A Sydney-based freight forwarder receives a notification from its bank: the business has been flagged in a sanctions screening alert linked to the Australian autonomous sanctions regime. The firm's directors have no connection to any designated individual. The name match is a coincidence – a different person, a different country of origin, a different date of birth. Yet funds are frozen and contracts are at risk. How does a business in this position correct the record?
A mistaken-identity removal under Australia's autonomous sanctions regime is a distinct administrative process administered by the Department of Foreign Affairs and Trade (DFAT). It is not a challenge to the designation itself but a request to establish that the person or entity subject to restrictions is not the same as the correctly designated person. As of February 2026, the pathway involves a formal representations process with DFAT, supported by identity documentation, and must be clearly distinguished from a substantive delisting challenge. Speed matters: the longer a mistaken-identity record sits unresolved, the broader the operational and reputational damage becomes.
This guide sets out the governing regime and authority, the step-by-step correction procedure, the cross-regime comparison with OFAC and OFSI practice, the most common risk flags, and the point at which instructing external sanctions counsel is prudent.
Step 1: Understanding the governing authority and its legal basis
DFAT administers Australia's autonomous sanctions regime under the Autonomous Sanctions Act and the associated Autonomous Sanctions Regulations. Designations appear on the Consolidated List published by DFAT, which is the reference point for Australian financial institutions, exporters, and service providers conducting sanctions screening. A mistaken-identity situation arises when a person or entity shares identifying characteristics – name, nationality, date of birth, or business name – with a listed party but is not in fact that party.
The legal obligation on Australian persons is to comply with asset-freeze and dealings prohibitions that attach to listed persons. Where a financial institution or counterparty incorrectly applies those prohibitions to an unlisted third party, the third party is not subject to sanctions as a matter of law – but the practical effect can be indistinguishable. Banks freeze accounts. Correspondent relationships trigger alerts. Contracts stall. The administrative burden of demonstrating that the third party is a different person falls, in practice, on that third party.
DFAT's Consolidated List includes identifying information for each listed person. The quality and granularity of that information varies. Where the list entry is sparse – for instance, lacking a date of birth or passport number – the scope for mistaken-identity false positives increases substantially. In our cross-border practice, we see the highest volume of these situations involving individuals with common names in regions subject to intensive designation activity.
Step 2: Establishing that you have a mistaken-identity case, not a substantive designation challenge
The first and most important analytical task is confirming that the situation is genuinely a mistaken identity rather than a legitimate designation that the affected party disputes. These are different legal questions and attract different procedures. Getting this wrong at the outset can result in pursuing the wrong pathway, losing time, and providing DFAT with information that complicates a subsequent substantive challenge if one were ever needed.
A mistaken-identity case has the following characteristics. The person or entity subject to the freeze or refusal is not listed on DFAT's Consolidated List in their own right. The screening alert has been generated because their identifying information – name, nationality, address, business identifiers – matches or approximates the listed party's details. There is clear, documentary evidence distinguishing the two: a different passport, a different date of birth, incorporation records in a different jurisdiction, or other contemporaneous official documentation.
A substantive challenge, by contrast, involves a person who is listed and who contests the factual or legal basis of that listing. The evidentiary and procedural demands differ significantly. Mixing the two approaches creates confusion with DFAT and can undermine credibility with the screening institutions that have taken the restrictive action.
Have you confirmed, by checking DFAT's Consolidated List directly, that your client's name, date of birth, nationality, and any other available identifiers do not match the listed person's entry? This verification step is not optional.
Step 3: Assembling the identity evidence package
The strength of a mistaken-identity representations package depends almost entirely on the quality and breadth of documentary evidence that distinguishes the affected person from the listed individual. DFAT does not operate a structured pro-forma application for mistaken-identity corrections; the onus is on the affected party to present a clear, well-organised submission.
The core evidential elements are as follows.
- Official identity documents: Passport, national identity card, or equivalent government-issued document. These must show the full name, date of birth, nationality, and photograph of the affected person.
- Address and residency evidence: Recent utility bills, tenancy agreements, or government correspondence that demonstrate place of residence and distinguish the affected person from the listed party's known geography.
- Business registration documents (for entities): ASIC extracts, ABN registration, or equivalent foreign incorporation records confirming the entity's legal form, ownership, and jurisdiction of registration.
- A clear explanatory letter: A structured written submission explaining, with specific reference to the DFAT Consolidated List entry, why the affected person or entity is not the designated party. This letter should cross-reference each differentiating data point to the documentary evidence provided.
- Contact details of the Australian financial institution or counterparty that has taken the restrictive action: DFAT may need to liaise with that institution directly or may request confirmation that the restriction has been applied.
In our experience, submissions that arrive without a structured cover letter – even where the underlying documents are comprehensive – frequently generate delays while DFAT seeks clarification. The presentation of the package matters as much as its substance. We regularly advise clients to prepare the submission as if it will be read by someone with no prior knowledge of the situation, and to leave nothing to inference.
For a comprehensive guide to preparing a DFAT-standard evidence package, see our Australian delisting evidence package service.
Step 4: Submitting representations to DFAT
DFAT's Sanctions Secretariat is the correct point of contact for mistaken-identity representations. Submissions should be directed in writing, typically by email, to the Secretariat. DFAT does not publish a statutory deadline within which it must respond to a mistaken-identity inquiry, but it does operate a process for reviewing such representations and, where satisfied, can issue a letter confirming that the affected person is not the designated individual.
That confirmation letter is a practical instrument. It can be presented to the financial institution or counterparty that has applied the restriction, and in most cases it provides sufficient basis for the institution to lift the hold and proceed normally. Some institutions will require their own compliance team to review the letter before acting on it. Building that lead time into the plan – rather than assuming the bank will act immediately on receipt – avoids a second round of delays.
The timeline from submission to DFAT response is not fixed by statute. In practice, the duration depends on the complexity of the identity evidence, the workload of the Sanctions Secretariat, and whether DFAT requires additional information. We advise clients to treat the process as likely to take several weeks in straightforward cases and potentially longer where the listed party's entry is sparse or the identity similarity is close. Where the operational impact of the freeze is severe – for instance, where a business is unable to pay employees or meet contractual obligations – it is worth communicating that urgency to DFAT at the outset.
How does Australia's approach compare to OFAC and OFSI practice?
Australia's mistaken-identity process shares structural similarities with equivalent procedures under OFAC and OFSI, but there are material differences that a cross-border business should understand, particularly where the same individual or entity has been screened under multiple regimes simultaneously.
Under OFAC's regime, a person who believes they have been incorrectly identified as a listed party can submit a request for administrative reconsideration or seek a formal determination. OFAC has a more developed published framework for these requests, and it can issue a letter of clarification or a formal response that institutions are accustomed to receiving. OFAC also operates specific licences that can authorise transactions pending resolution – a tool that does not have a direct parallel in DFAT's process for mistaken-identity situations specifically.
OFSI, the UK financial sanctions authority, operates a similar representations pathway. Where a UK financial institution has incorrectly applied sanctions to an unlisted person, OFSI can confirm in writing that the person is not designated. OFSI's guidance on ownership and control – the test for whether a non-listed entity is caught because of a listed person's interest in it – is more elaborated than DFAT's published guidance on the equivalent question. This matters where the mistaken-identity situation involves not an individual name-match but a corporate structure where a similarly-named entity is confused with a listed company.
One practical cross-border consideration deserves emphasis. Where a screening alert has been generated simultaneously by systems calibrated to OFAC's SDN List, OFSI's asset-freeze list, and DFAT's Consolidated List, the affected person may need to approach all three authorities. A confirmation letter from DFAT alone will not resolve an OFAC-triggered freeze at a US correspondent bank. We have acted for businesses in precisely this position. The workstreams are parallel, not sequential, and the evidence package for each authority must be tailored to that authority's specific list entry and published guidance.
For a comparison of how the equivalent process works under BIS and the EAR for export-control mistaken-identity situations, see our BIS/EAR mistaken-identity removal guide and the supplementary BIS/EAR guide.
Common risk flags and mistakes that delay resolution
Mistaken-identity removals that take significantly longer than necessary – or that fail to produce the expected outcome – almost always involve one or more of the following errors. Knowing them in advance is the most efficient form of risk management.
Conflating a mistaken-identity submission with a substantive delisting petition. If the submission includes language disputing the policy rationale for the designation or challenging the evidentiary basis on which the listed party was designated, DFAT will likely treat it as a substantive challenge, route it accordingly, and the straightforward administrative correction will be delayed. Keep the submissions separate and clearly framed.
Incomplete or inconsistent identity documents. Where the name on the passport differs from the name on the business registration by even a minor spelling variant, DFAT will ask for clarification. Anticipate this. Provide an explanatory note wherever there is any discrepancy, and include both the variant and the correct form with supporting documentation.
Failing to address the specific differentiating features in the Consolidated List entry. The submission must engage with the actual identifying information published in DFAT's list entry for the designated party. A generic identity document package that does not specifically refute the list entry's details – for instance, a listed date of birth that differs from the affected person's – adds little probative value.
Approaching the financial institution rather than DFAT directly. The bank or payment firm that has applied the restriction is following its own compliance obligations. It cannot simply override its screening alert without a basis in law or a regulator's confirmation. A letter to the bank without a corresponding submission to DFAT typically results in no movement.
Delay. The longer a mistaken-identity restriction sits unresolved, the wider the secondary consequences become. Counterparties receive alerts. Credit lines close. Contracts are terminated. Reputational harm compounds. Early action – ideally within the first week of discovering the freeze – is materially better than a delayed and polished submission.
When to involve sanctions counsel
Not every mistaken-identity situation requires external legal counsel. Where the identity distinction is clear-cut, the documentation is available and consistent, and the affected person has the capacity to prepare a well-structured written submission, a self-prepared approach to DFAT is possible.
There are, however, situations where the involvement of a sanctions lawyer from the outset is strongly advisable. These are as follows.
- The identity similarity between the affected person and the listed party is close – for instance, the same name, a similar date of birth, and the same nationality.
- The affected person is also subject to a freeze under OFAC, OFSI, or another regime simultaneously, requiring parallel submissions to multiple authorities.
- The financial institution applying the restriction has issued a formal notice of intent to report the matter to DFAT or another regulatory authority.
- There is any possibility that the situation involves ownership-and-control questions – for instance, where the affected entity has a listed person among its shareholders.
- The affected person is uncertain whether their situation is a mistaken-identity case or whether they may be subject to a substantive designation.
- The operational consequences of the freeze are severe and require an urgent engagement with DFAT and the financial institution simultaneously.
In any of these situations, the complexity and the stakes justify a structured, professionally managed approach. Counsel can assess the situation, confirm the correct procedural pathway, prepare the submission to DFAT, manage the liaison with the financial institution, and, where necessary, handle a parallel workstream under another regime. Early instruction also preserves options: a poorly framed initial submission to DFAT can complicate a subsequent substantive challenge if the situation turns out to be more complex than first appeared.
The position above covers the standard mistaken-identity case. Your specific facts – the nature of the name-match, the regime or regimes in play, the severity of the operational restriction, and the quality of available identity documentation – all change the analysis. If a freeze is already in effect, the time available to act without secondary consequences is short.
For a confidential initial assessment of your mistaken-identity situation under the Australian regime, contact Calder & Vance at info@caldervance.com.
A common myth: that DFAT must act within a set statutory deadline
A frequently held assumption among businesses and their in-house legal teams is that DFAT is bound by a strict statutory deadline to respond to a mistaken-identity submission – analogous, perhaps, to a subject-access request timeframe or a statutory appeal period. That assumption is incorrect. The Autonomous Sanctions Act and its subsidiary legislation do not impose a published response deadline on DFAT for mistaken-identity representations. DFAT operates with discretion as to timing.
This has two practical consequences. First, a submission that is unclear or incomplete will take longer than a well-prepared one, because DFAT will seek further information and the clock does not run in the affected person's favour. Second, urgency must be communicated explicitly by the affected person rather than assumed. A submission that does not flag the operational impact of the restriction – the frozen payroll, the blocked trade-finance line, the terminated contract – will not automatically receive expedited treatment. DFAT cannot be assumed to infer urgency from the nature of the situation.
We regularly advise clients to include a concise, factual statement of the operational consequences in the cover letter. Not as a pressure tactic, but as a factual input that may inform how DFAT prioritises its review. The point should be stated once, clearly, and without hyperbole.
Related practices
- Australian delisting evidence package service – full preparation and submission of your DFAT representations package
- BIS / EAR mistaken-identity removal guide – how the equivalent US export-control process works