from 1 July 2026, closing a coverage gap the Financial Action Task Force has repeatedly flagged as historic. This cycle supplies the first evidence of AUSTRAC exercising infringement powers against that newly covered population: notices of up to AUD 21,840 for companies and AUD 4,368 for individuals, accruing daily, were issued to businesses identified as having failed to enrol.

The response has been rapid by the measure AUSTRAC itself publishes. Registered real-estate agencies rose to 18,350 and accounting and professional firms to 13,780 by 1 October 2026. Read against the scale of Australia's gatekeeper professions, this points to an enforcement signal with immediate compliance traction rather than a slow-moving administrative rollout. Architecturally, this is the more significant reading: a single infringement-notice wave is less important than what it demonstrates about AUSTRAC's willingness and capacity to pursue a population of reporting entities that, until 1 July 2026, had no AML/CTF obligations at all. Professional facilitators -- real estate agents, accountants, and dealers in precious stones and metals -- are the classic enabler-jurisdiction vulnerability that FATF mutual evaluations single out, and Australia's historic absence of coverage here was a standing criticism of its regime. The shift from statutory coverage to active enforcement is the structural event; the infringement notices are the evidence that the shift has teeth.

It is also notable what this cycle does not show. There is no indication yet of enforcement action against entities that did enrol but failed to meet ongoing customer due diligence, suspicious matter reporting, or programme obligations -- the infringement notices target enrolment failure specifically, a threshold compliance step rather than substantive programme adequacy. The next phase of supervisory attention, if it follows the pattern seen in other jurisdictions that have extended AML coverage to gatekeeper professions, would move from enrolment enforcement to programme-quality enforcement. Nothing in this cycle's evidence confirms that transition has begun.

Outlook

The trajectory to watch is whether AUSTRAC sustains and escalates this enforcement posture, or whether the current wave represents a single compliance-driving exercise timed to the three-month anniversary of the 1 July 2026 expansion. The daily-accruing structure of the penalties creates a strong incentive for rapid remediation, which is consistent with the registration volumes already observed. Given Australia's history of delayed implementation in this space, continued monitoring of enrolment completion rates and any escalation to substantive programme enforcement against newly enrolled entities will be the clearest indicator of whether the Tranche 2 gap has been durably closed or merely formally closed.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Two distinct regulatory tracks are moving at different speeds in Australia's digital-asset perimeter, and the gap between them is itself analytically significant. The first track, administrative licensing, has just closed a transition window: ASIC's sector-wide no-action position for digital-asset financial-product and financial-service providers expired on 30 September 2026, meaning firms that previously relied on that accommodation must now hold a current Australian Financial Services licence or have an application actively in progress. Over 45 licence applications had been logged by ASIC's 2 September 2026 final-call notice, a rise from roughly 30 in late June 2026, suggesting the deadline concentrated applications in its final weeks rather than being absorbed smoothly across the transition period.

The second track, AML-specific tooling aimed squarely at digital-asset risk, has not moved at the same pace. A proposed AUSTRAC CEO power to restrict or prohibit entire categories of high-risk products or services -- crypto ATMs are the example named in the proposal -- remains pending legislation with no confirmed commencement date. This is a meaningful distinction for the sector: the existing AML/CTF registration and transaction-reporting obligations continue to apply to crypto-asset exchange providers on an operator-by-operator basis, but the category-wide restriction power that would let AUSTRAC act against an entire delivery channel such as ATM-based crypto conversion has not yet been enacted.

The resulting picture is one of incremental tightening through general financial-services licensing machinery, rather than through AML instruments purpose-built for the sector's specific risk profile. Firms operating crypto ATMs or similar high-risk delivery channels currently face standard AML/CTF obligations and, where applicable, the AFSL requirements now enforced by the lapse of no-action relief, but not yet a tool that would let the regulator act against the channel as a category. This is a gap between enforcement capability and crypto-specific AML tooling that is likely to remain visible until the proposed power, if enacted, actually commences.

Outlook

The licensing track will be the nearer-term indicator: whether the roughly 45 logged applications convert into granted licences within a reasonable period, or whether a backlog forms that leaves firms in an uncertain interim status despite having applied before the deadline. The AML-tooling track is slower-moving and carries no confirmed commencement date; the proposed AUSTRAC CEO power is currently estimated, with a half-year uncertainty band, to land around early 2027 at the earliest, and its passage through Parliament has not been confirmed as formally introduced. Firms operating high-risk digital-asset delivery channels should expect the regulatory perimeter to continue tightening by increment rather than by a single comprehensive package.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

The standing feature of Australia's AML/CTF regime this cycle is the lower initial customer due diligence threshold for gambling designated services, which remains in force at AUD 5,000, down from the previous AUD 10,000 trigger. This reduction, part of the AML/CTF Amendment Act 2024 package, commenced on 31 March 2026 alongside a three-year transitional customer due diligence period for wagering reporting entities. No change to this threshold was identified this cycle; it is carried forward as the standing D7 position, held at a qualified confidence level pending direct retrieval of the underlying AML/CTF Rules pinpoint citation.

The wider regime context for this cycle is the enrolment-enforcement activity concentrated in the newly covered Tranche 2 sectors, discussed under enabler jurisdictions, which sits alongside the already-established obligations on gambling and other long-standing reporting entities. Read together, the two threads show a regime that is simultaneously consolidating existing obligations for established reporting entities, such as the gambling sector's tightened due diligence trigger, and actively enforcing new obligations against a population -- gatekeeper professions -- that only became subject to the regime on 1 July 2026. This is a three-pillar point worth noting explicitly: the gambling threshold reduction and Tranche 2 enrolment enforcement are both AML measures; neither this cycle's evidence nor the underlying claims speak to counter-terrorism financing or counter-proliferation financing developments specifically, which is consistent with AML enforcement volume structurally outweighing CTF/CPF signal in the available reporting.

The lower gambling threshold reflects a broader pattern across AML regimes of tightening customer identification triggers for sectors assessed as carrying elevated money-laundering risk, and its three-year transitional period for full customer due diligence compliance means reporting entities in the sector are still inside a phased implementation window rather than operating against a fully bedded-down standard.

Outlook

The gambling sector's transitional customer due diligence period runs through to 2029, meaning further supervisory or rule guidance addressing implementation challenges within that window is plausible, though nothing in this cycle's evidence points to a specific near-term milestone. Direct retrieval of the underlying AML/CTF Rules provision would be needed to move this finding from a qualified to a confirmed confidence level. More broadly, the AML/CTF regime's immediate focus remains on operationalising the Tranche 2 expansion, which will likely continue to generate reporting in the near term as enrolment enforcement either escalates or transitions toward programme-quality supervision of newly enrolled entities.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
Proposed2027-Q1 · ±half_year

AUSTRAC CEO power to restrict/prohibit high-risk products/services (crypto ATMs)

The AUSTRAC CEO would gain discretion to restrict or prohibit entire categories of high-risk delivery channels (named example: crypto ATMs) rather than acting operator-by-operator.
1 dated · 5 pending date · baseline fim-2026-07-05
Role action cards
MLRO

AUSTRAC has begun issuing infringement notices for Tranche 2 non-enrolment, and the lower gambling CDD threshold remains in force.

MLROs at real estate, accounting, jewellery and gambling reporting entities should note active supervisory enforcement of enrolment obligations and the standing AUD 5,000 CDD trigger for gambling services.

3 evidence refs
Compliance

Tranche 2 enrolment enforcement is active and ASIC's digital-asset no-action relief has lapsed.

Compliance functions overseeing gatekeeper professions or digital-asset services should track enrolment status and AFSL application progress given the closed transition windows.

3 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Australia's first enforcement test of its Tranche 2 AML coverage shows rapid compliance uptake.

Boards of institutions with exposure to Australian gatekeeper-profession counterparties should note that a long-flagged regulatory gap is now being actively enforced, which may affect counterparty risk profiles.

2 evidence refs
CTO

ASIC's digital-asset no-action relief has expired while AUSTRAC's category-wide crypto-ATM power remains pending.

Technology functions supporting digital-asset platforms should note the lapse of no-action relief drives licensing requirements now, while AML-specific tooling against high-risk channels such as crypto ATMs is not yet enacted.

2 evidence refs
Risk

A structural gap persists between Australia's digital-asset licensing enforcement and its crypto-specific AML tooling.

Risk functions should weight Australian crypto-asset exposure as tightening incrementally through general licensing machinery rather than through AML instruments purpose-built for the sector.

2 evidence refs
Operations

Registered Tranche 2 entity volumes rose sharply following AUSTRAC's infringement-notice wave.

Operations teams processing counterparty onboarding in real estate, accounting or jewellery sectors in Australia may see a larger pool of newly enrolled reporting entities.

2 evidence refs
Audit

No material change this cycle.

No material change for this persona this cycle

Decision lens
MLRO

AUSTRAC has begun issuing infringement notices for Tranche 2 non-enrolment, and the lower gambling CDD threshold remains in force.

Compliance

Tranche 2 enrolment enforcement is active and ASIC's digital-asset no-action relief has lapsed.

Legal

No material change this cycle.

Board

Australia's first enforcement test of its Tranche 2 AML coverage shows rapid compliance uptake.

CTO

ASIC's digital-asset no-action relief has expired while AUSTRAC's category-wide crypto-ATM power remains pending.

Risk

A structural gap persists between Australia's digital-asset licensing enforcement and its crypto-specific AML tooling.

Operations

Registered Tranche 2 entity volumes rose sharply following AUSTRAC's infringement-notice wave.

Audit

No material change this cycle.

Shared evidence: 4 refs
Scenario sketches

Illustrative: AMLA direct-supervision perimeter and cross-border BO layering

Illustrative scenario for analytical orientation only. As the EU moves from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, under the AMLA Regulation (Reg (EU) 2024/1620) alongside the directly applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, a plausible structural effect is that entities seeking to layer beneficial-ownership opacity could probe jurisdictions at the margins of the new hybrid perimeter, including non-EEA jurisdictions such as Australia that sit entirely outside the AMLA architecture, before the supervisory transition fully beds down. This is architecture-over-incident illustration of a possible structural mechanism, not an observed fact about any specific entity or transaction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAno_changeNot applicable to AU, which is outside the EEA/AMLR/6AMLD/AMLA perimeter.
T3 · FATF Grey Listno_changeAustralia is not on the FATF grey list; no plenary action affecting AU identified this cycle.
T4 · Beneficial-Ownership Register Statusno_changeAustralia does not yet operate a public beneficial-ownership register; no development identified this cycle.
T5 · Crypto & Digital-Asset IntegritywatchASIC's digital-asset AFS-licensing transition deadline passed 30 September 2026; AUSTRAC's proposed CEO power to restrict/prohibit high-risk products such as crypto ATMs remains pending legislation.
T6 · Sanctions Regime Divergenceno_changeNo AU-specific autonomous-sanctions divergence development identified this cycle.
Registers

Enforcement actions

  • AUSTRAC ordered Binance Australia to appoint an external auditor after identifying serious concerns with its money-laundering and terrorism-financing controls, following a review it described as limited in scope relative to the exchange's size and risk profile. 22 Aug 2025
  • Australia joined the US and UK in sanctioning Zservers, a Russia-based bulletproof-hosting provider, and associated individuals for enabling LockBit and other ransomware operations. 11 Feb 2025
  • Coordinated US, UK and Australian sanctions targeted Media Land, a Russia-based bulletproof-hosting provider, and Aeza Group executives and linked companies in the UK, Serbia and Uzbekistan for supporting ransomware operations. 19 Nov 2025
  • Australia sanctioned Pravfond, a Kremlin-linked fund exposed by an OCCRP/ABC joint investigation for bankrolling legal support and pro-Russia influence activity in Australia, including funding for Sydney-based pro-Kremlin activist Simeon Boikov. 30 Jun 2025
  • Following an AUSTRAC referral flagging anomalous ATM cash-deposit patterns, Victoria Police's Operation Taipan dismantled a Melbourne-based Chinese organised-crime money-laundering service using third-party bank accounts and crypto conversion, securing Australia's first major crypto-laundering conviction. 18 Sep 2025

Sanctions changes

  • Australia listed Russia-based bulletproof-hosting provider Zservers and associated individuals under its autonomous Russia sanctions regime, coordinated with simultaneous OFAC and UK FCDO designations targeting the same LockBit-linked infrastructure. 11 Feb 2025
  • Australia listed Evil Corp key members alongside the US and UK, building on 2019 sanctions and reflecting extensive on-chain evidence of ties between Evil Corp, LockBit affiliates and Russian intelligence networks. 1 Oct 2025
  • Australia listed Media Land, Aeza Group executives and linked entities in the UK, Serbia and Uzbekistan for bulletproof-hosting support to ransomware operations, in a coordinated action with OFAC and the UK. 19 Nov 2025
  • Australia added Pravfond, a Russian state-linked legal-aid and influence fund, to its autonomous Russia/Ukraine sanctions list citing activities of economic or strategic significance to Russia, following investigative reporting on its funding of a Sydney-based pro-Kremlin activist. 30 Jun 2025

Regulatory horizon (register)

  • AML/CTF Tranche 2 DNFBP obligations commence
  • VASP Travel Rule effective and registration deadline
  • ASIC Digital Assets Framework Act commencement
  • FATF 5th round Mutual Evaluation of Australia begins
  • AUSTRAC compliance-officer notification deadline for VASPs

Active schemes

  • [HIGH] Chinese money-laundering-network currency-exchange fronts
  • [HIGH] Crypto-ATM and CMLN off-ramp laundering pipeline
  • Casino junket-tour laundering channel
  • [HIGH] Russian bulletproof-hosting cybercrime infrastructure
Sources
  1. AUSTRAC (Australian Government)
  2. FATF
  3. OCCRP
  4. Bloomberg
  5. TRM Labs
  6. Chainalysis
  7. UNODC
Coverage gaps
Lawyers, accountants, real estate agents, precious-stone dea…
Lawyers, accountants, real estate agents, precious-stone dealers and trust and company service providers remain outside AML/CTF obligations until Tranche 2 commences 1 July 2026, leaving a multi-decade gap in which professional facilitators identified by AUSTRAC and FATF as high-risk gatekeepers face no suspicious-activity reporting duty.
Australia has no dedicated, publicly accessible beneficial o…
Australia has no dedicated, publicly accessible beneficial ownership register; the Australian Business Register and ASIC company registers capture legal ownership and, for listed entities, ASIC's Part 6C.2 tracing power, but no comprehensive beneficial-ownership disclosure regime exists for private companies, trusts or legal arrangements.
As of the March 2024 FATF follow-up report, Australia remain…
As of the March 2024 FATF follow-up report, Australia remains only partially compliant with 6 and non-compliant with 4 of the FATF 40 Recommendations, and has been in enhanced follow-up status continuously since its 2015 Mutual Evaluation without a full effectiveness re-assessment until the 5th round begins in late 2026.
Despite record AUSTRAC penalties against Crown Resorts (AUD …
Despite record AUSTRAC penalties against Crown Resorts (AUD 450 million) and Star Entertainment, the underlying junket-tour operator model that enabled organised-crime infiltration of casino cash flows remains structurally intact across the sector, with over 1,000 junket programs historically active and continuing AUSTRAC/regulatory scrutiny of Star, SkyCity and other operators.
The authoritative AUSTRAC ML National Risk Assessment 2024 c…
The authoritative AUSTRAC ML National Risk Assessment 2024 could not be retrieved in full text via search tooling during this baseline; its URL is recorded in nra_reference but detailed sectoral risk-rating content within the document has not been independently verified beyond its listing and general subject matter.

Evidence

Confidence-tiered claims

AUSTRAC issued infringement notices (up to AUD 21,840 company / AUD 4,368 individual, accruing daily) to non-enrolled Tranche 2 real-estate, accounting and jewellery businesses, 30 Sep-2 Oct 2026. SRC-fim-AU-001
Probable · 1 source
AUD 5,000 initial CDD threshold for gambling services, down from AUD 10,000, in force since 31 March 2026 with a 3-year transitional CDD period. SRC-fim-AU-002
Probable · 1 source
ASIC's sector-wide no-action position for digital-asset financial-product/service providers expired 30 September 2026; over 45 licence applications logged by 2 September 2026 final-call notice. SRC-fim-AU-003
Probable · 1 source
Proposed AUSTRAC CEO power to restrict/prohibit categories of high-risk products/services (named example: crypto ATMs); no commencement date confirmed. SRC-fim-AU-003
Probable · 1 source
Registered real-estate agencies rose to 18,350 and accounting/professional firms to 13,780 by 1 October 2026. SRC-fim-AU-001
Probable · 1 source