A trading company with an established supply chain receives a payment instruction from an overseas buyer. The compliance team flags the transaction: the counterparty or an underlying account may be subject to Australia's autonomous sanctions regime. The deal is live. The payment window is closing. Does a statutory pathway exist to authorise the transfer, and if so, what must the business do before funds move?
Australia's autonomous sanctions regime, administered by the Department of Foreign Affairs and Trade (DFAT), provides a permit mechanism allowing certain otherwise-prohibited payments to proceed where specific conditions are met. The permit is not automatic. It requires a formal application to DFAT, supported by documentary evidence, and approval is granted at the regulator's discretion. The regime operates independently of – but in parallel with – obligations that may also arise under OFAC, OFSI, or the EU Council regulations, and a business operating across jurisdictions must satisfy each relevant regime separately.
This guide walks through the governing authority, the authorisation procedure step by step, the cross-regime comparison that every cross-border business must consider, the most common procedural and substantive pitfalls, and the point at which independent sanctions counsel should be involved.
What is the legal basis for payment authorisations under the Australian sanctions regime?
Australia's sanctions regime operates under the Autonomous Sanctions Act and the regulations made under it, with DFAT as the central administering authority. The Act gives the Minister – and, by delegation, DFAT – the power to designate persons and entities and to prohibit a range of dealings, including the making or facilitating of payments where a designated person or entity is involved directly or indirectly.
The prohibition is broad. It extends to payments that would make an asset available to, or for the benefit of, a designated person. A payment routed through an intermediate account that is owned or controlled by a designated person can engage the prohibition even if the immediate counterparty does not appear on the Consolidated List or the relevant DFAT designation list. This indirect-benefit question is one of the first analytical steps, and in our experience it is the one that most frequently surprises in-house teams reviewing a transaction for the first time.
The permit mechanism exists as a statutory carve-out. Where a business can demonstrate that its proposed payment falls within the criteria DFAT applies, a permit can be issued to authorise the otherwise-prohibited dealing. The permit does not modify the underlying designation; it authorises the specific dealing described in the application. Any dealing outside the scope of the permit remains prohibited.
Step 1 – Determining whether a permit is required
Before preparing an application, a business must first confirm that the payment is, in fact, prohibited without a permit. This preliminary assessment has two parts: designation-list screening and activity-scope analysis.
Designation-list screening means checking all parties to the payment – the payer, the payee, and any intermediaries identified – against the DFAT Consolidated List of designated persons and entities. Australia maintains its own Consolidated List, which is updated when new designations are made. The UN Security Council Consolidated List and the Australian-autonomous-regime lists are separate instruments; a name may appear on one and not the other. Screening only the UN list is not sufficient for Australian-law purposes.
Activity-scope analysis asks whether the payment, even between two non-designated parties, would make an asset available to a designated person. A payment to satisfy a debt owed to a company that is majority-owned by a designated person may be caught. A payment for goods that will be re-exported to a designated entity may be caught. The analysis must follow the economic benefit, not only the immediate counterparty. Where the screening and scope analysis confirm that a prohibition applies, the next step is to assess permit eligibility.
Where the analysis is genuinely uncertain – for instance, where ownership is layered, the beneficial-ownership information is incomplete, or the designation status of an intermediate party is disputed – we regularly advise clients to seek legal review before deciding whether to apply for a permit or to decline the transaction entirely.
Step 2 – Preparing the permit application to DFAT
A DFAT permit application must be made in writing and must identify the proposed dealing in sufficient detail to allow DFAT to assess its scope and conditions. The application should address four core questions: who the applicant is and what their connection to the transaction is; what the specific payment involves, including the amount, the parties, the account details, and the commercial purpose; why a permit is sought, including the legal basis under the regulations; and what conditions the applicant proposes or accepts.
Documentary support is essential. DFAT will expect evidence of the commercial arrangement (contracts, invoices, correspondence), evidence of the corporate ownership and control structure of all parties where relevant, and, where the payment is said to serve a humanitarian or professional-services purpose, evidence of that purpose. Incomplete applications are rejected or returned for further information, which adds delay.
There is no prescribed form for the application, but DFAT publishes guidance on its expectations. Applicants should review the current guidance before filing, because DFAT's published expectations for permit applications have evolved over time. A covering letter that maps the documentary evidence to each of the regulatory criteria is standard practice and reduces the risk of a request for further information.
Timing matters. DFAT does not operate to a statutory decision deadline for permit applications in the same way that OFAC has published its average processing timelines. Applicants should allow for a period of weeks, not days, for a straightforward application, and considerably longer where the facts are complex or where DFAT raises queries. Planning a transaction around an expected permit being granted by a fixed commercial deadline is a known risk.
Step 3 – Managing the review and responding to DFAT queries
Once an application is submitted, DFAT may raise questions, request additional documentation, or seek clarification on specific aspects of the proposed dealing. Responding fully and promptly is important. A delayed or incomplete response can stall the application and, in a time-sensitive transaction, may be commercially decisive.
DFAT is not required to disclose the full reasoning behind its decision, and a refusal may be communicated without detailed explanation. Where a permit is refused, the applicant's options include reapplying with additional information, restructuring the transaction to remove the prohibited element, or, in appropriate cases, seeking advice on whether the decision is amenable to review. Administrative-law review mechanisms exist in Australia, but their scope in the sanctions context is limited and specialist advice is required before pursuing this route.
In a recent matter, a financial-services business faced a payment instruction where an intermediate holding company had an ownership chain that touched a designated person below the control threshold. The question was whether the payment would nonetheless make an asset available to that designated person within the meaning of the regulations. We conducted an ownership and control mapping exercise, confirmed the degree of designation exposure, and advised the client on whether to proceed without a permit, apply for one, or restructure the payment route. The matter required co-ordination across multiple jurisdictions because the same payment raised questions under a second regime. That cross-regime dimension is the norm, not the exception.
How does Australia's payment authorisation procedure compare to OFAC and OFSI?
Australia's permit mechanism sits within a family of similar instruments under the major regimes, but there are meaningful procedural and substantive differences that a business operating across jurisdictions must understand. Treating the Australian regime as a direct analogue of OFAC or OFSI licensing will lead to errors in both directions.
Under the OFAC regime, specific licences are issued by OFAC itself, and OFAC publishes guidance on processing timelines for different licence categories. OFAC also issues general licences – standing authorisations covering defined categories of transactions that do not require a case-by-case application. Australia does not operate a general-licence architecture in the same structural way. Each permit application is assessed on its specific facts. This means that a business that has come to rely on a US general licence for a particular category of payment cannot assume an equivalent standing authorisation exists under the Australian regime.
Under the OFSI regime in the United Kingdom, financial-sanctions licences are issued under categories set out in the relevant thematic regulations, and OFSI publishes guidance on its licensing grounds and processing expectations. The UK ownership-and-control test asks not only whether a designated person owns 50 percent or more of an entity but also whether a designated person otherwise controls it – a broader test than the mechanical OFAC ownership threshold. Australia's approach to the question of indirect benefit and control, while sharing conceptual ground with the UK and EU tests, is applied through its own regulatory framework and administrative practice.
The EU regime operates through specific licensing grounds set out in the applicable Council Regulation, administered by member-state competent authorities rather than a central EU body. Where a business needs to authorise a payment under both the Australian regime and an EU-member-state regime, two separate applications to two separate authorities are required, each assessed under the relevant Council Regulation and national implementing rules. The criteria are not identical, and a permit granted under one regime provides no basis for assuming approval under another.
The practical implication of this divergence is straightforward: a cross-border payment that touches multiple sanctions regimes requires a parallel, not a sequential, application process, and the most restrictive position governs what can actually be done. Where the regimes diverge, the stricter prohibition prevails until each relevant authority has granted its authorisation.
What are the principal risk flags and pitfalls?
Payment authorisation applications under the Australian regime fail or are delayed for a small number of recurrent reasons. Understanding these patterns in advance substantially improves the quality and the outcome of an application.
The first and most common issue is incomplete ownership mapping. The prohibition on making assets available to designated persons operates through ownership and control chains, not only through direct counterparty relationships. An application that addresses only the immediate payee without tracing the beneficial-ownership structure may be technically incomplete and will likely generate a DFAT query or refusal. Ownership structures in cross-border transactions can be complex, and the information available through public registers may not be sufficient without additional enquiry.
The second common issue is a mismatch between the proposed dealing in the application and the actual commercial transaction. The permit, if granted, authorises the dealing as described. Any material deviation – a different amount, a different account, a modified payment purpose – may mean the permit does not cover the actual transaction. This is particularly acute in transactions that evolve during the DFAT review period.
A third issue is the assumption that a prior permit, or a permit granted for a similar transaction, provides authority for a new dealing. Each permit is specific to the dealing it describes. There is no automatic renewal or extension. Where a series of payments is intended, the application should address the full series, or separate applications may be required.
The fourth issue is the multi-regime gap. A payment authorised by DFAT under the Australian regime may still be prohibited under OFAC, OFSI, or the EU Council regulations if the same payment engages those regimes. A payment routed through a US correspondent bank will engage OFAC's jurisdiction regardless of the Australian permit. Compliance counsel advising on the Australian authorisation must also consider whether parallel applications to other authorities are needed.
Is your screening programme calibrated to the Australian Consolidated List specifically, or only to the UN list and the major Western designations? That distinction directly affects whether a prohibited payment is identified before it moves.
Related practices
- Frozen account management under the EAR – managing account blocks and seeking BIS authorisations for restricted dealings
- Payment authorisation under Australia – extended analysis – deeper treatment of complex ownership scenarios and multi-regime applications
- Payment authorisation under the BIS EAR – licence exceptions, EAR99 determinations, and the BIS application process
When should a business involve sanctions counsel?
Not every payment that touches the Australian sanctions regime requires external counsel. Where a screening match is clearly a false positive – a name-similarity issue that resolves on a two-minute check – an experienced in-house team can clear it without outside input. But a number of situations regularly warrant early involvement of specialist sanctions counsel.
The first is where the screening match is genuine or uncertain. A confirmed or reasonably probable designation hit on a counterparty or beneficial owner is the paradigm case. Acting without a permit where one is required is a criminal offence under the Autonomous Sanctions Act. The consequences extend to the individuals who approved the payment, not only to the entity.
The second is where the ownership structure is opaque or complex. Layered holding structures, nominee arrangements, or jurisdictions with limited corporate-transparency requirements make the ownership analysis genuinely difficult. In our experience, the cases that result in enforcement action most frequently involve transactions where the designation was not apparent from the first layer of the ownership chain.
The third is where the transaction engages multiple regimes. A cross-border payment involving a US-dollar correspondent bank, an EU counterparty, and an Australian nexus may simultaneously engage OFAC, the EU Council regulations, and the Australian autonomous regime. Each requires its own analysis, and the overall position is only as clear as the most restrictive regime allows.
The fourth is where a payment has already moved and a potential violation has been identified. Australian sanctions law, like its counterparts in other jurisdictions, does not operate on a strictly voluntary-disclosure model identical to OFAC's VSD (voluntary self-disclosure) framework, but prompt identification and transparent engagement with DFAT remain relevant to any subsequent enforcement assessment. Early legal advice preserves options.
The position above covers the standard case. Your facts – the counterparty structure, the payment route, the regime in play, and the commercial context – change the analysis substantially. If a transaction has already been flagged, or a permit application has been returned for further information, an early review can preserve options that narrow with time.
To discuss a permit application or a cross-regime payment authorisation, contact Calder & Vance at info@caldervance.com.