A corporate treasurer at a UK-based trading group receives a call from its bank: an account has been frozen under OFSI's financial-sanctions rules. The same group holds accounts in Frankfurt and Amsterdam, which are now the subject of parallel inquiries under the relevant EU Council regulation. Two regimes. Two sets of obligations. Two licensing tracks. And a single compliance team trying to manage all of it at once.
Frozen-account management under OFSI and the EU Council regulations share a common origin in UN Security Council obligations, but they diverge sharply on licensing architecture, reporting duties, and the control test that determines which accounts are caught in the first place. Missing those divergences does not merely slow a transaction – it can produce a breach in one regime while the business is focused on complying with the other.
This analysis maps the divergence point by point, identifies the practical traps that cross-border businesses most often miss, and sets out the questions compliance counsel should ask before the next account query arrives.
What is frozen-account management and why does it matter across regimes?
Frozen-account management is the set of obligations and procedures that apply when a financial institution or business holds funds or economic resources belonging to, or for the benefit of, a designated person – from the moment of freezing through reporting, ongoing administration, and any application for a licence to deal. The regime that governs this is not a matter of choice: a UK-domiciled bank follows OFSI; an EU-licensed credit institution follows the relevant Council regulation. A group with both must comply with both simultaneously, and the two tracks do not automatically align.
The stakes are material. OFSI has the power to impose a civil monetary penalty on a strict liability basis for breaches of the financial-sanctions rules, meaning that the absence of knowledge or intent does not automatically reduce liability to zero. The EU framework similarly allows Member State competent authorities to impose penalties for non-compliance with the relevant Council regulation. What constitutes a breach, however, is not identical across the two regimes. That gap is where well-intentioned compliance teams make costly errors.
As of May 2026, OFSI administers the UK financial-sanctions regimes under the Sanctions and Anti-Money Laundering Act (SAMLA) and the thematic regulations made under it. On the EU side, the relevant Council regulations and the corresponding Council decisions establish the prohibitions and the licensing architecture. Both regimes require immediate freezing on designation, but their downstream obligations diverge from that point on.
How the ownership and control tests diverge – and why that difference decides which accounts are caught
The single most consequential divergence between OFSI and the EU framework concerns the ownership and control test (the rule that treats a non-listed entity as caught where a designated person owns or controls it). Getting this wrong means either under-freezing – a breach – or over-freezing a counterparty that is not in fact caught, which triggers its own complications.
Under the UK financial-sanctions rules, an entity is treated as owned or controlled by a designated person where that designated person holds more than 50 per cent of the shares or voting rights, has the right to appoint or remove a majority of its board, or otherwise controls it. The control test under SAMLA-derived regulations is broader than a mechanical ownership count. OFSI has published guidance making clear that influence, even absent a majority shareholding, can bring an entity within scope. This matters enormously for holding-company structures where a designated shareholder sits below the formal majority threshold.
The EU framework applies a comparable ownership-and-control test under the relevant Council regulation, but the way that control is assessed varies in detail across Member States because implementation is a national-authority function. In our experience, the same corporate structure can produce different assessments from OFSI, the Bundesbank, and the French DGTR when each applies its own national guidance to the EU-level prohibition. A group with accounts in multiple EU jurisdictions therefore faces not one control-test analysis but potentially several, all running in parallel with the OFSI assessment.
The practical consequence is that a compliance team must map the ownership chain separately for each regime rather than assuming that the OFSI analysis is portable to the EU side. Where the designated person holds, say, forty-seven per cent of an intermediate holding company with further subsidiaries, the UK and EU positions may differ – and a business that freezes in the UK but continues to service accounts in an EU member state, or vice versa, may be simultaneously compliant in one jurisdiction and in breach in another.
Licensing architecture: specific licences, general licences, and what each regime allows
Once an account is frozen, the question for most businesses is whether any dealing is permissible at all. Both regimes provide licensing routes, but the architecture differs in ways that a cross-border business cannot afford to conflate.
Under the UK rules, OFSI issues specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction) and general licences (standing authorisations covering a defined category of transaction without a separate application). General licences under the UK regime are published by OFSI and are directly usable by any person who meets the stated conditions. They cover categories such as certain legal-fee payments, basic needs, and maintenance of frozen assets. Critically, a business relying on a general licence must satisfy itself that it falls squarely within the conditions – and OFSI has been clear that over-reliance on a general licence where a specific licence was actually required will not be treated as a complete defence.
The EU framework operates differently. General authorisations under EU law are typically incorporated into the Council regulation itself, or issued by the Council or Commission, and may require a national competent authority to issue a confirmation or notification. The licensing function for specific authorisations in the EU is devolved to the competent authority of the relevant Member State. This means that a group managing frozen accounts in three EU member states may need three separate specific-licence applications – one per competent authority – even for materially identical transactions.
The divergence also shows in timelines. OFSI aims to determine specific licence applications within a published target period, though complex or novel applications regularly take longer. EU member-state timelines are set by national procedural rules and vary considerably. In our practice, we have seen applications in one EU member state concluded within weeks, while equivalent applications in another member state remain pending for several months. Planning a deal timetable without accounting for this variance is a common and expensive error.
The position above covers the standard case. Your facts – the account structure, the designated person's relationship to the business, the category of transaction at issue, the jurisdictions involved – change the analysis significantly. For a review of a specific licensing position, contact Calder & Vance at info@caldervance.com.
Reporting obligations: where businesses under-deliver
Both OFSI and the EU framework impose mandatory reporting obligations on persons who hold or control frozen funds. The scope, timing, and addressee of those reports differ, and under-reporting is one of the most consistent findings in OFSI's public enforcement guidance.
Under the UK rules, a relevant firm that knows or has reasonable cause to suspect that it holds frozen assets must report to OFSI without delay. The obligation extends beyond banks and financial institutions to any person who holds or controls the relevant assets. The report must identify the asset, state its value, and explain the basis for the suspicion or knowledge. OFSI's published guidance describes what a compliant report looks like – and a report that is filed but substantively incomplete carries the same regulatory risk as one that is filed late.
The EU framework imposes a comparable reporting obligation, but the addressee is the national competent authority of the relevant Member State. For a group with accounts in multiple EU jurisdictions, this means multiple parallel reports to multiple authorities, each applying its own national procedural requirements. There is no single EU-level reporting portal; the European Commission receives aggregate national data but does not itself receive individual reports from firms.
The gap that businesses most often miss is the interaction between the UK and EU reporting windows. A firm that reports to OFSI promptly but delays the corresponding report to a French or German authority because the internal process routes everything through London will be in breach of the EU obligation even if the UK position is clean. In our experience, this sequencing error – treating OFSI compliance as a proxy for EU compliance – accounts for a disproportionate share of the avoidable enforcement risk that cross-border groups carry.
What ongoing obligations apply once the initial report has been filed? Both regimes require the designated status to be monitored: if the designation is removed, a new decision is needed on how the account is managed. If the frozen assets change in value – because interest accrues, because a corporate action affects the shares held, or because a further injection of funds is blocked on receipt – a supplementary report may be required. Neither regime treats the initial filing as a one-time discharge of the reporting duty.
Interest and accruals on frozen accounts: a compliance question that often goes unasked
Interest that accrues on a frozen account is itself a frozen asset under both the UK and EU regimes, but the precise treatment requires careful analysis. This question is more complex than it first appears, and it is one that compliance teams often defer until a balance-sheet audit forces the issue.
Under the UK financial-sanctions rules, economic resources are broadly defined to include assets of every kind. Interest accruing to a frozen account constitutes a fresh accretion of funds to an account held in the name of, or for the benefit of, a designated person. Those accrued funds are themselves frozen on receipt. A bank that segregates interest into a separate interest-bearing account but fails to treat that separate account as frozen may be in breach. OFSI's published guidance on the treatment of interest confirms the broad position, even if the specific mechanics depend on the account structure in question.
The EU Council regulations take a functionally similar position. The prohibition on making funds available extends to the crediting of interest and other earnings to the account of a designated person. Member-state competent authorities have in practice applied this to require banks to block interest credits and to report them as additions to the frozen assets under administration.
The practical complication is that a bank managing a frozen account under both OFSI and EU rules may receive divergent guidance from the two regimes on what documentation is needed to evidence the blocking of the interest credit. Getting this documentation right matters: it is the audit trail that demonstrates compliance if the bank is later examined. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. For a confidential review of a potential breach, contact us at info@caldervance.com.
The common myths: what compliance teams think they know but do not
Three myths about frozen-account management appear with striking regularity in cross-border instructions. Each is worth correcting directly.
The first myth is that an OFSI general licence automatically covers the corresponding position under the EU regime. It does not. A UK general licence is issued by OFSI under SAMLA-derived regulations and applies within the UK financial-sanctions regime only. An EU competent authority is not bound by it, and a firm that relies on an OFSI general licence to authorise a transaction in an EU-licensed subsidiary is exposed unless a separate EU-level authorisation also covers that transaction.
The second myth is that because both regimes implement UN Security Council obligations, the technical rules are effectively the same. They are not. The UN Security Council resolution creates the obligation to freeze; it does not prescribe the licensing architecture, the control test, or the reporting window. The UK and EU chose different implementing mechanisms, and those differences are legally material.
The third myth is that the designated person's consent removes the prohibition. It does not. A designated person cannot consent to a transaction that the regime prohibits. OFSI has addressed this in enforcement guidance. The consent of a counterparty – even the designated person themselves – is not an authorisation. Only a valid licence is.
We regularly advise compliance officers who have inherited a sanctions programme built on one or more of these assumptions. Correcting the programme before an examination is considerably less costly than managing an enforcement process afterwards.
How to manage a frozen account in practice: the decision sequence
Managing a frozen account correctly requires a structured decision sequence that addresses the UK and EU positions in parallel, not in sequence. The following outline covers the essential steps for a cross-border business.
The first step is to confirm the designation and its scope. Verify the designated person's identity against the UK and EU consolidated lists, map the ownership and control structure to determine which entities and accounts are caught under each regime's test, and document that analysis. A discrepancy between the OFSI and EU analyses on whether a particular account is caught should be escalated immediately.
The second step is to freeze all caught assets without delay. Both regimes require immediate action. The obligation is not qualified by the availability of a licence; freezing must precede any licence application. At the same time, notify the account-holder that the account is under a sanctions freeze – the manner of notification may itself require legal advice where the designated person is the account-holder.
The third step is to report. File the required report with OFSI and file the corresponding report with each relevant EU member-state competent authority. Do not route all filings through a single jurisdiction. Record the date, addressee, content, and confirmation of receipt of each report.
The fourth step is to assess whether any dealing is required – to maintain the asset, to discharge a legal obligation, or to permit a payment that falls within a general-licence category. If dealing is required and a general licence does not squarely cover it, apply for a specific licence. Prepare separate applications for each jurisdiction where authorisation is needed. Keep the frozen account status under review throughout.
The fifth step is to monitor. Track any changes in the designated person's status, any accruals of interest or income to frozen accounts, and any corporate actions affecting frozen securities. Each change event may trigger a supplementary reporting obligation or require a reassessment of the ownership-and-control analysis.
Related practices
- Frozen-account management under BIS and the EAR – licensing and compliance for US export-control account holds
- General licence eligibility: BIS/EAR vs EU – how the two regimes assess standing authorisations
Frequently asked questions on frozen-account management under OFSI and the EU
Where do the regimes diverge on frozen-account management?
The primary divergences are the ownership-and-control test, the licensing architecture, and the reporting chain. OFSI applies a single national test and issues licences centrally; the EU framework devolves the control-test analysis and the specific-licence function to each Member State's competent authority. This means that a position that is clean under OFSI may require separate authorisations from two or more EU competent authorities before it is permissible across the group. Reporting addresses are also separate, and there is no automatic equivalence between a UK filing and an EU-level filing.
Which regime is stricter on frozen-account management?
Neither regime is uniformly stricter; each is stricter in different respects. OFSI's strict-liability civil penalty basis means that a technical breach carries penalty risk even without knowledge or intent. The EU framework's distributed licensing architecture means that the practical burden of obtaining authorisation for a multi-jurisdictional group is considerably higher. On the ownership-and-control test, the UK OFSI position on control – which can catch an entity even without a majority shareholding – is arguably broader in its application than some EU member-state implementations of the same concept. Where the two regimes conflict, the stricter prohibition governs in each territory.
What should a cross-border business do about frozen-account management?
A cross-border business should treat OFSI and EU frozen-account obligations as parallel and separate tracks, not as a single unified process. Map the ownership-and-control analysis for each regime independently. File reports separately with OFSI and with each relevant EU competent authority. Assess each general licence and specific licence requirement on its own terms in each jurisdiction. Maintain a contemporaneous audit trail of every step. Where the analysis is unclear or the accounts are material, instruct sanctions counsel with cross-regime coverage before decisions are made, not after a query arrives from a regulator.
About the author
Henry Ashworth advises on UK financial sanctions and export controls, including OFSI licensing and enforcement, and judicial-review challenges to designations. He has advised financial institutions, trading companies, and individuals on frozen-asset management, licence applications, and compliance-programme reviews across the OFSI and EU regimes. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
For an assessment of your exposure across the OFSI and EU regimes, or to discuss a licence application, contact Calder & Vance at info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.