Missed the 29 July AUSTRAC enrolment deadline? What actually happens now

The actual rule: 29 July vs the 28-day window

The new AML/CTF obligations for real estate professionals, lawyers, conveyancers, accountants, dealers in precious metals and stones, and trust and company service providers commenced on 1 July 2026. Enrolment with AUSTRAC opened on 31 March 2026, and the rule is this: you must apply to enrol within 28 days of first providing a designated service under the new regime.

For a business that was providing designated services from day one — 1 July — that 28-day window lands on 29 July 2026, which is why that date is everywhere. But the window is personal to you. If your first designated service under the new rules happened on 10 July, your 28 days runs from 10 July. If you won't provide a designated service until September, your clock hasn't started at all.

So before assuming you've missed anything, answer one question precisely: when did this business first provide a designated service on or after 1 July 2026? A surprising share of people searching this exact phrase haven't actually blown their own deadline — they've blown the headline one. Check yours first.

What happens if you enrol late

Mechanically: nothing stops you. AUSTRAC Online does not lock the door on 30 July. You create an account, complete the business profile, and submit — the portal works the same on day one late as it did on time. Enrol the day you realise, even if that day is today.

Legally: enrolling late means there was a period in which you provided designated services while unenrolled, and that is a contravention of the AML/CTF Act. That fact doesn't disappear when you enrol. What changes — completely — is your posture. An entity that enrolled late and got compliant looks like a small business that stumbled on a new regime and fixed it. An entity that stayed unenrolled looks like the thing the regime exists to find. AUSTRAC has said publicly that it will be watching enrolment across the newly regulated population; the unenrolled are the visible ones.

Every day you wait adds to the unenrolled period and subtracts from the 'genuine effort' story you may one day want to tell. There is no version of your situation that improves by enrolling next week instead of today.

Penalties: the maximums vs what AUSTRAC has signalled

Two true things that point in different directions.

The maximums are severe. The Act's civil penalty provisions carry theoretical maximums that run well into the millions for companies, and commentary differs on exactly how exposure accrues for an unenrolled entity — per contravention, per day, or both, depending on the provision engaged. If you need your precise exposure calculated, that is a job for a lawyer with your facts, not a comparison website.

The signalled posture is softer. Consistent with how Australian regulators have handled new-regime transitions, AUSTRAC's public messaging through the Tranche 2 rollout has emphasised education and support for businesses making genuine efforts to comply, with enforcement energy aimed at wilful and ongoing avoidance rather than early stumbles. That is a posture, not a promise — nobody, including us, can tell you a late enroller won't be penalised. But it does mean the difference between 'three weeks late and fixed' and 'still not enrolled in November' is likely to matter a great deal.

The practical read: treat the maximums as the reason to act today, and the posture as the reason not to despair about yesterday.

Enrol now: the exact steps

Set aside about an hour. The stall point for most people is beneficial ownership detail, so gather that first.

1. Gather: ABN/ACN, business structure details, the list of designated services you provide, and — the one that catches people — details of your beneficial owners (the individuals who ultimately own or control the business, typically 25%+ ownership or effective control).
2. Create your AUSTRAC Online account at the AUSTRAC website, via the enrolment overview page.
3. Complete the business profile form. It saves as you go, so an interruption doesn't cost you the session.
4. Submit, and keep the confirmation with your compliance records — it's the first document in your evidence trail.
5. Then the step almost everyone misses: notifying AUSTRAC of your appointed AML/CTF compliance officer is a separate obligation with its own deadline — the later of 29 July 2026 or 14 days after you enrol. Nominating a contact on the enrolment form is not the same thing. Your compliance officer must be management-level and fit-and-proper; they do not need prior AML qualifications. For a small business, the owner commonly holds the role.

If you're genuinely unsure whether your services are 'designated' at all, resolve that on AUSTRAC's own guidance pages before self-exempting — guessing yourself out of scope is how a fixable problem becomes a wilful-looking one.

Late enrolment vs not enrolling at all

These are different risk classes and it's worth being blunt about it.

Late enrolment is a bounded, historical contravention: a defined period, now closed, followed by compliance. It's the category regulators process with proportion, especially in a transition year.

Continuing to provide designated services unenrolled is an open-ended, compounding one. Each new matter extends it. It progressively erodes any 'genuine effort' characterisation, and for licensed professions it layers a second exposure on top: conduct obligations under your state's professional regime — legal practice, conveyancing licensing, real estate licensing — don't look kindly on operating outside a federal compliance scheme you were required to join.

If cost or complexity is what's kept you from starting, know that the entry price of compliance is lower than the ads suggest: enrolment is free, AUSTRAC's program starter kit is free, and pay-as-you-go verification exists from a few dollars a check. Here's exactly what the free kit covers and where paid tools actually become necessary — for a genuinely small, simple business, the honest answer to 'what must I spend today?' can be close to zero.

After you enrol: the obligations that are already running

Enrolment is step one of roughly eleven, and several of the others have been live since 1 July regardless of your enrolment status. A late starter's priority order:

1. Today: enrol. Appoint your compliance officer and diarise the 14-day notification.
2. This week: put a customer due diligence process in front of every new client from now on — identity verification, and beneficial ownership for companies and trusts. Manual plus a per-check tool is fine to start.
3. This fortnight: complete your ML/TF risk assessment and written AML/CTF program. The free starter kit is the fastest defensible route for a low-complexity business.
4. Ongoing from today: keep everything. Verification evidence, screening results, decisions and the reasons for them — the record-keeping obligation runs for seven years, and reconstructed records are worth far less than contemporaneous ones.
5. Always on: the suspicious matter reporting clock — three business days for most suspicions, 24 hours where terrorism financing is suspected — applies to you whether or not your paperwork is finished. If something feels wrong on a matter, that obligation is already yours.

The pattern in all of this: the regime rewards visible, dated, genuine effort. You can't backdate being on time. You can absolutely date-stamp being serious from today.