A shipping company based in Singapore discovers that a payment has been blocked. The correspondent bank cites a sanctions match. The named individual on the relevant authority's list shares the same name, date of birth, and nationality as the company's sole director – but is a different person entirely. The director has never been the subject of any enforcement action. Every transaction the company has conducted is legitimate. Yet business has stopped.
A mistaken-identity removal is the process by which a person or entity wrongly matched to a sanctions list secures removal of that match – either by correcting a screening error at the financial institution, by obtaining a formal clarification from the designating authority, or by challenging the designation itself where the match results from a clerical overlap in the listing data. Under OFSI in the United Kingdom and under Australia's autonomous sanctions regime administered by DFAT, the procedural routes, evidential standards, and realistic timelines differ materially. Understanding those differences is the first step toward an effective response.
This analysis maps the two regimes criterion by criterion: governing authority and legal basis, the scope of the mistaken-identity problem, the formal removal or clarification procedure, evidential requirements, cross-border complications, common risk factors, and when to engage specialist counsel.
What is the legal and institutional basis in each regime?
Under the United Kingdom regime, OFSI – the Office of Financial Sanctions Implementation – administers financial sanctions designations made under the Sanctions and Anti-Money Laundering Act (SAMLA) and the thematic regulations made under it. OFSI does not itself maintain the designations list in isolation: designations are made by the UK Government and are implemented through the UK Consolidated List, which OFSI publishes. Where a person believes they have been wrongly matched to a designation, the primary mechanism is a request to the relevant government department for a listing review or, where the match is purely a screening error at a third party, a clarification from OFSI that the person is not designated.
Australia's framework is administered by the Department of Foreign Affairs and Trade (DFAT) under the Autonomous Sanctions Act and the autonomous sanctions regulations. DFAT maintains the Australian Sanctions Office and publishes the Consolidated List of autonomous sanctions. Importantly, Australia also implements UN Security Council sanctions through separate implementing legislation, which places those designations on a different procedural footing. A mistaken-identity removal under Australia's autonomous regime is therefore a distinct process from a removal that engages UN Consolidated List procedures.
The structural difference matters immediately. In the United Kingdom, the government department sponsoring the designation and OFSI as the implementing authority are formally separate. A mistaken-identity challenge may require engagement with both. In Australia, the Australian Sanctions Office within DFAT functions as both the policy and the administrative body for autonomous designations, which concentrates the process but also concentrates discretion.
How do both regimes define a mistaken-identity situation?
A mistaken-identity situation arises when a party's identifying information – name, date of birth, nationality, address, or a combination – so closely resembles the information in a sanctions listing that screening tools, correspondent banks, or counterparties treat the party as designated when they are not. The party is not designated; the listing is accurate as to the actual target; but the overlap in identifiers produces a false match.
This is distinct from three other situations that are sometimes conflated with it. The first is an erroneous designation, where the listed party is the correct person but the legal basis for the listing is disputed. The second is a stale listing, where the listed party was correctly designated at the time but circumstances have since changed. The third is a name-similar entity situation, where a corporate structure uses a trading name that resembles that of a listed entity, without any shared personnel or ownership.
OFSI's published guidance acknowledges that financial institutions and other regulated parties may experience difficulty distinguishing true matches from false ones. It provides a process for the affected party to contact OFSI to confirm whether they appear on the UK Consolidated List. This confirmation process is administrative and does not constitute a formal designation review. It is, however, a critical first step, because a written confirmation from OFSI that the party does not appear on the UK Consolidated List can be shared with the blocking institution to restore normal operations. In our experience, institutions provided with that confirmation act promptly; without it, they frequently decline to release funds even where the mismatch appears obvious on the face of the documents.
DFAT operates a broadly analogous process for Australian autonomous sanctions. A person or entity that believes they have been incorrectly identified as a listed person may contact the Australian Sanctions Office. DFAT will confirm whether the party appears on the Consolidated List. In practice, the confirmation mechanism is less formalised in publicly available DFAT guidance than OFSI's equivalent, which means practitioners advising on the Australian side frequently need to navigate a more opaque initial communication stage.
Where do the regimes diverge on mistaken-identity removals?
The most significant divergence between OFSI and DFAT on mistaken-identity removals lies in the transparency of the procedure, the formality of the output, and the recourse available when the administrative route does not resolve the matter.
Under OFSI, the confirmation process is documented in published guidance. The affected party submits identifying information; OFSI searches the UK Consolidated List; and OFSI issues a response. That response is not a binding administrative decision in the strict legal sense, but it is a written communication from the authority that a competent financial institution should treat as definitive. If the institution nonetheless continues to block transactions, the affected party can escalate through the Financial Conduct Authority's supervisory mechanisms or, in an extreme case, seek declaratory relief through judicial review in the UK courts. The High Court's supervisory jurisdiction provides a known and tested route.
The position under Australian autonomous sanctions is more layered. DFAT will provide a written response to a mistaken-identity query, but the formal recourse route if that response does not resolve the matter is less clearly signposted in public-facing guidance. Australia does not have a direct equivalent of the OFSI-specific confirmation process set out in a dedicated public document. Practitioners instead navigate a combination of DFAT correspondence, engagement with the Australian Financial Intelligence Agency (AUSTRAC) where financial blocking is involved, and, in extremis, federal administrative law mechanisms including review by the Administrative Appeals Tribunal and, beyond that, federal court proceedings. That route is longer and less well-trodden for sanctions-specific mistaken-identity cases than the UK judicial review path.
There is a further structural divergence in relation to UN-listed persons. Where the false match is against a person on both the Australian Consolidated List and the UN Security Council Consolidated List, DFAT cannot simply delist the party from the Australian list without Security Council action. The same constraint applies in the United Kingdom: OFSI cannot remove a UN-derived designation. In those cases, the mistaken-identity process must engage either the Security Council's Ombudsperson (for the ISIL and Al-Qaida committee) or the Focal Point for de-listing for other committees, which is a materially different and more demanding process than either the OFSI or DFAT administrative routes. Both regimes share this ceiling, but the practical starting point – confirming the distinction between a UK-only or Australia-only designation and a UN-derived one – requires different initial steps in each system.
A third point of divergence is speed. In our cross-border practice, OFSI's confirmation process tends to produce a written response within a matter of days to a few weeks for straightforward cases, assuming the request is well-documented. DFAT's response timeline is harder to predict from published sources, and in our experience the initial engagement stage in Australia takes longer when the matter is novel or the identifying-information overlap is complex.
Which regime is stricter on mistaken-identity removals?
"Stricter" is a term that requires precision here. Neither regime imposes a formal burden of proof on the affected party in the way that a delisting on the merits does. The mistaken-identity route operates on the premise that the party is simply not the person named – which is a factual question, not a discretionary policy judgment by the authority. In that respect, the standard is comparatively low in both regimes: a party that demonstrates, through identity documents, a clear distinction in biometric data or other identifying information, that they are not the listed individual should obtain the confirmation they need.
That said, the practical difficulty is higher in Australia. The lower level of published procedural guidance means that a party navigating the Australian process without specialist support is more likely to approach DFAT in a way that delays resolution. DFAT's initial triage of queries is not as clearly delineated for mistaken-identity situations as OFSI's guidance is for the UK equivalent. The risk of the matter being treated as a general sanctions inquiry – rather than a mistaken-identity confirmation request – is real, and a misrouted query can cost weeks. In that operational sense, the Australian process imposes a higher practical burden on the unrepresented party.
OFSI, by contrast, is stricter in a different dimension: the regulatory expectations on financial institutions in the United Kingdom are more prescriptive. A UK-regulated institution that continues to block funds after receiving a clear OFSI confirmation that the party is not listed faces a heightened accountability question under its own regulatory obligations to treat customers fairly. That pressure operates in the affected party's favour: the institution has a stronger institutional reason to act on the OFSI confirmation promptly. In Australia, the equivalent regulatory pressure on the blocking institution – typically operating under AUSTRAC's oversight – is present but applied through a different mechanism, and the communication chain between DFAT and the blocking institution is less direct.
Have you confirmed whether the blocking in your matter flows from an autonomous designation in one jurisdiction, a UN-derived listing, or a name-similar hit in a third-party screening database? That distinction determines which route – and which authority – is the correct starting point.
What evidence base does each regime require?
Assembling the evidence package correctly is the action that most reliably shortens the resolution timeline in both regimes. A poorly assembled submission invites further rounds of queries and delays.
For an OFSI mistaken-identity confirmation, the core evidence is identity documentation that clearly distinguishes the affected party from the listed individual. This typically includes a valid passport or national identity document (showing photograph, full name, date of birth, nationality, and document number), together with documentation that identifies features of the listed individual not shared by the affected party. Where the listed individual has known aliases, addresses, or associated identifiers that differ from the affected party's own records, setting out those distinctions in a structured comparative document significantly strengthens the submission. Where the affected party is a company rather than an individual, the evidence extends to corporate registration documents and, where relevant, a clear map of the ownership and control structure distinguishing it from the listed entity.
For a DFAT mistaken-identity inquiry, the evidence requirements are broadly analogous but are less formally specified in published guidance. In practice, the package should at minimum include: full identifying documentation for the affected party; a precise identification of the listing entry in question (full name as listed, any listed aliases, date of birth or registration number if listed); and a clear written narrative explaining the points of distinction. Where the affected party has been blocked by an Australian financial institution, a copy of the blocking notification or correspondence from the institution is a useful practical addition, because it identifies the specific entry that the institution matched against and allows DFAT to address the comparison directly.
We regularly advise clients to prepare the evidence package in a form that can be shared, with appropriate adaptation, with both the authority and the blocking institution simultaneously. The authority's confirmation does not always reach the institution automatically; in many cases, the affected party or their adviser needs to deliver it directly and request that the hold be released. Structuring the evidence package from the outset with that dual purpose in mind saves time.
The position above covers the standard case. Your facts – the counterparty, the jurisdiction of the blocking institution, the specific listing entry that has been matched, and the regime under which the designation sits – change the analysis. For an early assessment of your mistaken-identity situation under OFSI or Australia's autonomous sanctions regime, contact Calder & Vance at info@caldervance.com.
What cross-border complications arise in mistaken-identity cases?
A mistaken-identity case almost never sits within a single regime. The affected party's business touches multiple jurisdictions; the blocking institution may be located in a third country; and the underlying match may derive from a list maintained by a fourth authority. Managing that multi-regime picture is typically the most technically demanding aspect of the matter.
The most common cross-border complication is a parallel OFAC match. Where the listing entry that has triggered the false match is also reflected on OFAC's SDN List (the Specially Designated Nationals and Blocked Persons list maintained by the US Treasury's Office of Foreign Assets Control), a UK or Australian party that obtains a written confirmation from OFSI or DFAT has not resolved the OFAC position. US correspondent banks and US-dollar clearing systems operate under OFAC's jurisdiction. An institution with US operations will not accept an OFSI confirmation as satisfying its OFAC compliance obligations. A separate engagement with OFAC – potentially including an OFAC licence application or a request for a formal reconsideration – may be required in parallel.
The second common complication is where the false match is propagated through commercial screening databases rather than directly from an official list. Major screening platforms aggregate data from multiple list sources and add their own analytical layers, including adverse-media entries and politically-exposed-person indicators. A party that has been confirmed as not listed by OFSI or DFAT may still be flagged by third-party screening tools because the platform has not yet updated its data, or because the platform's own risk-scoring logic produces a match on name and nationality alone. Clearing the official list position is necessary but not always sufficient. In our experience, a written authority communication combined with a direct engagement with the screening platform's data operations team – supported by the official confirmation – is the most reliable path to a clean result across the full chain.
The third complication arises where the matter involves a UN Security Council listing. As noted above, neither OFSI nor DFAT can remove a UN-derived designation. Where the false match is against a person on the UN Consolidated List, the procedure routes through the UN system. For ISIL and Al-Qaida committee listings, the Ombudsperson provides an independent review. For all other UN designations, the Focal Point for de-listing offers a channel, but the outcome depends on the Security Council committee's decision. Both routes are slower and less predictable than national administrative procedures. Identifying this issue at the outset avoids the wasted time and cost of pursuing a national-level process that cannot provide the relief sought.
If a transaction has already been flagged, or a blocking notice has been issued, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment of the cross-border picture.
What are the principal risk flags for affected parties and their advisers?
Several patterns consistently signal that a mistaken-identity matter is at greater risk of delay or of escalating beyond the administrative resolution route.
The first risk flag is ambiguity in the listed identifiers. Where the listing entry contains a name, a date of birth, and a nationality that are genuinely common – a combination shared by hundreds or thousands of individuals in the same country of origin – the authority faces a more demanding verification task. The evidence package must go beyond asserting that the affected party is not the listed person; it must affirmatively establish distinguishing characteristics. Biometric data in a current passport, a national identity number, a residential address history distinct from known addresses in the listing, and employer records are all useful. The stronger the distinguishing evidence, the shorter the correspondence cycle with the authority.
The second risk flag is multiple simultaneous blocks. Where more than one financial institution has blocked transactions or accounts, the matter is more operationally urgent and also harder to resolve quickly, because each institution requires its own engagement. A single OFSI or DFAT confirmation is a necessary document, but it must be delivered to each institution and followed up separately. Institutions that have internal compliance escalation procedures may take several weeks to process the release even after receiving a written authority confirmation, particularly if the original block was raised as a potential OFAC or UN matter rather than a purely domestic one.
The third risk flag is the reputational dimension. Where the affected party is a listed company, a major trading counterparty, or an individual in a regulated profession, the existence of the match – regardless of its accuracy – may have been reported internally by the blocking institution as a suspicious activity or in a similar regulatory filing. That report cannot be withdrawn simply because the match is later confirmed as false. The affected party's legal team should assess whether any such filings exist and what, if any, procedural steps are available in the relevant jurisdiction to address their existence. In the United Kingdom, the tipping-off provisions and the interaction between AML reporting obligations and the sanctions regime create a particular complexity that requires careful analysis. In Australia, the corresponding position under the Anti-Money Laundering and Counter-Terrorism Financing Act is similarly nuanced.
A common myth in mistaken-identity cases is that securing a written confirmation from the authority resolves the matter entirely and immediately. It does not. The confirmation addresses the legal position – the party is not designated – but does not automatically unwind all downstream consequences of the false match: blocked funds may require a separate release instruction, ongoing contracts may have been suspended, and the party's profile in commercial screening databases may require active remediation. Treating the authority confirmation as the end of the process, rather than as the critical first step, is the single most common mistake we see in matters that come to us after an initial self-managed attempt.
When should a business or individual instruct specialist counsel?
Not every mistaken-identity case requires external legal counsel. Where the identifying-information mismatch is stark – the listed individual is of a different nationality, a different age, and the affected party's passport makes the distinction immediately obvious – a well-drafted letter to OFSI accompanied by the relevant identity documents may be sufficient, and a compliance officer with experience of OFSI correspondence can manage the process.
Counsel should be instructed early in any of the following situations. First, where the authority's initial response does not confirm clearly that the party is not listed, or where the authority's response is ambiguous or refers the matter to a different body. Second, where the blocking involves a UN-derived designation rather than or in addition to a national-autonomous designation. Third, where the matter involves parallel OFAC exposure, meaning that a US correspondent bank or US-dollar clearing institution is involved. Fourth, where the affected party has sustained material commercial loss, and the question of liability of the blocking institution or of any other party arises as a parallel issue. Fifth, where the matter has escalated to a regulatory or law-enforcement investigation, however preliminary.
In our practice, we regularly advise clients who have spent several weeks managing a mistaken-identity matter themselves before instructing us, often because the initial expectation was that the process would be straightforward. It frequently is straightforward – but only if the initial approach to the authority is framed correctly, the evidence package is structured for dual use (authority confirmation plus institution release), and the cross-border picture has been mapped from the outset. Starting the matter correctly is materially faster and less costly than correcting a poorly-framed initial submission.
Related practices
- Delisting evidence package – Australia – building and submitting the evidence file under the Australian autonomous sanctions regime
- Mistaken-identity removal: OFSI vs Australia (part 2) – extended analysis of procedural timelines and institutional escalation routes
- OFAC reconsideration vs BIS EAR: a comparative analysis – how US-side reconsideration procedures compare across OFAC and BIS