A trading company with accounts in Sydney and Singapore discovers that a counterparty's parent has been designated under Australia's Autonomous Sanctions regime. Funds received the previous week now sit in what may be frozen accounts. The compliance team wants to know: are these funds blocked, what must the business do today, and is there a path to releasing them lawfully? The answer depends on how quickly the business acts and how well it understands the Australian regime's specific requirements.
Frozen-account management under Australia's Autonomous Sanctions regime is administered by the Department of Foreign Affairs and Trade (DFAT). When an account is frozen, the holder is prohibited from dealing with the funds. A permit – Australia's equivalent of a specific licence – may authorise a dealing that would otherwise be prohibited. As of June 2026, the applicable country regime operates alongside Australia's United Nations sanctions obligations, and both must be checked before any release is made.
This guide sets out the governing authority, the step-by-step procedure for managing a frozen account lawfully, the cross-regime comparison that matters most for cross-border businesses, the risk flags that most frequently cause enforcement interest, and when to involve sanctions counsel.
What governs frozen-account management in Australia?
Australia's financial-sanctions rules derive from two parallel streams: the UN stream, which implements Security Council measures through domestic legislation, and the Autonomous Sanctions stream, which allows Australia to impose independent sanctions beyond those mandated by the Security Council. Both streams can freeze accounts and both impose dealing prohibitions, but the relief mechanisms and administrative processes differ between them.
The Autonomous Sanctions regime is administered by DFAT under the relevant enabling legislation and the Autonomous Sanctions Regulations. DFAT maintains a Consolidated List of designated persons and entities. A business that holds, or receives, funds connected to a listed person must treat those funds as frozen from the moment of designation. There is no grace period for pre-existing balances. This is a strict-liability framework: the absence of knowledge of the designation at the moment of receipt does not automatically relieve the obligation to freeze and report.
The UN stream adds a separate layer. Where the UN Security Council has imposed asset-freeze measures, Australia implements them through its United Nations sanctions legislation. A dealing that is permissible under the Autonomous Sanctions regime may still be prohibited under the UN stream. In our cross-border practice, we regularly advise businesses to conduct a sequential two-stage check: first against the DFAT Consolidated List, then against the UN Consolidated List. Skipping the second stage is a frequent source of exposure.
Financial institutions, payment service providers, and corporates holding accounts on behalf of third parties are all within scope. The obligation to freeze is not limited to banks. A trading company holding client funds in a segregated account is equally caught.
Step 1 – Identify and isolate: the immediate freeze obligation
The first step on discovering a potential designation link is to stop all dealing with the affected funds and isolate the account or sub-ledger entry. "Dealing" includes making, receiving, or facilitating any payment or transfer, granting security over the funds, or taking any step that changes the form or location of the asset.
Isolation means practical segregation: the account should be flagged in the institution's systems so that no automated payment run or treasury operation can touch it. In our experience, businesses that move quickly to isolate face a materially easier conversation with DFAT than those that allow routine payments to continue while the analysis is pending. The question to ask at this stage is simple: can this account transact anything at all before we receive legal advice? In almost every case, the answer is no.
A key practical point is scope. The freeze obligation extends to assets that a designated person or entity owns or controls, not just assets held in their name. The ownership-and-control test under the Australian regime catches indirect holdings. A fund held in the name of an intermediate company that is itself wholly owned by a designated entity is frozen. The business must trace the ownership chain, not merely the account name.
Document every step from this point. DFAT expects a contemporaneous record of when the designation link was identified, what action was taken, and by whom. This record is central to any subsequent reporting obligation and to any permit application.
Step 2 – Report: who must tell DFAT and by when?
Once frozen assets are identified, a reporting obligation arises. DFAT requires that holders of frozen assets notify it within a short statutory window. The precise deadline is set out in the applicable regulations; businesses should verify the current requirement with counsel immediately rather than estimating from secondary sources, because the reporting window is short and missing it is itself an offence.
The report must include the nature and estimated value of the frozen asset, the identity of the account holder and any associated designated person, and the steps taken to freeze. Partial or delayed reporting does not cure the obligation; it may aggravate enforcement interest. In a recent matter, a financial institution that self-reported within the window, with a clear record of the steps taken to freeze, secured a cooperative posture from the regulator that materially affected the outcome of the subsequent review.
For businesses with accounts in multiple jurisdictions, the reporting obligation in Australia is separate from any obligation in the UK, the EU, or the US. OFSI in the UK imposes its own reporting requirement. OFAC in the US has a separate blocking-notice requirement. A business that has accounts in Sydney and London must meet both deadlines independently. The Australian report does not satisfy the UK obligation, and vice versa.
Cross-border compliance teams often make the mistake of assuming that one consolidated report to a primary regulator covers all jurisdictions. It does not. We regularly advise multinational clients to map the reporting obligations by jurisdiction as a matter of urgency and assign a named owner to each one.
Step 3 – Assess: is a permit available, and is it worth applying?
After freezing and reporting, the business must decide whether it intends to seek authorisation for any dealing with the frozen assets. Under the Australian Autonomous Sanctions regime, DFAT may issue a permit (Australia's equivalent of a specific licence: a case-by-case authorisation to conduct an otherwise prohibited dealing) where it is satisfied that one of the statutory grounds is met.
The principal grounds are broadly comparable to those seen in other regimes: humanitarian purposes, the satisfaction of pre-designation contractual obligations, or other circumstances in which the Minister considers it appropriate. The burden is on the applicant to demonstrate that the ground is met. DFAT does not issue permits as a default; the application requires a substantive justification.
Before applying, a business should assess three questions. First, does the intended dealing genuinely fall within a recognised ground? Second, are there any UN-level prohibitions that would prevent the dealing even if DFAT grants a permit? Third, is the potential release commercially significant enough to justify the time and resources of an application? The permit process is not rapid, and there is no guarantee of a positive outcome. For small balances, the cost-benefit may not support an application; the funds may remain frozen until the designation is lifted or successfully challenged.
This is the stage at which involving specialist sanctions counsel is most valuable. The grounds analysis, the application structure, and the management of DFAT queries all affect the outcome materially.
How does Australia's regime compare with OFAC, OFSI, and the EU?
Australia's frozen-account rules share core features with OFAC, OFSI, and the EU but diverge in ways that matter operationally for cross-border businesses.
On the ownership test, OFAC's approach is mechanically threshold-based: entities that designated persons own 50 percent or more in the aggregate are treated as blocked. OFSI and the EU also apply a control test alongside an ownership threshold, capturing entities where a designated person exercises significant influence even below the ownership threshold. Australia's regime applies an ownership-and-control analysis, and practitioners should not assume that the Australian test will always reach the same result as the OFAC test in borderline structures. A corporate structure that falls below the OFAC threshold may still be caught under Australian law if control is present.
On licensing, OFAC offers both general licences (standing authorisations for defined categories of transactions, requiring no separate application) and specific licences (case-by-case approvals). OFSI similarly offers both general and specific licences. The Australian regime is primarily permit-based and case-by-case. There is no equivalent general-licence infrastructure that allows a business to self-authorise a category of dealings without individual review. This means that a payment that a US or UK entity could make under a standing general licence requires an individual DFAT permit in Australia.
On record-keeping, practitioners should verify the current Australian requirement; the EU requires records to be kept for a defined period after a transaction, and OFAC's expectation is broadly similar. Align the longest applicable retention period across all regimes in which a business operates.
On enforcement posture, DFAT has historically taken a cooperative approach to businesses that self-report and engage constructively. That posture has been present in other regimes too – OFAC's VSD (voluntary self-disclosure) programme and OFSI's cooperation-credit provisions both offer a path to reduced enforcement outcomes – but the specific procedural mechanics differ. In our practice, we advise clients to approach DFAT's process as a dialogue rather than a submission: DFAT will typically have questions, and responsiveness to those questions shapes the trajectory of the matter.
What about secondary-sanctions risk? This is the dimension most often underestimated by businesses whose primary exposure is to the Australian regime. OFAC's secondary-sanctions measures can, in certain circumstances, expose non-US persons to US penalties for dealings that are entirely legal under Australian law. A business that secures a DFAT permit is not thereby protected from OFAC enforcement if the dealing also touches a US person, US-origin funds, or a US correspondent-banking relationship. The cross-regime analysis is not sequential; it must be conducted in parallel.
Related practices
- Frozen-account management – BIS/EAR service – US export-control licensing for account and asset issues with a BIS dimension
- Frozen-account management under BIS/EAR – practitioner guide – step-by-step guide to managing frozen accounts under the US EAR regime
- Frozen-account management under BIS/EAR – guide 2 – further analysis of BIS/EAR frozen-account procedures and cross-border risk
Risk flags: the most common errors in Australian frozen-account management
The errors we see most often are not dramatic acts of deliberate non-compliance. They are procedural failures under time pressure that a well-designed compliance programme would prevent.
Failure to check the UN Consolidated List alongside the DFAT Consolidated List. Many businesses run screening against one list and assume that is sufficient. It is not. Both lists must be checked, and a hit on either triggers its own obligations.
Delayed isolation. When a designation occurs intra-day, automated payment runs can continue to settle against the frozen account before a human being has seen the screening alert. Effective frozen-account management requires system controls, not just manual review. If the payment engine continues running while the compliance team analyses the screen hit, funds may move before the freeze is in place.
Incomplete ownership tracing. Screening tools that check only the account name miss the ownership-and-control dimension entirely. A corporate account held in the name of an entity that is not on any list may still be frozen if the entity is owned or controlled by a listed person. Beneficial-ownership data must feed the screening process, not just the counterparty's legal name.
Missing the reporting deadline. As noted, the window is short. Businesses that run long internal escalation chains before notifying DFAT are at risk of missing it. The escalation path for potential frozen-account situations should be short and documented in advance, with clear authority to report without waiting for full legal sign-off.
Assuming one jurisdiction's permit covers all. A DFAT permit authorises a dealing under Australian law. It does not authorise the same dealing under US, UK, or EU law. Before acting on a permit, the cross-border team must confirm that no other applicable regime prohibits the same action.
Failure to document the decision-making process contemporaneously. DFAT, like OFAC and OFSI, places weight on the quality of the response at the time of the event. Reconstructed records are weaker than contemporaneous ones. The compliance log should record every decision, with the reasoning, at the time it is made.
Common misconceptions: what frozen-account management is not
A persistent myth in the market is that a frozen account can be safely managed simply by "not touching it" and waiting for the designation to be lifted. This misunderstands the obligations. The freeze obligation is only the starting point. The reporting obligation runs independently. The record-keeping obligation runs independently. And in many cases, the business has contractual obligations to the account holder – interest accrual, fees, statements – that also require careful management under the sanctions rules.
Can a business simply close a frozen account? Generally, no – not without a permit or specific regulatory clearance. Account closure typically involves a transfer of funds, which is itself a dealing with the frozen asset. In our experience, businesses that attempt to resolve the commercial inconvenience of a frozen account by closing it without the appropriate authorisation create a more serious compliance problem than the one they were trying to solve.
A second misconception is that only financial institutions have frozen-account obligations. As noted above, any business that holds funds on behalf of a third party is within scope. The regime does not distinguish by sector. A law firm holding client money in a trust account, a property developer holding deposits, and a logistics company holding advance payments are all potentially subject to the same obligations as a bank if the account holder is a designated person.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. For a confidential review of a potential breach or a permit application, contact Calder & Vance at info@caldervance.com.
When to involve specialist sanctions counsel
The moment a possible designation link is identified, a business faces a series of time-sensitive decisions: freeze, report, consider a permit, and manage cross-regime obligations. Each of these steps has legal content that goes beyond standard compliance procedures.
Specialist counsel adds value at each stage. At the identification stage, counsel can help determine whether the ownership-and-control analysis actually brings the account within scope – many apparent hits do not survive a rigorous analysis. At the reporting stage, counsel can help structure the report to DFAT in a way that is complete, accurate, and positions the business cooperatively. At the permit-application stage, counsel can assess the strength of the grounds, prepare the application, and manage the dialogue with DFAT.
We regularly advise businesses that have received a screen hit and are unsure whether it actually triggers a freeze. In many cases, a careful ownership analysis reveals that the threshold is not met or the account is not in scope. In others, the analysis confirms the obligation and the focus shifts immediately to the reporting timeline. Neither outcome is better or worse in the abstract; what matters is that the analysis is done quickly and correctly.
The position above covers the standard case. Your facts – the counterparty, the structure of ownership, the route of funds, the other regimes in play – change the analysis. To discuss an assessment of your exposure under the Australian regime or a permit application, contact Calder & Vance at info@caldervance.com.