A technology company in the United States prepares to ship commercial software to a distributor in a third market. The product carries no Export Control Classification Number. The exporter assumes EAR99 status means the shipment is clear. It is not clear – not if the end-user appears on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons), and not if the destination falls within a comprehensively sanctioned jurisdiction. As of April 2026, the intersection of EAR99 export-classification determinations and OFAC sanctions controls remains one of the most misunderstood compliance junctions in US cross-border trade.
EAR99 is a residual export-control classification under the Export Administration Regulations administered by the Bureau of Industry and Security. It signifies that an item is not listed on the Commerce Control List and requires no BIS licence for most destinations. However, EAR99 status provides no relief from OFAC prohibitions. A transaction involving an EAR99 item can still be fully blocked, require an OFAC licence, or be subject to secondary-sanctions risk. The two regimes operate independently, and both analyses must be completed before any cross-border transaction proceeds.
This guide works through the EAR99 determination process step by step, maps where OFAC controls apply regardless of classification, identifies the risk flags that cause enforcement exposure, and explains when independent legal advice is essential.
Step 1: Understand what EAR99 means – and what it does not
EAR99 is the classification assigned to any item subject to the EAR that does not appear on the Commerce Control List and is not controlled for any reason enumerated in the regulations. It is the default bucket, not an exemption from export-control obligations generally.
The practical consequence is significant. An exporter who confirms EAR99 status has completed only the first stage of analysis. EAR99 items can still require a BIS licence if the exporter has knowledge – or reason to know – of a prohibited end use or end user. Beyond BIS, the OFAC analysis runs entirely separately. OFAC administers economic sanctions under IEEPA and other statutory authorities. Its prohibitions apply to transactions, not only to controlled items. Whether the goods are EAR99, ECCN-listed, or outside the EAR altogether is irrelevant to the OFAC question.
In our experience, the classification step is where exporters invest most of their compliance resource. The OFAC screen is then treated as a tick-box. That sequence is correct in principle but the depth of the OFAC analysis is routinely underestimated, particularly where the counterparty has a complex ownership structure or operates in a region with active secondary-sanctions risk.
Step 2: Run the OFAC sanctions screen before any commitment is made
An OFAC screen should precede any contractual commitment, not follow it – because the exposure crystallises at the point of the agreement, not only at the point of shipment.
The screen has three dimensions. First, the party screen: every named party to the transaction – buyer, seller, freight forwarder, financial intermediary, end user – must be checked against the SDN List and the relevant OFAC consolidated sanctions lists. Second, the ownership screen: OFAC's 50 percent rule (the rule treating any entity owned 50 percent or more in the aggregate by one or more blocked persons as itself blocked) means that a counterparty with a clean name on the list may still be blocked through its shareholder structure. Ownership of 50 percent or more by listed persons triggers the block automatically. The entity does not need to be separately named. Third, the jurisdiction screen: some OFAC programmes impose comprehensive restrictions on transactions involving designated territories. An EAR99 item shipped into a comprehensively sanctioned jurisdiction requires an OFAC licence or a general licence that covers the specific transaction type.
The 50 percent rule catches exporters who screen only first-layer shareholders. What if one listed person holds 30 percent and a second listed person holds 25 percent? The aggregate is 55 percent. Both positions must be visible for the screen to catch the problem. Have you confirmed that your screening tool and your analyst's review go deep enough to aggregate holdings across multiple listed owners?
Step 3: Apply the correct OFAC prohibitions test for the transaction
OFAC prohibitions for EAR99 transactions operate across three primary categories: dealings with SDN-listed parties, dealings with parties in comprehensively sanctioned jurisdictions, and dealings that facilitate transactions otherwise prohibited – the facilitation prohibition that catches non-US firms acting on behalf of US persons or using US-origin goods, technology, or financial infrastructure.
For a US person exporting an EAR99 item, the analysis is direct. The exporter is a US person. OFAC prohibitions on US persons apply in full. No licence exception under the EAR modifies that obligation. For a non-US subsidiary of a US company, the analysis turns on whether the non-US entity is itself subject to OFAC jurisdiction – because it is a US-owned or US-controlled entity, because the transaction involves US-origin goods or technology, or because US dollar clearing is used.
Secondary-sanctions risk is the dimension that is most commonly missed in EAR99 planning. Secondary sanctions allow OFAC to impose penalties on non-US persons for conduct that takes place entirely outside the United States but involves a sanctioned party or jurisdiction. An EAR99 item exported by a non-US company with no US person involvement can still generate secondary-sanctions exposure if the end buyer or end user is linked to a regime covered by secondary measures. We regularly advise non-US clients who are surprised to discover that their transaction – which they had analysed only under their home regime – carries OFAC-related risk.
The position above covers the standard case. Your facts – the counterparty, the end use, the payment route, and the jurisdiction in play – change the analysis in ways that a generic screen will not surface.
For a confidential review of your OFAC exposure on a pending shipment or transaction, contact Calder & Vance at info@caldervance.com.
Step 4: Check for applicable general licences and authorised categories
A transaction that is blocked under OFAC is not necessarily impermissible. OFAC issues general licences (standing authorisations that permit a defined category of transactions without a separate application) and specific licences (case-by-case authorisations granted after a formal application).
For EAR99 items, general licences most frequently arise in four areas: personal remittances, informational materials, certain food and medicine categories, and authorised financial services to ordinary nationals of a sanctioned jurisdiction. Whether a general licence covers a specific shipment depends on an exact reading of its terms. General licences routinely contain conditions, value thresholds, excluded parties, and geographic limits that narrow the authorisation considerably.
If no general licence applies and the transaction is otherwise blocked, the exporter must either apply for a specific licence or walk away from the transaction. OFAC's licensing policy for EAR99 items typically turns on the end use, the end user, and the humanitarian or policy justification for the proposed transaction. Applications that do not address these factors directly tend to draw requests for additional information, which extends the process. In our practice, a well-prepared specific licence application with a strong humanitarian or foreign-policy nexus has a meaningfully better outcome profile than one submitted without a clear policy rationale.
The EU and UK regimes operate parallel licensing structures. Under OFSI licensing rules in the United Kingdom, a specific licence can be granted where the activity would otherwise be prohibited by the relevant thematic regulations. The EU Council regulations provide equivalent licensing mechanisms. Neither the EU nor the UK system treats OFAC general licences as binding – and an activity permitted under a US general licence may still require a separate UK or EU authorisation. This divergence regularly surprises businesses operating in multiple jurisdictions, particularly those accustomed to treating a US compliance clearance as globally sufficient.
Step 5: Complete end-use and end-user due diligence specific to the EAR99 item
Even where OFAC prohibitions do not directly apply, an EAR99 exporter must assess whether the BIS "knowledge" standard triggers an additional obligation. BIS prohibits exports to a party when the exporter knows or has reason to know that the item will be used in a manner prohibited by the EAR – including re-export to a sanctioned destination or diversion to a restricted end use.
Due diligence for end-use purposes is not a paper exercise. It requires a substantive assessment of the counterparty's business, the plausibility of the stated end use, the geographic location of the ultimate recipient, and any red flags in the commercial relationship. Red flags include requests to omit descriptions from shipping documents, payments through unrelated third parties, inquiries focused on export restrictions rather than product specifications, and routing patterns that add unnecessary transit jurisdictions.
The OFAC and BIS analyses converge here. A counterparty that presents red flags for BIS end-use purposes almost certainly requires closer OFAC scrutiny too. A party attempting to route goods through an intermediary to defeat BIS export controls is likely attempting the same with respect to OFAC sanctions. We have acted for exporters who identified precisely this pattern during enhanced due diligence triggered by seemingly minor BIS red flags – and the OFAC exposure that surfaced was the more serious of the two.
For exporters who manufacture or supply dual-use items – including items that straddle the EAR99 classification because their parameters approach but do not reach a controlled threshold – the end-use analysis must address the potential military or proliferation application of the item, not only the stated civilian purpose. This is the domain where export classification interacts most directly with OFAC's counter-proliferation sanctions programmes.
How does cross-regime exposure change the EAR99 calculus?
The EAR99 determination is a US regulatory conclusion. It binds US exporters and applies to items that are subject to the EAR. It does not answer the question of what obligations apply under the UK, EU, Swiss, or other national export-control regimes.
The EU operates its own dual-use controls under a Council regulation that lists controlled items. An item that falls outside the Commerce Control List and therefore qualifies as EAR99 may nonetheless appear on the EU list and require an EU export licence before it leaves an EU member state. Conversely, an item that requires a BIS licence for certain destinations may be freely exportable from an EU jurisdiction without additional authorisation. The two classification systems do not map onto each other.
The United Kingdom maintains its own Strategic Export Licensing regime administered by the Export Control Joint Unit. Following the UK's departure from the EU, UK controls now derive from the UK's own version of the consolidated list, which tracks but does not identically replicate the EU list. A business exporting from both the United States and the United Kingdom must run classification exercises under each regime independently.
Singapore, Japan, and the UAE each operate export-control regimes that impose obligations relevant to re-exports of US-origin goods, including EAR99 items in certain circumstances. The re-export controls in the EAR can catch a non-US party that re-exports a US-origin EAR99 item to a comprehensively sanctioned destination. This is a structural extraterritoriality mechanism that operates independently of whether the non-US exporter is otherwise subject to OFAC jurisdiction.
If a transaction has already been flagged by a bank, a freight forwarder, or a customs authority, or if a filing has been refused or returned, an early legal review can preserve options that narrow with time. The right question to ask at this point is not whether the transaction can be justified – it is what facts are needed to make a sound determination, and what documentation exists to support it.
To discuss a matter involving an EAR99 export, a counterparty screen, or a licence application, write to Calder & Vance at info@caldervance.com.
Risk flags: when an EAR99 determination is not enough
Certain patterns in a transaction should prompt a full legal review regardless of the EAR99 classification outcome.
- The counterparty, its parent, or a significant shareholder appears on any OFAC list – including the Sectoral Sanctions Identifications List or the Foreign Sanctions Evaders List, not only the SDN List.
- The end destination is a jurisdiction subject to comprehensive OFAC measures, even if the stated purpose is civilian or humanitarian.
- Payment is routed through a third party unconnected to the stated buyer, or through a financial institution in a jurisdiction with elevated secondary-sanctions risk.
- The goods will transit a jurisdiction under comprehensive sanctions, even if that jurisdiction is not the final destination.
- The end user cannot be identified with reasonable certainty, or the stated end use is inconsistent with the buyer's normal business.
- The contract terms seek indemnities, representations, or warranties concerning sanctions compliance from the US exporter – a sign the counterparty itself has identified a compliance question.
- The counterparty is owned or controlled by a party that does not appear on any list but is associated through business relationships or geographic presence with a comprehensively sanctioned regime.
A common misconception is that EAR99 items are simply too low-value or too widely available to attract OFAC enforcement. Enforcement actions – and formal demand letters preceding them – have involved consumer electronics, commercial software, and widely available industrial components, all classified as EAR99. The classification affects the BIS analysis. It does not reduce the OFAC exposure.
A related myth is that voluntary disclosure (a VSD – a voluntary self-disclosure to the regulator) is always the right first step after a potential violation is discovered. A VSD can significantly mitigate penalties where the violation is genuine, isolated, and promptly corrected. It is not always appropriate. Where the facts are ambiguous, where the legal basis of the prohibition is genuinely uncertain, or where a VSD may implicate other parties, independent legal advice before any disclosure is essential. We advise on this question regularly and the correct route depends entirely on the specific facts.
Related practices
- Deemed export and technology controls under BIS and the EAR – classification, licensing, and end-use controls for technology transfers to foreign nationals
- EAR99 determinations under OFSI – how the UK financial-sanctions regime interacts with export-classification outcomes
- EAR99 determinations under OFSI: advanced guide – ownership, control, and licensing under the UK regime for classified and unclassified items