A Singapore-registered trading house agrees terms with a prospective buyer in a third market. The compliance team screens the buyer, clears the direct entity, and approves the transaction. Six months later, the firm's correspondent bank in New York flags the payment. The buyer's parent – three layers up the ownership chain – has appeared on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The Singapore firm is now caught between its own regime's requirements, a correspondent bank operating under US rules, and a buyer that disputes the designation entirely. Which set of rules governs? Who decides? And what should the firm have done before it signed?
Counterparty due diligence under Singapore explained: Singapore applies UN Security Council-mandated measures through the Monetary Authority of Singapore and the Ministry of Foreign Affairs, and it maintains autonomous targeted financial sanctions administered under the applicable domestic instrument. As of July 2026, the regime is narrower in autonomous reach than OFAC or the EU Council, but Singapore-based businesses are routinely exposed to extraterritorial US secondary-sanctions risk and to OFSI requirements where they have UK-nexus transactions, making a single-regime screening approach inadequate.
This analysis sets out the governing authority and legal basis under the Singapore regime, the ownership and control tests applied across Singapore, OFAC, and the EU, the divergences that matter most in practice, and the risk flags that should prompt early advice from a sanctions lawyer or compliance counsel.
What governs counterparty due diligence in Singapore?
Singapore implements UN Security Council resolutions through the United Nations Act, with each resolution given domestic effect by subsidiary order. The Monetary Authority of Singapore administers financial-sanctions obligations for the financial sector; MAS-regulated entities must freeze funds and assets, refrain from dealing, and report holdings in line with the applicable Singapore sanctions instrument. The Ministry of Foreign Affairs oversees the broader application of UN-derived measures to non-financial sectors.
Beyond the UN-derived layer, Singapore maintains autonomous targeted financial sanctions. These measures follow UN-mandated programmes and, in select cases, supplement them. The autonomous list is materially shorter than the SDN List or the EU consolidated list, and it is updated less frequently. That gap is important. A counterparty not appearing on the Singapore lists may still be designated under OFAC, EU, or UK regimes – and a Singapore firm transacting through the US dollar clearing system, or with a UK-regulated counterparty, faces obligations under those external regimes regardless of its own register's silence.
MAS has issued guidance making clear that regulated entities are expected to conduct counterparty due diligence (an assessment of the sanctions status, ownership structure, and transaction purpose of the other party to a transaction) as part of their anti-money-laundering and countering the financing of terrorism obligations. That guidance cross-references the Singapore sanctions lists and UN measures but does not replicate OFAC's detailed interpretive guidance on ownership aggregation. Practitioners advising Singapore-based clients note that this creates real uncertainty at the edges.
The position above covers the standard case. Your facts – the counterparty's domicile, the payment currency, the correspondent banking chain, and the sector – will change the analysis significantly.
For an assessment of your cross-regime exposure in Singapore and beyond, contact Calder & Vance at info@caldervance.com.
How do the ownership and control tests diverge across Singapore, OFAC, and the EU?
The ownership and control test is where the three regimes diverge most sharply, and where counterparty due diligence most commonly fails.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) is mechanical. If blocked persons own, in aggregate, 50 percent or more of an entity – directly or through intermediate holding companies – that entity is itself treated as blocked, regardless of whether it appears on any list. The test is pure arithmetic. Intention and management are irrelevant to it. Aggregation across multiple blocked shareholders is required: two SDN-listed persons each holding 26 percent of the same target cross the threshold together, even though neither does alone. OFAC's position derives from IEEPA-based authority and is stated in guidance that is widely relied upon in cross-border practice.
The EU applies a different test. Under the relevant Council regulations, an entity is caught not only when a designated person owns it at a defined threshold but also when that person controls it – meaning they can determine its decisions, even without majority ownership. Ownership and control (the EU and UK test by which a non-listed entity may be caught through a listed person's decisive influence) can reach a target at below 50 percent. Control indicators include board appointment rights, veto powers over strategic decisions, and contractual dominance. In our cross-border practice, we regularly advise EU-nexus clients who have cleared the ownership arithmetic but missed a control indicator that rendered the counterparty caught.
The UK position under OFSI broadly mirrors the EU approach. OFSI's guidance addresses both ownership – applying a 50 percent or more threshold – and control, including indirect control through influence over the entity's affairs. Where a designated person can direct or substantially influence the decisions of a non-listed entity, that entity may itself be treated as caught. OFSI's guidance does not require a precise percentage for control; the analysis is qualitative.
Singapore's domestic instrument does not articulate an ownership-aggregation rule as precisely as OFAC's guidance, nor does it set out the EU-style control indicators. MAS guidance addresses the prohibition on dealing with listed persons and entities they own or control, but the detailed mechanics – how to aggregate indirect holdings, how to assess board-level control – are left to regulated entities to apply by reference to best international practice. In our experience, this means that Singapore-based firms often default to list-matching without tracing the ownership chain beyond the first corporate layer. That approach is insufficient under both the Singapore regime's spirit and the extraterritorial rules that will apply to most commercial transactions of any scale.
Where do the regimes diverge on counterparty due diligence?
The divergences fall into four categories: list scope, ownership mechanics, control tests, and reporting obligations.
List scope. OFAC's SDN List and OFAC's Non-SDN lists together form a substantially larger designations universe than Singapore's autonomous list. The EU consolidated list, similarly, draws on Member State autonomous measures and UN measures across a broader range of programmes. A counterparty that is UN-listed will be captured by all three regimes. A counterparty designated under OFAC's autonomous programmes – including, for example, certain proliferation-related designations or entries under executive-order-based programmes not replicated in UN measures – will appear on the SDN List but not necessarily on the Singapore list. Singapore-based firms relying solely on the Singapore/UN list therefore carry a gap risk relative to their OFAC exposure on USD-denominated transactions.
Ownership mechanics. As set out above, OFAC's 50 percent rule requires aggregation of all blocked-person holdings at every layer of the ownership chain. Singapore's guidance does not specify an equivalent aggregation methodology. EU rules require a case-by-case analysis that can reach further where control is exercised below majority ownership. A counterparty that clears Singapore's list-matching screen may still be caught by OFAC's aggregation rule or by the EU's control analysis.
Control tests. The EU and UK apply qualitative control tests that go beyond ownership arithmetic. Singapore's domestic guidance identifies ownership and control as relevant criteria but does not specify the indicators that establish control in the EU/UK sense. OFAC's ownership test is largely arithmetic; its guidance does address certain control questions but applies them differently from the EU model.
Reporting obligations. Under OFSI, a regulated entity that knows or suspects it holds funds or economic resources owned or controlled by a designated person must report that to OFSI within a short statutory window. OFAC-regulated persons face parallel reporting requirements. Singapore requires reporting of frozen assets and known or suspected breaches to MAS. The deadlines and procedural steps differ between regimes, and in a multi-regime situation the strictest obligation governs timing across the board.
If a transaction has already been flagged, or a payment has been refused by a correspondent bank, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.
Which regime is stricter on counterparty due diligence?
No single regime is uniformly stricter across every dimension, and the answer turns on the transaction's facts – currency, counterparty location, sector, and the firm's own regulatory footprint.
OFAC's extraterritorial reach is the most practically consequential for Singapore-based businesses transacting in US dollars. The USD correspondent banking system draws virtually every significant commercial payment through US-regulated institutions. Those institutions apply OFAC rules, which means that even a transaction between two non-US parties will be screened against OFAC's lists and OFAC's ownership rules if it clears in USD. A Singapore firm may be compliant with its own domestic obligations and still have a payment rejected because OFAC's 50 percent rule captures the counterparty's parent. That is not a theoretical risk; it is a routine operational challenge in our practice advising Singapore and Asia-Pacific based trading businesses.
The EU regime is stricter than OFAC in its control analysis. Where a designated person exercises decisive influence over a non-listed entity, EU rules may treat that entity as caught even when the ownership arithmetic does not reach 50 percent. For businesses with EU-nexus transactions – buying from EU suppliers, selling to EU buyers, or operating through EU-incorporated subsidiaries – the EU control test is the binding constraint.
OFSI's approach is comparable to the EU on ownership and control but applies only to UK-nexus transactions. For businesses with a significant UK trade flow or a UK-regulated correspondent bank, OFSI's guidance is directly relevant.
The practical conclusion is that the stricter prohibition governs for any given transaction. Where US dollars clear through New York, OFAC rules apply. Where the transaction has EU connectivity, EU rules apply. Singapore's own regime is the minimum floor, not the ceiling. We regularly advise multinationals operating in Singapore who are surprised to learn that their domestic compliance programme does not satisfy the extraterritorial obligations their transaction profile attracts.
What are the key risk flags in Singapore counterparty due diligence?
Risk flags in counterparty due diligence are the indicators that should elevate a transaction from routine list-matching to enhanced investigation. In our experience, the following patterns produce the highest proportion of missed hits.
Opaque ownership chains. A counterparty incorporated in a jurisdiction with limited public registry disclosure may have layers of holding companies between the operating entity and a beneficial owner. List-matching the operating entity only will not detect a designated person two or three layers up. Enhanced due diligence should trace the ownership chain to the natural-person level, applying OFAC's 50 percent aggregation rule and the EU's control test as parallel checks even where the primary obligation is under Singapore's regime.
UN-listed sectors. Transactions in sectors subject to UN-mandated sector-wide prohibitions – including certain arms-related activities, specific commodities under UN resolutions, and financial transactions connected to proliferation-designated entities – carry a categorical risk that is independent of list-matching. A counterparty need not be individually listed for a transaction in a prohibited sector to breach UN-derived obligations applicable in Singapore.
Third-party payment and routing patterns. Where payment does not flow directly between the contracting parties – for example, where a third party pays on behalf of the counterparty, or where goods are re-routed through an intermediate jurisdiction – the additional parties to the payment chain require screening in their own right. Correspondent banks applying OFAC rules will screen every party in a payment message, not only the named beneficiary.
Dual-use goods and export-control overlap. Singapore is a party to several multilateral export-control arrangements. Where a transaction involves goods or technology with potential dual-use applications – goods that have both civilian and military end uses – export-control screening is required alongside sanctions screening. The two bodies of law interact: a counterparty that is not sanctions-listed may still be an impermissible end-user under applicable export-control rules, and a transaction that is sanctions-clean may require an export licence before it can proceed.
Stale screening data. Sanctions lists are updated without advance notice. A counterparty that was clean at the point of contract may be designated between signing and payment. Screening at the point of transaction execution – not only at onboarding – is the standard for regulated entities and is good practice for unregulated businesses in high-risk sectors.
How does secondary-sanctions risk affect a Singapore business?
Secondary-sanctions risk refers to the risk that a non-US business engaging in transactions involving a target of US sanctions – even without a direct US nexus – may face OFAC consequences, including loss of access to the US financial system. For Singapore-based businesses, this risk is most acute in two scenarios.
The first is the USD correspondent banking channel, described above. The second is the relationship with US-regulated financial institutions more broadly. A Singapore firm that is identified as facilitating significant transactions with an OFAC-designated entity, or with a party that OFAC's 50 percent rule treats as blocked, may find that US-regulated correspondent banks restrict or terminate their relationship with the firm itself. That is the core secondary-sanctions exposure: not a direct OFAC enforcement action against the Singapore firm, but operational exclusion from the US-linked financial system.
In our cross-border practice, we advise Singapore-based clients that secondary-sanctions risk requires a risk-based programme that goes beyond the Singapore domestic list. That programme should: maintain an OFAC-calibrated ownership analysis for high-value and high-risk counterparties; apply USD-payment screening at OFAC sensitivity for all USD-denominated transactions; and document the due-diligence steps taken so that, if a correspondent bank queries a payment, there is a contemporaneous record demonstrating a reasonable compliance process.
The question that compliance officers most commonly ask us is whether maintaining two screening processes – one to Singapore and UN standards, one to OFAC standards – is commercially feasible for a mid-size trading business. The answer is that for most such businesses the practical solution is a single screening programme calibrated to the most demanding applicable standard, with proportionate enhanced due diligence for high-risk transactions. That approach is more efficient than operating two parallel systems and more defensible if a regulator or correspondent bank asks about the firm's compliance methodology.
A common misconception: Singapore compliance means global compliance
The myth we encounter most often from Singapore-based clients is that satisfying MAS guidance and screening against the Singapore and UN lists constitutes full compliance for their cross-border operations. It does not.
Singapore compliance satisfies Singapore's domestic obligations. It does not address the extraterritorial reach of OFAC, the EU control test, OFSI's ownership-and-control analysis, or the export-control requirements that apply where goods with dual-use potential are involved. A Singapore firm that is fully compliant with its domestic regime can still have a payment blocked by a US correspondent bank, face a query from an EU-regulated buyer's compliance team, or inadvertently provide services to a party that OFSI treats as designated through the control test.
The correction is straightforward in principle, though it requires discipline in execution. The firm must identify its transaction profile – where it transacts, in what currency, with what counterparty locations – and calibrate its screening and due-diligence programme to address the regimes that those transactions engage. A Singapore-only programme is adequate for a firm with genuinely Singapore-domestic transactions and no USD clearing dependency. That describes very few businesses of any commercial significance in the current trading environment.
We have acted for Singapore-incorporated businesses across trading, financial services, and logistics that have redesigned their compliance programmes to cover the full regime exposure their transaction profile creates. The starting point is always the transaction map, not the regulatory checklist.
Related practices
- Sanctions compliance audit and testing (Australia) – testing screening logic and programme design across the Australia/DFAT regime and comparable Asia-Pacific frameworks
- Counterparty due diligence under the UAE regime – a parallel analysis of ownership, control, and multi-regime exposure for UAE-nexus transactions
- Crypto and VASP compliance under EU sanctions – screening and ownership-tracing obligations for virtual-asset businesses operating across EU and extraterritorial regimes