A UK distributor receives an order for specialist components. The buyer is not listed. The end destination is not immediately obvious. The goods have potential dual-use characteristics. Before the shipment leaves the warehouse, someone must ask a harder question: does OFSI's end-use and end-user controls framework change whether this transaction can proceed at all?
End-use and end-user controls under OFSI operate alongside – but are distinct from – the UK's export licensing regime administered by ECJU. As of April 2026, OFSI enforces financial sanctions that prohibit dealing with designated persons, making funds or economic resources available to them, and bypassing those prohibitions through third parties. Where a transaction's ultimate end-user is a designated person, or where the end-use is one the regime targets, the financial-sanctions analysis is triggered even if the immediate counterparty appears clean.
This guide walks through the test, the procedure, the cross-border comparisons that matter for UK-regulated businesses, and the risk flags that our practice sees most often.
Step 1: Understand who owns this problem – OFSI, ECJU, or both?
OFSI administers UK financial sanctions under the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic sanctions regulations; ECJU administers export licences under the Export Control Order. Many cross-border shipments engage both, but the legal tests are entirely different, and conflating them is the most expensive mistake a compliance team can make.
OFSI's concern is financial: does the transaction involve a designated person as beneficial owner, controller, or end-user of funds or economic resources? If yes, the financial-sanctions prohibition is engaged regardless of whether an export licence has been granted. The export licence addresses the goods and their destination; the financial-sanctions analysis addresses the person who benefits.
In our experience, compliance teams at manufacturers and distributors default to the ECJU checklist and treat a clean export-licence decision as a green light for the whole transaction. It is not. The OFSI overlay must be run separately, using the financial-sanctions ownership-and-control test, not the export-classification tree.
Practically, the first step in any shipment review is therefore to map the two bodies of rules against the specific transaction: identify which sanctions regulations apply (thematic or country-specific), confirm whether ECJU licensing is also required, and set up a workflow that does not allow one clearance to substitute for the other.
Step 2: Identify who the real end-user is and apply the ownership-and-control test
Under UK financial sanctions, the prohibition on making funds or economic resources available to a designated person extends to entities owned or controlled by that person. Ownership in this context means direct or indirect beneficial ownership; control encompasses a broader range of legal and factual mechanisms by which a designated person can direct or benefit from an entity's activities.
This test is deliberately wider than a simple shareholding check. A designated individual who holds a minority stake but retains contractual rights to direct strategic decisions may still satisfy the control limb. A corporate structure in which a designated person is several layers removed from the immediate buyer can still bring the transaction within the prohibition if the economic benefit ultimately flows to that person.
For the practical compliance workflow, this means:
- Identify the immediate contractual counterparty and screen it against the UK Consolidated List and OFSI's consolidated list of asset-freeze targets.
- Map the ownership chain of the counterparty to the ultimate beneficial owner, applying the ownership and control test at each layer.
- Identify the end-user of the goods – who will actually operate, consume, or benefit from them – and screen that entity and its ownership chain separately.
- Where the goods are being resold or incorporated into a larger product, map the onward distribution chain as far as is reasonably practicable.
The depth of that chain-of-ownership mapping is not fixed in the regulations; it is calibrated to the risk profile of the transaction. High-value dual-use goods destined for a jurisdiction with a dense sanctions exposure require a deeper trace than a routine commercial shipment of everyday goods to a well-known counterparty. Document what you checked and why you stopped where you did.
Step 3: Assess whether an end-use certificate or contractual undertaking is sufficient – or whether you need an OFSI licence
Where a transaction appears clean after the ownership-and-control trace but residual risk remains – for instance, because the goods could plausibly be diverted to a designated end-user further down the supply chain – the next question is what additional controls are proportionate.
An end-use certificate (EUC) or end-user undertaking is a contractual instrument, not a statutory one. It records the buyer's commitment that the goods will be used for a stated purpose by a stated end-user and will not be transferred without consent. Under UK export-control law, ECJU requires EUCs for certain controlled goods as a condition of the open or standard individual export licence. OFSI does not publish a parallel EUC requirement in its statutory guidance, but the principle of taking reasonable steps to verify end-use is embedded in the "making available" prohibition: if a business has red flags suggesting diversion to a designated person and fails to act on them, it cannot rely on the counterparty's representations alone.
Where the residual risk is higher, or where the counterparty structure cannot be fully traced, the question becomes whether the transaction can proceed at all without an OFSI specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction). The grounds for a specific licence are set out in the relevant thematic regulations; common grounds include licences for legal expenses, humanitarian activity, and prior-obligation transactions. If none of the available grounds clearly apply and the end-user check cannot be completed satisfactorily, the correct answer may be not to proceed.
The position above covers the standard case. Your facts – the counterparty structure, the goods, the destination, the licensing ground available – change the analysis. If a transaction is generating persistent end-user uncertainty, early legal review is cheaper than a post-shipment enforcement response.
For an initial assessment of your OFSI licensing position, contact Calder & Vance at info@caldervance.com.
Step 4: Compare the OFSI test with how OFAC and the EU approach the same question
A business that exports from the UK but has US-person involvement in the transaction, uses US-origin goods or technology, or sells to a buyer in a jurisdiction where EU sanctions also operate cannot treat OFSI compliance as the full answer. The three regimes share the same policy object but diverge significantly on the mechanics.
Under OFAC, the ownership test is mechanical: an entity owned 50 percent or more in the aggregate by one or more blocked persons is itself treated as blocked, regardless of control. This is a bright-line rule under IEEPA and OFAC's published guidance. Control is a secondary and more fact-intensive analysis. The result is that an entity owned 49 percent by a blocked person is not automatically blocked under OFAC – though it may still be within the EU or UK prohibition if control is present.
The EU ownership and control test, set out in the relevant Council regulations, is broader than OFAC's 50 percent rule. A listed person who controls an entity – through voting rights, contractual rights, board influence, or any other mechanism – can bring that entity within the asset-freeze prohibition even at low ownership levels. The EU General Court has confirmed this approach in judgments addressing the scope of Council regulations, without requiring a specific ownership threshold.
OFSI follows the UK equivalent of the EU approach: both ownership and control matter, and control is assessed on a functional basis rather than a fixed percentage. This means a transaction that OFAC would clear – because no blocked person reaches the 50 percent threshold – may still be prohibited under OFSI or EU rules if a designated person exercises effective control.
For businesses with a US nexus, the extraterritorial reach of the EAR is a further layer. Deemed exports (technology transfers to a foreign national treated as an export to their country of citizenship) and the re-export controls under the EAR can apply to UK-based transactions involving US-origin technology. The OFSI analysis and the BIS/EAR analysis must both be completed before the goods or technology move. See our guidance on deemed export and technology controls under the BIS/EAR for the US side of this picture.
Where Switzerland (SECO), Canada, Australia, or the UAE are part of the supply chain, each applies its own end-user and ownership tests. SECO applies Swiss ordinances that track the EU position closely but are administered independently. The UAE has developed a national sanctions regime administered by the Executive Office for Control and Non-Proliferation, with end-user requirements that differ in form from the UK approach. Our companion guide on end-use controls under the UAE regime addresses that jurisdiction in detail.
Step 5: Apply the "stricter prohibition governs" principle across the overlapping regimes
When two or more regimes apply to the same transaction, the governing rule is that the stricter prohibition governs. This is not a statutory formula; it is a practical necessity in multi-regime transactions. A transaction may clear OFAC's 50 percent threshold test but remain prohibited under OFSI's control analysis. A goods shipment may be covered by an ECJU open general export licence but still require OFSI's specific licence if the end-user is a designated person under UK financial sanctions.
The compliance workflow must therefore be sequenced so that the strictest applicable prohibition is identified first. We regularly advise clients on multi-regime transactions where the natural starting point – OFAC, because of its global reach – would produce a "proceed" answer that is wrong under OFSI or EU rules. Running the jurisdictions in isolation, rather than in parallel, is a systemic compliance failure that creates exposure even in well-resourced programmes.
The practical design implication is a matrix: list the jurisdictions whose regimes bite on this transaction; apply each test; identify the most restrictive outcome; and make that outcome binding on the go/no-go decision. Document the reasoning. Where the result is uncertain across any jurisdiction, escalate before committing to the transaction.
Step 6: Document your end-user checks and record-keeping obligations
Record-keeping is not merely good practice; it is a condition of demonstrating compliance if OFSI later investigates. The relevant thematic sanctions regulations impose record-keeping obligations on regulated businesses, and OFSI's enforcement guidance makes clear that the absence of contemporaneous documentation will weigh against a business in any enforcement assessment.
Under OFSI's published approach, a business that can show it took reasonable steps, checked the available lists, mapped the ownership chain to the extent practicable, obtained appropriate contractual undertakings, and documented its reasoning is in a materially different position from one that relied on informal assurances. The documentation standard matters even where the underlying transaction was clean.
The minimum record set for an end-user check under OFSI should include:
- The date and scope of the sanctions-list check, including the lists consulted.
- The ownership-and-control trace: sources consulted, layers examined, and the basis for stopping the trace at a given level.
- Any end-use certificate or contractual undertaking obtained, with the date and the counterparty's confirmation.
- The name of the person who conducted the check and the senior-level sign-off where required by internal procedure.
- Any red flags identified and the steps taken to resolve or escalate them.
These records should be retained for the period required by the applicable regulations. Where OFSI later requests information, having this documentation in a retrievable and coherent form significantly reduces the regulatory burden and supports any argument that the business acted in good faith. For record-keeping obligations under the Swiss regime, our guide on end-use controls under SECO sets out the Swiss position for comparison.
Risk flags and when to involve counsel
Certain transaction features raise the risk profile materially and should trigger senior review or immediate legal input. Our practice identifies the following as the most consistent indicators of elevated end-user risk under OFSI:
- Unusual intermediary structures: a buyer that is itself an intermediary, with no obvious operational need for the goods, and an end-destination that is not disclosed at outset.
- Jurisdictions with dense sanctions exposure: a supply chain that passes through or terminates in a jurisdiction subject to thematic sanctions under SAMLA regulations – even where the immediate counterparty is located elsewhere.
- Last-minute changes to end-user or shipping details: a change in the stated end-user, shipping address, or consignee after the original order was placed, without a credible commercial explanation.
- Payment routing through unrelated third parties: payment made by a person that is not the contractual buyer, or through a jurisdiction with limited financial-sanctions oversight.
- Dual-use goods with obvious diversion value: components or technology with well-known military or surveillance end-use potential, where the stated civil end-use is implausible given the buyer's sector or scale.
- Incomplete beneficial-ownership disclosure: a counterparty that is unwilling or unable to provide beneficial-ownership information at a level proportionate to the transaction's risk profile.
If a transaction has already been flagged – by the business's own compliance team, by a correspondent bank, or by a regulator – early legal review can preserve options that narrow with time. A voluntary self-disclosure (VSD) to OFSI, prepared correctly and submitted promptly, can be a material factor in enforcement outcomes. The window for that decision is short, and the preparation requires careful legal and factual analysis.
If a filing has been refused or a licence application has stalled, or if OFSI has issued a request for information, contact Calder & Vance at info@caldervance.com for a confidential review.
Addressing a common misconception: the ECJU licence does not clear the OFSI question
A persistent myth in cross-border trade compliance is that a valid ECJU export licence – whether an open general licence or a standard individual export licence – confirms that the transaction has been reviewed and approved for all regulatory purposes. It does not.
The ECJU licence grants permission to export specific controlled goods to a specific destination. It does not constitute a determination that no designated person benefits from the transaction. ECJU does not apply the OFSI ownership-and-control test. A business that ships goods under a valid ECJU licence to a buyer ultimately controlled by a designated person has committed a financial-sanctions violation under OFSI, regardless of the export-licence position. The two regulators work from different statutory bases, different lists, and different legal tests.
We have acted for manufacturers and traders who received this advice too late – after a shipment had moved and an OFSI query had arrived. The earlier that both analyses are run in parallel, the stronger the compliance position. Sector experience in dual-use goods, components, and technology means we understand how these questions present in practice, not just in theory.
Related practices
- Deemed export and technology controls under BIS/EAR – US extraterritorial reach on technology transfers involving foreign nationals
- End-use and end-user controls under SECO – how Switzerland's regime compares with the UK and EU approach