A freight forwarder based in Sydney receives a charter instruction for a bulk carrier bound for a third-country port. The vessel was recently re-flagged. The consignee sits behind two holding companies. One of the intermediate entities shares a name variant with an entry on the UN Consolidated List (the UN Security Council's authoritative list of designated persons and entities). Is this shipment permitted under Australian law? Can the freight forwarder proceed, and what must it record?
Australia's autonomous sanctions regime, administered by the Department of Foreign Affairs and Trade (DFAT), prohibits dealings with designated persons and entities and imposes strict liability on Australian persons and businesses operating in Australian territory. As of January 2026, the regime applies across shipping, chartering, cargo brokerage, port services, and vessel financing. Compliance requires a structured, step-by-step approach – from initial screening through cargo classification, ownership mapping, and reporting.
This guide walks through each stage of that process, identifies where Australian rules diverge from comparable regimes such as OFAC, OFSI, and the EU, and explains when specialist sanctions counsel should be involved.
Step 1: Understand the governing authority and legal basis
Australia's sanctions regime derives its authority from the Autonomous Sanctions Act and the associated regulations – collectively referred to here as the applicable country regime. DFAT administers the regime and publishes the Consolidated List of designated persons and entities. The regime operates alongside Australia's obligations under UN Security Council resolutions, which are given domestic effect through separate legislation and the UN Consolidated List.
For maritime businesses, the practical consequence is dual exposure. A shipment may be permitted under Australia's autonomous regime but still be prohibited because a party appears on the UN Consolidated List. Both lists must be screened. In our experience, firms that screen only the DFAT Consolidated List miss UN-designated parties who do not appear on Australia's autonomous list and vice versa.
DFAT publishes updated guidance on its website and issues permit decisions. Unlike OFAC, which maintains a single SDN List (OFAC's list of Specially Designated Nationals and blocked persons), and OFSI, which operates the UK Consolidated List, DFAT's Consolidated List is Australia's primary screening reference but must be read alongside the UN list and any thematic regime relevant to the shipment's destination or cargo type.
The cross-border angle matters immediately. A vessel under Australian flag, owned or operated by an Australian person, or calling at an Australian port carries the full weight of Australian obligations wherever it trades. An Australian freight forwarder arranging a third-country shipment is equally caught. The jurisdictional reach is based on the nexus to Australia – person, vessel, goods, or payment – not solely on the port of call.
Step 2: Screen all parties across the maritime chain
Effective screening in a maritime context covers every party in the transaction chain, not only the named shipper and consignee. Sanctions exposure in shipping typically enters through intermediate or indirect parties. A robust screening programme must address vessel owners, registered operators, technical managers, charterers, sub-charterers, cargo brokers, port agents, flag-state operators, and the beneficial owners behind each entity.
Who are the parties you actually need to check? The answer is broader than most freight teams expect. Consider the following categories:
- Vessel owner and any intermediate registered holder of the vessel
- Technical and commercial manager
- Charterer and any sub-charterer
- Shipper, consignee, and notify party
- Cargo broker and freight forwarder
- Port agent at origin and destination
- Financier or letter-of-credit issuing bank
- Any insurance underwriter or P&I club involvement where the insured party could be designated
Screening must be conducted against the DFAT Consolidated List, the UN Consolidated List, and – where there is any nexus to the United States, the United Kingdom, or the EU – against the OFAC SDN List, the OFSI Consolidated List, and the relevant EU Council regulation lists. Why run multiple lists? Because Australian law does not insulate a business from penalties imposed by a foreign regime with jurisdiction over the same transaction. Where a payment passes through a US-dollar correspondent bank, OFAC's rules apply simultaneously.
Name-matching methodology is critical. Vessel and company names are frequently transliterated from non-Latin scripts, abbreviated, or altered. A screening programme that matches only on exact strings will miss phonetic variants, alternative transliterations, and name-change histories. We regularly advise shipping businesses on the recalibration of matching logic to reduce both false positives and – more critically – false negatives.
Vessel screening adds an additional dimension. The IMO number (the unique identifier assigned to a vessel by the International Maritime Organisation) provides a stable reference even when a vessel's name, flag, or registered owner changes. Screening solely on vessel name, without cross-referencing the IMO number, is a recognised compliance gap that DFAT's guidance implicitly addresses through its requirement for due diligence across all relevant identifiers.
Step 3: Map ownership and control to detect indirect exposure
A shipping company or cargo owner that does not itself appear on any list may nonetheless be caught if a designated person or entity owns or controls it. The ownership and control analysis is the most technically demanding element of maritime sanctions compliance – and the point where firms most frequently misjudge their exposure.
Under Australia's autonomous regime, ownership and control is the test applied to determine whether a non-listed entity is caught through a listed person. DFAT's approach requires analysis of direct and indirect ownership structures and of whether a designated person can exercise material influence over the entity in question. This differs from the OFAC 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked), which applies a mechanical threshold. DFAT's test is broader in one respect: control can be relevant even where ownership falls below a defined numerical threshold.
In practice, the maritime sector presents particular ownership-mapping challenges. Vessels are frequently registered in flag states with limited beneficial ownership disclosure requirements. Management companies in multiple jurisdictions sit between the economic owner and the vessel register. Shell companies and trusts are common holding structures. A compliance programme that relies on publicly available register data alone will often be insufficient.
What does adequate ownership mapping look like? It involves collecting and verifying corporate documentation – certificates of incorporation, share registers, and directorship records – for each entity in the ownership chain, and cross-referencing against available commercial intelligence. Where the chain cannot be verified to a sufficient standard, the prudent course is to escalate to sanctions counsel before proceeding.
The cross-regime comparison is instructive here. Under OFSI and the EU test, the concept of ownership and control includes formal control exercised through contractual rights, board positions, or veto rights, not only shareholding. For a business with simultaneous exposure to Australian, UK, and EU rules – which is common in international shipping – the most restrictive test governs. In our practice, we advise clients to apply the broader control standard across all their screening procedures, rather than calibrating separately for each regime, because stricter approaches reduce the risk of a compliance gap at the margin.
The position above covers the standard case. Your facts – the counterparty, the vessel, the cargo type, the flag state, and the payment route – change the analysis. For a transaction-specific assessment, contact Calder & Vance at info@caldervance.com.
Step 4: Classify the cargo and assess export-control obligations
Australian sanctions obligations in maritime trade interact directly with Australia's export control rules. Goods shipped from Australia – or transshipped through an Australian port – may require an export permit under the Defence Export Controls regime, separately from any sanctions consideration. The interaction between sanctions prohibitions and export-control licensing requirements is a distinct compliance layer that must be addressed in sequence.
The starting point is cargo classification. Does the cargo fall within a controlled goods category under Australian export control rules? The relevant categories include military goods, dual-use items, and items covered by multilateral control arrangements to which Australia is a party. Dual-use items – goods designed for civilian use but capable of military application – require particular care. The classification exercise under Australian export control rules broadly mirrors the structure of the EAR (the US Export Administration Regulations administered by BIS) and EU dual-use rules, but the specific national list and the licensing authority differ.
Where a cargo is classified as controlled, a permit or licence from the relevant Australian authority is required before export. A sanctions clearance does not substitute for an export permit. Both must be obtained, in parallel where timelines permit. Conversely, obtaining an export permit does not cure a sanctions prohibition: if a party to the transaction is designated, the shipment may still be prohibited regardless of permit status.
For maritime intermediaries – freight forwarders, brokers, and ship managers who do not themselves own the cargo – the practical question is whether they have adequate contractual and due-diligence mechanisms to identify controlled goods in shipments they arrange. We advise freight businesses to include contractual representations from shippers confirming cargo classification and export-permit status, alongside their own independent verification for high-risk destinations or cargo types.
Step 5: Assess AIS manipulation and vessel behaviour as a risk signal
Ship-tracking data from AIS (Automatic Identification System, the vessel-tracking system mandated for commercial vessels above a defined tonnage) has become a core source of compliance intelligence for maritime sanctions risk. AIS manipulation – switching off transponders, transmitting false position data, or conducting ship-to-ship transfers at sea – is a recognised indicator of sanctions evasion by third parties. Compliance teams must know how to read this data as a risk signal, not as a method of evasion.
DFAT guidance and comparable guidance from OFAC, OFSI, and the EU Directorate-General for Financial Stability, Financial Services and Capital Markets Union each identify AIS anomalies as a red flag requiring enhanced due diligence. The specific indicators include:
- AIS transponder switched off for a period inconsistent with port entry, drydock, or technical failure
- Position discrepancies between AIS data and satellite imagery or port-state records
- Vessel calling at a high-risk port not disclosed in the voyage order
- Ship-to-ship transfers in international waters, particularly in proximity to high-risk jurisdictions
- Recent flag, name, or ownership changes with limited business explanation
- Inconsistency between the declared cargo and the vessel's technical specifications or trading history
When one or more of these signals is present, the appropriate response is enhanced due diligence before proceeding – not a decision to proceed on the assumption that the signal is innocent. In our experience, the question is not whether a single red flag is conclusive, but whether the cumulative picture provides a reasonable basis to continue. Where it does not, escalation to counsel before accepting the engagement is the right step.
The cross-regime point is directly relevant. OFAC has issued detailed advisories on maritime sanctions risk that explicitly list AIS manipulation as an indicator of sanctions evasion. Those advisories, while directed at US persons, are used by compliance teams globally as a benchmark for industry practice. Australian businesses should be aware that OFAC's guidance represents a standard against which their own due diligence may be measured, including in any DFAT review.
Step 6: Handle a potential match – the escalation and reporting procedure
If screening, ownership mapping, or vessel behaviour analysis identifies a potential match or a genuine concern, the business must follow a structured escalation path. Proceeding with the transaction without resolution is not an option; nor is simply rejecting the transaction without recording the basis for doing so.
The escalation procedure under Australian law involves the following steps. First, preserve all records of the screening result, the information that triggered the concern, and any communications with the counterparty. Second, conduct enhanced due diligence to attempt to resolve the match – checking additional databases, requesting documentation from the counterparty, and reviewing commercial intelligence sources. Third, escalate the matter to the compliance function and, where a genuine match cannot be excluded, to senior management and legal counsel.
Where a transaction involves funds, assets, or services that are or may be subject to a sanctions prohibition, Australian law requires reporting to DFAT. The reporting obligation applies where a person knows or suspects that property is owned or controlled by a designated person or entity. The statutory window for reporting is short, and the obligation arises on reasonable suspicion – it does not wait for certainty. Verify the exact current deadline before relying on this; DFAT guidance should be reviewed at the time the question arises.
Record-keeping is a parallel obligation. Australian sanctions rules require that records of transactions, due diligence steps, and compliance decisions be retained. The applicable retention period under Australian law should be verified against current DFAT guidance; in our cross-border practice, we recommend a minimum of five years as a baseline consistent with comparable regimes, pending verification of the Australian-specific requirement.
Voluntary disclosure to DFAT – the Australian equivalent of a VSD (voluntary self-disclosure to a regulator) – is available where a business discovers a past breach. The decision whether to disclose, the timing and content of the disclosure, and the likely regulatory response are matters that warrant specialist advice. Early disclosure, properly prepared, can materially affect the outcome of an enforcement review. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com before making any disclosure.
Step 7: Understand the cross-regime risk – OFAC, OFSI, EU, and UN
Australian maritime businesses rarely operate in a single-regime environment. A voyage that touches a US-dollar payment, a UK-domiciled charterer, or an EU-flag vessel can attract simultaneous obligations under OFAC, OFSI, and EU regulations alongside the Australian autonomous regime. Managing that multi-regime exposure is not optional; it is the practical reality of international shipping.
Where the regimes diverge, the stricter prohibition governs the transaction. This means that an Australian-law clearance does not resolve potential exposure under OFAC if the transaction has a US nexus. The reverse applies equally: an OFAC-cleared shipment may still be prohibited under Australian law if a party appears on the DFAT list but not the SDN List.
The most significant divergence between Australian and US rules for maritime operators is in the ownership test. OFAC's 50 percent rule is numerical and mechanical. DFAT's ownership and control standard is broader, requiring assessment of effective control even below a defined ownership threshold. This means that a vessel owner or charterer who passes the OFAC ownership test may still require deeper analysis under Australian rules. We regularly advise clients with simultaneous OFAC and DFAT exposure on the calibration of their screening programmes to address both standards.
Secondary sanctions risk – the exposure of non-US businesses to US penalties for facilitating transactions with parties targeted by US sanctions – is a further dimension. Australian shipping businesses that transact in US dollars, use US financial institutions, or deal in goods of US origin face secondary-sanctions risk under US rules even where the primary transaction has no other US nexus. OFSI has taken a comparable position on certain thematic UK regimes. The practical implication is that an Australian maritime business should assess secondary-sanctions risk as part of every high-risk transaction review, not only where a US counterparty is involved.
For businesses with exposure to UN Security Council designations, the UN Consolidated List operates as a floor. No regime – including Australia's – authorises a transaction that would violate a binding Security Council resolution. The UN list should therefore be treated as the baseline screen in every transaction, with regime-specific lists applied on top.
Step 8: Apply the common mistakes and risk flags
Practitioners advising on Australian maritime sanctions matters consistently identify the same failure patterns. Understanding them before a transaction is more valuable than managing them after enforcement has begun.
The most common mistake is incomplete screening scope. Businesses screen the named shipper and consignee but overlook the vessel owner, the technical manager, the port agent, and the financing bank. Each of those parties carries independent sanctions risk. A transaction cleared at the counterparty level but involving a vessel managed by a designated entity remains prohibited.
The second recurring failure is over-reliance on automated screening without human review of alerts. Screening software generates a result; it does not make a compliance decision. Where a name-match alert is generated, a qualified individual must review the alert, apply judgment, and document the outcome. In a number of enforcement reviews we have been involved in, the audit trail showed that alerts were generated and cleared without any record of how they were resolved.
A third risk is the assumption that a clean screen at the time of contract conclusion is sufficient for the duration of the engagement. Designations occur after contracts are signed. A counterparty that was clear at contract date may be designated before delivery. Re-screening at key transaction milestones – at the time of cargo booking, vessel nomination, bill of lading issuance, and payment – is an operational necessity, not an optional extra.
Finally, the myth that maritime sanctions rules apply only to shipments to or from designated countries is a persistent misunderstanding. Australia's autonomous regime, like OFAC and OFSI, designates individuals and entities – not only countries. A shipment between two unrelated ports can be prohibited because a party to the transaction is individually designated, regardless of the destination country. Has your compliance programme been designed around the party-based structure of modern sanctions regimes, or does it still rely primarily on geographic flags?
Related practices
- Correspondent banking and de-risking under OFAC – assessing financial-institution exposure and sanctions-driven exit decisions
- Maritime and shipping sanctions under BIS and the EAR – US export-control obligations in the maritime sector
- Maritime and shipping sanctions under Canada – GAC regime obligations for shipping and trade