What to do when anti-corruption authorities raid your Australian business

A knock at the door from officers carrying a warrant is one of the most stressful moments a compliance officer, founder, or in-house counsel in Australia can face. Whether the visit comes from the Australian Federal Police working with the Commonwealth Director of Public Prosecutions, from the Australian Securities and Investments Commission, or from a state integrity body such as the NSW Independent Commission Against Corruption, the rules of engagement differ from ordinary business crises. A search warrant executed at your Sydney headquarters or Melbourne office freezes decision-making, rattles staff, and exposes the company to criminal liability if anyone obstructs, destroys evidence, or tips off a suspect.

Preparation matters far more than improvisation. Companies that rehearse dawn-raid scenarios, keep their solicitors' numbers on speed-dial, and maintain clean document-management systems usually come through with operations intact and privilege preserved. Those who wing it risk crime scene tape across the foyer, weeks of forensic imaging, and a board crisis.

Recognise the authority behind the warrant

The first task is to identify who is at the gate. Australian regulators operate under different statutes and different powers, and the agency determines the scope of what officers can do. A warrant issued under the Crimes Act 1914 (Cth) or the Criminal Code allows federal police to search for and seize material reasonably believed to be evidential. ASIC officers, acting under the ASIC Act, may execute their own warrants in matters involving corporate misconduct, market manipulation, or false accounting. State bodies, including the Victorian IBAC, the Queensland CCC, and the WA Corruption and Crime Commission, hold their own coercive powers.

Ask the lead investigator for their name, agency, the warrant itself, and the statutory basis for entry. Read the warrant carefully. It should name the premises, the suspected offence, the material sought, and the issuing judicial officer. If the address is wrong or the warrant is vague, your solicitor may later challenge the seizure, but you should not refuse entry on that basis alone. Photograph the warrant, note the warrant number, and treat any request to enter without a warrant as a non-starter unless there is a genuine emergency. The calmer your front-of-house staff, the more likely officers follow the script and the less likely you lose material that should never have left the building.

Mobilise your legal and compliance team

Speed is everything. The moment a warrant is produced, someone with authority should be dialling the company's external solicitors and the general counsel or head of compliance. Australian practitioners will attend as quickly as traffic on the Eastern Distributor or the West Gate allows, and many firms run a 24-hour raid-response line for this scenario. While the lawyers are in transit, the most senior person on site becomes the liaison. They should shadow the officers, request that seized items be recorded, and ensure no employee is questioned alone without a support person present.

Pre-arrange who can lawfully make statements to investigators. In Australia, statements to police can be used in subsequent proceedings, and the absence of a caution does not mean an employee is off the record. Companies often brief a small, trained group, typically the company secretary, the head of legal, and a senior finance officer, to act as the only point of contact. Everyone else should be politely directed back to their desks and reminded, in a tone consistent with Australian workplace culture, not to discuss the matter with colleagues. If you need external expertise, the team at business-anti-corruption.org/contact.aspx can connect you with compliance specialists familiar with Australian proceedings.

Manage on-site conduct without obstruction

Australian law treats obstruction of a search as a serious offence, distinct from the matter under investigation. Staff must not hide files, delete emails, or move devices. They must not lock drawers, shut down servers, or ask officers to wait in reception while management "checks with head office." Such behaviour converts a witness into a target and can be charged under section 149.1 of the Criminal Code or equivalent state provisions.

Cooperation does not mean surrender. Your representative can ask officers to wait for legal counsel, request that personal devices belonging to employees be left alone, and ask that privileged files be placed in a sealed envelope pending a later ruling. Under the legal professional privilege rules recognised by Australian courts, communications between a client and a qualified solicitor for the dominant purpose of legal advice are protected. Officers cannot compel production of privileged material, and any attempt to read or copy such material on site should be noted in the raid log and raised with the issuing court afterwards.

Protect privileged material and sensitive data

Privilege is one of the most fought-over issues during a raid, and it is the issue most often mishandled. Before officers arrive, a company should have a clear map of where its legal files live: counsel's working files, board papers annotated for contemplated proceedings, and the personal notes of in-house lawyers. These should be physically separated from commercial files, clearly labelled "Privileged and Confidential — Legal Advice," and stored under access controls. If officers do open such a file, your solicitor can demand it be set aside for later adjudication by a registrar or judge.

Digital evidence raises sharper questions. Investigators may image entire servers, take laptops in their original bags, and copy mobile phones. Under the Privacy Act 1988 (Cth) and the notifiable data breaches scheme, you may have parallel obligations to the Office of the Australian Information Commissioner if personal information of staff or customers is exposed. Document the chain of custody for every device that leaves the premises, and ask for a receipt listing serial numbers, time of removal, and the officer responsible. The way a workplace has internalised attitudes to oversight will shape the conduct you see during a raid, a question explored in cultural hegemony and compliance.

Document everything in real time

Memory fades and officers will record their own version of events. Designate a single trusted person, often a compliance officer, to keep a contemporaneous log: who arrived, when, the make and model of the warrant, the items requested, the rooms entered, the questions asked, and the answers given. Note any threats, promises, or inducements, and any refusal by officers to allow private legal consultation. Photograph the warrant, the boxes as they are packed, and the seals on the boxes at the moment they leave.

This log is gold in any subsequent criminal or regulatory proceeding. It supports an application to exclude improperly obtained evidence, underpins a complaint to the Law Enforcement Conduct Commission, and gives your lawyers the raw material to negotiate the return of files or challenge the scope of the warrant. Lock down the premises after the officers leave, secure the rooms that were searched, and ask a forensic IT vendor to take a snapshot of any server that was accessed, ideally before staff return to their desks.

After the raid: preserve, assess, and cooperate

Once the officers are gone, the work begins. Issue a litigation hold to all relevant staff, suspending ordinary document-destruction policies. Identify the custodians whose files are likely relevant, communicate the hold in writing, and require acknowledgement. Engage an independent forensic accountant, briefed by counsel, to determine what was actually taken and what it means. The board should receive a frank, written briefing within days, and a decision should be made on whether to self-report to the regulator.

Cooperation is rewarded in Australia, though not in every jurisdiction to the same degree. ASIC and the AFP publish guidance on cooperation, and reduced penalties or deferred outcomes are available where a company moves quickly, identifies wrongdoers, and remediates. Cooperation must be disciplined: anything you say can be used. All communications with investigators should be routed through counsel, all interviews rehearsed, and all documents produced from a controlled repository. For companies operating across borders, the country risk profiles maintained by the portal help frame the local law enforcement environment in markets where subsidiaries may be raided in parallel.

Hardening the program to reduce future exposure

The most valuable outcome of a raid is a stronger compliance program. Begin with a board-level review of anti-bribery and anti-corruption controls, mapped to Australian Standard AS 8001-2008 and benchmarked against the Commonwealth fraud and corruption control guidelines. Refresh training for staff on gift-giving, hospitality, facilitation payments, and dealings with foreign public officials. Update third-party due diligence so that agents, joint-venture partners, and consultants are screened against sanctions lists, adverse media, and beneficial ownership registers.

Tighten the speak-up culture. Whistleblower protections under the Corporations Act 2001 (Cth) require public companies and large proprietary companies to have a compliant policy, and a raid is often the moment that policy is tested. Run a dawn-raid simulation in your Brisbane or Perth office once a year, with external counsel role-playing as investigators. The first time you meet a search warrant should not be the day it is served. Companies that treat the raid as a moment to learn, rather than a moment to hide, tend to emerge with their licences, reputations, and staff intact, and regulators notice the difference.

For organisations with regional offices, a similar knock may come from local police in markets with different procedural norms. A useful primer on practical authority procedures provides a comparative starting point, though Australian counsel must always lead the response on Australian soil. The wider resources at business-anti-corruption.org round out the picture with country-specific risk profiles, e-learning, and due diligence tools that complement a board-level review.

The headline to carry into the next board meeting is simple. Identify the authority, ring the lawyers, protect privilege, document everything, and cooperate through counsel. Those five habits, practised before officers arrive at the loading dock, will determine whether the morning ends in a crisis or a controlled process. In the long run, the value of a calm, principled response to a search warrant is measured in licence renewals, banking relationships, and contracts that survive the next integrity audit.