Day One. Are You Actually Ready?

By Justin Amos, Co-Founder & CEO, iDeed Pty Ltd

This article is general in nature and does not constitute legal advice. For specific guidance on how the reforms apply to your practice, contact us at ideedworks.com.au.

---

The date that was circled on every calendar in professional services has arrived. Tranche 2 of Australia’s AML/CTF reforms is in effect. If you provide accounting, legal, conveyancing, real estate, or precious metals services, you are now a reporting entity under the AML/CTF Act.

The question is no longer will this apply to me. The question is: do you have a functioning AML/CTF program right now, today?

Enrolling with AUSTRAC is not the same as being compliant. Having a SaaS login is not the same as having a compliance program. Many firms are about to discover that gap — the hard way.

What Tranche 2 actually means, starting today

From 1 July 2026, every designated service provider must:

• Have an AML/CTF program documented and approved by their governing body
• Have appointed an AML Compliance Officer (AMLCO)
• Conduct Customer Due Diligence (CDD) before providing designated services
• Screen clients against PEP and sanctions lists
• Identify beneficial owners — including across complex trust and corporate structures
• File Suspicious Matter Reports (SMRs) when triggers are identified
• Retain records for a minimum of seven years
• Train all relevant staff on their obligations

Non-compliance attracts civil penalties of up to $22.2 million. AUSTRAC has signalled it will be active in monitoring newly designated sectors.

Buying software wasn’t enough

We have spent the past two months writing about this in the Beyond the Checkbox series. The conclusion holds: a verification tool gives you a workflow. It does not give you a compliance program.

Many firms that signed up to a SaaS platform ahead of the deadline are about to discover that the platform alone doesn’t:

• Read trust deeds and constitutions to determine who actually needs to be verified
• Map ownership structures across multiple entities to identify UBOs
• Determine when Enhanced Customer Due Diligence is required
• Make judgment calls on complex structures when the system flags an exception
• Fix errors before they become a regulatory problem

The software flags the issue. Only a compliance analyst can resolve it. That distinction matters more than any feature comparison.

What a functioning program actually looks like

A compliant AML/CTF program is not a one-time exercise. It is an ongoing compliance function — every day, every new client, every triggering event across the full lifecycle of the customer relationship.

It requires human expertise sitting alongside your technology: a specialist who reads structures, makes determinations, assembles evidence, and can defend every decision under regulatory scrutiny.

What the compliance function actually does

Task	Software alone	Co-sourced with ARCaml
Trust deed review	✗ Flags, cannot read	✓ Analyst reads and determines
UBO determination	✗ Percentage only	✓ Full ownership investigation
ECDD triggers	✗ Checkbox rule	✓ Contextual judgment call
Complex structure errors	✗ Stalls or misidentifies	✓ Fixed before client contact
Audit-ready records	✗ Workflow logs	✓ Defensible file, 7-year retention

That expertise is what most compliance software providers are not giving you. And it is what ARCaml is built around.

ARCaml: co-sourced, not just software

ARCaml is a co-sourced AML and CDD capability — not just a platform. Regulatory responsibility stays with your firm and your appointed AMLCO. We provide the compliance function behind them: the analysts, the process, the audit-ready records, and the specialist judgment that software alone cannot replace.

• Complex structures handled correctly — trust deeds read, UBOs determined, ECDD triggered appropriately
• Only the right people verified — not everyone in a structure, just those who trigger your CDD obligation
• Audit-ready records — everything in one place, retained for 7 years, defensible on day one
• Credits, not retainers — you only pay for completed verifications. No idle licence cost.

If you enrolled with AUSTRAC before today and already have credits in place, you are funded and ready to go. If you are starting now, you can still get set up in days — and getting started immediately is significantly better than waiting.

If you haven’t started, now is still the right time

AUSTRAC’s enforcement posture for newly designated sectors will focus on firms making a genuine effort versus those who have done nothing. Being enrolled, having a documented program, and beginning CDD on new clients — even if imperfect — is significantly better than having taken no steps.

The penalty for a compliance gap discovered while actively building your program is very different from the penalty for ignoring the obligation entirely.

Do not let the perfect be the enemy of the good. Get started. Get structured. Get the right expertise behind you.

---

Ready to get properly set up? Talk to our team about where you are, what you need, and how quickly ARCaml can get you to a defensible compliance position.

---

iDeed Pty Ltd operates ARCaml — an AML/CTF compliance platform built for Australian designated service providers. The views expressed reflect our interpretation of AUSTRAC’s published guidance and the AML/CTF Act as at July 2026. This article is general in nature and does not constitute legal advice.