View Categories

What Australia Can Learn from New Zealand’s AML Journey

Six years of inspections, findings, and hard lessons. All publicly available before Tranche 2 hits on 1 July 2026.

New Zealand real estate agents have been living under AML/CFT obligations since January 2019. That is six years of regulator inspections, enforcement findings, and hard lessons learned in the field. And every bit of it is publicly available: a detailed playbook that Australian agencies can access right now, for free, before Tranche 2 comes into force on 1 July 2026.

The question is whether the Australian sector will actually use it.

What the Regulator Actually Found #

New Zealand’s regulator, the Department of Internal Affairs (DIA), published detailed findings from its inspection programme. The picture that emerged was not encouraging.

Agencies had written compliance programmes. That part, many got right. But when inspectors turned up, the gap between policy and practice was stark. There were no review records, no sign-off trails, and no evidence that the programmes were actually being followed day to day. Policies existed on paper. In practice, the gaps were significant.

PEP screening (the process of identifying Politically Exposed Persons) was barely understood across the sector. Some compliance programmes did not even mention it. Staff on the ground had no idea what a Politically Exposed Person was, let alone how to screen for one.

The Compliance Officer Problem #

Most agencies did appoint a compliance officer, which was the right move. But the workload behind the role was consistently underestimated.

Writing a compliance programme is the easy part. It is the ongoing execution, the day-after-day running of a live programme across a busy agency, where things came unstuck. Compliance officers found themselves responsible for a function that was far more demanding than anyone had anticipated when they were appointed.

Having a Programme Is Not the Same as Running One #

This is the finding that should concern every Australian principal most.

Even where NZ agencies had procedures in place, the DIA found consistent failures in execution. Risk ratings were not applied. Source of wealth was not established. Suspicious transactions were flagged but never reviewed. The programme existed. But it was not running.

This distinction, between having a programme and operating one, is at the heart of what regulators look for. It is also the hardest thing to demonstrate when an inspector walks through the door.

The Sector Was Not Ready. Sound Familiar? #

New Zealand’s regulator was ultimately forced to extend audit deadlines because the real estate sector was not prepared for the pace of compliance expected of it. Australia is already consulting on staggered evaluation timelines for exactly the same reason.

The parallel is direct. The timeline pressures are the same. The sector-wide underestimation of complexity is the same. The difference is that Australia has the benefit of watching it unfold first somewhere else.

Franchise Networks vs. Independents #

The NZ experience also revealed a clear divide between agency types. Agencies embedded in franchise networks fared considerably better when their franchisor invested meaningfully in education, templates, and compliance resources. Those left to figure it out independently, particularly smaller operations, struggled hardest with the ongoing cost and complexity of maintaining a live AML programme.

One general counsel at a major New Zealand firm captured it well: the legislation does not just affect internal processes. It flows into obligations under other laws, including privacy legislation. The compliance footprint is bigger than most people expect going in.

Australia Has the Rare Advantage of Going Second #

The NZ playbook is public record. It is directly comparable to what is coming for the Australian real estate sector. The DIA’s inspection findings, the sector’s stumbling points, the gap between policy and practice: all of it is documented and accessible.

Australian agencies do not have to guess what regulators will look for, which mistakes are most common, or where the operational pressure points lie. That information already exists. The only question is whether Australian principals will use it before 1 July 2026, or whether they will repeat the same experience the hard way.

If you are preparing for Tranche 2 right now, what is the thing keeping you up at night?