Do you actually know what you're doing with it?
Not in a judgmental way. Genuinely — do you know what it's checking, what it isn't, and what's still sitting entirely on your shoulders regardless of what you paid for? Because that's the bit almost nobody explains clearly when they sell you the tool, and it's the bit that actually matters if AUSTRAC ever comes knocking.
We talk to a lot of principals. Solo agents, two-person offices, small independents who are flat out running a business, listing property, managing staff, and now — on top of all of that — meant to be an expert in a federal financial crime law that didn't exist for real estate twelve months ago. And honestly, the same feeling comes up again and again: I bought something. I hope it's enough. I haven't really got the headspace to check.
That feeling isn't a personal failing. It's a completely reasonable reaction to being handed a genuinely complex legal obligation with almost no lead time, in the middle of running a business that has nothing to do with financial crime law. But "reasonable" and "safe" aren't the same thing — and it's worth five minutes to find out which one you're actually in.
What Real Estate Media Are Already Saying, Quietly
This isn't just us saying it. Industry publications covering the lead-up to 1 July 2026 have been fairly candid about what's actually happening out there. One widely-read piece put it plainly: agencies that rush their setup often feel like they've ticked the boxes — a program, some software, a bit of training — and breathe a sigh of relief once the deadline passes. Then, as the same piece bluntly notes, the audit happens later. Sometimes years later.
And here's the part that should sit uncomfortably: AUSTRAC isn't going to check your work on 1 July 2026. They'll come later — six months, twelve months, two years down the track. By then, if something was set up wrong at the start, it isn't a one-off mistake anymore. It's every transaction since, all needing to be revisited, all at once, while you're still trying to run your business.
Some Honest Questions Worth Sitting With
We're not going to tell you what to buy. We're just going to ask you the questions worth asking yourself, quietly, before someone else asks them for you.
- If a buyer turns up as a company or a trust, do you actually know how to identify who's really behind it — the beneficial owner — not just the name on the contract?
- Could you read a trust deed and know what you're looking for?
- Do you know what a PEP is (a "politically exposed person"), why it matters, and how you'd actually check for one?
- Does your tool check identity documents — or does it also cover the written program, the risk assessment, the training records, and the annual report AUSTRAC expects to see?
- If AUSTRAC asked you tomorrow to explain your compliance officer's reasoning on a file, could you — or would you be hoping they don't ask?
- Have you ever actually spoken to a real person about your specific situation, or did you just sign up online and assume that was the job done?
If you read through that list and felt a small knot in your stomach — that's useful information. Not a reason to panic. Just a reason to actually check, rather than hope.
AUSTRAC Doesn't Care What You Bought
This is the part worth being blunt about, because nobody selling you a tool is going to say it this directly: AUSTRAC does not care what software sits on your desktop, what it cost, or how overwhelmed you felt setting it up. They don't grade on effort. They don't have a "too small to notice" exemption. They expect the same outcome from a solo agent in a country town as they do from a 40-office franchise — the guidelines met, on every single transaction, with evidence to prove it.
An identity check subscription satisfies one slice of one obligation. It is not a risk assessment, not a written program, not a trained compliance officer, not staff training, and not an independent review. When AUSTRAC reviews a file, "the software said it was fine" is not a defence. A defensible, documented program is.
— Industry guidance for principals ahead of 1 July 2026
That's not scaremongering. It's just the shape of the law. AUSTRAC's own guidance is explicit that a documented AML/CTF program needs a proper risk assessment, ongoing customer due diligence, a genuinely fit-and-proper compliance officer, staff training with records to prove it happened, suspicious matter reporting within strict timeframes, and — for most businesses — an independent review of the whole thing at least every three years. An identity-check tool, on its own, answers one part of one of those. Not all of them.
Source: Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth); Pitcher Partners, AML/CTF Tranche 2 guidance, 2026.
You're Not Meant to Become a Compliance Expert
Here's the thing we actually want you to take away from this, because it isn't meant to make you feel worse: you were never supposed to become an AML expert overnight. That's not a realistic expectation for someone running a small office, and it's not what AUSTRAC is actually asking of you either.
What they are asking is that someone qualified is making these calls — reading the trust deed properly, recognising a PEP, knowing when a red flag needs to be escalated and reported within days, not weeks. That's a genuine skill set. It's reasonable to not have it yourself. It's not reasonable to assume a login screen has it either.
So the honest question isn't "did I buy something." It's "does what I bought actually include someone who knows how to do this — or just a tool that assumes I already do?"
If you're even slightly unsure — that's exactly what a five-minute chat is for.
No pressure, no sales script. Just a straightforward conversation about what you've got in place, what it actually covers, and what — if anything — is still sitting on your shoulders. If you're already properly covered, we'll tell you that too.
Have a Chat With Us