The missing reporting entities: who hasn't enrolled, and why

The scale of the change

Before 1 July 2026, AUSTRAC's regulated population sat in the order of 19,000 entities — banks, remitters, gambling operators and similar. Tranche 2 was designed to expand that dramatically. AUSTRAC has publicly estimated that around 80,000 additional entities would fall within scope; some industry estimates have run higher, towards 90,000 or 100,000 businesses. Figures vary by source, and AUSTRAC's published guidance at austrac.gov.au remains the authority.

Whichever estimate you take, the regulated population was intended to grow by roughly four to five times in a single day. That is an extraordinary administrative undertaking, and it was always likely that a meaningful share of captured businesses would not make the 29 July enrolment date.

Who tends to be missing

The businesses least likely to have enrolled are not the ones deliberately avoiding it. Four groups stand out:

• The part-captured. Practices where only one or two service lines are designated services — the small accounting firm that incorporates a handful of companies a year, or the general law firm with a modest conveyancing practice. They read the coverage, decided it was about somebody else, and moved on.
• The sole operators and very small firms. No compliance function, no one whose job it is to read regulatory updates, and no slack in the week to work out what applies.
• The 'we don't touch client money' assumption. Businesses that equate AML with cash handling and conclude the regime cannot be about them.
• The stalled starters. Firms that knew they were captured, began looking at it, hit the question of what a program actually has to contain, and stopped.

Why the gap matters commercially, not just legally

Penalties are the obvious risk, and they can accrue daily. But there is a second exposure that gets less attention: counterparties. As enrolled businesses build their own programs, they start running due diligence on the parties they deal with. A conveyancer, an agent or a lender that cannot demonstrate its own compliance position becomes a harder party to transact with.

The regime is designed to work through the chain. Businesses outside it will increasingly find the chain notices.

If you suspect you are one of them

The first step is not enrolment — it is establishing whether you are actually captured, by mapping your service lines against the designated services. If you are, enrol without delay and build the program from there. If you are not, write down why, and revisit it whenever you add a service line.

True Comply helps businesses confirm where they stand and, where they are captured, stand up a program that fits. If you are not sure which group you are in, start the conversation.