A financial institution in Sydney identifies a payment instruction linked to a customer whose name matches an entry on the Australian Autonomous Sanctions Consolidated List. The account is frozen within hours. Now what? The compliance team faces a tightly sequenced set of obligations – and the clock starts immediately.
Frozen-account management under Australia's autonomous sanctions regime is governed by the Autonomous Sanctions Act and its associated regulations, administered by the Department of Foreign Affairs and Trade (DFAT). A frozen account is not simply an account on hold: it carries active reporting obligations, strict prohibitions on dealing, and a licensing pathway that permits certain transactions even where assets are frozen. As of June 2026, that licensing pathway is the principal lawful route for operating any frozen account.
This guide walks through each step in sequence – from the moment a freeze is identified to the point where the matter is either resolved through a licence or referred for formal review.
Step 1: Understanding the Australian autonomous sanctions regime and DFAT's role
The Australian autonomous sanctions regime operates under the Autonomous Sanctions Act, with DFAT acting as the central competent authority for both designations and licensing. Australia maintains a Consolidated List that is updated by DFAT when designations are made, varied, or removed. Any person or entity whose assets appear to be subject to a freeze is a designated person or entity under the applicable thematic or country-specific regulations.
The core prohibition is a dealing prohibition. A financial institution, trustee, or any other person holding assets belonging to a designated person or entity may not deal with those assets – including making payments, transferring funds, or providing financial services – unless a specific licence authorises the dealing or a general licence (a standing authorisation covering a defined category of transactions) applies.
It is worth understanding how this interacts with the UN Consolidated List. Australia implements UN Security Council designations through separate legislative instruments, but the day-to-day management of those assets at the institutional level follows a very similar procedure. In our cross-border practice, we consistently advise that institutions should track both lists independently: an asset may be subject only to an Australian autonomous designation, only to a UN measure, or to both simultaneously – and the applicable rules may differ at the margin.
The cross-regime dimension matters here, too. Many businesses operating in Australia also hold assets or correspondent relationships in the United Kingdom or within the European Union. A freeze triggered by an Australian designation does not automatically produce a freeze under OFSI's regime or under EU Council regulations. Conversely, an OFSI freeze does not compel action under Australian law. Each jurisdiction's obligations run independently. Managing this divergence is a practical priority for any multinational holding frozen assets across more than one regime.
Step 2: Confirming the freeze – identification, verification, and immediate notification
The first operational step once a potential match is identified is verification: confirming that the account-holder or beneficial owner genuinely corresponds to a listed designation, rather than a name-match false positive. This involves comparing all available identifying information – date of birth, nationality, address, entity registration details – against the DFAT Consolidated List entry.
Where the match is confirmed, the institution must freeze the assets without delay. The term "without delay" is used deliberately: the Autonomous Sanctions Act does not create a grace period for completing verification before freezing. In our experience, institutions that delay the freeze while conducting extended verification expose themselves to significant compliance risk. The practical approach is to take a precautionary freeze immediately upon a credible match and then conduct parallel verification.
Notification to DFAT follows. Australian law imposes a reporting obligation on persons who hold, control, or manage frozen assets. The notification must include the nature of the assets, their approximate value, and the basis for believing the assets are subject to the freeze. This is not a one-time filing: if the value or nature of the assets changes materially, an updated notification may be required. Timing requirements apply; verify the current position before relying on any specific window, as DFAT guidance is subject to revision.
A parallel question arises for businesses with US counterparties or transaction chains. OFAC's reporting rules for blocked property impose their own notification timeline. If a US nexus exists – for instance, if the transaction involved a US correspondent bank or was denominated in US dollars – the US blocking-report obligation runs concurrently with the Australian notification. Missing the US deadline does not excuse compliance with the Australian one, and vice versa. Two parallel compliance tracks are the standard in these situations, not a choice between them.
Step 3: Preserving the assets and managing ongoing obligations during the freeze
Once a freeze is confirmed and notified, the institution's obligations do not pause. Frozen assets must be preserved – that is, held in a way that prevents dissipation, commingling with non-frozen assets, or any dealing that has not been licensed. The account itself remains open, but it is operationally quarantined.
Ongoing obligations during the freeze include at minimum: maintaining records of all assets subject to the freeze, tracking any accrual of interest or other returns on frozen funds, and ensuring that no dealing occurs with those accruals without separate authorisation. A common risk flag is the automatic payment of interest into a frozen account where the institution then allows the interest to be swept out under a pre-existing instruction. That sweep is a dealing and it is prohibited unless licensed.
Record-keeping is not a formality. DFAT and, in an enforcement context, the Commonwealth Director of Public Prosecutions may request documentation of how frozen assets were managed throughout the freeze period. In our practice, we advise clients to maintain a contemporaneous freeze log: a dated record of every action taken in relation to the account from the moment of freeze. This log is the primary defence in any subsequent review or investigation.
What about interest, fees, and charges that the institution itself would normally debit against the account? Australian licensing guidance addresses certain institutional charges, but the position is not always straightforward. A specific licence may be required to debit management fees or custody charges against a frozen account. This is one of the questions that practitioners frequently raise with DFAT, and the answer depends on the specific terms of any applicable general licence. Verify the current position before any deduction is made.
How does Australia's licensing regime apply to frozen accounts?
The Australian licensing regime for frozen assets operates through two channels: general licences, which are standing authorisations for defined categories of transactions, and specific licences, which are case-by-case authorisations issued by DFAT for transactions that fall outside any general licence. Both types of authorisation are grounded in the Autonomous Sanctions Act's exemption provisions.
General licences under the Australian regime cover certain categories of dealings that would otherwise be prohibited. These include, for example, dealings necessary for the provision of basic humanitarian services or dealings arising in the course of ordinary legal proceedings. Where a dealing falls squarely within the terms of a published general licence, no further application is needed: the licence is self-executing. However, confirming that the facts of a given dealing actually satisfy the general licence conditions requires a careful reading of the instrument, not an assumption.
Specific licences are required where no general licence applies and where the account-holder or a third party has a legitimate need to conduct a dealing with the frozen assets. The application is made to DFAT. It must set out the nature of the proposed dealing, the identity of the parties, the basis for believing the dealing should be permitted, and supporting documentation. DFAT has a discretion to grant, refuse, or impose conditions. There is no statutory guarantee of a particular outcome, and the process can take a number of weeks depending on the complexity of the matter.
How does this compare with other regimes? Under OFSI in the United Kingdom, the specific-licence regime operates on a similar structure, though the categories of permitted purpose and the information requirements differ in detail. Under OFAC in the United States, a specific licence is similarly the route for dealings with blocked property, but OFAC's published guidance on what it considers in reviewing applications is more extensive than DFAT's, and the processing timelines are distinct. The practical implication for a multinational holding frozen assets across multiple regimes is that separate applications must be prepared for each jurisdiction, each tailored to the specific legal requirements of that regime.
In a recent matter, a professional-services firm held assets in Australia on behalf of a corporate client whose controlling shareholder became designated under the Australian autonomous sanctions regime. We assessed the firm's position under the Autonomous Sanctions Act, prepared the specific-licence application to DFAT setting out the basis for releasing funds to meet the client's legitimate legal costs, and managed DFAT's follow-up queries. The matter illustrated a point that recurs in our practice: DFAT's information requests during the licensing process are detailed, and a well-prepared application significantly reduces the number of rounds of correspondence required.
What are the risk flags that most often derail frozen-account management?
Five risk patterns appear repeatedly in our experience of advising on Australian frozen-account matters. None of them is exotic; all of them are avoidable with early advice.
- Delayed notification. Institutions that delay reporting to DFAT after confirming a freeze – even by a short period – expose themselves to enforcement risk. DFAT's expectations on timing are strict. The notification obligation arises upon confirmation of a freeze, not upon the conclusion of an internal investigation.
- Commingling. A frozen account that continues to receive credits – dividends, salary payments, rental income – from non-designated sources presents a commingling risk. Each new credit becomes subject to the freeze. The institution must track and freeze each incoming credit separately.
- Reliance on an inapplicable general licence. General licences are precise instruments. A dealing that appears to fall within one but that does not in fact satisfy every condition of the instrument is an unlicensed dealing. The consequence is a potential civil or criminal breach.
- Overlooking secondary-sanctions exposure. A freeze that exists only under Australian law may nonetheless create secondary-sanctions risk for US-connected counterparties if the designated person is also on OFAC's SDN List. Overlooking this means that a dealing licensed by DFAT but not by OFAC may still expose a US-person counterparty to liability.
- Failure to update records as assets change. The value of frozen assets is not static. Interest accrues, securities fluctuate, property is revalued. A notification that does not reflect material changes in asset composition or value may be inaccurate. DFAT expects updated notifications where the position has changed.
A common myth we encounter in practice is that a frozen account simply sits untouched and self-managing until a designation is lifted or a licence is granted. In fact, frozen-account management is an active compliance responsibility. It demands ongoing record-keeping, periodic reporting, and affirmative decisions about what dealings require a licence. Institutions that treat a freeze as a passive state rather than an active compliance obligation will almost certainly accumulate unreported technical breaches.
Step 4: Pursuing the licensing route – building and submitting the application
A specific-licence application to DFAT is a substantive document, not a form submission. The application must demonstrate that the proposed dealing falls within a permitted purpose under the Autonomous Sanctions Act's exemption provisions, that the parties are identified and their roles described accurately, and that the dealing does not itself undermine the object of the designation.
The permitted purposes in the Australian regime include, among others, dealings necessary to satisfy basic living expenses of individuals, dealings for the purpose of legal proceedings, dealings necessary for the ordinary operation of a business (subject to specific conditions), and dealings on humanitarian grounds. The permitted-purpose analysis is the analytical core of any application. If the proposed dealing does not map to a permitted purpose, DFAT has no basis to grant the licence regardless of the broader merits.
Documentation requirements are substantial. Expect to provide: the basis for the freeze and the identity of the designated person or entity; a description of the proposed dealing in operational detail; evidence supporting the permitted-purpose claim (bank statements, invoices, court orders, medical evidence, as applicable); identification documents for all parties; and, where complex ownership structures are involved, a chart of the ownership and control chain. The application must be signed by an authorised representative and submitted through DFAT's licensing channel.
Once submitted, DFAT may seek further information. Responding promptly and completely to these requests is the single most important practical factor in managing the timeline. Applications that generate multiple rounds of back-and-forth almost always do so because the initial submission omitted a piece of information that DFAT needed to assess the permitted-purpose claim. In our practice, we prepare a compliance review of every application before submission, stress-testing the permitted-purpose argument and pre-empting the questions DFAT is most likely to ask.
The position above covers the standard case. Your facts – the nature of the frozen assets, the identity of the designated person, the purpose of the proposed dealing, and the other regimes in play – change the analysis materially.
For an assessment of your exposure under the Australian autonomous sanctions regime, contact Calder & Vance at info@caldervance.com.
Step 5: Delisting and unfreezing – when the underlying designation is removed
A frozen account is unfrozen when the underlying designation is removed. Removal may occur because DFAT determines that the designation criteria are no longer met, because the UN Security Council removes the person or entity from the Consolidated List (where the Australian freeze implements a UN measure), or because a successful challenge to the designation is brought through the applicable legal process.
Where a UN measure is at issue, the route for delisting runs through the Security Council committee responsible for the relevant programme. For designations under the ISIL and Al-Qaida programme, the Ombudsperson mechanism provides a structured channel for individuals and entities to petition for removal. For other UN programmes, the Focal Point for delisting is available. These are not Australian processes: they operate at the international level, and the Australian freeze will remain in place until the international measure is removed and Australia's own instrument is amended accordingly.
For purely autonomous Australian designations – those that do not derive from a UN measure – the challenge route is domestic. A designated person or entity may seek administrative review of the designation decision. If administrative review does not produce the desired outcome, judicial review before the Federal Court of Australia is available. The grounds for judicial review follow general administrative law principles: did the decision-maker act within power, apply the correct legal test, and comply with procedural fairness requirements? The merits of the designation decision itself are not directly reviewable on judicial review, though procedural grounds can be powerful in appropriate cases.
Upon removal of the designation, the account-holder or institution should confirm in writing with DFAT that the freeze obligations have ceased and obtain written confirmation of the position before releasing any assets. Acting on the assumption that a removal is effective before receiving that confirmation creates avoidable risk. A brief period of administrative lag between a public announcement of removal and the formal amendment of the instrument is not uncommon, and dealing in the interim may technically remain prohibited under the unamended instrument.
If a transaction has already been flagged, or a licence application has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com.
Cross-regime interaction: Australia, OFAC, and OFSI compared
Frozen-account management under the Australian regime does not exist in isolation for most cross-border businesses. Three practical points of divergence between Australia, OFAC, and OFSI affect how a multinational should structure its compliance response.
First, the ownership and control test. Australia applies a test focused on whether assets are owned or controlled by a designated person or entity. OFAC's approach uses the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked), which is a mechanical ownership threshold applied in the aggregate across all blocked persons. OFSI in the UK applies an ownership and control test that is functionally broader, capturing situations where a designated person exercises control through means other than a majority shareholding. These distinctions matter where a counterparty sits below the 50 percent threshold: it may be captured in Australia and the UK but not under OFAC, or vice versa.
Second, the licensing channels operate independently. A DFAT specific licence for a dealing with Australian frozen assets does not authorise the same dealing under OFAC or OFSI. If assets are frozen in more than one jurisdiction, a separate application must be made to each competent authority. In our experience, coordinating these applications in parallel – rather than sequentially – saves significant time where the underlying permitted-purpose arguments overlap.
Third, the reporting timelines differ. Each regime imposes its own notification or reporting obligation upon identification of frozen or blocked assets, with different prescribed windows and different information requirements. A multinational that has designed its frozen-account procedure around OFAC's rules is not automatically compliant with DFAT's or OFSI's requirements. Cross-mapping each regime's obligations is an essential early step in any multi-jurisdiction frozen-account situation.
Related practices
- BIS/EAR frozen-account management service – Licensing and authorisation for US export-control and sanctions-related frozen assets
- Frozen-account management under Australia: advanced considerations – Deeper treatment of complex ownership structures and enforcement scenarios
- Frozen-account management under BIS and the EAR: a guide – Step-by-step guide to managing frozen assets under US export-control rules