Almost everything written about the 1 July 2026 deadline reads as if every captured business has a compliance department: a board to set risk appetite, a team to run onboarding, an officer whose only job is AML. Plenty of Tranche 2 entities look nothing like that. They're a single conveyancer, a sole-trader accountant, a one-agent real estate office, a jeweller behind their own counter.
If that's you, the regime can feel wildly out of proportion to your business. The good news is that it isn't, by design. The reformed Act requires a program "appropriate to the nature, size and complexity" of your business. (AUSTRAC, about the reforms) For a low-risk one-person practice, that means a genuinely lighter setup. The catch: lighter is not the same as nothing, and a few obligations are the same whether you're one person or a thousand.
What "proportionate" actually buys you as a sole trader
You still have to do all the core things. What scales down is how heavy each one needs to be.
Your program can be short. A 50-person firm documents governance committees, escalation chains, and who-reports-to-whom. You are the governance. Your AML/CTF program can say so plainly: one person, who is the owner, who makes the decisions and keeps the records. The thinking still has to be real, but it can be brief. (What "a program in place" actually requires)
You are the compliance officer. The regime requires a nominated AML/CTF compliance officer, but it does not require that to be a separate hire. In a sole practice it's you, and that's expressly fine. The obligation is that someone genuinely owns the role, not that you staff a department. (What the compliance officer is responsible for)
Training is a conversation with yourself. "Staff training appropriate to their role" for a one-person firm means you understand the red flags for your sector and can show you keep that knowledge current. There's no cohort to roster.
Monitoring is sized to your book. Ongoing customer due diligence and transaction monitoring still apply, but across a handful of clients rather than thousands. You're watching for activity that doesn't fit the customer, on a list you can actually hold in your head.
The parts that get no size discount
Here is where sole traders most often get caught out, because these duties are tied to events and the law, not to your headcount.
CDD before you provide a designated service. Every new client gets identified and verified before you act, on a risk basis: government photo ID for an individual, and for a company or trust the beneficial owners behind it. Same steps, every client, recorded the same way. Doing it for most clients but not all is the classic small-firm finding. (A practical CDD checklist)
Screening, risk rating, and stepping up when something triggers. Check the customer (and beneficial owners) against sanctions and PEP lists, assign a risk rating, and where an enhanced-due-diligence trigger fires (a PEP, a high-risk jurisdiction, an opaque structure, funds you can't explain) verify source of funds and document why you proceeded. (Source of funds vs source of wealth)
Reporting. If you form a suspicion on reasonable grounds, a suspicious matter report is due within the statutory timeframe (24 hours for terrorism-related, 3 business days otherwise). A threshold transaction report is due for any cash of $10,000 or more. And you must not tip the customer off. These obligations are identical for a sole trader and a bank. (SMR and TTR reporting, step by step) · (The tipping-off rules)
Record keeping for seven years, and enrolment with AUSTRAC (registration is due by 29 July). Neither softens because you're small. (Enrolment and the 29 July deadline)
The trap: "I'm too small to be in scope"
Size affects how heavy your program is. It does not affect whether you're captured. If you provide a designated service (conveyancing, certain accounting and legal services, real estate transactions, dealing in precious metals or stones above the threshold), you're a reporting entity from 1 July, sole trader or not. Being small is a reason to keep the program lean, not a reason to skip it.
Your 11 days, realistically
A sole trader can be in a defensible position by 1 July without a consultant and without weeks of work. The minimum that actually counts:
- Confirm you're in scope (two minutes, no login) and, if you are,
- generate a program that fits a one-person practice, with your risk assessment behind it,
- name yourself the compliance officer,
- set how you'll do and record CDD on the next new client, and
- start your AUSTRAC enrolment.
That's not a department. It's an afternoon, then a rhythm you run client by client. (How that day-one rhythm works) And if you don't finish every refinement by 1 July, AUSTRAC has been clear it expects genuine effort, not perfection, from newly regulated firms. (What AUSTRAC actually expects if you're not ready)
Where AML Mate fits
AML Mate is built for exactly this firm: one person, who needs the whole obligation handled without enterprise overhead. Generate a right-sized AML/CTF program and risk assessment, run client CDD with screening and beneficial-ownership capture, assign yourself as compliance officer, lodge SMRs and TTRs, and keep seven years of records, all in one place. Start a 14-day free trial, cancel anytime, and have your program done this week. Not sure you're even captured? The free compliance check tells you in two minutes, no login required.