AML Compliance for Real Estate Franchise Groups: Head Office Oversight Without Taking On Every Office's Liability
In most real estate franchise networks, head office does not sell property. The individual offices do. Under AUSTRAC's rules, each office is usually its own reporting entity, with its own enrolment, its own AML/CTF program and its own legal responsibility.
That separation is sensible. It keeps most of the liability with the office that created it. But it does not take head office out of the picture. Your brand is on every door, and AUSTRAC knows which offices belong to which network.
This article explains where the liability sits, why head office still carries real risk, and how a franchise group can oversee compliance across every office without becoming legally responsible for all of them.
Who Is Actually Responsible? Usually Each Office, Not Head Office
AML/CTF obligations attach to the business that provides the "designated service", which for real estate means helping to buy, sell or transfer property. In a franchise network that is almost always the franchisee's own company, not the franchisor.
AUSTRAC's guidance on reporting groups notes that a franchisor's agreement usually does not give it control of its franchisees. A franchise network is therefore not automatically a single group. If a franchisor and its franchisees want to operate as one group, they have to elect to form one and nominate a lead entity.
That leaves franchise groups with two broad structures:
| Head office as lead entity (elective reporting group) | Each office is its own reporting entity (head office oversees) | |
|---|---|---|
| Who writes the AML/CTF program? | The lead entity, for the whole group | Each office, with its own provider or Compliance Officer |
| Who carries the liability? | The lead entity takes on group-wide compliance responsibility, and the members stay accountable for their own services | Each office, for its own services |
| Effect of one weak office | Can expose the lead entity directly | Liability mostly stays with that office, but the brand and the network still attract scrutiny |
| Franchisee autonomy | Low. One program and one way of working across the network | High. Offices choose their own provider and processes |
| Head office's role | Owner and operator of compliance | Oversight, support and early warning |
A franchisor can become a lead entity. Most networks have looked at what that means, a single compliance failure in one office becoming head office's problem, and chosen the second structure. Industry advisers increasingly recommend the same "centrally supported, locally accountable" model.
The rest of this article is about the second structure, where head office is responsible for oversight, not for running every office's compliance.
Why Head Office Is Still Exposed: The Mosaic Problem
A franchise network is not one compliance program. It is a mosaic of them:
- Different providers. Some offices use one AML software platform, some use another, some outsource entirely, and some still run on spreadsheets.
- Different experience. Some principals have run AML programs in other industries. Others first heard the term this year.
- Different competence. One office has a capable Compliance Officer. The next has a principal doing it alone, at night, when there's time.
- Different discipline. Training lapses, monthly checks get skipped and key dates are missed, and nobody outside the office knows.
Head office may not be legally liable for each office's breaches. That does not make it safe.
The systemic assumption
If one or two offices in your network come to AUSTRAC's attention with weak compliance, the obvious question is: is this just these offices, or is it the whole network? A regulator that sees the same brand on several problem files can reasonably suspect a systemic problem. A franchise network that cannot show what it knew and did can then face network-wide scrutiny.
AUSTRAC's powers include requiring a business to appoint an external auditor, accepting enforceable undertakings, issuing remedial directions and infringement notices, and seeking civil penalties in the Federal Court. External audits are paid for by the business being audited. Across many offices, the costs mount quickly:
- Audit and legal fees, multiplied across offices
- Weeks of principal and staff time pulled away from selling
- Franchisee frustration, and offices that comply properly paying the price for the ones that don't
- Media coverage linking your brand to money-laundering failures
- Harder franchise recruitment and renewal conversations
AUSTRAC Is Already Watching
This is not a future risk. AUSTRAC has already started acting:
- 29 July 2026: The deadline for real estate agencies providing designated services to enrol with AUSTRAC.
- 20 August 2026: Reportedly only around 17,970 of roughly 45,000 agencies nationwide had enrolled.
- 28 August 2026: AUSTRAC announced it had begun issuing section 167 notices to businesses that appear to be providing designated services without enrolling. These notices require information about the business, its structure and its transactions.
- September 2026: Industry media reported that AUSTRAC had moved to fining businesses that failed to enrol, including real estate firms.
AUSTRAC CEO Brendan Thomas put it plainly: "There is nothing ambiguous about the requirement for real estate agents to enrol if they are providing designated services."
Enrolment is the easiest obligation to check, and AUSTRAC is checking it. Customer due diligence, training, risk assessments and suspicious matter reporting come next. Head office needs to know now which offices are keeping up.
A Scenario: Two Offices, One Brand
The network: 30 offices under one brand. Each office is its own reporting entity. Nineteen use one AML platform, six use another, and five run their own systems.
The trigger: One office receives a section 167 notice. A few weeks later, a second office in the same network is flagged after a suspicious transaction is reported by a bank. Its files show incomplete customer due diligence on a trust purchase and staff training that expired months ago.
The question AUSTRAC will ask: What does head office know about compliance across the rest of the network, and what has it done about it?
Head office with no visibility
No records, no monitoring, no evidence of follow-up. Head office cannot show that the problem is limited to two offices. Every franchisee now faces the risk of information requests, external audits and legal costs, and the brand is in the headlines.
Head office with documented oversight
Head office produces 12 months of time-stamped records. Both offices had been flagged amber and then red. Reminders and direct messages were sent, interventions were logged, and the rest of the network was tracking green. The evidence shows an isolated problem in a network that takes compliance seriously.
Being right is not enough. Head office needs to be able to prove what it monitored, what it found and what it did, with dates.
What Good Head Office Oversight Looks Like
Good oversight respects franchisee autonomy. Head office does not need to run each office's compliance, or force every office onto the same software. It needs to be able to:
The difficulty is the mosaic. When offices use different providers, nobody has the whole picture, so most groups have none of the five capabilities above.
The AMLHQ Head Office Portal
AMLHQ built its Head Office Portal for this situation. It gives franchise head offices one view across every office in the network, whichever AML provider each office uses.
Works across every office, on any platform
Offices can join the portal in whichever way suits them:
- Full Sentinel: agents work directly in the AMLHQ platform, and compliance data flows to head office automatically.
- Hybrid: the office keeps its own agency software, and an AMLHQ Compliance Officer brings the compliance data across.
- Non-Sentinel: the office keeps its own provider and its principal completes a structured monthly compliance report. The report covers transactions, AML checks, red flags, PEP matches, due diligence cases, AUSTRAC reports, staff training, complaints and remedial actions, and the principal signs it off.
Franchisees keep their choice of provider. Head office still sees the whole network.
What head office sees and can do
Group health at a glance
Every office is rated Red, Amber or Green, with an "Offices Requiring Attention" list and a live count of high-risk files, pending reviews, open due-diligence cases and open actions.
Missed deadlines flagged
Offices with an outstanding monthly compliance report are flagged, showing how many months behind they are.
Automatic reminders and escalation
Offices that report monthly get a reminder on the 1st. On the 8th, offices that still haven't reported get an escalation that copies head office.
Training and risk by office and agent
Drill into any office to see expired training, open due-diligence cases and a per-agent risk profile covering red flags, PEP matches and training gaps.
Direct and group-wide messaging
Two-way messages with any office, or a single broadcast to every principal in the group, with email notification. Every message is logged.
Intervention register
A permanent register of head office actions, such as training deficiencies, red-flag follow-ups, PEP reviews and policy breaches. Each entry is date-stamped, and when it is closed, the resolution is recorded rather than the entry being deleted.
AI compliance analysis
A plain-English analysis of an office or the whole group, highlighting problem areas and drafting messages head office can send to principals.
Trends and governance reporting
Month-by-month group trends with downloadable reports, plus an Annual Network AML Governance & Oversight Report suitable for boards and, if required, AUSTRAC.
Behind all of this: secure two-factor login, a full audit trail, staff who leave are archived rather than deleted, and records are kept for AUSTRAC's seven-year retention period. Everything head office does is documented and time-stamped. That is how a network shows AUSTRAC it is taking compliance seriously and managing its risk.
How Other Providers Compare
We reviewed the publicly available material of AML providers serving Australian real estate. We looked for one capability: head office oversight across a franchise network, including offices that use a different provider.
| Provider | What its public material describes for multi-office groups | Oversight of offices on other providers? |
|---|---|---|
| AMLHQ | Dedicated Head Office Portal: RAG status for every office, overdue alerts, automatic reminders with head office escalation, messaging and broadcast, intervention register, AI analysis and annual governance report | Yes. Non-Sentinel offices on any provider are included |
| AMLHUB | "Add as many branches and users as you require". A published case study describes a compliance officer pulling one report across 11 branches of one agency group | Not described. Reporting covers branches on AMLHUB |
| First AML | Appointed network partner for First National Real Estate (Nov 2025). Public material focuses on verification and due diligence for offices using its platform | Not described |
| PEXA Clear | Described as suitable for "multi-location agencies"; scaling is described by transaction volume | Not described |
| AML Partners | Fully outsourced service for individual agencies across many brands, and advocates the "centrally supported, locally accountable" model | Not described as a head office tool |
| LAB Group | Centralised identity verification results and outsourced AML operations "across franchise networks" | Not described. Covers offices using its service |
| AML Assured | Positioned for individual agencies; no group features described | Not described |
The pattern is consistent. Where a provider offers multi-office features, they cover the offices that use that provider. We found no other provider publicly describing a head office oversight tool that also covers offices using a different provider. That matters to a network whose franchisees have chosen different solutions.
Disclaimer: This comparison is based solely on information publicly available on each provider's website and in published media as at 1 October 2026. It is not an assessment of each provider's full product. Providers may offer features not described publicly, and products change. Franchise groups should confirm current capabilities directly with each provider. All trademarks belong to their respective owners.
Key Takeaways
- Each office is usually its own reporting entity. A franchisor can elect to be a lead entity, but that concentrates the network's liability at head office, and most networks avoid it.
- Separate liability is not the same as no risk. One or two problem offices can lead AUSTRAC to suspect a systemic issue and bring scrutiny onto the whole network.
- AUSTRAC is already acting. Information notices went out from late August 2026, and fines for failing to enrol have been reported.
- Head office's job is oversight. See every office, spot problems early, act on them and record everything.
- Franchisees can keep their provider. The AMLHQ Head Office Portal covers offices on any platform, so head office gets one view without forcing everyone onto the same system.
See Your Whole Network in One View
Book a walkthrough of the AMLHQ Head Office Portal. We'll show you how a franchise group can monitor every office, follow up on problems and build a time-stamped governance record, without becoming the lead entity and without changing franchisees' providers.
Book a Head Office Demo Call 1300 330 644Or email admin@amlhq.com.au
References
- AUSTRAC, Forming reporting groups
- AUSTRAC, Consequences of not complying
- AUSTRAC, AUSTRAC issues notices to non-enrolled businesses
- Clyde & Co, AUSTRAC takes compliance action in relation to Tranche 2 entities (31 August 2026)
- Real Estate Business, AML crackdown begins: AUSTRAC puts real estate agencies under scrutiny (27 August 2026)
- Real Estate Business, The franchise AML trap: Why one program doesn't cover every office (22 September 2026)
- 112WWFT, AUSTRAC fines real estate, jewellery and accounting firms for failing to enrol (30 September 2026)
- Fincrime Central, AUSTRAC orders audit of Airwallex (22 January 2026). An example of an external audit at the business's own expense.
- Provider websites and published material reviewed 1 October 2026: AMLHUB, AMLHUB case study, First AML, PEXA Clear, AML Partners, LAB Group, AML Assured