Australia's terrorism insurance pool sees rare dual activation

For two decades, Australia’s national terrorism reinsurance scheme remained largely inactive, serving as a dormant backstop for an industry that had largely moved on from the immediate shock of the early 2000s. That status quo was broken this summer when the Australian Reinsurance Pool Corporation (ARPC) issued two separate formal declarations within a six-week period. The first followed the attack at Bondi Beach in December 2025, and the second responded to an attempted bombing in the Perth CBD in January 2026.

According to reporting from GN geopolitics/terror (en-US), neither incident generated claims large enough to exhaust the pool’s reserves, yet their frequency marks a significant departure from the scheme’s history. Since its inception in 2003, the mechanism had only been activated once before, during the Lindt Café siege in 2014. The recent double activation suggests that the risk landscape the infrastructure was designed to address is becoming less rare and more frequent than originally anticipated.

Origins of the reinsurance framework

The creation of this safety net was a direct response to the global withdrawal of terrorism cover by reinsurers following the September 11 attacks in the United States. In Australia, commercial insurers began attaching exclusions to property and liability policies in 2002, leaving a significant portion of the commercial sector exposed. The urgency of the situation was heightened by the Bali bombings later that year, which killed 202 people, including 88 Australians.

Parliamentary records from that period warned that without government intervention, terrorism risk might become completely uninsurable for many businesses. Consequently, the Terrorism Insurance Bill passed quickly, and the ARPC began operations in July 2003. The structure was designed to override private exclusions once the Treasurer declared an incident, allowing insurers to recover eligible losses through a pool backed by government guarantees and premium reserves.

Mechanics of recent declarations

The declaration process is formal and specific. In the case of the Bondi Beach incident, ARPC chief executive Dr. Christopher Wallace noted that the pool exists to safeguard the market from the financial impact of rare but severe events. The declaration for this incident was issued two days after the attack, with a reduction percentage set at zero, meaning there was no cap on the amount insurers could recover from the pool.

The second declaration, triggered by the Perth incident, followed a similar procedural path. ARPC confirmed that no property damage or insured losses were expected from that specific event. However, the necessity of invoking the act again so soon after the first instance underscores the operational reality that the system is now being tested under conditions its designers hoped would remain hypothetical.

Evolution of the pool's mandate

The role of the ARPC has also expanded beyond its original scope. In 2022, legislation was amended to rename the act and assign the corporation a second responsibility: administering a cyclone reinsurance pool. This addition allows the ARPC to manage coverage for cyclone and flood damage to homes and small businesses, diversifying its function within the national insurance infrastructure.

As the total protection provided by the scheme has grown from an initial $10.3 billion to roughly $13.4 billion, the frequency of its activation becomes a critical indicator of market confidence. The recent events do not signal a crisis of solvency, but rather a validation of the infrastructure's necessity. The question now is whether the increased frequency of declarations will lead to a reassessment of how terrorism risk is priced and perceived in the broader commercial property sector.