The ASIC Deregistration Trap: When Your Supplier Does Not Exist Anymore

Two Registers, One Dangerous Gap

Australia's business registration system involves two principal registers maintained by two different agencies. The Australian Business Register (ABR), administered by the Australian Taxation Office, records ABNs. The ASIC register, administered by the Australian Securities and Investments Commission, records company registrations (ACNs). For a company — as opposed to a sole trader, trust, or partnership — both records exist, and they are not always synchronised.

This creates a practical problem for anyone relying solely on an ABN lookup to verify a supplier: a company can be deregistered in the ASIC register while its ABN record in the Australian Business Register continues to show as active. The ABN lookup returns a green light. The supplier does not legally exist.

What Deregistration Actually Means

When ASIC deregisters a company, the company ceases to exist as a legal entity. Section 601AD of the Corporations Act 2001 makes this explicit: a deregistered company cannot own property, cannot enter contracts, cannot sue, and cannot be sued. Any assets it held at the time of deregistration vest in ASIC.

This has direct consequences for any payment made to a deregistered company:

• The company cannot legally receive the payment — it has no legal capacity
• The payment cannot be recovered through standard commercial processes because there is no entity to sue
• If the payment was for services that were not rendered (which is common in fictitious supplier fraud), recovery options are extremely limited
• If your business claimed a GST credit on an invoice from a deregistered company, that credit may be disallowed by the ATO on audit

Why Deregistered Suppliers Still Appear on Vendor Lists

Long-standing suppliers that have been active in a business's accounting system for years are often not re-verified. If the company is wound up — whether solvent or insolvent — accounts departments frequently continue to receive invoices from associated parties (former directors, related entities) that reference the original supplier name and ABN. Without cross-checking the ASIC register, there is no way to know the company is gone.

The more dangerous scenario involves deliberate exploitation. A fraudster who knows that a deregistered company's ABN is still showing as active in the ABR can present invoices using that ABN with some confidence that the recipient's ABN check will return a positive result. The ASIC deregistration is invisible to anyone who only checks the ABR.

How Common Is This?

ASIC deregisters between 2,000 and 4,000 companies per month in Australia. The reasons include voluntary deregistration (a company that has wound up), court-ordered deregistration (following a winding-up application), and administrative deregistration (for failure to lodge annual returns). At any given time, tens of thousands of companies are in various states of deregistration that may not yet be reflected in the ABR record.

This is not a rare edge case. For a business processing more than a handful of invoices per month, the probability of encountering a deregistered supplier in their vendor base — or attempting to onboard one — is non-trivial.

The GST Complication

A deregistered company is also automatically deregistered for GST. This means that any invoice it issues — legitimately or fraudulently — cannot include a valid GST charge. If your business has claimed input tax credits on invoices from a deregistered company, the ATO may require those credits to be repaid, plus interest and potentially penalties.

The ATO's position is consistent: input tax credits can only be claimed on tax invoices issued by GST-registered entities. A deregistered company is not GST-registered. Its invoices are not tax invoices for GST purposes, regardless of what they say on their face.

Detecting Deregistration Before It Becomes a Problem

The ASIC register is publicly searchable, and the data is available in bulk through data.gov.au. Gumshoe cross-references every company ABN against the ASIC bulk data extract — which includes company status, registration date, and deregistration date — as part of the standard address check.

A deregistered company returns a FAIL on the address check, with the deregistration date prominently displayed. This check happens alongside ABN status, GST registration, web presence, domain age, and email infrastructure — in a single 60-second verification that produces a report your accounts team can act on and your auditors can review.

What to Do If You Discover a Deregistered Supplier

If a supplier in your vendor master is deregistered:

• Flag the vendor record immediately and suspend payment processing
• Investigate recent invoices from that supplier for the past 12 to 24 months
• If you have paid invoices to a deregistered company, seek legal advice on your recovery options and potential GST implications
• If you believe fraud was involved, report to the ACCC Scamwatch and the ACSC
• Notify your insurer — payment to a deregistered entity may be covered under your trade credit or crime policy

The best outcome, of course, is to detect deregistration before any payment is made. Building ASIC cross-referencing into your supplier verification process costs nothing in time or money with the right tooling — and eliminates the exposure entirely.