How to control ship-to-ship transfer risk under Australia

A cargo vessel operating in the Pacific changes hands mid-voyage. The original counterparty looks clean. But the ship-to-ship transfer – conducted at anchor, at night, away from a port authority – introduces a second vessel, a second operator, and an ownership chain that your original screening never touched. Under Australia's autonomous sanctions regime, administered by the Department of Foreign Affairs and Trade (DFAT), that second layer of exposure is yours to manage. A deal that collapses on a late sanctions hit is not just a commercial setback; it can produce licence revocations, civil penalties, and reputational damage that outlast the transaction.

Ship-to-ship transfer risk controls under Australia require a structured, checklist-driven approach: verify the governing instrument before the transfer, screen every vessel and counterparty in the transaction chain, map the ownership and control question against DFAT's current consolidated list, assess AIS integrity, confirm insurance cover, and maintain a documented record. As of January 2026, Australia's autonomous sanctions and United Nations Security Council implementing measures sit alongside a tightening international enforcement posture – and what DFAT requires often runs in parallel with what OFAC, OFSI, and the EU also demand of the same transaction.

This guide works through each checkpoint in sequence, cross-references the comparable requirements of the United States, United Kingdom, and European Union, and identifies the points at which a matter should be referred to sanctions counsel.

What you need before you start: understanding the governing regime

Australia administers both autonomous sanctions and measures implementing United Nations Security Council resolutions through its autonomous sanctions regime, with DFAT as the competent authority. The legal basis sits in the Autonomous Sanctions Act and the Autonomous Sanctions Regulations; UNSC-implementing measures operate through separate regulations in each relevant programme. Any person in Australia, or an Australian person outside Australia, is bound by these prohibitions. The reach is extraterritorial for Australian nationals and registered entities.

What does this mean practically for a ship-to-ship transfer? The prohibition on dealing in the assets of a designated person, or providing a service to or for the benefit of a designated person, attaches to any step in the transaction at which an Australian nexus is present. That nexus can be the owner, the operator, the insurer, the broker, the financier, or the cargo holder. It does not require that the transfer itself take place in Australian waters.

Australia's list of designated persons and entities is published on DFAT's website and is updated without advance notice. The consolidated list is the first reference point; it sits alongside the United Nations Consolidated List, which all Australian implementing measures also give effect to. In our experience, teams that screen only the UN list miss designations that Australia has made autonomously and that are not replicated at the UN level.

The cross-border dimension is immediate. A ship-to-ship transfer involving a vessel flagged in a third country, an operator headquartered in a fourth, and cargo destined for a fifth will almost certainly trigger parallel analysis under OFAC, OFSI, or the relevant EU Council regulations – all of which carry their own prohibitions on ship-to-ship transfers and AIS manipulation. Where two or more regimes apply, the stricter prohibition governs the conduct of a person subject to both. You cannot net the regimes out; you must satisfy each independently.

Checkpoint one – verify the legal basis and designations in force

Before any vessel or counterparty screening begins, confirm which Australian sanctions programme – or programmes – apply to the destination, the flag state, the operator's registered jurisdiction, and the nature of the cargo. Australia maintains thematic programmes (non-proliferation, for example) and country-specific programmes; both can be active simultaneously on a single transaction.

Designations under the autonomous regime are made by the Minister for Foreign Affairs and published in the Federal Register of Legislation. The DFAT consolidated list consolidates designated persons and entities across all programmes. Check that list directly rather than relying on a third-party database as the sole source; database lag is a documented compliance gap.

At this checkpoint, confirm also whether the cargo or the vessel type triggers any additional Australian export-control consideration under the Defence Export Controls framework. Ship-to-ship transfers of dual-use goods, strategic goods, or goods subject to catch-all controls require a separate assessment before the transfer proceeds. That assessment sits within the export-control review, not the sanctions screen.

A common error at this stage is treating the programme check as complete once a name-search returns no results. The question is not only "is this person designated?" but "does this transaction provide a benefit to a designated person, directly or indirectly?" The indirect benefit test catches arrangements that are structured to route value through unlisted intermediaries. Structuring a transaction to avoid the control rather than to comply with it is not a permissible compliance technique.

Checkpoint two – screen every vessel, operator, and counterparty in the chain

A ship-to-ship transfer involves at minimum two vessels; in practice it frequently involves several more through relay or lightering arrangements. Each vessel has an owner, a registered operator, a technical manager, and often a charterer – none of whom are necessarily the same entity. Screen all of them against the DFAT consolidated list, the UN Consolidated List, and any applicable thematic programme list before the transfer is authorised.

The ownership question under Australian law follows the same logic as the equivalent tests in the US, UK, and EU: where a designated person owns or controls an entity, that entity's assets are also caught. Under OFAC's 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked), the test is mechanical. Under Australia's implementing measures, and under the UK and EU equivalents, an ownership and control test (the test for whether a non-listed entity is caught through a listed person's ownership or control) supplements the ownership threshold with a broader control analysis. A vessel management company that is not itself designated but is controlled by a designated person can still be a prohibited counterparty.

Map the ownership chain to the ultimate beneficial owner. Do not stop at the registered owner. In our experience, the most frequently missed links in a ship-to-ship transfer are the technical manager and the bunker supplier – both of whom provide services to the vessel and both of whom fall within the scope of a "service to or for the benefit of" prohibition if a designated person is anywhere in the chain.

Document every search: the list consulted, the version date of the list, the search terms used, the result, and the name of the person who conducted the screen. That record is your first line of defence in an enforcement inquiry. Australian sanctions law does not require knowledge for a civil breach, but documented good-faith screening is a recognised mitigating factor in how any inquiry is handled.

Checkpoint three – assess AIS integrity and physical transfer indicators

Automatic Identification System (AIS) data – the vessel-tracking transmissions that are mandatory for commercial vessels above a defined tonnage threshold – is a primary tool for identifying deceptive shipping practices. An AIS gap, a spoofed position, an implausible speed-over-ground reading, or a period of darkness in a known transfer zone are each a compliance red flag that requires investigation before the transaction proceeds.

Australian sanctions guidance, consistent with the guidance of OFSI, OFAC, and the EU, treats AIS manipulation as a known indicator of sanctions evasion risk. This does not mean that every AIS anomaly is conclusive evidence of a breach. It means that an anomaly places an obligation on the compliant party to investigate, document the investigation, and reach a reasoned conclusion before proceeding. Proceeding without investigation where a flag is present is itself a compliance failure.

The physical indicators of a ship-to-ship transfer that warrant heightened scrutiny include: a transfer conducted at anchor rather than at a port; a transfer in international waters or in the territorial waters of a jurisdiction with a weaker inspection regime; use of hoses, fenders, or equipment not consistent with the cargo manifest; a receiving vessel with no reported onward voyage; and a shipper or receiver who declines to identify the ultimate destination of the cargo.

Cross-reference any AIS anomalies against the vessel's port call history, its insurance certificates, and the flag state registry. A vessel that has recently changed flag, changed name, or changed registered owner – particularly where multiple changes coincide – carries elevated risk. None of these indicators is individually determinative, but their combination in a single transaction is a pattern that regulators in Australia, the US, the UK, and the EU have each publicly identified as a priority enforcement concern.

For a detailed review of AIS anomaly indicators and how the EU applies them in practice, see our AIS anomaly indicators service page.

Checkpoint four – confirm insurance cover and financial services exposure

Insurance is both a practical necessity for a ship-to-ship transfer and a separate sanctions compliance point. P&I clubs and hull-and-machinery insurers are subject to their own sanctions obligations, and a designation of a vessel or its operator can result in the withdrawal of cover. A vessel operating without valid insurance is a red flag in its own right. More importantly, confirming that the vessel carries cover from an insurer that is itself not designated, and that the cover has not been withdrawn or suspended, is part of a complete pre-transfer check.

The financial-services dimension extends beyond insurance. If the transaction involves a letter of credit, a commodity financing facility, or any payment routed through a correspondent banking relationship, each of those intermediaries will run its own sanctions screen. A transfer that passes the shipowner's internal check may still be declined by the financing bank if its screen returns a result that the shipowner's screen missed. That mismatch – different databases, different list vintages, different methodologies – is one of the most common causes of a deal collapsing at a late stage.

Under the US regime, OFAC has authority over foreign financial institutions that conduct or facilitate significant transactions for designated persons. The consequence can be correspondent-account restrictions – effectively cutting a non-US bank off from dollar clearing. That risk runs on transactions that have an Australian nexus but also involve US dollar payments, US-flagged vessels, or US persons anywhere in the chain. Confirm the payment currency and the payment route before assuming that Australian compliance is sufficient.

For the comparable analysis under the BIS/EAR regime in the context of ship-to-ship transfers, see our guide at ship-to-ship transfer risk under BIS/EAR.

Checkpoint five – record-keeping, reporting obligations, and when to stop

A compliant ship-to-ship transfer is a documented transfer. Australia does not prescribe a single mandatory record-keeping period in its autonomous sanctions rules in the same way that OFAC mandates five years of records (as currently in force, verify before reliance); however, prudent practice applies at least an equivalent standard, and a number of Australian obligations under AML and financial-services law independently require multi-year record retention. Treat five years as a working minimum across the transaction file.

Where a screen returns a positive match – or where the investigation of an anomaly leads to a reasonable belief that a designated person is involved – the next step is to pause the transaction and take advice. Do not proceed on the basis that a result "probably" is a false positive. The cost of a confirmed breach that could have been stopped is materially greater than the cost of a delay caused by proper investigation.

Australian law does not impose the same automatic blocking-and-reporting obligation that OFAC imposes (requiring report to OFAC within 10 business days of blocking, as currently in force, verify before reliance), but there are reporting obligations that can arise under the AML/CTF framework and under the specific terms of the relevant sanctions programme. Identify which reporting channel applies before the situation develops. If there is any possibility that a transaction has already proceeded and may have involved a prohibited counterparty, take legal advice before making any voluntary disclosure – the timing and content of that disclosure can affect the regulatory outcome significantly.

The decision to stop a transaction is not a commercial one alone. Where AIS evidence, ownership-chain analysis, and insurance-coverage checks together indicate a meaningful probability of sanctions exposure, proceeding is not a risk that contract representations from the other side can transfer away. The myth that a seller's warranties and representations remove the buyer's own sanctions obligation is one of the most persistent misconceptions we encounter. A contractual indemnity does not shield a party from regulatory sanction for a breach it committed; it is a remedy between the parties, not a defence against the regulator.

For the comparable step-by-step analysis under the Canadian SEMA/JVCFOA regime, see our guide at ship-to-ship transfer risk under Canada.

The readiness check: does your programme cover every element?

Before approving any ship-to-ship transfer with an Australian nexus, a compliance programme should be able to answer yes to each of the following questions. These are not aspirational standards; they are the minimum requirements that a well-resourced enforcement inquiry will test against.

• Have you identified every Australian sanctions programme that applies to this transaction, including UNSC-implementing measures and autonomous thematic programmes?
• Have you screened every vessel, operator, technical manager, charterer, insurer, and financier against the DFAT consolidated list and the UN Consolidated List, using the current list version, and documented the results?
• Have you traced the ownership and control chain of every vessel and counterparty to the ultimate beneficial owner and confirmed that no designated person sits anywhere in that chain?
• Have you reviewed AIS data for the vessels involved, identified any anomalies, and either resolved them or escalated for a decision?
• Have you confirmed that valid insurance cover exists, that it has not been withdrawn, and that the insurer is not designated?
• Have you assessed the payment route for US dollar or other currency flows that introduce a parallel OFAC, OFSI, or EU analysis?
• Have you identified the applicable reporting obligations and confirmed that no obligation is currently running?
• Is the transaction file complete, dated, and retained in a form that is accessible for at least five years?

If the answer to any of these questions is no or uncertain, the transaction is not ready to proceed. In our practice, the gap that most frequently produces a late collapse is not the screen itself but the ownership-chain analysis – either because it was not done at all or because it stopped at the first corporate layer rather than tracing through to the ultimate beneficial owner.

We regularly advise multinationals, financial institutions, and exporters on exactly this analysis, across the Australian regime and in parallel with the US, UK, EU, and other regimes that apply to the same transaction. The multi-regime dimension is not optional for most cross-border transfers; it is where the real risk sits.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.