Do AUSTRAC AML/CTF rules affect how you use AI tools?

Yes, if your business is an AML/CTF reporting entity. Finance and insurance businesses have been regulated for years (tranche 1). Since 1 July 2026, lawyers, accountants, conveyancers and real estate agents are regulated too (tranche 2), with AUSTRAC enrolment due by 29 July 2026. In both cases, customer due diligence and suspicious-matter information must never go into general-purpose AI tools without specific controls.

Tranche 1: already regulated

Finance and insurance businesses have been AUSTRAC reporting entities for years. If your business already has an AML/CTF program, extend it to cover AI: any tool that touches customer due diligence data, transaction monitoring or suspicious-matter information needs the same record-keeping and access controls as the rest of your compliance stack, not an informal exception because it is "just a chatbot".

Tranche 2: new since 1 July 2026

Lawyers, accountants, conveyancers, real estate agents and dealers in precious metals and stones became AML/CTF reporting entities on 1 July 2026, if they provide a designated service with a geographical link to Australia in the course of carrying on a business. Core obligations include enrolment with AUSTRAC (due 29 July 2026), an AML/CTF program, customer due diligence, sanctions and politically exposed person screening, suspicious matter reports, and seven-year record-keeping. Civil penalties for a corporation can reach into the tens of millions of dollars per contravention.

What this means for AI specifically

The rules do not ban AI, but they draw a hard line around specific data. Customer due diligence records and suspicious-matter information must never be pasted into a consumer AI tool, and tipping-off obligations mean staff cannot discuss a suspicious matter report with an AI assistant the way they might a colleague. General drafting, research and admin use of AI is a lower-risk, separate question from handling regulated customer data.

How Blue Arc helps

We help tranche 1 and tranche 2 businesses separate everyday AI use from AML/CTF-regulated data, and set access controls that hold up under audit. See our using AI safely in your Australian business overview, managed services, or get in touch.

For the authoritative detail, see AUSTRAC and the Law Society of NSW's guide to designated services under tranche 2.

Frequently asked questions

Who does AML/CTF tranche 2 cover?

Lawyers, accountants, conveyancers, real estate agents and dealers in precious metals and stones who provide a designated service with a geographical link to Australia, in the course of carrying on a business, since 1 July 2026.

What is the AUSTRAC enrolment deadline?

29 July 2026. Enrolment opened 31 March 2026 for newly regulated tranche 2 entities.

Can we use AI tools to help with customer due diligence?

AI tools can support the workflow, but customer due diligence data and suspicious-matter information must never be entered into general-purpose AI tools without specific controls in place. Record-keeping and tipping-off obligations apply regardless of what tool is used.

Last reviewed: 1 July 2026. Tranche 2 enrolment closes 29 July 2026; revisit this page once that deadline passes.