How to use an early account or settlement scheme under OFSI

An OFSI inquiry letter arrives. The clock is already running. A firm that has not thought through its options in advance will find that the window for a discount – potentially a significant one – closes before it has assembled its facts. That is the real cost of delay: not just a larger penalty, but a lost procedural opportunity that cannot be recovered.

OFSI's early account scheme (a structured mechanism allowing a regulated business to provide a full, voluntary account of an apparent breach before formal enforcement proceedings crystallise) and its settlement scheme (a procedure for agreeing liability and penalty quantum with OFSI before a formal decision notice is issued) offer two distinct routes to a reduced penalty. As of February 2026, revised OFSI guidance has formalised both, introduced a 20 percent settlement discount, and set fixed-sum penalties for defined procedural failings. Used correctly, the schemes materially reduce exposure; used incorrectly, they can crystallise admissions without securing the benefit.

This guide explains how each scheme works, how to engage with OFSI at each stage, where the two schemes interact, how the UK position compares with OFAC and EU enforcement, and what missteps regularly cost businesses their discount.

What is OFSI's early account scheme and how does it work?

OFSI's early account scheme allows a business or individual to provide a candid, structured account of a suspected breach before OFSI has made formal findings. Under OFSI's revised enforcement guidance, providing an early account in a timely manner is treated as a mitigating factor and can reduce the monetary penalty that would otherwise apply.

The mechanism operates as follows. When OFSI writes to open an inquiry, or when a business identifies a breach before hearing from OFSI, the business has a choice: wait for OFSI's investigation to proceed at OFSI's pace, or engage the early account process by providing a full, accurate, and timely account of what happened. The second option puts the business in a stronger procedural position. OFSI has confirmed in its guidance that a genuine, complete early account is treated as a mitigating factor in its penalty calculation – sitting alongside voluntary self-disclosure and co-operation as established mitigants.

What counts as "early"? The guidance does not set a rigid number of business days, but the expectation is clear: the account must be provided before OFSI has substantially completed its own investigation. A business that waits until OFSI has gathered third-party evidence and formed a provisional view will find that the mitigating value of the account is reduced or disregarded entirely. In our experience, the practical window is short – often weeks, not months.

A compliant early account includes: a chronological narrative of the events leading to the breach; identification of the relevant persons involved; the goods, funds, or economic resources at issue; the relevant UK financial sanctions regulations in scope; steps taken immediately after the breach was identified; and any remediation already undertaken. Incomplete accounts, or accounts that hedge on material facts, are unlikely to attract the full mitigating credit. How confident are you that your internal investigation is complete enough to support that account?

How does the settlement scheme work step by step?

OFSI's settlement scheme allows a business and OFSI to agree the facts, the penalty basis, and the quantum of a monetary penalty before OFSI issues a formal decision notice, in exchange for a 20 percent discount on the penalty that would otherwise apply.

The scheme has a defined sequence. First, OFSI must have reached a stage in its investigation where it is prepared to open settlement discussions – typically after it has gathered its principal evidence and formed a view on liability. OFSI initiates the settlement conversation; a business cannot unilaterally declare itself in settlement. Once discussions open, the parties negotiate an agreed statement of facts and a penalty figure. If agreement is reached, OFSI issues a decision notice reflecting the agreed position and the 20 percent reduction.

If negotiations fail, OFSI may proceed to a formal decision notice on its own assessment. Statements made in settlement discussions are, in principle, for the purpose of settlement. Businesses entering settlement discussions should ensure that any concessions made during those discussions are clearly framed as such. That requires careful legal management: settlement can crystallise admissions if conducted without appropriate safeguards.

A critical practical point: the settlement discount is separate from the early account mitigant. A business that has provided a genuine early account and then enters and concludes settlement discussions may be able to combine both reductions. Under the revised guidance, these discounts can be cumulative – meaning the financial benefit of engaging both processes early is material. However, the cumulative effect is not automatic; it depends on OFSI's assessment of the quality and completeness of both the account and the settlement engagement.

The settlement scheme does not resolve questions of criminal liability. OFSI's civil enforcement and the criminal-prosecution route under UK sanctions legislation are separate tracks. Where criminal exposure is a real possibility – for example, where the breach was knowing – settlement of the civil penalty does not foreclose a referral. In our experience, identifying that risk at the outset, before any approach to OFSI, is one of the most consequential steps a business can take.

What does the early account process mean in practice for a financial institution?

For a relevant firm (a financial institution, insurer, or other business subject to UK financial-sanctions obligations and the associated reporting requirements), the early account process intersects directly with existing mandatory reporting duties.

Under UK financial-sanctions legislation, there is a legal obligation on relevant firms to report knowledge or reasonable cause to suspect that a person is a designated person, or that a breach has occurred. That obligation runs independently of any decision to engage the early account scheme. A relevant firm cannot treat the early account process as a substitute for a mandatory report; the two obligations are parallel, not alternatives. Conflating them is a meaningful risk: a firm that delays its mandatory report while it prepares a polished early account may acquire a separate procedural failing.

The practical sequence for a financial institution that identifies a potential breach is therefore: first, determine whether a mandatory report is required and, if so, make it promptly; second, preserve all relevant records and communications; third, consider whether voluntary self-disclosure to OFSI is appropriate and whether it supports an early account; and fourth, assess whether the facts and timeline are sufficiently clear to support a complete and accurate account. Steps three and four require legal input before execution. We regularly advise financial institutions at this triage stage, where decisions made in the first seventy-two hours often set the trajectory of the entire inquiry.

OFSI's revised guidance introduced fixed penalties for specified procedural breaches – including, as a matter of principle, failures to report when reporting was required. Although the specific amounts are subject to pending legislative confirmation, the direction of travel is clear: OFSI intends to use fixed penalties to enforce procedural compliance separately from its monetary-penalty regime for substantive breaches. A financial institution that fails to report and then seeks mitigation through an early account is in a materially weaker position than one that reported promptly and then engaged the early account process.

How does OFSI's approach compare with OFAC and the EU?

The cross-regime comparison matters for any business with exposure across multiple jurisdictions, because the incentive structure, the procedural sequence, and the legal consequences of disclosure differ in ways that can produce conflicting tactical pressures.

Under OFAC, voluntary self-disclosure (VSD) – a contemporaneous, good-faith self-report of an apparent violation – is a well-established mitigating factor set out in OFAC's Enforcement Guidelines. OFAC's framework distinguishes between "egregious" and "non-egregious" violations and between those with and without VSD; the VSD factor can halve the penalty base for a non-egregious violation. OFAC does not operate a named settlement scheme or an early account scheme in the sense that OFSI now does, but the VSD and co-operation framework produces a broadly analogous incentive. Critically, the OFAC statute of limitations was extended – under currently applicable authority – to a longer period, meaning that historic apparent violations are within scope for longer than under the older rule. Verify the current position before relying on it.

In the EU, the direction of travel is towards criminalisation. An EU directive on the criminalisation of sanctions violations sets minimum penalties including maximum terms of imprisonment and corporate fines expressed as a percentage of worldwide turnover. Member States were required to transpose that directive by May 2025, and implementation continued into 2026. At the EU level there is no single enforcement authority comparable to OFSI or OFAC; enforcement is delegated to national competent authorities, and the incentive landscape for voluntary disclosure varies by member state. A business that has exposure in both the UK and an EU jurisdiction may face different reporting deadlines and different penalty discount regimes running in parallel.

The practical implication: where two regimes both apply, the stricter obligation governs the conduct of a person subject to both. A business that has met its UK reporting obligation may still face an EU-level obligation that runs on a different timetable. Mapping all applicable regimes before engaging any of them is not optional; it is the foundation of the strategy.

For businesses with concurrent OFAC exposure, the US facilitates-prohibition adds a further dimension: a UK-established firm whose US-person employees or dollar-clearing correspondent banks are involved in a transaction may have OFAC obligations that run alongside its OFSI obligations. In our cross-border practice, we frequently advise businesses navigating both simultaneously, and the two sets of obligations do not always point in the same direction.

What are the most significant risk flags when engaging these schemes?

The four risk flags that most frequently undermine a business's position are: late engagement, an incomplete account, unresolved criminal exposure, and parallel jurisdiction conflicts.

Late engagement is the most common failure. A business that waits for OFSI to complete its investigation before considering an early account has already lost the benefit. OFSI's mitigating credit is calibrated to the quality and timeliness of the account; an account provided after OFSI has substantially formed its view is worth significantly less. The business has also spent time and cost on an investigation it could have used to prepare its account.

An incomplete or hedged account is the second failure. OFSI expects a full and candid account of the facts. An account that omits material information, downplays the business's role, or qualifies findings that are not genuinely in doubt may attract adverse comment rather than mitigation. Where internal facts are unclear, it is better to say so explicitly than to present a confident account that is later shown to be incomplete. Accuracy and completeness are not in tension with a business's interests; they are the mechanism through which the business earns its discount.

Unresolved criminal exposure is the risk that receives the least attention and carries the greatest consequence. If a director, compliance officer, or employee may face personal criminal liability, or if the facts disclose knowing participation in a breach, the decision to engage civil settlement must be taken with full awareness of what it does and does not resolve. OFSI's civil settlement does not bind the Crown Prosecution Service or His Majesty's Revenue & Customs in a criminal matter. A business or individual that settles the civil position while leaving the criminal position unaddressed has not resolved its exposure; it has documented it.

Finally, parallel jurisdiction conflicts arise where a disclosure in one regime creates adverse consequences in another. A VSD to OFAC may contain admissions relevant to an OFSI inquiry, and vice versa. Statements made in EU national proceedings may be visible to other competent authorities. Managing the sequencing and scope of disclosure across multiple regimes requires co-ordinated legal advice, not sequential submissions prepared by different teams without visibility of each other's work.

Is staying silent safer than disclosing to OFSI?

The view that silence is safer than self-disclosure is among the most persistent and damaging misapprehensions we encounter.

It rests on an intuition that anything a business tells OFSI can only be used against it. That intuition is wrong in two directions. First, OFSI has investigative powers; silence does not prevent OFSI from building its case through third-party evidence, correspondent bank records, or mandatory reports filed by other institutions. A business that says nothing while OFSI constructs the picture from external sources arrives at the investigation without any credit for co-operation and without the opportunity to shape the narrative. Second, the failure to make a mandatory report when one is required is itself a breach. A firm that stays silent because it is managing a sensitive position may acquire a second, independent liability – the procedural breach – that it did not have before it chose silence.

The better question is not "should we disclose?" but "how do we disclose accurately, completely, and at the right time, while managing all parallel obligations?" That is a legal question, not a communications question, and it needs legal input before any approach to OFSI is made. We act for multinationals, financial institutions, and exporters on sanctions and export-control matters across the major regimes; the cases where silence has worsened a position are not exceptional – they are routine.

Practical co-operation with OFSI, including provision of a complete early account and engagement with the settlement scheme where appropriate, is the well-tested route to a materially reduced penalty and to resolution of the inquiry on known terms. The alternative – passivity while OFSI investigates – produces neither reduction nor certainty.

When should you involve sanctions counsel?

Counsel should be involved before any account, disclosure, or settlement communication is made to OFSI – not after. That instruction is not formalistic; it reflects the practical reality that the first communication with OFSI sets the frame for everything that follows.

There are five moments at which the need for legal input is acute. The first is the moment a potential breach is identified – before any internal investigation has been shared with OFSI or, in many cases, beyond the immediate team. At this stage the primary task is scope control: identifying what happened, who was involved, what records exist, and whether a mandatory report is immediately required. The second moment is the decision on whether to make a VSD or initiate an early account. The third is the preparation of the account itself. The fourth is the opening of settlement discussions with OFSI. The fifth is the receipt of a draft decision notice, which carries its own review rights under the UK regime.

At each stage, the questions are legal in character: what does the obligation require, what does the account need to contain, what admissions is the business making, and what other regimes are in play? Compliance teams and internal legal teams routinely handle the first stage; external sanctions counsel becomes essential from the second stage onwards, and often at the first.

A further practical point: OFSI's revised enforcement guidance, as of February 2026, is more detailed and more structured than its predecessor. The existence of named schemes, defined discounts, and fixed penalties means that businesses now operate in a more rule-bound environment than previously. That is in many respects a benefit – the outcomes are more predictable. But it also means that procedural compliance with the scheme's requirements matters more: a business that attempts to use the settlement scheme without meeting its requirements does not receive a partial discount; it receives nothing.

Related practices

• Corporate liability and attribution under OFSI – how OFSI attributes a breach to a legal entity or its officers
• Fixed and procedural penalties under EU sanctions – the EU enforcement posture and how it compares with the UK

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.