An acquisition target in the Asia-Pacific region passes initial screening. The buyer's compliance team flags no matches on the SDN List. The deal moves to signing. Three weeks later, a post-closing review surfaces a subsidiary whose ultimate beneficial owner is subject to Australia's Autonomous Sanctions regime. The acquirer now holds an asset entangled in a prohibited interest. This is not a hypothetical. It is the pattern we see repeatedly in cross-border transactions where Australia-specific diligence was treated as a subsidiary check rather than a primary one.
Sanctions due diligence in M&A under Australia requires a structured assessment against the Autonomous Sanctions Act and its associated regulations (Australia's primary autonomous sanctions instrument), administered by the Department of Foreign Affairs and Trade (DFAT). The regime prohibits dealings with designated persons and entities listed on the Australian Consolidated List, and it captures interests in sanctioned assets held indirectly. As of January 2026, DFAT's Autonomous Sanctions regime operates across multiple country and thematic programmes, and a transaction touching the Asia-Pacific region or involving ownership chains that pass through designated jurisdictions requires explicit verification against the Australian Consolidated List, not merely OFAC's SDN List or the UN Consolidated List.
This guide sets out a practical sequence for running Australia-regime sanctions diligence in an M&A transaction: from the initial scope decision through ownership-chain mapping, to the cross-border risk overlay and the documentation standard that will withstand post-closing scrutiny.
Step 1: Determine whether Australia's Autonomous Sanctions regime applies to your deal
Australia's Autonomous Sanctions regime applies when any party to the transaction – buyer, seller, target, or a material subsidiary – is incorporated in Australia, operates there, or when the deal involves assets, services, or financial flows connected to Australia. The regime also applies to Australian nationals wherever they are located, and to conduct that occurs wholly or partly in Australia.
The first question is not "is the target Australian?" but "does the transaction touch Australia at any point in its chain?" A European acquirer purchasing a target that has an Australian-registered subsidiary, an Australian joint-venture partner, or an Australian bank as its primary lender must treat Australia as a regime in scope. Overlooking this connection is one of the most common structural errors we encounter in cross-border deal rooms.
DFAT administers the regime and publishes the Australian Consolidated List, which consolidates designations across country-specific and thematic programmes. Unlike OFAC's SDN List, the Australian Consolidated List includes individuals and entities designated under UN Security Council resolutions that Australia has implemented domestically, as well as persons designated autonomously by Australia. Both categories carry prohibitions. A diligence programme that screens only against UN lists will miss autonomous Australian designations.
Consider also whether the transaction involves goods or technologies that may be subject to Australia's export control rules under the Defence Export Controls regime. Where the target is a manufacturer or distributor of controlled goods, sanctions diligence and export-control diligence must proceed in parallel, not sequentially. We regularly advise acquirers who discover mid-process that the target's principal product line requires an export permit that the target does not hold, or that a transfer of ownership of a controlled-goods business triggers a new licence obligation.
Step 2: Map the ownership and control chain of the target
Australia's sanctions prohibitions extend to interests held indirectly through entities that are owned or controlled by a designated person or entity; a clean direct-ownership screen is insufficient if the ultimate beneficial owner has not been traced and verified. The ownership-and-control analysis must descend through every intermediate holding structure to the level of natural persons.
For each legal entity in the target's ownership chain, establish: the jurisdiction of incorporation; the identity and residence of shareholders holding a material interest; whether any shareholder or director appears on the Australian Consolidated List, the UN Consolidated List, or any other relevant list; and whether any entity in the chain is incorporated in or principally operates in a jurisdiction subject to a country-specific programme under Australia's regime.
The practical challenge in M&A is that sellers do not always volunteer a complete ownership chart at the outset of diligence. The request for a corporate structure diagram reaching to ultimate beneficial owners should appear in the first round of diligence requests, not as a follow-up after the legal-due-diligence report has been drafted. In our experience, a third or more of the ownership-chain gaps that produce post-signing surprises could have been resolved in the initial data-room request if the question had been asked explicitly.
Where the ownership chain passes through a jurisdiction with limited corporate transparency – an offshore holding company, a trust structure, or a nominee arrangement – the acquirer should request certified constitutional documents, shareholder registers, and director registers. A beneficial-ownership declaration from the seller's counsel is useful corroboration but is not a substitute for primary-source document review.
Step 3: Screen against the Australian Consolidated List and cross-regime lists
The Australian Consolidated List is the mandatory screening reference for Australia-regime diligence; it is updated by DFAT on a rolling basis and should be queried against the current version at the date of the diligence review, with a re-check immediately before signing and again before closing. Screening against a list that is more than a few days old in an active enforcement environment is a process gap that regulators and acquirers' own boards will identify if a problem later surfaces.
Australia-regime diligence does not replace screening against other applicable lists. A transaction will almost always require simultaneous screening against OFAC's SDN List, the UN Consolidated List (the Security Council's master list of designated persons and entities), and, depending on the parties' connections, the EU consolidated financial-sanctions list and the UK OFSI Consolidated List. These lists are not identical. A person may be designated autonomously by Australia but not by OFAC, or vice versa. The strictest applicable prohibition governs; where one regime prohibits a dealing that another permits, the prohibition prevails for any party subject to the prohibiting regime.
Screening must extend beyond the target entity itself. It must cover: all named ultimate beneficial owners; all directors and senior officers; all material contractual counterparties whose obligations will transfer on acquisition; and, where the target operates in a sector that commonly involves government-linked counterparties, any state-owned enterprise or public official associated with the target's key commercial relationships.
Automated screening tools are a starting point, not an end point. Name matching is imprecise. Transliteration variants, aliases, name-order conventions that differ across jurisdictions, and date-of-birth discrepancies all generate both false positives and false negatives. Every potential match requires a human decision on whether the identified person or entity is the same as the listed person or entity. That decision must be documented, with the analyst's reasoning recorded. An undocumented "cleared" determination provides no protection in a post-closing regulatory inquiry.
How does Australia's regime differ from OFAC, OFSI, and EU positions?
Australia's Autonomous Sanctions regime is a distinct legal instrument with its own designated list, its own licensing route, and its own enforcement authority; it does not mirror OFAC or OFSI positions and should never be assumed to do so. Understanding the points of divergence is essential for any cross-border deal team.
The ownership threshold is one immediate difference. OFAC's 50 percent rule (OFAC's rule treating any entity 50 percent or more owned by blocked persons as itself blocked, whether or not it is separately listed) is a mechanical numerical test. Australia's equivalent provision focuses on entities that are "controlled by" or "acting on behalf of" a designated person or entity, which introduces a degree of judgment into the analysis that OFAC's bright-line test does not. In practice, this means that a structure that clears the OFAC threshold test may still require analysis under Australia's control concept, and vice versa.
The licensing regime also differs. Under OFAC, specific licences are case-by-case authorisations issued by OFAC itself, and the application process is governed by well-publicised OFAC guidance with informal timelines that practitioners can calibrate from experience. Australia's permits process operates through DFAT, and the published guidance on timing and evidential requirements is less extensive. Where an M&A transaction requires a permit under the Australian regime, the acquirer should factor in an uncertain lead time and should not treat the OFAC or OFSI licensing process as a proxy for what DFAT will require.
The EU's ownership-and-control test is closer to Australia's in structure: it asks whether a designated person owns or controls an entity, and it requires judgment on control that goes beyond a simple percentage threshold. The UK OFSI regime applies a similar ownership-or-control standard. Both the EU and UK regimes have published guidance on the control concept that is more detailed than Australia's current published materials. Where a deal is subject to both the Australian regime and the EU or UK regime, practitioners often use the EU or UK guidance as an analytical reference point for the Australian control question, while recognising that the two instruments are not identical.
Switzerland (SECO), Canada (Global Affairs Canada), and Japan each operate their own autonomous sanctions regimes with independent designated lists. A deal that is simultaneously subject to multiple regimes requires a consolidated screening matrix rather than sequential single-regime checks. What is the risk if one list is missed? The answer is that the acquiring entity may complete a transaction that is prohibited in one of its home jurisdictions, with no defence available after closing.
Step 4: Assess sector-specific and thematic risk flags
Australia's Autonomous Sanctions regime includes both country-specific programmes and thematic designations. A target operating in a sector associated with thematic programmes – proliferation-sensitive industries, financial services with exposure to designated jurisdictions, or extractive industries with commodity flows through regions subject to country programmes – requires heightened scrutiny beyond a name-match screen.
Key sector risk flags in an Australia-regime M&A review include the following. Financial-services targets: review correspondent banking relationships, payment flows through correspondent networks touching designated jurisdictions, and any nostro or vostro accounts with banks that appear on the Australian Consolidated List or the OFAC SDN List. In our practice, we find that financial-services targets in the Asia-Pacific region frequently carry legacy correspondent relationships that have not been reviewed for sanctions exposure since they were established. These relationships transfer to the acquirer on closing.
Technology and dual-use targets: where the target manufactures, distributes, or provides services involving goods that could have both civilian and military applications, the acquisition may require analysis under Australia's Defence Export Controls regime in addition to the Autonomous Sanctions regime. A change of ownership of a holder of a defence-export permit or a dual-use export authorisation may itself require prior approval from the relevant authority. Do not assume that a permit held by the target entity will automatically vest in the acquirer's post-closing structure.
Resources and extractive-industry targets: commodity flows from certain regions are subject to import prohibitions under Australia's country-specific programmes. Where the target has active supply-chain relationships in those regions, the acquirer inherits both the commercial relationship and the compliance exposure. A supply-chain sanctions review must trace the origin of the target's principal inputs, not merely screen the direct counterparty.
Real-estate and asset-holding targets: where the target holds real property or other assets in or connected to a designated jurisdiction, the asset itself may be a sanctioned interest. The acquirer's legal title to those assets post-closing will not extinguish the sanctions exposure. In some cases, the acquisition of a sanctioned interest – even through an unknowing purchase – can constitute a prohibited dealing.
Step 5: Document findings and structure pre-closing protections
A sanctions diligence report serves two purposes: it informs the go/no-go decision on the transaction, and it creates a contemporaneous record that demonstrates the acquirer exercised appropriate care. The second purpose is frequently underweighted in deal timelines but becomes determinative if a post-closing regulatory inquiry arises.
The report should record: the lists screened and the date of each query; the methodology applied to name-matching and the rationale for clearing or escalating each potential match; the sources used to verify the ownership chain; any residual uncertainties and the steps taken to resolve or accept them; and the overall conclusion with explicit reasoning. A bare "no matches found" note is not a diligence record. It is an absence of evidence.
Pre-closing contractual protections are a complement to, not a substitute for, substantive diligence. Representations and warranties from the seller that no party to the transaction is designated, and that the target's business does not involve dealings with designated persons, provide a contractual remedy but do not prevent a prohibition from applying. Specific indemnities for sanctions-related losses and, where appropriate, a condition to closing that requires confirmation of no adverse list changes, add a layer of post-closing risk allocation.
Where the diligence review surfaces a genuine concern – a potential match that cannot be resolved, an ownership-chain gap that the seller cannot fill, or a business relationship that may constitute a prohibited dealing – the acquirer must decide whether to seek a DFAT permit, to restructure the transaction to remove the problematic element, to require the seller to cure the issue before closing, or to abandon the transaction. Each of those routes has different implications for timeline, cost, and deal certainty. The position above covers the standard case. Your facts – the counterparty, the structure, the jurisdiction, and the regulatory environment in play – will change the analysis materially.
For an assessment of your deal's exposure under Australia's Autonomous Sanctions regime, contact Calder & Vance at info@caldervance.com.
When does a potential match require counsel rather than a compliance decision?
Not every potential sanctions match in an M&A diligence review requires legal counsel to resolve. But several categories of finding do, and misidentifying them as routine compliance decisions is a significant risk. The pattern we observe is that in-house teams err in one of two directions: they escalate every fuzzy name match, creating delay and cost; or they clear genuine red flags as false positives without the analysis to support that conclusion.
Involve counsel when: a potential match cannot be definitively resolved against a listed person using publicly available information and the transactional stakes are material; the ownership chain includes an entity incorporated in a jurisdiction where the acquirer cannot obtain reliable beneficial-ownership data; the target's business involves dealings with a jurisdiction subject to a country-specific programme under the Australian regime; the transaction structure involves the transfer of an interest in real property, a financial instrument, or another asset in or connected to a designated jurisdiction; or the diligence review surfaces conduct that may constitute a past prohibited dealing, raising the question of voluntary disclosure to DFAT.
Voluntary self-disclosure (VSD) – the practice of reporting an apparent violation to the relevant authority before it is detected – is a risk-management option that has well-established mitigation value in the US OFAC and UK OFSI contexts. Its role in the Australian regulatory environment is less extensively documented in published guidance, but the principle that a regulated entity that identifies and self-reports a potential violation is better positioned than one that does not is consistent with DFAT's published enforcement approach. If a diligence review surfaces a potential historic violation by the target, the acquirer must assess both whether to disclose and, if so, in which regime – because a dealing that potentially violated both Australian and OFAC rules may require disclosures in both jurisdictions.
If a transaction has already been flagged by a counterparty or financier, or if a post-signing event has changed the sanctions position, an early review preserves options that narrow quickly. Reach the Calder & Vance team at info@caldervance.com.
A common misconception: OFAC clearance does not mean Australian clearance
The most persistent myth in cross-border M&A sanctions diligence is that OFAC clearance is the global standard. It is not. OFAC is the most widely known sanctions authority, and many deal teams treat an OFAC clean screen as the primary – or, more dangerously, the only – sanctions check. Australia operates an independent autonomous sanctions regime with its own list, its own prohibitions, and its own enforcement authority. OFAC and DFAT do not coordinate designations in real time, and their respective lists differ.
A related misconception is that Australia's regime is narrower or less consequential than the US or EU regimes and therefore warrants a lighter-touch review. The legal prohibition under Australia's Autonomous Sanctions Act is an absolute one for parties subject to it; the consequences of a breach are not calibrated to the size of the regime relative to OFAC's. Australian entities and nationals who complete a prohibited dealing face criminal and civil exposure under the applicable regime, regardless of whether the same dealing is permitted under OFAC or another regime.
A third misconception – one we encounter specifically in private-equity and venture-capital deals – is that minority-stake acquisitions do not engage sanctions prohibitions because the acquirer is not taking "control." Australia's regime, like its UK and EU counterparts, does not limit its prohibitions to transactions that involve a transfer of control. Acquiring any prohibited interest in a sanctioned asset – including a minority stake – may constitute a prohibited dealing, depending on the specific designation and the applicable prohibition.
Related practices
- Correspondent banking and de-risking under OFAC – sanctions risk assessment and counterparty screening for financial institutions
- Sanctions diligence in M&A under US BIS/EAR – export-control due diligence for acquisition transactions
- Sanctions diligence in M&A under Canada – a parallel guide covering the Canadian autonomous sanctions regime