A UK defence-technology supplier is finalising an export of dual-use components to a distributor in a third country. The distributor looks clean on every sanctions list. But who is the actual end-user? What will the goods do once they arrive? These questions sit at the heart of the controls administered by OFSI (His Majesty's Treasury's Office of Financial Sanctions Implementation) and, in parallel, by ECJU (the Export Control Joint Unit within the Department for Business and Trade). Get the analysis wrong and the transaction may constitute a prohibited dealing – regardless of whether any listed person appears in the chain.
End-use and end-user controls under the UK regime require exporters and financial intermediaries to identify not only whether a counterparty is designated, but whether the goods, funds, or technology will ultimately reach a prohibited destination or serve a prohibited purpose. As of April 2026, OFSI's enforcement posture continues to treat wilful blindness to end-use as equivalent to actual knowledge of a breach. Failing to conduct adequate end-user due diligence exposes firms to civil monetary penalties and, in the most serious cases, to criminal referral.
This guide walks through the governing authorities, the practical test that applies at each stage of a transaction, the points where UK controls diverge from OFAC and EU positions, and the specific risk flags that most commonly produce enforcement action.
Step 1: Understand the governing authorities and the legal basis
OFSI administers financial sanctions under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the thematic sanctions regulations made under it. Its mandate covers financial prohibitions – making funds or economic resources available to, or for the benefit of, a designated person. The end-use question under OFSI arises whenever a transaction could benefit a designated person indirectly, through an intermediary or through the application of goods or technology to a prohibited purpose.
ECJU operates in parallel, administering export licensing under the Export Control Order. Its end-use controls (also called catch-all controls) can require a licence even for goods that do not appear on the control lists, if the exporter has been informed or has grounds to suspect that the goods will be used in connection with weapons-related programmes or by a prohibited end-user. These are distinct legal instruments, but they interact directly: a transaction that clears ECJU licensing may still be caught by OFSI's financial-sanctions prohibitions, and vice versa.
The legal basis for both sets of controls ultimately traces to SAMLA, to the relevant thematic regulations, and – at the international level – to UN Security Council resolutions and the obligations they impose on the United Kingdom as a UN member state. Understanding which instrument triggers first, and which agency has primary jurisdiction over a given fact pattern, is the foundation of any competent end-use analysis.
Step 2: Identify the correct end-user and map the full transaction chain
The end-user is the person or entity that will ultimately receive and use the goods, funds, or technology – not merely the first named buyer. In our experience, the gap between the stated buyer and the actual end-user is the single most common source of enforcement risk under both OFSI and ECJU controls.
Mapping the transaction chain requires firms to look beyond the immediate counterparty. Distributors, agents, freight forwarders, and re-export hubs each represent a potential point at which the goods change hands before reaching their final destination. Where a distributor operates in a jurisdiction with weaker re-export controls, or where the stated end-use is implausible given the volume or specification of goods, those are red flags that demand escalation before execution.
What does an adequate mapping exercise look like in practice? At minimum it involves obtaining an end-user undertaking (a written confirmation from the buyer identifying the ultimate recipient and intended use, and committing to notify the exporter of any proposed re-transfer). That document must be retained for record-keeping purposes. It is not sufficient standing alone. It must be corroborated by open-source screening of the stated end-user against OFSI's consolidated list, the UN Consolidated List, and the relevant thematic designations. Where the goods have a dual-use dimension – that is, a civil application but also potential military or WMD-related use – the ECJU end-use assessment runs concurrently with the OFSI screening check.
The position above covers the standard case. Your facts – the sector, the destination jurisdiction, the specification of goods, and the ownership and control structure of the buyer – will change the analysis. For an initial assessment of your transaction chain, contact Calder & Vance at info@caldervance.com.
Step 3: Apply the OFSI end-use test – what "for the benefit of" means in practice
OFSI's core prohibition covers making economic resources available to a designated person and also covers making them available for the benefit of such a person, even indirectly. The "for the benefit of" limb is where end-use analysis becomes critical. An export of components to an ostensibly clean distributor is caught if OFSI can establish that the transaction was structured so that the economic benefit – reduced cost, a commercial advantage, enhanced technical capacity – accrued to a designated person.
The test is not confined to direct financial flows. Consider a manufacturer that exports machine tools to a trading company. The trading company is not listed. But the machine tools are then sold on, at a mark-up, to a state enterprise that is subject to a relevant thematic designation. The mark-up accrues to the trading company. The machinery, however, directly benefits the designated state enterprise. OFSI's published enforcement guidance makes clear that it will look through the transaction structure to the ultimate beneficiary.
Three questions should structure every end-use assessment under OFSI:
- Who ultimately receives the goods, funds, or technology, and are they designated under any relevant OFSI regime or the UN Consolidated List?
- Would any designated person derive an economic or operational benefit from the transaction, even if they are not the named recipient?
- Is there a plausible legitimate purpose for the transaction, and does the due diligence package adequately document and corroborate that purpose?
Where the answer to question 1 or 2 is "possibly yes", the transaction requires either a specific licence from OFSI before it proceeds, or a legal opinion that a relevant general licence applies. Proceeding without one of those foundations is the fastest route to an enforcement notice.
How does OFSI differ from OFAC and EU positions on end-use?
The UK, US, and EU regimes all address end-use risk, but the tests differ in ways that matter operationally. Understanding those differences is essential for any business operating across jurisdictions.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) is the primary ownership-based test. End-use analysis under OFAC tends to focus on whether a transaction indirectly benefits an SDN-listed person, and OFAC's guidance on facilitation makes clear that a non-US person can incur liability by knowingly assisting a US-person transaction that would be prohibited. The facilitation test has an extra-territorial dimension that the UK controls do not fully replicate.
Under EU law, the ownership and control test (the EU and UK test for whether a non-listed entity is caught through a listed person) looks beyond arithmetic ownership to actual control – including through contractual, personal, or structural influence. This can capture entities that fall below the 50 percent threshold but are demonstrably controlled by a designated person. In our practice advising cross-border clients, this divergence between the OFAC mechanical test and the EU/UK control-based analysis is one of the most frequent sources of confusion.
OFSI broadly mirrors the EU ownership-and-control approach under SAMLA and the relevant thematic regulations. An entity that a designated person controls – through board composition, through binding contractual rights, or through operational direction – is treated as subject to the same restrictions as the designated person itself, even without majority ownership. For an exporter or financial institution managing a transaction with EU nexus, this means that the UK and EU analyses are broadly aligned on control, but the OFAC test can produce a different answer, and the stricter prohibition governs.
Japan, Singapore, and the UAE each administer their own end-use frameworks, and all three have strengthened enforcement in recent years. Where a transaction routes through any of these jurisdictions, we regularly advise clients to apply a concurrent analysis under the applicable country regime rather than relying solely on the UK clearance.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com for a confidential review of your position.
Step 4: Conduct and document the end-user due diligence
Documentation is not an administrative afterthought. It is the evidence base that separates an inadvertent breach from a deliberate one – and that difference drives the penalty outcome under OFSI's civil monetary penalty regime.
A defensible end-user due diligence file should contain, at minimum:
- A completed screening record for the buyer, any disclosed ultimate end-user, and any material intermediate parties, showing the lists checked, the date of screening, and the result.
- A copy of the signed end-user undertaking, with the identity of the signatory verified against available corporate documentation.
- An assessment of the plausibility of the stated end-use, cross-referenced to the specification, quantity, and value of the goods.
- A record of any red flags identified and the decision taken in response to each.
- Where a specific licence application was submitted to OFSI or an export licence application to ECJU, a copy of the application, the correspondence, and the issued licence.
Records should be retained for at least the period required under the applicable thematic regulation. Sanctions and export-control rules differ on minimum retention periods; verify the current requirement before closing a file. In our experience, firms that maintain contemporaneous records – rather than reconstructing documentation after a query arrives – fare materially better in any subsequent OFSI review.
A word on screening frequency. A single pre-transaction screen is not enough for a relationship of any duration. Designations are updated without advance notice. A distributor that is clean at the date of contract can appear on the OFSI consolidated list during the performance period. Periodic re-screening – and a contractual right to terminate on a designation event – should be standard terms on any supply or distribution agreement where end-use risk is elevated.
Step 5: Recognise the red flags that require escalation
Certain patterns in a transaction reliably indicate heightened end-use risk and should trigger a mandatory escalation before the deal proceeds. These are not exhaustive; they are the patterns we most frequently see preceding enforcement action.
The first is an implausible mismatch between the stated end-user's business and the goods ordered. A civil engineering firm ordering components primarily used in avionics, or a medical-equipment distributor ordering industrial-grade communications hardware, warrants a hard look at the disclosed end-use.
The second is a transaction structure that places an intermediary between the exporter and the end-user with no apparent commercial rationale for the intermediary's involvement. Where the intermediary is in a jurisdiction that does not maintain a publicly searchable corporate registry, the due diligence burden increases substantially.
The third is a request by the buyer to omit or alter the product description on shipping documentation. This is not a commercial preference; it is a red flag of potential misrepresentation of end-use to customs or licensing authorities in the destination country.
The fourth is payment routing through a jurisdiction that has no obvious connection to the transaction's commercial logic. Where funds arrive from a third country that is itself subject to broad thematic sanctions, the "for the benefit of" analysis under OFSI demands immediate attention.
The fifth is a buyer that declines to provide an end-user undertaking, or that provides one in terms so vague as to be meaningless. Legitimate buyers in regulated industries understand the need for these controls. Refusal or evasion is itself a signal.
Step 6: When to involve counsel – and what that engagement looks like
Some end-use assessments are straightforward. A well-documented transaction, a transparent end-user, a verified corporate chain, and a clean screening record will generally support a reasonable business decision without external advice. Other situations are not straightforward at all.
Counsel should be involved before the transaction proceeds in any of the following situations: the end-user operates in a jurisdiction subject to broad OFSI thematic sanctions; a screening hit has been identified and requires a "not a match" or escalation determination; the goods have a dual-use classification and the stated end-use is anything other than a clearly civil, non-proliferation-risk application; or the transaction structure itself has been designed by the counterparty rather than by your firm, without a clear commercial explanation.
Counsel should also be involved promptly after execution if: a counterparty is designated after the contract is signed; a shipment has been made on the basis of a screening that turns out to have been incomplete; or a query or information request arrives from OFSI, ECJU, HMRC, or a correspondent bank.
The myth we encounter most frequently from in-house compliance teams is that post-breach counsel engagement is an admission of fault. It is not. OFSI's civil penalty regime expressly provides for voluntary self-disclosure as a mitigating factor. A VSD (voluntary self-disclosure to a regulator), prepared correctly and submitted promptly, can materially reduce the applicable penalty. But the window for a VSD that retains full mitigating weight is short. Delay costs money.
What does Calder & Vance do in these engagements? We assess the apparent breach and scope its severity, advise on whether and how to prepare a VSD, prepare the submission itself, manage OFSI's follow-up enquiries, and – where parallel ECJU or criminal considerations arise – coordinate the strategy across those workstreams. We classify the dual-use dimension, confirm licence requirements and exceptions, and, where a licence application is needed, prepare and submit it.
Related practices
- Deemed exports and technology controls under BIS/EAR – US classification, licence requirements, and end-use controls for technology exports
- End-use and end-user controls under OFSI: advanced issues – deeper treatment of control-based ownership, complex distribution structures, and penalty mitigation
- End-use and end-user controls under SECO – Swiss export-control obligations and their interaction with EU and UK regimes