Key Takeaways
- AUSTRAC can apply for civil penalty orders from the Federal Court. For the most serious contraventions, AUSTRAC states a civil penalty order can be up to 100,000 penalty units.
- Tipping off is a criminal offence under section 123 of the AML/CTF Act. AUSTRAC states the maximum penalty is imprisonment for 2 years or 120 penalty units, or both.
- AUSTRAC's other enforcement tools include enforceable undertakings, infringement notices, remedial directions and written notices.
- Reporting entities must appoint a fit-and-proper AML/CTF compliance officer responsible for implementing the AML/CTF program (explicit requirement since 31 March 2026).
- Enforcement actions taken by AUSTRAC are published on its Record of Our Actions — so non-compliance carries reputational consequences as well as financial ones.
In this article
Why are the penalties so severe? How much are the civil penalties? What are the criminal penalties? Are directors and officers personally liable? How do penalties multiply per breach? How does AUSTRAC enforce compliance? What are real enforcement cases in Australia? How can you avoid AML/CTF penalties? Frequently asked questionsWhy Are the AML/CTF Penalties So Severe?
Australia has been the only OECD country without full AML/CTF coverage for so-called "gatekeeper" professions—real estate agents, lawyers, accountants, and trust service providers. The AML/CTF Tranche 2 reforms, effective 1 July 2026, close this gap.
AUSTRAC (the Australian Transaction Reports and Analysis Centre) is the regulator responsible for enforcing these laws. The severity of the penalties reflects the scale of the problem: real estate is one of the most common channels for laundering criminal proceeds in Australia, with property valued for its ability to store wealth, generate income, and appreciate over time.
The penalties are designed to make non-compliance far more costly than compliance. For most real estate agencies, getting compliant will cost a fraction of what even a single penalty could amount to.
Civil Penalty Orders Under the AML/CTF Act
AUSTRAC can apply for civil penalty orders from the Federal Court where a reporting entity has breached its AML/CTF obligations under the AML/CTF Act 2006. The Court may then order the reporting entity to pay a penalty to the Commonwealth.
AUSTRAC's stated maximum
For the most serious contraventions, AUSTRAC states a civil penalty order can be up to 100,000 penalty units. The dollar value of a penalty unit is set by the Crimes Act 1914 and is updated periodically — so we don't publish a fixed dollar figure here. For the current penalty unit value, see the Attorney-General's Department or the AUSTRAC Consequences of not complying page.
Civil penalty provisions cover a wide range of obligations under the Act, including failing to enrol with AUSTRAC, failing to maintain an AML/CTF program, failing to conduct customer due diligence, failing to lodge suspicious matter reports, or failing to keep proper records. The specific civil penalty provisions are set out in the AML/CTF Act itself.
Criminal Offences Under the AML/CTF Act
The AML/CTF Act contains specific criminal offences for certain contraventions. AUSTRAC publishes guidance on the most prominent one — the tipping off offence — and refers reporting entities to the Act itself for the full list.
| Offence | AUSTRAC-stated penalty |
|---|---|
| Tipping off (section 123 of the AML/CTF Act) | Imprisonment for 2 years or 120 penalty units, or both (AUSTRAC tipping off guidance) |
| Other civil penalty provisions and offences | Set out in the AML/CTF Act 2006. Civil penalty orders can reach up to 100,000 penalty units for the most serious contraventions (per AUSTRAC). |
What AUSTRAC says about tipping off
AUSTRAC states: "It's a criminal offence to disclose certain types of information to another person, where it would or could reasonably be expected to prejudice an investigation. This is known as 'tipping off'."
Tipping off captures disclosures about suspicious matter reports (SMRs), notices from AUSTRAC, and related information — whether you create, share, or receive the information. See the AUSTRAC tipping off guidance for the full rules, exceptions, and examples.
For offences beyond those AUSTRAC publishes guidance on, refer directly to the AML/CTF Act 2006 or seek qualified legal advice. We don't paraphrase specific maximum sentences for criminal offences on this page unless AUSTRAC itself has published them.
Are Directors and Officers Personally Liable?
Directors and compliance officers are personally liable
This is particularly relevant for real estate agency principals. If you are the principal of an agency and you fail to implement an AML/CTF program or appoint a compliance officer, you are personally exposed. The AML/CTF Compliance Officer must be at management level and is directly responsible for ensuring the business meets its obligations. The Attorney-General's Department provides further background on the government's AML/CTF framework.
How Do Penalties Multiply Per Breach?
How contraventions can accumulate
Under the AML/CTF Act each contravention of a civil penalty provision can be the subject of a separate civil penalty order. In principle, multiple breaches can therefore give rise to multiple orders.
The specifics of how contraventions are treated — and the maximum applicable to any given order — depend on the particular section of the Act involved. For maximum penalty detail, refer to the AML/CTF Act 2006 or AUSTRAC's Consequences of not complying page.
Because contraventions can accumulate, AUSTRAC's public guidance repeatedly emphasises the importance of putting AML/CTF policies, procedures, systems, and controls in place before you start providing a designated service — not reacting after the fact.
How Does AUSTRAC Enforce Compliance?
AUSTRAC doesn't jump straight to maximum penalties. There is a graduated enforcement approach, but every step has real consequences:
| Enforcement Action | What It Means |
|---|---|
| Infringement notices | Fixed fines for specific contraventions—the lightest enforcement tool |
| Remedial directions | AUSTRAC orders you to take specific actions to fix non-compliance within a set timeframe |
| Enforceable undertakings | Legally binding agreements to improve compliance, often with ongoing reporting requirements |
| Civil penalty orders | Federal Court action seeking a penalty payable to the Commonwealth — up to 100,000 penalty units for the most serious contraventions (per AUSTRAC) |
| Criminal prosecution | Referral to the Commonwealth Director of Public Prosecutions for imprisonment |
Beyond formal penalties, non-compliance brings reputational damage that can be equally devastating. AUSTRAC enforcement actions are public. If your agency is named in a compliance action, clients and referral partners will take notice. In a market built on trust, this alone can cost you more than the fine itself.
Where to Check AUSTRAC's Actual Enforcement Actions
AUSTRAC publishes its enforcement actions on its own website. Rather than paraphrase headline figures that may become outdated, we recommend you review AUSTRAC's own record of actions:
AUSTRAC's Record of Our Actions
AUSTRAC maintains a public Enforcement Actions Taken register. It lists the current and historical enforcement actions AUSTRAC has brought against reporting entities, along with outcomes.
Related registers on the same page include exemptions and modifications granted, written notices to appoint an external auditor, and remittance and virtual asset registration actions.
AUSTRAC's public communications on the Tranche 2 reforms emphasise that reporting entities must have their AML/CTF program, CDD processes, and reporting workflows ready from the day they start providing a designated service. Leaving compliance until after 1 July 2026 significantly increases your exposure to the enforcement actions listed above.
How Can You Avoid AML/CTF Penalties?
The good news is that compliance is straightforward if you start now. Here's what you need to have in place before 1 July 2026:
Pre-July 2026 Compliance Checklist
If this feels overwhelming, you're not alone. That's exactly why AMLTranche exists—to automate these obligations so you can focus on running your business instead of managing compliance paperwork.
Get a free compliance checklist for your business:
No spam. Unsubscribe anytime.
Frequently Asked Questions
What are the consequences of AML/CTF non-compliance in Australia?
AUSTRAC can apply for civil penalty orders from the Federal Court, accept enforceable undertakings, issue infringement notices, or issue remedial directions. For the most serious contraventions, AUSTRAC states a civil penalty order can be up to 100,000 penalty units. The AML/CTF Act also contains specific criminal offences, including the tipping off offence under section 123 (maximum: imprisonment for 2 years or 120 penalty units, or both, per AUSTRAC). Full details are on AUSTRAC's Consequences of not complying page.
Does the AML/CTF Act contain criminal offences?
Yes. AUSTRAC publishes specific guidance on the tipping off offence (section 123 of the Act), which has a maximum penalty of imprisonment for 2 years or 120 penalty units, or both. Other criminal offences are set out in the AML/CTF Act 2006. For offences AUSTRAC doesn't publish specific maxima on, refer directly to the Act or seek legal advice.
Who is responsible for compliance within an organisation?
Since 31 March 2026, AUSTRAC has made it an explicit requirement to appoint a fit and proper AML/CTF compliance officer responsible for implementing the AML/CTF program. See AUSTRAC's Your AML/CTF program guidance for the current requirements. Confirm your specific individual obligations with AUSTRAC or a qualified legal adviser.
When do AML/CTF Tranche 2 obligations start applying?
New designated services regulated under the Tranche 2 reforms commence on 1 July 2026. AUSTRAC enrolment opens 31 March 2026, and the enrolment deadline is 29 July 2026 for those providing the new designated services. If you start providing a designated service outside of this launch window, you must apply to enrol no later than 28 days after you start providing it.
What counts as a separate contravention under the AML/CTF Act?
Under the AML/CTF Act each contravention of a civil penalty provision can give rise to a separate civil penalty order. The specifics depend on the particular section of the Act. Check AUSTRAC's Consequences of not complying page or seek legal advice for the specifics that apply to your situation.
How can I prepare for Tranche 2 compliance?
Start by using AUSTRAC's eligibility checker to confirm whether your services are classified as "designated services" under the reforms. Then review the reforms guidance, enrol with AUSTRAC (from 31 March 2026), appoint a compliance officer, conduct a risk assessment, develop your AML/CTF program, and implement customer due diligence processes. Using an AML/CTF compliance platform like AMLTranche can automate most of these requirements.
Last updated: 3 March 2026. This article is for general information only and does not constitute legal advice. For advice specific to your circumstances, consult a qualified legal professional.