Skip to main content
Geopolitics & DefenseNational Security

Australia's Financial Data Sits Unconnected to National Security

A large, ageing tanker vessel surrounded by cranes and cargo containers in a shipping yard under daylight.

That fleet now carries about two‑thirds of Russia’s seaborne crude exports.

Russia’s shadow fleet and the financial grey zone

Sanctioned over Ukraine, Moscow has sustained oil exports through a shadow fleet of ageing tankers operating outside Western shipping, insurance and finance, the source reports. Layers of shell ownership hide who is behind each cargo. The European Union and the United States have blacklisted hundreds of the vessels, but that action has “barely dented the trade.”

Those tactics are not just maritime; they are an illustration of a wider pattern described by the Center for Strategic and International Studies: competitors move money and obscure its source, and, crucially, they trace how economies depend on one another to find leverage. The lesson for Australia is that financial flows can be weaponised in ways trade sanctions or tariffs only partly capture.

Australia’s financial regulators: mandates and seams

Australia already holds the raw material for strategic insight. Payment flows, credit exposures and foreign‑capital inflows sit in the registers and reports of the country’s financial regulators; read together, "they form a security map." Yet the law defines those agencies’ responsibilities narrowly. The Australian Prudential Regulation Authority’s statutory job is to protect depositors, policyholders and superannuation members; it has no national‑security mandate. The Council of Financial Regulators coordinates the prudential regulator, the Australian Securities and Investments Commission, the Reserve Bank and Treasury, but it is non‑statutory and holds no formal powers. None of these bodies connects to the National Security Committee of Cabinet.

Other mechanisms touch parts of the system: the Foreign Investment Review Board screens foreign investment on national‑security grounds; parts of the payments architecture fall under critical‑infrastructure laws; and the Australian Transaction Reports and Analysis Centre tracks transactions for police and counter‑terrorism work. Each runs "successfully in its own legal remit, seeing its immediate piece – a deal, a network, a transfer." But the report warns the pieces are not the asset; the pattern is.

The 2026 National Defence Strategy reframes economic security

The 2026 National Defence Strategy begins to bridge this gap by naming economic security as a priority domain alongside civil preparedness and fuel security. Finance, the source notes, underpins all three priorities. Yet the regulators’ mandates largely predate that framing, meaning that the institutions holding the necessary data are not, by law, tasked with treating it as a national‑security intelligence asset.

How the US and UK have put money and security on the same desk

Among the Five Eyes, the United States has gone furthest in integrating finance into security. The source describes how "its treasury runs a dedicated office that uses sanctions as tools of national security," and that one part of that office sits inside the intelligence community. That unit scans financial flows for strategic warning and identifies vulnerabilities before they are exploited. Britain took a similar step in 2016, housing sanctions implementation inside its treasury explicitly to that end. The source draws a simple principle from those models: money and security belong on the same desk.

What this means for the Australian Prudential Regulation Authority, the Council of Financial Regulators, and the Australian Transaction Reports and Analysis Centre

  • For the Australian Prudential Regulation Authority: its legal mandate today is prudential protection, not national security; closing the gap will require legislation rather than merely reshaping existing responsibilities.
  • For the Council of Financial Regulators: as a non‑statutory coordinator it lacks formal powers and, according to the source, does not connect to the National Security Committee of Cabinet—a structural limit on treating aggregated financial data as strategic intelligence.
  • For the Australian Transaction Reports and Analysis Centre: its role in tracking transactions supports police and counter‑terrorism work but, as described in the source, those protections "secure the plumbing, not the data moving through it"—meaning the analytic pattern across records is not currently a mandated security product.

Australia’s export earnings "rest on a handful of commodities and trading relationships," the source notes, and the country has seen trade coercion before—when, in 2020, China placed tariffs on Australian barley and wine among other goods during a diplomatic dispute. The report’s central argument is practical rather than rhetorical: the nation already possesses the data required to map economic vulnerabilities; the remaining steps are legal and organisational. Closing the gap, the source concludes, "needs legislation, not a new institution"—but first the map must be recognised for what it is, because in the grey zone others are already reading it.

Source: A national‑security asset, filed under ‘finance’ — The Strategist / ASPI