Once just a marketplace, the financial system is now a weapon of statecraft. Australia’s financial regulators hold the data that shows where the country is most exposed. That intelligence is a national-security asset but sits outside the security system.
Russia shows why that matters. Sanctioned over Ukraine, Moscow has kept its oil trade alive through a shadow fleet of ageing tankers operating outside Western shipping, insurance and finance. Layers of shell ownership hide who is behind each cargo.
That fleet now carries about two-thirds of Russia’s seaborne crude exports. The European Union and the United States have blacklisted hundreds of the vessels, but this has barely dented the trade.
A report by the Center for Strategic and International Studies on the financial grey zone describes the wider pattern. Competitors do not just move money and obscure its source; they also trace how economies depend on one another and where the leverage lies.
This financial targeting is not abstract for Australia. In 2020, China placed tariffs on Australian barley and wine – among other goods – amid a diplomatic dispute. That episode worked through trade, but finance offers quieter means.
For example, a foreign state-backed firm could buy up the debt of companies in Australia’s critical-mineral supply chains. That stake becomes a lever over boardroom decisions or the threat of sudden capital flight during a geopolitical standoff. Aggregate enough of a nation’s payment and debt records and the data becomes a resource for economic coercion.
Australia already holds the data in its regulators’ own books. Flows of payments reveal economic dependencies. Credit exposures show where risk concentrates. Inflows of foreign capital hint at the priorities of the institutions behind them. Together, they form a security map. It is filed under finance.
The bodies that watch Australia’s financial system come from a calmer age. The law gives the Australian Prudential Regulation Authority one job: to protect depositors, policyholders and superannuation members. It has no national-security mandate. The Council of Financial Regulators coordinates the prudential regulator, the Australian Securities and Investments Commission, the Reserve Bank and Treasury. It is non-statutory and holds no formal powers. None of it connects to the National Security Committee of Cabinet.
Financial stability is their brief. That is a matter of design, not failure. National security was never their job.
The 2026 National Defence Strategy begins to bridge the two, naming economic security as a priority domain alongside civil preparedness and fuel security. Finance underpins all three. The regulators’ mandates predate that framing.
Australia isn’t starting from nothing. The Foreign Investment Review Board screens foreign investment on national-security grounds. Parts of the payments architecture fall under the country’s critical infrastructure laws, but these secure the plumbing, not the data moving through it. The Australian Transaction Reports and Analysis Centre tracks transactions for police and counter-terrorism work. Each agency runs successfully in its own legal remit, seeing its immediate piece – a deal, a network, a transfer. But the pieces are not the asset; the pattern is.
A single transaction means little on its own. Read together, those records would show which sectors a rival could squeeze and how one disruption would spread. Australia’s export earnings rest on a handful of commodities and trading relationships. A deliberate shock to any one of them would run through bank balance sheets and superannuation funds in ways only the regulators’ files would show. No one is mandated to read it as a security map.
Few of Australia’s partners have fully closed that gap. Among the Five Eyes, the US has gone furthest. Its treasury runs a dedicated office that uses sanctions as tools of national security. One part of it sits inside the intelligence community. This unit scans financial flows for strategic warning – not just law enforcement – and identifies vulnerabilities before they are exploited. Britain took a similar step in 2016, housing sanctions implementation inside its treasury explicitly to that end. Both countries’ actions will allow their governments to see pressure forming and act before it lands.
The designs differ, but the principle is the same. Money and security belong on the same desk. In Australia, they sit at separate ones. Closing that gap needs legislation, not a new institution. But what it would take first is recognising the map for what it is. In the grey zone, others are already reading it.