Photo by Akmalism Trading
From 1 July 2026, every remittance and virtual asset service provider in Australia must complete two separate obligations with AUSTRAC — you must enrol as a reporting entity AND apply for registration on the Remittance Sector Register or Virtual Asset Service Provider Register. Both must be done by 29 July 2026. Under the previous framework, registration alone covered you. The 2026 AML/CTF reforms split these into distinct requirements, and missing either one leaves you unable to lawfully provide a designated service.
This is not a paperwork formality. If you are already registered under the old regime, you are not automatically enrolled — and if you enrol without registering, you still cannot operate. This guide walks you through the dual process, the exact deadlines, the cost, and what happens if you miss the 29 July 2026 cut-off.
Key Takeaways
- Enrolment and registration are now two separate AUSTRAC obligations for remittance and virtual asset service providers, both due by 29 July 2026.
- Enrolment captures your reporting entity details in AUSTRAC's system; registration authorises you to provide remittance or virtual asset designated services.
- Existing registered remittance providers are not automatically enrolled — you must complete the enrolment step separately through AUSTRAC Online Services.
- Operating without valid enrolment and registration from 1 July 2026 is an offence carrying civil penalties and potential criminal liability under the AML/CTF Act 2006.
- AUSTRAC can refuse or cancel registration on "fit and proper" grounds, so submit early to allow time for further information requests.
What Changed Under the 2026 AML/CTF Reforms
The AML/CTF Amendment Act 2024 and the associated 2026 Rules restructured how AUSTRAC tracks and authorises reporting entities. Before the reforms, remittance providers registered on the Remittance Sector Register and that was effectively the gateway to operating. The concept of "enrolment" existed for other reporting entities but sat separately.
The reforms harmonise the system. All reporting entities must now enrol — this creates a single, consistent record of who provides designated services in Australia. On top of enrolment, businesses in higher-risk sectors — remittance and virtual asset services — must also register. Registration is the additional layer that lets AUSTRAC apply a "fit and proper" assessment to sectors it regards as elevated money laundering and terrorism financing risks.
The practical result is a dual requirement. Think of enrolment as "telling AUSTRAC who you are" and registration as "AUSTRAC authorising you to provide these specific high-risk services". You need both from 1 July 2026.
Enrolment vs Registration: What Each One Actually Does
Understanding the difference between the two obligations prevents the most common mistake — assuming one covers the other.
| Feature | Enrolment | Registration |
|---|---|---|
| Purpose | Records your identity as a reporting entity | Authorises you to provide remittance / virtual asset services |
| Who must do it | All reporting entities | Remittance and virtual asset service providers only |
| AUSTRAC assessment | Administrative — captures your details | Merit-based "fit and proper" assessment |
| Can AUSTRAC refuse? | Generally no (administrative) | Yes — on fit and proper grounds |
| Renewal | Ongoing, kept current | Periodic renewal (typically every 3 years) |
| Deadline (transitional) | 29 July 2026 | 29 July 2026 |
| Fee | No standalone enrolment fee | Registration application fee applies |
Enrolment is largely administrative. You provide your business details, ABN, contact information, the designated services you offer, and your AML/CTF compliance officer's details. AUSTRAC processes this to maintain its national register of reporting entities.
Registration is where scrutiny happens. AUSTRAC assesses whether your business and its key personnel are fit and proper to provide remittance or virtual asset services. It considers criminal history, prior AUSTRAC compliance, insolvency, and whether registration poses a money laundering or terrorism financing risk. AUSTRAC can refuse, impose conditions on, or cancel registration — it cannot do the same with enrolment in the same way.
The Dual Process Step by Step
Both steps run through AUSTRAC Online Services. If you do not yet have an account, create one first — this becomes your channel for all reporting, including TTRs, IFTIs, and SMRs.
Step 1: Prepare your documentation
Before you start, gather the information both processes require:
- Australian Business Number (ABN) and, if applicable, Australian Company Number (ACN)
- Business and trading names and all registered addresses
- Details of the designated services you provide — remittance, virtual asset exchange, or both
- Key personnel details — directors, beneficial owners, and your AML/CTF compliance officer
- Beneficial ownership information for individuals with 25%+ ownership or control
- Details of any authorised or affiliated persons in your value transfer chain
- Your AML/CTF program — you must have a compliant program in place
Step 2: Complete enrolment
Log in to AUSTRAC Online Services and complete the enrolment form. You will confirm your business structure, designated services, contact points, and compliance officer. Once submitted, AUSTRAC records you as an enrolled reporting entity.
If you are an existing registered remittance provider, do not assume you are already enrolled. AUSTRAC has provided a transitional pathway, but you must verify your enrolment status and complete any outstanding steps before the deadline.
Step 3: Apply for registration
After enrolment, complete the registration application for the relevant register — the Remittance Sector Register, the Virtual Asset Service Provider Register, or both. This is where you submit the detailed "fit and proper" information: personal histories of key personnel, national police certificates where requested, and details supporting your suitability.
Pay the registration application fee when prompted. AUSTRAC then assesses your application and may issue a request for further information — respond promptly, as this pauses the clock.
Step 4: Maintain both records
Enrolment and registration are not "set and forget". You must notify AUSTRAC of material changes — new directors, ownership changes, new designated services, or a change of compliance officer — generally within 14 days. Registration must be renewed periodically, typically every three years.
Key Deadlines You Cannot Miss
| Date | Requirement |
|---|---|
| 1 July 2026 | New AML/CTF regime commences; enrolment + registration both required to operate |
| 29 July 2026 | Final deadline to complete enrolment and lodge registration for existing providers |
| Within 14 days | Notify AUSTRAC of material changes to enrolment or registration details |
| Every ~3 years | Renew registration before expiry |
The 29 July 2026 date is the transitional deadline for businesses already operating. New entrants must complete both steps before providing any designated service. Do not treat 29 July as a comfortable buffer — registration assessments take time, and a request for further information can extend the process by weeks.
What Happens If You Miss the Deadline
Operating a remittance or virtual asset service without valid enrolment and registration is a serious contravention of the AML/CTF Act 2006. The consequences escalate depending on the breach.
You cannot lawfully provide designated services. From 1 July 2026, providing remittance without being both enrolled and registered means every transaction you process is a potential offence. This exposes you to civil penalties, and in serious cases, criminal liability.
De-banking risk intensifies. Banks screen MTO clients against AUSTRAC's public registers. If your registration lapses or is missing, your banking partner may freeze or close your account, cutting off your ability to settle transactions. Given the ongoing de-banking pressure on the sector, a registration gap can be fatal to your business.
Reputational and enforcement exposure. AUSTRAC publishes enforcement actions. A registration failure flags your business for scrutiny and can trigger a broader compliance assessment of your entire AML/CTF program.
AUSTRAC has historically shown some flexibility during transitional periods, but you should not rely on leniency. Lodge early. If circumstances genuinely prevent you from meeting the deadline, contact AUSTRAC proactively rather than letting the date pass silently.
The "Fit and Proper" Assessment Explained
Registration — not enrolment — triggers AUSTRAC's fit and proper assessment. This is the substantive hurdle, and understanding what AUSTRAC evaluates helps you prepare a clean application.
AUSTRAC assesses the business and each key person, considering:
- Criminal history — particularly fraud, dishonesty, money laundering, or terrorism financing offences
- Prior regulatory conduct — past AUSTRAC breaches, enforcement actions, or cancelled registrations
- Insolvency and bankruptcy history
- Associations — links to individuals or entities that pose ML/TF risk
- The integrity of your AML/CTF program and governance
If AUSTRAC identifies concerns, it may request further information, impose conditions on your registration, or refuse the application. Key personnel with unresolved issues can hold up the entire application, so address any red flags in your submission rather than leaving AUSTRAC to discover them.
Special Considerations for the Value Transfer Chain
The 2026 reforms replaced the old "designated remittance arrangements" framework with the value transfer chain model. This affects how affiliated and authorised persons handle enrolment and registration.
Under the new model, each participant in a value transfer chain has clearer obligations. If you operate as a network — a principal with authorised representatives or affiliates — you must map how enrolment and registration apply across your chain. A principal cannot assume its registration automatically covers every affiliate; each party's status needs to be confirmed.
If you run a remittance network, review your agreements and confirm which entities require their own enrolment and registration and which are covered under your arrangements. Getting this wrong exposes both you and your affiliates to the same operating-without-registration risk.
Practical Checklist Before 29 July 2026
Use this sequence to stay on track:
- Confirm your AUSTRAC Online Services access is active and current.
- Verify your enrolment status — do not assume existing registration means you are enrolled.
- Update your AML/CTF program to reflect the 2026 Rules before you apply.
- Compile key personnel and beneficial ownership records, including any required police certificates.
- Complete enrolment for your reporting entity.
- Lodge your registration application and pay the fee.
- Respond immediately to any AUSTRAC request for further information.
- Confirm your banking partner can see your current registration status.
- Map your value transfer chain if you operate with affiliates or authorised persons.
- Diarise renewal and material-change notification obligations going forward.
Frequently Asked Questions
Do I need to both enrol and register if I am already an AUSTRAC-registered remittance provider?
Yes. Existing registration does not automatically satisfy the new enrolment requirement. You must verify your enrolment status in AUSTRAC Online Services and complete any outstanding enrolment steps, then confirm your registration remains valid under the 2026 framework — both by 29 July 2026.
What is the difference between enrolment and registration?
Enrolment is an administrative record of your identity as a reporting entity that all reporting entities must complete. Registration is an additional, merit-based authorisation required only for higher-risk sectors — remittance and virtual asset services — where AUSTRAC applies a "fit and proper" assessment and can refuse or impose conditions.
What happens if I keep operating after 1 July 2026 without registering?
Providing remittance or virtual asset designated services without valid enrolment and registration is a contravention of the AML/CTF Act 2006. You face civil penalties, potential criminal liability, likely de-banking by your banking partner, and heightened AUSTRAC enforcement scrutiny.
How long does AUSTRAC take to process a registration application?
Timing varies. A clean application with no fit and proper concerns can move relatively quickly, but a request for further information can add weeks. Because the assessment is merit-based, lodge well before the 29 July 2026 deadline rather than relying on last-minute processing.
Does the dual requirement apply to virtual asset service providers too?
Yes. Virtual asset service providers must enrol and register on the Virtual Asset Service Provider Register under the same 1 July 2026 commencement and 29 July 2026 transitional deadline as remittance providers.
This information is general in nature and does not constitute legal advice. Consult AUSTRAC or a qualified legal professional for advice specific to your situation.
Ready to prepare? Review your compliance foundations with our AML/CTF program builder, and stay ahead of the 2026 reforms by subscribing to our compliance newsletter.
