A Canadian mining company with a US dollar correspondent-banking relationship discovers – mid-transaction – that a payment it processed three weeks earlier may have touched a counterparty connected to an OFAC-listed entity. The in-house counsel asks two questions simultaneously: does this trigger a reportable apparent violation in New York, and does Canadian sanctions law impose a separate obligation in Toronto? The answers differ. Materially.
An apparent violation (a transaction or conduct that appears to contravene sanctions prohibitions, whether or not a final enforcement finding has been made) is assessed under distinct frameworks by OFAC and by Global Affairs Canada (GAC, the authority administering Canada's autonomous sanctions regime under the Special Economic Measures Act and related instruments). As of March 2026, both regimes require institutions to act quickly once a potential breach is identified – but the voluntary-disclosure mechanics, the aggravating and mitigating factors, and the penalty calculus diverge in ways that change the risk profile for cross-border businesses operating between the two jurisdictions.
This analysis compares the apparent-violation assessment process under OFAC with its Canadian equivalent, maps the points of divergence that matter most to practitioners, and sets out the risk flags that should prompt immediate counsel involvement.
What is an apparent-violation assessment, and why does framing matter?
An apparent-violation assessment is the structured process by which a business identifies, scopes, and characterises a transaction or activity that may breach a sanctions prohibition – before a regulator reaches the same conclusion independently. Under OFAC, this process is governed by the agency's enforcement guidelines, which set out the factors that determine whether a matter warrants a civil monetary penalty, a cautionary letter, or no action. The framing of the assessment – how the facts are characterised, which factors are surfaced, and how the voluntary disclosure is packaged – directly shapes that outcome.
Canada's approach under the applicable autonomous-sanctions instruments and GAC's enforcement posture is less codified than OFAC's. GAC does not publish a penalty matrix in the same form. That asymmetry creates a trap for cross-border compliance teams: the structured OFAC approach, if imported wholesale into a Canadian filing, may not map cleanly onto what GAC expects. In our experience, the businesses that handle cross-border apparent violations least well are those that treat the two processes as interchangeable.
Why does characterisation matter so much? Because the same set of facts – an inadvertent payment to an entity that turns out to be majority-owned by a listed person – can be characterised as a technical, first-instance, non-egregious matter under OFAC's guidelines and attract a cautionary letter, while the same conduct may constitute a strict-liability offence under the applicable Canadian regime that carries different consequences. The threshold question is not "did this happen?" but "how does each regime read what happened?"
How does OFAC conduct an apparent-violation assessment?
OFAC's apparent-violation assessment is structured around a published set of general and specific factors that the agency weighs to determine the appropriate enforcement response. The first determination is whether the conduct constitutes a voluntary self-disclosure (VSD) – a proactive report to OFAC before the agency becomes aware of the matter through other means – because a timely and complete VSD is treated as a significant mitigating factor and can reduce the base civil penalty by a substantial proportion.
The general factors OFAC examines include: whether the apparent violation was wilful or reckless, the harm caused to sanctions-programme objectives, the individual or entity's compliance history, the presence or absence of a sanctions compliance programme (a formal set of internal controls, policies, and procedures designed to prevent sanctions violations), and whether the matter was self-identified and promptly reported. Specific aggravating factors include concealment, senior management involvement, and a pattern of conduct. Specific mitigating factors include remediation, cooperation, and the sophistication of the compliance infrastructure that was in place.
Timing governs OFAC's process more than most cross-border compliance officers appreciate. The initial VSD should be submitted promptly – ideally within a short window after the violation is identified – and is typically followed by a more detailed report once the internal investigation is complete. OFAC's enforcement guidelines allow a second, fuller submission. Businesses that submit an incomplete initial report and then supplement it substantially months later risk the agency treating the disclosure as less forthcoming than the rules contemplate.
A practical point that we raise in every OFAC apparent-violation engagement: the base civil monetary penalty is calculated differently depending on whether the violation is deemed egregious. For a non-egregious matter with a complete VSD, the base penalty is set at a fraction of the applicable transaction value. For an egregious violation, the statutory maximum applies, and the VSD reduction is reduced. That distinction – egregious versus non-egregious – is the single most consequential output of the apparent-violation assessment, and it is determined partly by the quality of the documentation the business assembles during the assessment itself.
How does Canada's apparent-violation assessment differ in structure and authority?
Canada's sanctions-enforcement structure vests primary authority in GAC for the autonomous regimes under the Special Economic Measures Act and the Justice for Victims of Corrupt Foreign Officials Act, and in the Royal Canadian Mounted Police and the Public Prosecution Service for criminal-enforcement referrals. Unlike OFAC, GAC does not operate a stand-alone civil-penalty track with a published aggravating/mitigating factor matrix. Enforcement has historically proceeded through criminal prosecution rather than an administrative-penalty pathway, although the applicable Canadian instruments provide for significant penalties on conviction.
The absence of a published factor matrix has two consequences for apparent-violation assessment. First, businesses cannot reverse-engineer a likely penalty range from a set of aggravating and mitigating factors the way OFAC's guidelines permit. Second, the question of whether to make a proactive disclosure to GAC is more difficult to frame, because the anticipated benefit – in terms of enforcement outcome – is less predictable. In our cross-border practice, we see Canadian institutions and subsidiaries of US multinationals frequently underestimate this uncertainty and assume that an OFAC-style VSD will produce a comparable OFAC-style mitigation in Canada. That assumption is not reliable.
A further structural difference concerns the ownership and control test. Under OFAC, the 50 percent rule treats any entity owned 50 percent or more by one or more blocked persons, in the aggregate, as itself blocked – and the test is mechanical, not factual. Under the applicable Canadian regime, the prohibited-dealing analysis extends to entities owned or controlled by listed persons, and "controlled" can capture facts that fall below the 50 percent ownership threshold. A Canadian-incorporated subsidiary of a listed entity may therefore be caught under Canadian law even where the OFAC ownership analysis would not automatically block it. That divergence requires a separate leg of analysis in every cross-border apparent-violation assessment.
The position above covers the standard structural divergence. Your facts – the specific goods or services involved, the counterparty's incorporation and ownership chain, and the Canadian-law nexus – change the analysis significantly. For an early assessment of your cross-border exposure, contact Calder & Vance at info@caldervance.com.
Where do the aggravating and mitigating factors diverge most sharply?
The sharpest divergence between OFAC and GAC on apparent-violation assessment is in the published clarity of the factor analysis. OFAC's enforcement guidelines enumerate specific factors in two columns – aggravating and mitigating – and practitioners can use those columns to frame the internal investigation and the disclosure package. GAC's published guidance is less granular, which means the factor analysis in a Canadian apparent-violation assessment is more interpretive and more dependent on the nature of the conduct and the regulated sector involved.
On the OFAC side, consider the weight given to the existence of a five-element compliance programme – a programme built around management commitment, risk assessment, internal controls, testing and auditing, and training – as a mitigating factor. OFAC's guidance treats a well-designed, genuinely operational compliance programme as meaningful mitigation even where the violation occurred. A compliance programme that exists on paper but was not operationally implemented at the relevant time is treated as neutral or marginally aggravating. The distinction matters enormously to the apparent-violation characterisation, and it makes the quality of contemporaneous compliance documentation a central issue in every OFAC assessment.
Canada's enforcement posture places comparable weight on institutional good faith and on the steps taken after the apparent violation is identified, but the mechanism by which those factors translate into outcome is less transparent. There is no Canadian equivalent of OFAC's published penalty-reduction percentage for a timely VSD. What practitioners observe is that early proactive engagement with GAC, transparent cooperation, and prompt remediation are consistently treated as favourable – but the quantum of that benefit is not pre-announced in the way OFAC's guidelines pre-announce it.
One factor is structurally aggravating in both regimes: evidence that the apparent violation was the product of a deliberate decision to proceed despite known sanctions concerns, or that records were managed after the fact in a way that impedes the investigation. That conduct pushes both OFAC and GAC toward the most serious end of the enforcement response, regardless of the other factors in play.
What are the key risk flags in a cross-border apparent-violation matter?
In a matter that has both an OFAC nexus and a Canadian nexus, the risk flags that most frequently complicate the assessment are: a US-dollar clearing leg that triggers OFAC jurisdiction over what the business characterises as a purely Canadian transaction; a counterparty with an ownership chain that crosses the OFAC 50 percent threshold but not obviously the Canadian control test; and a disclosure timeline that satisfies Canadian law but is too slow for OFAC's VSD expectations, or vice versa.
The US-dollar clearing point deserves emphasis. OFAC's jurisdiction under IEEPA extends to any transaction that is processed through the US financial system, including correspondent-bank clearing of US-dollar payments. A Canadian exporter processing a payment in US dollars through a US correspondent bank is processing a transaction that OFAC can reach, regardless of whether the underlying commercial contract is Canadian in every other respect. We regularly advise Canadian businesses that are surprised to learn the extent to which their routine US-dollar operations create OFAC exposure.
A second risk flag is incomplete ownership mapping. An apparent-violation assessment under either regime is only as reliable as the underlying ownership data. Where the counterparty is incorporated in a jurisdiction with limited public registry data, or where the ownership chain runs through a series of holding companies, the assessment may be based on an incomplete picture. That incompleteness can become an aggravating factor in its own right if the regulator later concludes that the business had the means to obtain better information and did not use it.
A third risk flag, specific to the cross-border context, is the interaction between the OFAC assessment and any parallel Canadian criminal-enforcement referral. Where GAC refers a matter to Canadian law enforcement, the criminal investigation can proceed on a timeline that is entirely independent of the OFAC civil process. Statements made in an OFAC VSD submission, or documents produced in response to an OFAC administrative subpoena, may have implications for the parallel Canadian matter. Co-ordinating the two tracks – and taking advice on each separately – is not optional in a serious cross-border matter.
If a transaction has already been flagged internally, or if a regulator inquiry has arrived, an early legal review preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential initial assessment.
A cross-border apparent-violation: illustrative scenario
In a recent matter, a Canadian financial institution identified a series of historical payments that appeared to route through an intermediary entity connected to a person listed under both the applicable OFAC programme and Canada's autonomous-sanctions regime. The institution had processed the payments in US dollars through a US correspondent bank, creating a clear OFAC nexus in addition to the Canadian-law question. We were instructed to scope the apparent violation, advise on the disclosure timeline under each regime, and co-ordinate the parallel assessments.
The internal investigation surfaced an ownership question that turned on aggregation under the OFAC 50 percent rule: two listed persons each held a minority interest in the intermediary, but together they exceeded the threshold. Under OFAC, the intermediary was therefore blocked for the full period of the payments. Under the applicable Canadian analysis, the control question required a separate factual assessment because the two listed persons held their interests through different holding vehicles. The Canadian analysis was more intensive and took longer to complete.
On disclosure, the timelines diverged. The OFAC VSD was filed promptly, consistent with the agency's expectation of a timely initial report. The Canadian engagement with GAC followed a slightly different sequence, shaped by the criminal-referral risk and the need to co-ordinate with Canadian counsel. The matter illustrated, as clearly as any we have handled, that a cross-border apparent-violation assessment is two separate assessments running in parallel – not one assessment with two filing addresses. The outcome of the matter remains subject to the review process, and we do not characterise it as a guaranteed result for similarly situated clients.
A common misconception: one disclosure satisfies both regimes
The myth we encounter most frequently in cross-border enforcement mandates is that filing a VSD with OFAC, or notifying GAC, discharges the disclosure obligation across both regimes. It does not. The two obligations are legally independent. An OFAC VSD does not constitute disclosure to GAC, and a Canadian notification does not put OFAC on notice of the matter. A business that files with one authority and waits for instructions from the other risks the second regulator treating the matter as an undisclosed, independently discovered violation – which removes the mitigating value of proactive disclosure entirely.
A related misconception is that the OFAC VSD process produces a predictable timeline. In our experience, the time from initial filing to a final enforcement decision can extend significantly, particularly where the matter is complex, involves multiple counterparties, or raises questions about whether the conduct was egregious. Businesses that frame their internal communications – board reports, insurer notifications, regulatory filings in other jurisdictions – around an assumed OFAC timeline frequently need to revise those communications as the process extends. Managing stakeholder expectations around the enforcement timeline is itself a material part of the compliance-counsel role in a serious apparent-violation matter.
Related practices
- Apparent-violation assessment: EU service – enforcement defence and voluntary disclosure support for EU-nexus matters
- OFAC vs OFSI: Apparent-violation assessment compared – analysis of the divergent OFAC and OFSI enforcement frameworks
- OFSI vs EU: Apparent-violation assessment compared – UK and EU enforcement posture mapped against each other