A multinational treasury team is three days from closing a structured trade-finance facility. Late-stage due diligence flags an obscure intermediate holding company in the ownership chain of the borrower. One shareholder of that intermediate holds a position on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The question is immediate: does that listing reach through to the borrower? Is the facility itself a prohibited transaction? Getting the answer wrong – in either direction – carries consequences that outlast the deal.
Ownership and control assessments under OFAC explained: a non-listed entity is treated as itself blocked whenever one or more SDN-listed persons own it 50 percent or more in the aggregate, directly or through any number of intermediate layers. That test is set by OFAC's guidance under the International Emergency Economic Powers Act (IEEPA). It is mechanical: ownership percentage is the sole trigger. Intention, day-to-day management, and board composition are irrelevant to it. As of July 2026, this remains the governing standard, but the EU and UK regimes apply a materially different test – and for any cross-border transaction both must be considered.
This analysis sets out how the OFAC ownership test works in practice, where it diverges from the EU and UK positions, the risk flags that trip up experienced compliance teams, and the point at which external sanctions counsel should be brought in.
What is the legal basis for OFAC's ownership and control assessments?
OFAC's authority to reach unlisted entities through their owners derives from IEEPA and from the executive orders that implement specific sanctions programmes. The ownership rule itself is articulated in administrative guidance – not in a single statutory provision – and it applies across all of OFAC's country and thematic sanctions programmes unless a specific programme document states otherwise.
The practical significance of that guidance-based origin is often under-appreciated. Because the rule operates through guidance rather than a numbered regulation, it can be updated, clarified, or extended more rapidly than a notice-and-comment rulemaking would permit. Compliance teams that benchmark their screening logic against an older version of OFAC's published FAQs can find themselves working to a superseded standard. In our experience, the most common gap in large-institution screening programmes is a failure to synchronise internal policy documents with the current state of OFAC guidance.
OFAC's authority also extends extraterritorially. US persons anywhere in the world are subject to it. Non-US persons can be reached through the secondary-sanctions architecture that accompanies certain programme-specific executive orders. That extraterritorial dimension means that a European company doing no business in the United States can still face exposure if its counterparty is caught by the OFAC ownership rule. The cross-border implications are real and they should be assessed at the outset of any transaction screening.
The position above covers the standard case. Your facts – the counterparty structure, the listed shareholder's jurisdiction, the route the transaction takes – change the analysis materially. For an initial assessment of your exposure, contact Calder & Vance at info@caldervance.com.
How does the 50 percent aggregation rule work in layered structures?
The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked, whether directly or through intermediate companies) operates by aggregating the holdings of all SDN-listed persons across all ownership layers before comparing the sum to the threshold.
Aggregation is where experienced compliance teams slip. Consider a target company with four shareholders. Two of them are SDN-listed. One holds 28 percent, the other holds 24 percent. Neither alone meets the threshold. Together they hold 52 percent – and the target is blocked. Screening tools that evaluate each listed person's holding independently, without an aggregation step, will miss this pattern entirely.
The layering dimension adds further complexity. A listed person who directly holds 60 percent of a first-tier holding company, which in turn holds 90 percent of an operating subsidiary, causes the subsidiary to be blocked even though the listed person holds it indirectly. OFAC treats the blocked status as passing down through the chain regardless of the number of layers. There is no de minimis exception and no grandfather for holdings acquired before a designation took effect.
What does this mean operationally? Every entity in the ownership chain above a target must be screened – not only the immediate parent. Where beneficial ownership data is incomplete or disputed, the conservative assumption is that undisclosed layers may carry a listed person's interest. In our practice, we advise clients to document the specific ownership data consulted, its source, and the date it was verified, so that a contemporaneous compliance record exists if the transaction is later reviewed.
Where do the major regimes diverge on ownership and control assessments?
OFAC, OFSI, and the EU Council apply materially different tests, and for any transaction that touches more than one regime, the stricter prohibition governs in practice.
OFAC's test, as described above, is entirely ownership-based. If the percentage threshold is not met, the entity is not automatically blocked under OFAC rules – though the transaction may still require screening for other reasons, including the risk of facilitating a designated person's access to funds or economic resources. Control – who appoints the board, who has veto rights over strategic decisions – is not a free-standing basis for blocking under OFAC's current guidance. That creates a clear (if narrow) space in which an entity with a significant but sub-50-percent SDN holding is not itself blocked under US rules.
The EU and UK positions are structurally different. Under EU Council regulations, the ownership and control test (the EU and UK test for whether a non-listed entity is caught through a listed person) reaches entities that a designated person owns or controls. Control is a distinct and additional limb: it captures arrangements in which a listed person can exercise dominant influence, appoint a majority of the board, or has veto rights over material decisions – even where direct ownership is below 50 percent. OFSI applies a comparable framework under the relevant thematic sanctions regulations issued under the Sanctions and Anti-Money Laundering Act (SAMLA).
The practical consequence is significant. An entity with a 35-percent holding by a designated person may fall outside OFAC's 50 percent rule but inside the EU or UK control test if the shareholder agreement grants the 35-percent holder board-appointment rights or a blocking veto. Whether that entity is caught depends on the governing regime – and the answer can differ between Washington, London, and Brussels on identical facts.
For companies operating across US, UK, and EU regulatory perimeters, the safest operating assumption is to apply the most conservative test of all applicable regimes. Our cross-border practice frequently advises clients on structuring diligence workflows that address all three simultaneously rather than sequencing them and missing the interaction.
For a deeper comparison of the OFAC and UK positions, see our analysis at Ownership and control assessments under OFSI: compared. For the interaction between OFAC's test and the BIS/EAR export-control rules, see Ownership and control assessments: OFAC vs BIS/EAR compared.
What are the risk flags that compliance teams most frequently miss?
The failure modes in ownership and control assessments are remarkably consistent across sectors and firm sizes. Identifying them in advance reduces the probability of an undetected exposure reaching the point of an enforcement inquiry.
The first and most common gap is incomplete data at upper ownership tiers. Many screening programmes query the immediate counterparty and, at most, its direct parent. Listed persons who hold their interests through a second or third intermediate vehicle are invisible to a first-layer-only approach. Are your screening protocols configured to chase the chain to its ultimate beneficial owners?
The second gap is stale data. Ultimate beneficial ownership registers in many jurisdictions are updated periodically, not in real time. A counterparty that was clean at onboarding may have acquired a listed shareholder since then. For long-duration relationships – trade-finance facilities, distribution agreements, joint ventures – the ownership structure must be re-verified at intervals, not only at inception. In our experience, most enforcement inquiries involving a previously clean counterparty trace back to a failure of periodic re-screening rather than an error at initial onboarding.
Third is the treatment of indirect interests. Convertible instruments, options, warrants, and economic-participation rights can effectively transfer economic exposure to a listed person without transferring legal title. OFAC's guidance addresses some of these situations, but the analysis is fact-specific. Legal instruments that grant a listed person a right to acquire 60 percent of a company at exercise create a structural problem even before the right is exercised, particularly for transactions with longer settlement periods.
Fourth – and particularly relevant for private-equity and infrastructure investors – is the interaction between a general-partner interest and limited-partner holdings. A general partner that is itself a blocked entity may exercise de facto control over a fund structure even where its economic interest is minimal. The ownership percentage alone does not capture that risk under US rules, though it may be relevant to the analysis under EU and UK rules where control is an independent limb.
Fifth is the failure to document the assessment. Even where a compliance team reaches the correct conclusion, the absence of a written ownership map and a dated verification record creates an evidentiary problem in any subsequent OFAC review. OFAC's enforcement guidance treats documentation of a compliance process as a mitigating factor. Undocumented conclusions – however correct – do not attract that mitigation.
If a transaction has already been flagged, or a screening assessment has produced an inconclusive result, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.
How does secondary-sanctions risk interact with the ownership analysis?
Secondary-sanctions risk – exposure for non-US persons who deal with SDN-listed parties or with entities in certain programmes, even without a US-person nexus – operates alongside the standard ownership analysis but through a distinct legal mechanism.
The standard 50 percent rule is primarily a rule about US persons: it defines which entities a US person is prohibited from dealing with. Secondary-sanctions provisions extend certain prohibitions to non-US persons. A European bank that processes a payment to an entity which a US person would be prohibited from dealing with may trigger secondary-sanctions exposure under programme-specific executive orders, even if the bank itself has no US operations and no US-dollar clearing in the specific transaction.
For cross-border transactions involving a counterparty with a significant listed-person ownership interest – even one below 50 percent – the secondary-sanctions analysis must be run in parallel with the primary ownership test. The two analyses do not produce the same answer. An entity that is not blocked under the 50 percent rule may nonetheless create secondary-sanctions risk for a non-US financial institution that processes a payment to it, depending on the programme.
We regularly advise financial institutions and trading companies that the ownership-threshold question and the secondary-sanctions question need to be asked simultaneously and answered by reference to the specific programme at issue. The answer to "is this entity blocked?" is not the same as the answer to "can my institution deal with this entity without secondary-sanctions risk?" Conflating the two is a recurring source of under-assessment in transaction reviews.
A cross-border scenario: how the analysis runs in practice
In a recent matter, a technology-sector business was evaluating a distribution agreement in a market where the proposed distributor had a complex holding structure. Ultimate beneficial ownership data, obtained from a commercial registry, showed a 44-percent holding by a person whose name matched an entry on the SDN List. The first instinct of the client's compliance team was that the entity was clean under the 50 percent rule.
We were instructed to review the structure in full. The analysis identified a second shareholder – a corporate entity, not a natural person – holding a further 12 percent of the distributor. Ownership records for that corporate entity showed the same SDN-listed individual as the sole beneficial owner. On aggregation, the listed person's aggregate holding was 56 percent. The distributor was blocked.
Additionally, the distribution agreement was governed by English law and the client had EU-incorporated subsidiaries that would perform parts of the contract. We advised on the parallel EU and UK ownership-and-control analysis. Under the EU test, the 44-percent direct holding combined with a shareholder-agreement clause giving the listed shareholder the right to appoint three of five board members would independently have brought the distributor within the EU control test, regardless of the aggregation question.
The deal did not proceed. The client's documentation of the analysis – including the ownership map, the sources consulted, and the legal conclusions reached – was filed in its compliance record. In our experience, that record would have been the first document requested had the matter ever reached an enforcement review.
When should a business involve external sanctions counsel?
The decision to involve external sanctions counsel – and the timing of that decision – affects the scope of options available. Early instruction typically permits a wider range of responses than instruction after a potential issue has crystallised into an enforcement inquiry.
External review is warranted at the pre-transaction stage where: the counterparty's beneficial ownership structure is incomplete, contested, or relies on self-certification; a name-match on screening produces a possible hit that the internal team cannot conclusively resolve; the transaction involves jurisdictions or sectors where secondary-sanctions risk is elevated; or the ownership structure includes convertible instruments, trust arrangements, or other features that place a listed person's economic interest below the threshold at the moment of legal analysis but above it under alternative assumptions.
External review is urgently required where: a transaction has already been executed and post-execution screening has surfaced a potential ownership issue; OFAC or another regulator has made an enquiry; a counterparty has been designated after contract signature; or an institution's own internal review has concluded that a breach may have occurred. A VSD (voluntary self-disclosure to OFAC) may be relevant in some of these situations – but the decision to make one requires a full assessment of the facts, the applicable programme, and the probable regulatory response. That assessment should not be made by a compliance team alone.
A common objection among in-house teams is that the internal compliance function is well-resourced enough to handle ownership questions without external input. In our experience, that is generally true for straightforward, single-regime assessments. It is not true for multi-layered structures, cross-border transactions involving EU and UK exposure alongside OFAC, or situations where a possible violation has already occurred. The cost of a mistaken conclusion in those situations is disproportionate to the cost of early external review.
Related practices
- Sanctions compliance audit and testing – systematic review of screening logic, ownership workflows, and programme design against applicable regime standards
- Ownership and control: OFAC vs BIS/EAR compared – how the OFAC ownership test interacts with BIS/EAR export-control classification obligations
- Ownership and control under OFSI – detailed analysis of the UK test, SAMLA, and how it diverges from the OFAC position