A trading company based in the United Kingdom runs a standard screening check before settling a payment to a supplier in a third market. The check returns no direct hits. The payment proceeds. Six months later, a review of the supplier's ownership chain reveals that a listed person holds forty-three percent of the entity, and a connected party – separately listed – holds a further twelve percent. The company did not block funds it was required to block. It may now face an enforcement referral to OFSI (His Majesty's Treasury's Office of Financial Sanctions Implementation, the UK authority responsible for financial sanctions administration and enforcement).
Under UK financial sanctions, a non-listed entity can be caught where listed persons own or control it. The ownership limb of the test does not set a single mechanical fifty-percent threshold in the same way OFAC does; instead, OFSI applies an ownership-and-control analysis that looks at both the aggregate share of listed-person ownership and whether a listed person can otherwise exert control. That divergence from the US position is the single most common gap we identify in cross-border screening programmes.
This analysis explains how the 50 percent rule and ownership analysis under OFSI actually operates, where it departs from the US and EU positions, what the risk flags look like in practice, and what a compliance programme must do to close the gap. As of mid-2026, OFSI's enforcement posture has become materially more active; the analysis is current to that date but verify the position before relying on any specific point.
What is the OFSI ownership-and-control test, and how does it work?
OFSI's ownership-and-control test treats a non-listed entity as subject to the same asset-freeze and dealing prohibitions as a listed person where a designated person owns or controls it. Ownership and control are separate questions; satisfying either limb is sufficient to capture the entity.
On the ownership side, OFSI's approach looks at the aggregate direct and indirect share of the entity held by listed persons. Where that aggregate reaches or exceeds fifty percent, the entity falls within the prohibition without any further analysis. That much mirrors the US approach. But the question does not stop there.
The control limb is broader and less mechanical. A listed person may control an entity without holding any ownership stake at all. The relevant test under UK sanctions law – primarily SAMLA (the Sanctions and Anti-Money Laundering Act 2018) and the thematic regulations made under it – includes the ability to ensure that the affairs of the entity are conducted in accordance with the listed person's wishes. Board appointment rights, veto provisions in shareholders' agreements, economic dominance through loan arrangements, and contractual control over operating decisions can all satisfy this test.
In our experience, compliance teams trained on OFAC's rule treat the control analysis as a bonus check rather than a primary one. That is incorrect under OFSI. We regularly advise businesses that have screened on ownership alone and concluded that a thirty-eight-percent listed-person stake is outside the prohibition – without examining whether that same person holds a casting vote in the supervisory board or can block any resolution to distribute profits.
A further practical point: OFSI applies an aggregation approach to the ownership limb. Two listed persons each holding twenty-seven percent of the same entity together reach the fifty-percent threshold, even if neither does individually. Screening tools that run each listed person against the target independently, without aggregating co-listed holders, will miss this pattern every time.
How does the OFSI test compare with OFAC's 50 percent rule?
The OFAC 50 percent rule (the rule under which OFAC treats entities owned fifty percent or more in the aggregate by blocked persons as themselves blocked, whether or not the entity appears on the SDN List) is more mechanical than the OFSI standard and deliberately so. OFAC has confirmed in its guidance under IEEPA that the test is purely arithmetic: aggregate the ownership interests of all blocked persons across direct and indirect layers; if the total reaches or exceeds fifty percent, the entity is blocked. Intention, management, and operational independence do not enter the analysis.
OFSI's test preserves that ownership limb but adds the control dimension. The practical consequence is that a target can be captured in the UK but not in the US – for example where a listed person holds forty percent of an entity but exercises de facto control through contractual rights. Equally, an entity can be blocked in the US because two listed persons hold an aggregate of fifty-one percent, yet OFSI might reach a different conclusion if control is genuinely dispersed.
The position for the EU is again different. EU sanctions regulations – the relevant Council regulations implementing asset freezes against listed persons – use the phrase "owned or controlled, directly or indirectly" and delegate substantial interpretive weight to national competent authorities. In practice, some EU member state authorities apply a test closer to OFAC's arithmetic approach, while others conduct a fuller control analysis. The European Commission's technical guidance reinforces a multi-factor control assessment, which is closer to the OFSI position. Where a business operates across the UK and the EU simultaneously, it cannot assume that a single legal analysis covers both regimes; the applicable national authority's view governs within its jurisdiction.
Cross-border businesses handling transactions that touch the US, UK, and EU simultaneously must therefore run three analytically distinct tests. A structure that clears OFAC's arithmetic screen does not automatically clear OFSI, and vice versa. The stricter prohibition governs the conduct of any party subject to that regime.
The position above covers the standard case. Your facts – the precise ownership structure, the contractual arrangements, the identity of the relevant regimes in play, and the location of the funds or assets – change the analysis materially. For a jurisdictionally mapped ownership review, contact Calder & Vance at info@caldervance.com.
What does indirect ownership mean in practice, and where do businesses go wrong?
Indirect ownership is where most enforcement referrals originate. The prohibition under OFSI is not limited to direct shareholding; a listed person's stake held through intermediate holding companies, trust structures, nominee arrangements, or layered vehicles counts towards the ownership calculation at every level in the chain.
Consider a practical scenario. A listed person holds sixty percent of a holding company incorporated in a third jurisdiction. That holding company holds forty-five percent of a UK trading entity. OFSI's ownership analysis would trace through the chain: the listed person's effective ownership of the UK entity is sixty percent of forty-five percent, which is twenty-seven percent – below the fifty-percent threshold on that route alone. But the holding company itself, being more than fifty percent owned by a listed person, may already be captured. If it is, then its dealings with the UK entity trigger a separate set of questions about whether the UK entity has dealt with a frozen entity. The analysis is not a single calculation; it is a chain of calculations.
Businesses go wrong in three recurring patterns. First, they stop the ownership review at the first layer of corporate structure. Second, they rely on registry data alone, which may be months or years out of date. Third, they treat a "not on the list" result from a name-screening tool as a clean bill of health rather than as one data point among several.
A fourth and less obvious error: businesses assume that ownership structures disclosed at the time of onboarding remain static. Listed-person designation dates do not align with the date of onboarding; a counterparty that was clean at the point of contracting may be within the prohibition at the date of payment. Continuous monitoring is not optional under OFSI's framework; it is implied by the obligation not to deal with a frozen person at any point, which is an ongoing duty, not a one-time check.
What is the control test, and how should compliance programmes address it?
The control test under OFSI examines whether a listed person can direct or determine the affairs of the entity by means other than ownership. Practitioners working across the OFSI and EU regimes identify a consistent set of control indicators that carry weight in a thorough analysis.
Board composition and appointment rights are the most direct indicator. Where a listed person has the right to appoint or remove a majority of directors, or to appoint a chairman with a casting vote, the control limb is likely satisfied. Shareholder agreement provisions that grant a listed person veto rights over operating decisions – approval of material contracts, approval of financing arrangements, approval of asset disposals – also point strongly toward control.
Economic control through debt is increasingly significant. Where a listed person holds a loan that is convertible into equity, or where loan covenants effectively restrict the borrower's ability to make any material operating decision without the lender's approval, OFSI would examine whether that arrangement amounts to control in substance. We have acted for several clients whose target-company diligence uncovered exactly this pattern: a listed-person creditor with covenants so extensive that the borrower's board had no practical discretion to act independently.
Compliance programmes must therefore treat the control question as a structured legal analysis, not a checklist item. The minimum requirement is: obtain and review all constitutional documents (articles of association, partnership agreements, trust deeds); obtain and review all shareholders' agreements or equivalent arrangements; identify every person with board appointment, removal, or veto rights; and map all material debt and credit facilities to identify the lender and any associated covenants. Where any of those documents is unavailable or where the counterparty declines to produce it, that is itself a risk flag that should escalate to compliance counsel before the transaction proceeds.
If a transaction has already been flagged or a filing has been refused, an early review of the control analysis can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for an immediate assessment.
What are the risk flags that indicate an ownership or control issue?
Certain facts patterns consistently indicate an elevated risk that the ownership-or-control test is met, even where no listed person appears by name on the face of the corporate record.
The following patterns should trigger an enhanced analysis in any UK financial-sanctions context:
- Ownership concentrated in a small number of individuals, one or more of whom is a national of a jurisdiction subject to a broad programme under the applicable country regime.
- Recent and unexplained changes in beneficial ownership close to the date of a sanctions designation cycle.
- Corporate structures that interpose multiple holding layers across several jurisdictions with limited commercial rationale.
- Loan or credit arrangements with a lender whose identity cannot be confirmed through independent sources.
- Shareholders' agreements or side letters that have not been disclosed voluntarily but whose existence is implied by the constitutional documents.
- Counterparty reluctance to confirm ultimate beneficial ownership through a standard ownership-and-control questionnaire.
- A counterparty operating in a sector – energy, metals, financial services – that has historically attracted designation activity under the relevant thematic regime.
None of these flags is individually determinative. Their significance is cumulative. Where three or more are present in a single counterparty profile, we would treat the situation as one requiring a formal ownership-and-control opinion before any funds move or any deal closes.
A separate risk flag arises at the post-designation stage. When OFSI adds a person to the UK consolidated list, the obligation to freeze and not deal attaches immediately. There is no grace period for existing contracts. A business that is mid-performance under a long-term supply contract when a counterparty's controlling shareholder is designated must stop dealing at that point. A specific licence (a case-by-case authorisation from OFSI to conduct an otherwise prohibited transaction) may be available to wind down the position, but it requires an application and OFSI's agreement. Assuming that existing contracts can simply run their course is one of the most costly errors we encounter.
How do the reporting obligations interact with the ownership analysis?
The ownership-and-control analysis does not exist in isolation from reporting obligations. UK financial sanctions rules impose a mandatory reporting duty on relevant firms – primarily regulated financial institutions, but also other persons who hold or deal with funds or economic resources. Where a firm knows or suspects that it holds frozen funds, or that it has dealt with a designated person or a person captured through the ownership-and-control test, it must report to OFSI.
The reporting window is short. Firms must report as soon as practicable; OFSI's guidance makes clear that delay is not acceptable and that the obligation bites at the point of knowledge or reasonable suspicion, not at the point of confirmed legal analysis. In practice, this means that a compliance team that identifies a potential ownership-or-control issue cannot defer the reporting decision while it commissions an extended due diligence exercise. It must make an initial report and then continue to develop the analysis.
Cross-border businesses face an additional layer of complexity here. The reporting obligation under OFSI applies to persons subject to UK law. A business that is simultaneously subject to OFAC's obligations may face parallel reporting timelines and procedures that do not align. OFAC's reporting requirements for blocked transactions follow their own process and deadlines. Running two reporting tracks simultaneously – each to a different authority, under a different instrument, with different disclosure standards – requires coordinated legal management. In our practice, we treat multi-regime reporting situations as a matter requiring immediate specialist input, because the risk of satisfying one regime's obligation in a way that complicates another regime's assessment is real and underappreciated.
What is the common misconception about OFSI and the 50 percent rule?
The most persistent misconception we encounter is that OFSI's test and OFAC's rule are equivalent – that passing an OFAC-compliant ownership screen clears the UK position automatically.
That assumption is incorrect. OFAC's rule is a bright-line arithmetic test, deliberately designed to be self-executing and clear. OFSI's test is a principles-based assessment that includes a control dimension OFAC's rule does not replicate. A business that applies only OFAC's fifty-percent threshold to assess its UK obligations may conclude – incorrectly – that a counterparty with a forty-four-percent listed-person stake and extensive contractual control is outside the UK prohibition.
A second misconception is that the ownership analysis is a one-time exercise. UK financial sanctions obligations are continuous. The composition of a counterparty's ownership and the identity of its controlling persons can change after onboarding. Designation decisions are made without notice. Ongoing monitoring – reviewing corporate structures on a defined cycle and rescreening whenever material information changes – is an essential element of a defensible compliance programme.
A third misconception: that an OFSI penalty requires proof of intent. Under SAMLA, OFSI may impose a monetary penalty on a strict-liability basis for some categories of breach. The absence of deliberate wrongdoing does not automatically reduce exposure to zero. It is relevant to OFSI's assessment of the appropriate penalty level, but businesses that assume good faith is a complete answer to a sanctions breach are routinely surprised by the outcome.
Related practices
- Sanctions compliance audit and testing – programme stress-testing, ownership-chain mapping, and screening-logic review.
- The 50 percent rule: OFSI vs EU analysis – a detailed comparison of the UK and EU ownership-and-control tests.