AML/CTF for Real Estate: Handling the Compliance Admin Before 29 July 2026

From 1 July 2026, Australian real estate agents sit inside the AML/CTF regime for the first time. Enrolment with AUSTRAC opened 31 March, and final compliance falls due on 29 July. For agencies that registered early, the deadline is close. For agencies still working through what the obligations mean day to day, it is closer than it feels.

The legislation itself passed in November 2024, so the sector has had time to see this coming. What has not had as much attention is what the obligation looks like once it lands inside a normal working week, sitting next to settlements, listings, and everything else that already fills an agency’s calendar.

What Changed for Real Estate on 1 July 2026

Real estate agents are now a reporting entity under AUSTRAC, alongside banks, lawyers, and accountants who have carried these obligations for years. The core requirements are a risk-based AML program, client due diligence on buyers, sellers, and in some cases tenants, ongoing transaction monitoring, and a reporting relationship with AUSTRAC that includes seven-year record-keeping.

None of that is optional or scaled to agency size in a way that makes it disappear for smaller operators. A two-person agency doing twenty settlements a year carries the same category of obligation as a large multi-office group, just at a smaller volume.

The Part of the AML Program That Eats a Full Working Week

Most of the public conversation about AML/CTF focuses on the program document itself: the written risk assessment, the policy, the sign-off. That document takes real work to build, but it gets built once and reviewed periodically.

The part that consumes ongoing time is everything underneath it.

Every transaction that triggers due diligence needs identity documents collected from the client, checked against verification requirements, and logged with the date and method of verification. Where a purchaser is a company or trust, that expands to directors, beneficial owners, and the structure behind the entity. Screening against politically exposed person and sanctions lists needs to happen for each new client, with the result recorded in a way that survives a later audit request.

Missing or incomplete documents need to be chased, sometimes through a solicitor, sometimes directly from a client who does not understand why their agent suddenly needs a certified copy of their passport. Each of those follow-ups needs a record: when it was requested, when it was received, what was still outstanding at settlement.

Then there is the register itself. AUSTRAC expects a program that can produce a clear audit trail on request, which means the records from a due diligence check in March need to be exactly as retrievable in three years as they are today. A folder of PDFs saved with inconsistent file names does not meet that bar, even if every document in it is genuinely on file somewhere.

What Has to Stay With the Principal

AUSTRAC holds the reporting entity accountable for the program.

Deciding whether a match against a sanctions or PEP list is a genuine hit, deciding whether a transaction pattern is unusual enough to warrant a Suspicious Matter Report, and signing off on the AML program itself are judgment calls that sit with the principal or the person appointed as AML Compliance Officer. No amount of process design changes who is accountable for those decisions, and no external support role should be positioned as making them.

What can shift is everything that produces the information those decisions get made on: the collection, the verification logging, the chasing, the filing, and the register maintenance that keeps the program audit-ready without pulling a principal into document admin every week.

What a Documented Compliance Support Role Actually Does

A role built around this work starts with the tasks the agency is already doing, mapped in detail and documented before the person starts: which document types are required for which transaction type, what the verification steps look like in the agency’s current process, where records are currently stored, and where the gaps are. That’s how HIPPO designs roles for property teams.

From there, the day-to-day work looks like: collecting outstanding ID documents from clients and solicitors on a defined follow-up cadence, running the initial screening checks and flagging any match for the principal to review, entering verification details into the agency’s compliance register with consistent formatting, and maintaining the seven-year record system so a document from any transaction can be located in minutes, not hours.

The agency’s obligation stays exactly where AUSTRAC put it. What moves is the volume of document handling that would otherwise land entirely on whoever has the least time to do it properly, which in most agencies is the principal.

Getting the Admin Under Control Before the Deadline Passes

With final compliance due 29 July, agencies still building their program have a narrow window left to get the documentation and record-keeping structure right before it needs to function under normal transaction volume. Getting that structure sorted now, rather than after the first AUSTRAC request for records, is the difference between a program that runs quietly in the background and one that resurfaces every time a file gets pulled.

If the compliance admin is already the thing nobody has time for, that is worth a conversation before it becomes the thing nobody has time for at scale.

Book a Connect Session