How to aggregate holdings in ownership analysis across regimes

A multinational treasury team runs its counterparty list through a name-screening tool. Every result comes back clean. Three months later, the firm's audit discovers that two listed persons each hold a significant stake in the same counterparty – and together they cross the blocking threshold. The deal has been running. The question now is not whether to proceed; it is how serious the exposure is.

Aggregating holdings across several listed persons cross-border is a mechanical but exacting discipline. Under the US regime, any entity owned 50 percent or more in the aggregate by one or more blocked persons is itself treated as blocked – regardless of intent, knowledge, or how the ownership is split among individual listed holders. The UK and EU add a control layer on top: even where aggregate ownership falls below that line, a designated person who controls the entity can still bring it within scope. Getting the analysis right before a transaction closes is the entire point of this guide.

This guide follows the G-checklist structure: what you need before you start, a regime-by-regime breakdown of the aggregation test, the red flags that trigger immediate escalation, a readiness check you can run today, and the questions to ask your counsel. As of January 2026, the rules described here are in force across the major regimes; verify the current position before relying on anything stated.

What you need before you start: the pre-conditions for a reliable aggregation analysis

A reliable aggregation analysis requires a complete, verified picture of the counterparty's ownership chain before any threshold arithmetic begins. Without that foundation, the numeric test is meaningless.

Four items are non-negotiable before you open a single list. First, a current corporate structure chart showing every direct and indirect shareholder, their nationality, their percentage of economic interest, and – separately – any voting rights or governance arrangements that could amount to control. Second, copies or extracts of shareholder registers, cap-table disclosures, or equivalent primary evidence for each layer. Third, the list or lists against which you are screening: the SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the OFSI Consolidated List, the EU Consolidated List, and any other regime list that is relevant to the counterparty's jurisdiction or the transaction's exposure.

Fourth – and most often missing – a clear statement of which legal entities in the chain are subject to which regimes. A US person conducting a transaction anywhere in the world carries US obligations with it. A non-US entity processing a US-dollar payment may attract OFAC reach through the clearing system. A UK-incorporated subsidiary of a non-UK group brings OFSI obligations regardless of where the group's headquarters sits. In our experience, the regime-mapping step is where analysis teams cut corners, and it is precisely that gap which produces the screening failure described at the top of this page.

Practical minimum: build a working spreadsheet with one row per legal entity in the ownership chain, columns for each applicable regime's list, and a separate column for the control analysis under UK and EU rules. That structure does not replace legal judgment, but it makes the judgment auditable.

How the aggregation test works: regime by regime

Under OFAC's rules, the aggregation test is purely arithmetical: add the ownership percentages held by all blocked persons in a target entity; if the total reaches 50 percent or more, the entity is blocked as a matter of law, irrespective of who manages it or whether any single blocked holder reaches the threshold alone. This is the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked), and it applies directly, indirectly, and in the aggregate. Two blocked persons each holding 26 percent trigger the rule together. One blocked person holding 30 percent with a second holding 25 percent triggers it. A three-way split of 20/20/15 among different listed parties clears it – but only if no further indirect holdings exist.

The indirection point matters enormously. If a blocked person owns 60 percent of a holding company that owns 90 percent of the target, the blocked person's effective ownership of the target is 54 percent. The target is blocked. The holding company is separately blocked by virtue of that 60 percent holding. Screening the target against the SDN List will not surface this. Only mapping the chain will.

Under UK and EU rules, the threshold arithmetic is similar – ownership of more than 50 percent is the trigger in both regimes, as currently in force – but the test does not stop there. Both the UK ownership-and-control test (the UK and EU test for whether a non-listed entity is caught through a listed person) and the EU equivalent extend to entities that a designated person controls, even where ownership is below the threshold. Control can arise from board composition, contractual rights, veto powers, or other governance levers. A minority shareholder with the right to appoint a majority of the board may control an entity even if they own only 30 percent of its shares.

UK case law, as currently in force, distinguishes existing influence from a hypothetical ability to exert control; the leading authorities hold that control must be actual, not theoretical. This matters in practice: a designated person who formerly controlled an entity but whose contractual rights have genuinely lapsed may not bring it within scope – but the burden of demonstrating that lapse falls on the party seeking to transact. Under the EU approach, control must be proved by objective and sufficiently weighty evidence. Practitioners advising on EU matters note that ownership structure alone is rarely enough; the analysis must extend to actual governance.

Other regimes – Switzerland (SECO), Canada (GAC), Australia (DFAT) – apply broadly analogous ownership and control tests, and frequently align with EU measures. The practical instruction for a cross-border business is this: where two or more regimes apply, the stricter prohibition governs. Do not net out the differences; apply each regime's test in full and identify the most restrictive outcome.

Aggregating holdings across several listed persons: the step-by-step checklist

The following sequence is the aggregating holdings across several listed persons cross-border step by step process our practice uses when assessing a new counterparty or transaction target. Each step is a gate; missing one invalidates the steps that follow.

1. Identify all applicable regimes. Map every jurisdiction with a nexus to the transaction: the nationality of each party, the currency and clearing route, the goods or services involved, the destination, and the intermediaries. List each regime that has authority over any element.
2. Obtain primary ownership evidence. For each entity in the ownership chain, obtain shareholder registers, corporate registry extracts, or equivalent primary documents – not just what the counterparty reports about itself. Beneficial ownership registers where available, UBO declarations where required by applicable AML rules.
3. Screen every person in the chain. Run each individual shareholder, each intermediate entity, and each ultimate beneficial owner against the lists for every applicable regime. Do not limit screening to the counterparty entity itself. In our experience, name-screening the top-level entity misses the patterns that matter most.
4. Aggregate ownership percentages for each regime. For each regime, total the ownership percentages held by all persons on that regime's list. Apply the threshold test applicable in that regime (50 percent or more under OFAC; more than 50 percent under UK and EU rules, as currently in force). Note whether the result is direct, indirect, or a combination.
5. Conduct the control analysis for UK and EU. Separately from the ownership arithmetic, assess whether any designated person has the actual ability to control the target entity through governance rights, appointment powers, contractual levers, or other mechanisms. Document the basis for your conclusion either way.
6. Apply the strictest result. Where more than one regime applies, the entity is treated as restricted if any regime catches it. Record which regime produces the most restrictive outcome and why.
7. Document and retain. Record-keeping obligations attach under all major regimes. Under OFAC rules, sanctions records must be kept for five years, as currently in force. UK and EU obligations are comparable. Maintain a dated, signed record of each analysis, the sources consulted, and the conclusion reached.
8. Escalate immediately where any listed person appears. If any step surfaces a listed person anywhere in the chain, do not proceed or advise the business to proceed. Escalate to sanctions counsel before any further action is taken. The reporting clock may already be running.

This checklist does not exhaust every analysis a complex structure may require. It sets the minimum standard for a defensible first-pass assessment.

What is the most common mistake when handling aggregating holdings across several listed persons?

The most common mistake is treating name-screening as equivalent to an ownership and aggregation analysis. It is not. Name-screening identifies whether a named entity or individual appears on a list. It does not identify indirect holdings, aggregate thresholds, or control relationships. A counterparty whose direct shareholders are clean but whose grandparent company is majority-owned by a blocked person will pass a name-screening check and still be blocked under the 50 percent rule.

The second most common mistake is applying only one regime's test when two or more apply. A business with US-person employees, a UK-incorporated subsidiary, and EU-based clients may owe simultaneous obligations under OFAC, OFSI, and EU Council regulations. Each regime's ownership and control test must be applied independently. The business cannot rely on a clean OFAC analysis to discharge its EU obligations, or vice versa.

A third pattern we see regularly: using a cap-table snapshot that is out of date. Ownership structures change. A listed person may acquire a stake after your initial review. For ongoing relationships, periodic re-screening and re-aggregation are not optional; they are a core element of a proportionate sanctions compliance programme. The screening gap that surfaces after a breach almost always traces back to a review that was done once and never repeated.

How confident are you that your screening programme covers indirect holdings at every layer of your counterparties' ownership chains? That question is worth taking to your compliance committee before the next transaction closes.

Risk flags that require immediate escalation to sanctions counsel

Certain patterns in an ownership analysis are not simply issues to manage through the checklist; they are escalation triggers that require immediate involvement of qualified sanctions counsel before any further transaction steps are taken.

The first is any identified listed person in the ownership chain at any level, however small the holding appears. A two-percent stake by a blocked person does not alone trigger the 50 percent rule, but it is a red flag for further investigation: are there other listed holders? Does the two-percent holder also exercise governance rights that might amount to control? Is the structure itself a diversion indicator?

The second is a sharp change in trade flows or ownership patterns involving a neighbouring or transit jurisdiction. A counterparty that recently restructured its ownership through a third-country holding entity – particularly in a jurisdiction known for transshipment risk – warrants heightened scrutiny. Transit through a third country does not change an item's controlled status, and a significant minority holding by a known proxy is treated as a red flag rather than a safe harbour, as currently in force under updated US guidance.

The third is a digital asset or crypto-asset element. Blockchain addresses associated with a designated person can themselves be designated; a wallet-level analysis may be required in addition to the entity-level ownership map. The US transfer-of-funds regime and the EU zero-threshold transfer requirements for crypto-asset service providers mean that the aggregation analysis for digital-asset transactions requires a separate technical layer.

The fourth is any indication that property may already be blocked: a pending payment, an existing contractual commitment, a funded account. Under OFAC rules, blocked-property and rejected-transaction reports are due within 10 business days of the blocking or rejection, as currently in force. Missing that window creates a secondary violation independent of the underlying transaction. Do not attempt to manage a potential blocking event without counsel present.

Finally, where the aggregation analysis is ambiguous – where you cannot determine with confidence whether a threshold is crossed or whether control exists – the appropriate response is not to proceed on the basis of a best guess. Ambiguity in an ownership and control analysis is itself a risk flag. Uncertain positions should be escalated, documented, and resolved before the transaction proceeds.

How does the cross-border analysis differ from a single-regime assessment?

A single-regime assessment answers one question: does this entity meet the blocking or restriction threshold under this regime's rules? A cross-border analysis must answer that question for each applicable regime independently, and then identify the most restrictive outcome across all of them.

The divergence between regimes is not merely technical. The US 50 percent rule is mechanical and ownership-only; control is not an element of the OFAC test. The UK and EU tests add control as an independent ground. This means an entity can pass the OFAC ownership test – because no blocked person holds 50 percent or more in aggregate – and simultaneously fail the OFSI or EU test because a designated person holds effective control through governance rights. The cross-border compliance counsel's task is to apply both tests without assuming that the less restrictive result is sufficient.

There is also an extraterritoriality dimension. The US EAR can apply to foreign-produced items through Foreign Direct Product rules, and OFAC's facilitation prohibition means that a US person who assists a non-US entity in doing something that would be prohibited for a US person is itself in violation. A European group with a US subsidiary may find that its US employees' involvement in arranging a transaction triggers OFAC obligations that the parent company would not face alone. In our cross-border practice, mapping who in the transaction is a US person – and what they did – is a standard step in any multi-regime ownership analysis.

For businesses with exposure across multiple regimes simultaneously, the aggregating holdings across several listed persons compliance checklist should be run separately under each regime, with the results collated and the strictest outcome governing. This is the core principle: where two regimes both apply, the stricter prohibition governs the conduct of any person subject to both.

For a deeper look at how the EU applies its ownership and control test across ownership layers, see our guide at Aggregating holdings: the EU ownership and control guide. For parallel questions arising under the Japanese regime, the analysis is addressed at Aggregating holdings under the Japanese sanctions framework. Where the analysis extends into export-control classification and entity-level restrictions under BIS and the EAR, our practice page at Affiliate-level restrictions under BIS and the EAR addresses the intersection between ownership and export-control status.

Readiness check: can your programme pass the aggregation test today?

Before concluding this guide, the following questions serve as a practical readiness check. They are the questions we ask when reviewing a compliance programme for the first time, and the ones a regulator would ask in an enforcement context.

• Does your screening tool reach beyond the counterparty entity to cover every layer of its ownership chain, including indirect and beneficial owners?
• Do you aggregate ownership percentages across all listed persons in the chain, or do you check each holder separately?
• Is your control analysis documented separately from your ownership arithmetic, and does it address governance rights as well as equity stakes?
• Do you apply the test separately under each applicable regime, or do you rely on a single regime's analysis to cover all obligations?
• Is your ownership data current? When was the last time you re-screened and re-aggregated for ongoing counterparty relationships?
• Do you have a documented escalation procedure for ambiguous results, and does it specify a timeline for resolution?
• Are your records retained in a manner that meets the five-year retention obligation under US rules, as currently in force, and the equivalent requirements under UK and EU rules?

If any answer is uncertain, that uncertainty is itself the finding. The gap between what a compliance programme assumes it covers and what it actually captures is precisely where enforcement exposure sits. We regularly advise on restructuring screening programmes to close exactly these gaps – not as a theoretical exercise, but as a direct response to the patterns that produce sanctions exposure in practice.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.