Calder & Vance International Sanctions & Compliance Counsel

Cross-Border Transactions & Diligence · UN

Correspondent-banking de-risking under UN: procedure and pitfalls

A correspondent bank in a major financial centre runs its weekly batch screening. A respondent institution in a developing market triggers a match against the UN Consolidated List (the Security Council's master list of individuals and entities subject to UN-mandated asset freezes, travel bans, and arms embargoes). The compliance team cannot confirm the match is a false positive within the available window. The relationship is suspended. The respondent loses dollar-clearing access overnight. What should have happened before that moment – and what can still be done after it?

Correspondent-banking de-risking under the UN Consolidated List is governed by Security Council resolutions binding on all UN member states, implemented domestically through each jurisdiction's national legislation. The UN regime does not itself operate a licensing mechanism in the same way OFAC or OFSI do; relief for designated parties flows through the Security Council committee system and, for the ISIL/Al-Qaida regime, through the Office of the Ombudsperson. As of January 2026, the practical burden on correspondent banks is managing the gap between UN-level designation and the divergent domestic implementations that sit above it.

This guide sets out the governing authority, the de-risking procedure step by step, a comparison with the OFAC and OFSI approaches, the most common risk flags, and when to involve sanctions counsel.

What is the legal basis for UN correspondent-banking de-risking?

UN Security Council resolutions adopted under Chapter VII of the UN Charter are binding on all member states and create obligations that domestic legislation must implement. The obligation is not optional. A correspondent bank is not reacting to a commercial preference when it de-risks a UN-designated relationship; it is complying with a mandatory legal duty imposed through national law that itself flows from international obligation.

The Security Council maintains several distinct sanctions committees, each administering a separate regime. The ISIL and Al-Qaida regime is the most operationally significant for financial institutions, because it carries a dedicated Ombudsperson (an independent officer who reviews delisting petitions from designated individuals and entities) and a separate Focal Point mechanism for other UN regimes. Country-specific and thematic regimes – arms embargoes, travel bans, financial sanctions across a range of situations – are administered by their respective committees. The UN Consolidated List aggregates all entries.

Domestic implementation is critical. The UN regime sets the floor; national law sets what sits above it. A transaction that is clean under the UN Consolidated List may still be prohibited under OFAC, OFSI, EU Council regulations, or the applicable country regime. Correspondent banks with multi-currency clearing operations – particularly those providing USD, EUR, and GBP clearing – therefore face layered obligations simultaneously. De-risking that is calibrated only to the UN List without reference to the parallel domestic lists carries residual exposure.

In our cross-border practice, we regularly see correspondent banks that screen against the UN Consolidated List as a primary source without maintaining current feeds for the OFAC SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the OFSI consolidated list, and the EU consolidated list. Each list has a different refresh cadence and a different ownership-and-control methodology. Treating the UN List as a proxy for the others is a recognised compliance gap.

Step 1 – Classify the trigger and confirm the match

The first step in any de-risking decision is distinguishing a confirmed match from a false positive, and within confirmed matches, distinguishing a direct designation from an indirect exposure through ownership or control. These distinctions drive entirely different procedural paths.

A direct designation means the respondent institution or a named individual associated with it appears on the UN Consolidated List by name. A control exposure arises where the respondent is not listed but is owned or controlled by a listed person or entity. The UN regime does not codify an ownership-percentage threshold the way OFAC does with its 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). Instead, the analysis under UN-implementing national legislation typically mirrors the domestic ownership-and-control test of the jurisdiction in question – which may be percentage-based, control-based, or both.

Practical classification steps:

  1. Run the respondent's full legal name, all known aliases, and registered identifiers against the UN Consolidated List using both automated screening and a manual review of near-matches.
  2. Retrieve the designation entry and note the sponsoring committee, the sanctions measures in force (asset freeze, travel ban, arms embargo), and the date of designation.
  3. Map the respondent's ownership chain back at least two layers. Identify any named shareholder against all relevant consolidated lists, not only the UN list.
  4. Assess control: even below formal ownership thresholds, does a listed person exercise directing influence over the respondent's board, treasury, or correspondent accounts?
  5. Document the analysis contemporaneously. Regulatory expectations for record-keeping under most UN-implementing regimes require that the basis for a de-risking decision be capable of reconstruction on examination.

Do not conflate a weak screening match with a confirmed designation. A name-similarity flag that survives enhanced review but cannot be confirmed as a true match is not, in itself, a reason to terminate a correspondent relationship. The decision to de-risk a relationship that turns on an unconfirmed match – rather than a confirmed designation – is a commercial decision with legal implications. It is not the same as a compliance obligation.

Step 2 – Assess the sanctions measures and domestic implementation

Once a match is confirmed, the next step is to identify precisely which sanctions measures apply and how they have been implemented in each jurisdiction where the correspondent bank operates or clears. The UN regime prescribes the type of measure; national law determines the specific prohibition and any available authorisations.

The principal financial measure under UN regimes is an asset freeze – a prohibition on making funds or economic resources available, directly or indirectly, to or for the benefit of a designated person or entity. The practical implication for a correspondent bank is that processing a payment instruction that would transfer value to or for the benefit of a designated respondent is prohibited, irrespective of whether the correspondent bank itself is domiciled in the respondent's country.

Cross-regime comparison matters here. Under OFAC, a US-nexus transaction involving a designated party triggers a blocking obligation – the funds must be held, and OFAC must be notified within a defined period. Under OFSI, the obligation is to freeze and report to OFSI as soon as reasonably practicable. EU Council regulations impose an obligation to notify the relevant national competent authority. The UN regime does not itself prescribe these operational steps; they flow from the domestic implementing law. A correspondent bank with operations across these three jurisdictions faces three distinct reporting timelines and three distinct notification procedures for what may be a single underlying transaction.

The position above covers the standard case. Your facts – the currency of the transaction, the nationality of the parties, the routing of the payment, and the measures in force under the relevant UN committee – change the analysis materially. For an assessment of your exposure across the relevant regimes, contact Calder & Vance at info@caldervance.com.

Step 3 – Decide whether to freeze, exit, or apply for authorisation

Having confirmed a designation and mapped the applicable measures, the correspondent bank faces a three-way decision: freeze the relevant funds or assets in place; proceed to exit the relationship in an orderly manner consistent with applicable restrictions; or seek authorisation from the relevant authority to continue specific transactions.

Freezing is the default where a payment instruction has already arrived and is caught by the asset-freeze prohibition. The funds sit pending further direction. Exit – the de-risking decision in its conventional sense – operates prospectively: the correspondent serves notice to the respondent and terminates the account relationship, ensuring that no further prohibited transactions are processed. Neither action requires regulatory pre-approval, though both require contemporaneous documentation and, in most implementing jurisdictions, notification to the relevant authority.

Authorisation is the third path. This is where the UN regime's architecture diverges most sharply from OFAC and OFSI. OFAC issues specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction) and general licences (standing authorisations permitting a defined category of transactions without a separate application). OFSI has an analogous licensing regime. The UN regime does not operate a general licence mechanism at the international level. Authorisations must be sought from the domestic competent authority in the jurisdiction implementing the relevant Security Council resolution, which in turn may need to engage the relevant Security Council committee for measures that require committee-level approval before a humanitarian or other carve-out can be applied.

In practice, this means that a humanitarian organisation seeking to maintain banking access through a correspondent in a jurisdiction subject to a UN asset-freeze regime faces a longer, less predictable authorisation path than the same organisation seeking an OFAC or OFSI licence. We have acted for financial institutions navigating exactly this gap – coordinating with multiple domestic competent authorities while the underlying UN committee process runs in parallel.

How does the UN de-risking procedure compare with OFAC and OFSI?

The UN, OFAC, and OFSI frameworks differ on three axes that directly affect how a correspondent bank manages a de-risking event: the ownership test, the licensing architecture, and the delisting mechanism.

Ownership and control. OFAC applies the 50 percent aggregate ownership threshold as a mechanical rule. OFSI applies an ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) that goes beyond percentage ownership to include practical control – the ability to exercise decisive influence over the entity's conduct. The UN regime, having no independent ownership rule, relies on domestic implementations, which vary. Some implementing jurisdictions adopt the OFAC-style percentage test; others follow a control-led approach. Correspondent banks operating across multiple UN-implementing jurisdictions therefore cannot apply a single ownership methodology and must assess the test applicable in each clearing jurisdiction.

Licensing architecture. OFAC's specific and general licence system is mature, relatively well-documented, and operates on published timelines (though actual processing times vary). OFSI's licensing regime is similarly structured, with published guidance on the categories of licence available and the information required. The UN system has no equivalent international-level licence. What exists is a humanitarian exemption mechanism administered at the committee level, and a number of domestic competent authorities have developed their own carve-out procedures. The procedural divergence is significant: a bank facing parallel OFAC and UN obligations for the same relationship may need to file an OFAC licence application and engage a domestic competent authority under the UN-implementing national law on separate tracks, with no guarantee of aligned outcomes.

Delisting. Under OFAC, a petitioner may submit a delisting request directly to OFAC. Under EU Council regulations, an annulment action may be brought before the EU General Court. Under the UN ISIL/Al-Qaida regime, the Ombudsperson receives petitions and makes recommendations to the Security Council committee. For other UN regimes, the Focal Point receives requests but only transmits them; the committee itself decides. The delisting path under UN regimes is therefore procedurally distinct, often slower, and subject to political dynamics at the committee level that are absent from OFAC and OFSI proceedings. This matters to a correspondent bank because a respondent that has initiated a UN delisting process may remain on the Consolidated List for an extended period while the process runs – and the correspondent's de-risking obligation subsists throughout.

If a transaction has already been flagged or a correspondent relationship has been suspended pending a regulatory determination, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.

What are the principal risk flags in correspondent-banking de-risking?

Experience before the major compliance authorities points to a consistent set of risk flags that elevate a de-risking event from a routine compliance matter to a potential enforcement exposure. The following are the most frequently encountered in cross-border correspondent relationships.

Incomplete ownership mapping. A correspondent that screens the respondent institution at the entity level, without tracing beneficial ownership two or more layers up the chain, may miss a controlling interest held by a UN-listed person. The UN regime's control test, as implemented in most jurisdictions, is broad enough to capture indirect influence that does not appear on a corporate register. Aggregation matters: two minority stakes, neither triggering the threshold alone, may combine to reach it.

Delayed screening updates. The UN Consolidated List is amended without advance notice. A correspondent that runs batch screening weekly rather than in real time carries a window of exposure between the designation date and the next screening cycle. Most UN-implementing national regimes do not specify a maximum permitted screening interval, but regulatory expectations for financial institutions in major clearing jurisdictions are that screening feeds are current. Verify the applicable standard for each clearing jurisdiction.

Inconsistent de-risking documentation. A decision to exit a correspondent relationship on de-risking grounds should be documented in a manner that distinguishes a compliance-driven exit from a purely commercial one. Regulatory and supervisory authorities in several implementing jurisdictions have noted that the absence of documented compliance rationale creates difficulty in audit, and in some cases has resulted in secondary scrutiny of the de-risking decision itself.

Conflation of UN obligations with other regimes. The UN asset-freeze obligation and the OFAC blocking obligation are distinct. A payment blocked under OFAC must be held in a blocked account; a payment frozen under a UN-implementing regime may have different handling requirements under the relevant national law. Processing a UN-frozen payment using the OFAC blocking procedure – or vice versa – produces a compliance record that does not accurately reflect the applicable obligation.

Over-reliance on screening technology without legal analysis. Automated screening identifies potential matches. It does not assess the ownership chain, apply the relevant control test, or resolve ambiguous matches. Compliance decisions that rest solely on a screening output without legal analysis of the underlying designation and the applicable national implementing law carry material residual risk. This is particularly true where the respondent is headquartered in a jurisdiction with its own UN-implementing legislation that diverges from the correspondent's home-jurisdiction rules.

Common misconceptions and when to involve counsel

A recurrent misconception is that de-risking under the UN regime is straightforward because the UN Consolidated List is smaller than the OFAC SDN List and the designations are more transparent. In our experience, the opposite complexity arises: the UN regime's reliance on domestic implementation creates a patchwork of divergent obligations that a correspondent bank with multi-currency, multi-jurisdiction operations must track simultaneously. The list may be shorter. The legal analysis is not simpler.

A second misconception is that a correspondent bank that has exited a respondent relationship has discharged all obligations relating to that respondent. This is not necessarily the case. Funds that were in transit or held in settlement at the time of exit may require separate handling. Reporting obligations may have been triggered by transactions processed before the exit. Outstanding contractual obligations between correspondent and respondent may need to be unwound in compliance with the applicable asset-freeze prohibition. Each of these requires legal analysis specific to the implementing jurisdiction and the facts of the relationship.

Counsel should be involved at the point where a screening match cannot be resolved as a false positive within the standard review cycle; where the ownership mapping reveals a potential control exposure that is not clearly within or outside the applicable test; where a transaction is in flight and a blocking or freezing obligation may have been triggered; where a respondent has initiated a delisting process and the correspondent needs to understand how long the de-risking obligation will subsist; or where a supervisory authority has made enquiries about the correspondent's de-risking practices.

In a recent matter, a financial institution providing multi-currency clearing to a respondent in a developing market identified a potential control exposure through a minority shareholder with an indirect link to a UN-listed person. The ownership chain spanned three intermediate holding companies across two jurisdictions. We mapped the ownership and control analysis under the applicable implementing legislation in each clearing jurisdiction, assessed the position under OFAC's 50 percent rule and OFSI's control test in parallel, and produced a consolidated legal opinion that the correspondent used to support a documented compliance decision. The matter was resolved without regulatory escalation.

Related practices

Frequently asked questions

What are the steps to manage de-risking exposure under UN?
The core steps are: (1) confirm the screening match is a true positive and not a false positive; (2) map the full ownership and control chain against the applicable domestic implementation test; (3) identify the sanctions measures in force and the competent authority in each clearing jurisdiction; (4) determine whether to freeze, exit, or seek authorisation; (5) document the decision contemporaneously; and (6) notify the relevant authority as required under the applicable national law. Each step should be completed before the next is begun, because errors at the classification stage propagate through the rest of the procedure.
What is the most common mistake in correspondent-banking de-risking?
The most common mistake is treating the UN Consolidated List as a substitute for full multi-list screening. The UN List captures UN-mandated designations. It does not reflect autonomous designations under OFAC, OFSI, EU Council regulations, or the applicable country regime. A respondent that is clean against the UN List may still be subject to a blocking or freezing obligation under one of those parallel regimes. A correspondent bank that relies solely on UN List screening for a multi-currency clearing operation is not managing its full sanctions exposure.
How does UN differ from other regimes here?
The UN regime differs in three principal respects. First, it has no independent licensing mechanism at the international level; authorisations flow through domestic competent authorities and, for measures requiring committee-level approval, through the relevant Security Council committee. Second, the UN ISIL/Al-Qaida delisting process runs through the Ombudsperson, which is procedurally distinct from OFAC petitions and EU General Court annulment actions; for other UN regimes, the Focal Point transmits but does not decide. Third, the ownership-and-control methodology depends on domestic implementing legislation, which varies across jurisdictions, rather than a single published rule such as OFAC's 50 percent threshold.

Talk to Calder & Vance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

Written by , Export controls, dual-use, maritime and trade sanctions. View profile and publications →

Discuss this with Calder & Vance

A few lines on your situation and any deadline. We respond within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.