A Swiss trading house ships components to a third-market distributor. A subsequent ownership review reveals that the distributor's ultimate beneficial owner appears on a SECO sanctions list. The transaction is already complete. What does the business do now – and will how it responds affect the penalty?
In Swiss sanctions enforcement, mitigation factors (the factual and procedural elements that can reduce the severity of a regulatory or criminal sanction) are not codified in a single published schedule. SECO – the State Secretariat for Economic Affairs, Switzerland's primary sanctions authority – applies them through an administrative and prosecutorial process that rewards early, voluntary, and substantively useful engagement. How a business behaves in the hours and days after it identifies a problem shapes the enforcement outcome more than almost any other variable.
This guide walks through the governing authority and legal basis, the procedural sequence a business faces, the specific factors that Swiss enforcement practice treats as mitigating, the cross-regime differences that multinational businesses must manage simultaneously, and the risk flags that indicate when specialist counsel should be instructed without delay.
Who administers Swiss sanctions enforcement and on what legal basis?
SECO administers Swiss autonomous sanctions and implements United Nations Security Council measures under Switzerland's Embargo Act (Embargogesetz – EmbG), the governing instrument for Swiss financial and trade sanctions. The Federal Department of Economic Affairs, Education and Research (EAER/WBF) holds overarching authority, but SECO is the operational body: it screens entities, processes licence applications, investigates apparent violations, and refers matters for criminal prosecution where the severity of the conduct warrants it.
Criminal enforcement under the Embargo Act is handled by the cantonal prosecution authorities and, in serious cases, by the Federal Criminal Court. This two-track structure – administrative investigation by SECO and potential criminal referral to prosecutors – is one of the most distinctive features of Swiss enforcement. It means a business under SECO scrutiny may simultaneously face administrative review and a parallel criminal exposure that carries custodial sentences for individuals, not just fines for the legal entity.
Switzerland's autonomous sanctions regimes operate through SECO ordinances. The UN Consolidated List and Switzerland's own lists are the primary designation sources. Where a transaction touches both Swiss ordinances and a UN Security Council resolution, the UN obligation governs as a floor and the Swiss ordinance may impose stricter requirements – the stricter prohibition governs in either case.
The position above sets out the standard enforcement architecture. Your specific facts – the goods involved, the destination, the ownership chain of the counterparty, and the timeline of discovery – will change the analysis materially. For a confidential review of an apparent violation, contact Calder & Vance at info@caldervance.com.
What is the procedural sequence after an apparent violation is identified?
Once a business identifies a potential violation of Swiss sanctions rules, the procedural clock begins immediately. The sequence that follows has distinct stages, and the decisions made at each stage affect what mitigation credit, if any, the business can claim.
The first stage is internal containment. Before any external communication, the business should preserve all relevant records – transaction documents, screening outputs, ownership analysis, correspondence – and establish a factual chronology. Records destroyed or altered after a problem is identified convert a potential mitigation argument into an aggravating factor. This is not a minor procedural point. Swiss enforcement practice treats evidence preservation as a baseline indicator of good faith.
The second stage is voluntary disclosure to SECO. Switzerland does not operate a codified voluntary self-disclosure (VSD – a voluntary, pre-enforcement notification to the relevant authority) programme with a defined statutory benefit, as the United States does under OFAC and BIS procedures. However, SECO's enforcement practice recognises voluntary and proactive notification as a substantive mitigating factor. The business that comes forward before SECO opens an inquiry is in a materially better position than the business that waits to be discovered.
The third stage is substantive cooperation. Once contact with SECO is established, the quality and completeness of the information provided matters. Supplying a root-cause analysis, a transaction map, an honest account of the compliance failure, and a concrete remediation plan are all positive factors. Partial disclosure – providing documents while withholding context – tends to be identified and damages credibility in a way that is difficult to recover from later.
The fourth stage, which may run in parallel with SECO engagement, is managing any exposure under other regimes. A transaction that violated Swiss sanctions almost certainly touched at least one other regime: OFAC if a US-origin good or US-person nexus is present; EU Council regulations if EU-origin goods or an EU counterparty is involved; OFSI if the payment chain used the UK financial system. Voluntary disclosure to SECO does not discharge obligations to those other authorities.
Which specific factors does Swiss enforcement practice treat as mitigating?
Swiss enforcement practice, drawing on the Embargo Act and general principles of Swiss administrative and criminal law, recognises a consistent set of factors as capable of reducing the regulatory or criminal consequence of a sanctions violation. None of these factors guarantees an outcome; the weight given to each depends on the overall facts of the matter.
Proactive and timely disclosure carries the most weight of any single factor. The business that identifies the issue, investigates it, and contacts SECO before the authority becomes aware of the transaction through its own monitoring or a third-party report is demonstrating the kind of compliance culture that enforcement authorities across regimes seek to reinforce. In our cross-border practice, the difference in enforcement disposition between voluntary and reactive disclosures is consistently significant, regardless of the regime in play.
Genuine and effective remediation is the second major factor. It is not sufficient to promise remediation at the time of disclosure and implement it later. Swiss enforcement authorities, like their counterparts at OFSI and in EU member-state administrations, look for evidence that structural change has actually occurred: updated screening procedures, retraining of relevant staff, revised counterparty onboarding processes, and independent verification of the remediation. Assurances without evidence of change carry limited weight.
The severity and nature of the violation are also assessed. A technical violation – where the prohibited goods were low-sensitivity items, no designated person actually received value, and the compliance failure was in process rather than intent – is treated differently from a deliberate or knowing violation. The absence of wilful intent, when it can be demonstrated on the facts, is a meaningful factor under Swiss criminal law principles.
Cooperation during the investigation is a fourth recognised factor. This means responding promptly and completely to SECO information requests, making relevant personnel available, and not contesting facts that are not genuinely in dispute. Cooperation is distinct from admission of liability: a business can cooperate fully while legitimately contesting legal characterisations or the scope of what the rules require.
Prior compliance history matters too. A business with a well-documented, independently reviewed compliance programme, and no prior enforcement history with SECO or any analogous authority, starts the process in a better position than a repeat offender or a business that cannot demonstrate it had any screening programme in place.
How does SECO's approach differ from OFAC, OFSI, and the EU?
For a business operating across multiple jurisdictions, the procedural differences between regimes are as important as the substantive differences – because a step that is beneficial under one regime may be neutral or even counterproductive under another if not handled in a co-ordinated way.
Under OFAC, the US Treasury's sanctions authority, the voluntary self-disclosure system is formally structured and produces a defined procedural benefit: OFAC's published enforcement guidelines treat a timely, complete VSD as a factor capable of reducing the base civil penalty, and OFAC distinguishes between "egregious" and "non-egregious" apparent violations in its public framework. Switzerland has no equivalent published penalty matrix. SECO's weighting of mitigation factors is exercised through official discretion rather than a prescribed formula. That difference means the Swiss process requires careful advocacy at each stage rather than mechanical compliance with a checklist.
Under OFSI – the UK Office of Financial Sanctions Implementation – the enforcement regime has its own penalty structure and licensing architecture. OFSI also recognises voluntary disclosure and remediation as mitigating, and it publishes enforcement notices that give practitioners insight into how particular facts have been weighted. Switzerland does not publish a comparable body of enforcement decisions at the same level of granularity, which makes reading the enforcement environment harder and makes prior practitioner experience more valuable.
The EU regime is administered at member-state level for criminal enforcement, with the European Commission and Council setting the regulatory framework. Member-state enforcement practice varies. In our experience advising clients with simultaneous EU and Swiss exposure, the risk is that a disclosure strategy optimised for one regime creates unhelpful admissions or timing problems for the other. A co-ordinated multi-jurisdiction approach to disclosure is not a luxury. It is a necessity.
For Singapore, the UAE, and Japan, the enforcement posture is generally less mature in terms of published enforcement guidance, but the trajectory is toward greater rigour. Businesses with supply-chain or financial-institution exposure in those jurisdictions should assume that a SECO disclosure will not remain invisible to those regulators if the transaction has a nexus to their markets.
If a transaction has already been flagged, or a disclosure filing is under preparation, an early review of the multi-jurisdiction picture can preserve options that narrow quickly as each regime's procedural clock advances. Write to info@caldervance.com to discuss.
What are the common risk flags and procedural pitfalls?
The most common mistake we see in SECO enforcement matters is delay. Businesses that spend weeks conducting an internal investigation before contacting SECO – often in the hope that the violation will not be discovered – lose the mitigation credit that early voluntary disclosure would have generated. In some cases, SECO opens its own inquiry during that interval, converting a proactive disclosure into a reactive one. The distinction is material to the outcome.
A second persistent pitfall is incomplete root-cause analysis. A disclosure that identifies what happened but cannot explain why it happened – the specific process failure, the screening gap, the escalation breakdown – gives SECO limited confidence that the problem has actually been fixed. Enforcement authorities across regimes have become more sophisticated in pressing for genuine rather than formal root-cause analysis. A surface-level remediation report is identifiable as such.
A third risk is mismanaging the individual-versus-entity question. Swiss enforcement practice under the Embargo Act can result in personal liability for individuals – not only the legal entity. Directors, compliance officers, and other senior personnel with relevant responsibilities can face criminal referral in serious cases. A disclosure strategy that protects the entity while failing to consider individual exposure is incomplete and, in some cases, may inadvertently place individuals in a worse position than a properly co-ordinated approach would have done.
The fourth pitfall is treating Switzerland in isolation. We have repeatedly advised clients who believed that a SECO matter was a purely Swiss problem, only to discover that the same transaction created OFAC exposure because a US-origin product was in the shipment, or EU exposure because a European subsidiary was involved in the payment chain. The question to ask – before any disclosure strategy is finalised – is not "what does SECO require?" but "what does every regime with a nexus to this transaction require, and in what order do we address them?"
A fifth risk flag is document management. Poor document preservation in the days after a violation is identified can itself become evidence of bad faith or obstruction. All potentially relevant records – including internal communications, screening logs, and travel and meeting records relating to the counterparty – should be preserved immediately and legal-hold protocols activated. We regularly advise clients on the immediate steps required to protect both the evidentiary position and legal professional privilege where it applies.
When should specialist sanctions counsel be instructed?
The threshold for instructing specialist counsel in a SECO enforcement matter is lower than most businesses assume. Once a potential violation is identified – not once SECO has made contact, but at the moment of internal discovery – the business is at a stage where the decisions it makes will either help or harm its position. Those decisions should be made with legal advice.
In our practice, we see the worst outcomes in matters where businesses acted unilaterally through the early stages: making informal contact with SECO, providing documents without legal privilege review, or submitting a root-cause analysis that acknowledged more than was necessary or disputed facts without a proper evidentiary foundation. Each of those steps, taken in good faith but without guidance, constrained what we could subsequently do to protect the client.
The practical test is straightforward. Does the apparent violation involve designated persons, dual-use goods, UN-listed entities, or any US, EU, or UK nexus? If any of those answers is yes, specialist counsel with multi-regime experience should be instructed at the outset. The matter is not a Switzerland-only problem, and the advocacy required is not a matter of form-filling.
Is your business now managing a transaction review that has identified a potential SECO issue? The sooner expert analysis is applied to the disclosure strategy, the more options remain available. Contact Calder & Vance for a confidential assessment. For a related assessment of EU enforcement exposure, see our guidance on apparent violation assessment under EU sanctions. For enforcement mitigation in Singapore and the UAE, see the companion guides at mitigation factors under Singapore enforcement and mitigation factors under UAE enforcement.
Related practices
- Apparent violation assessment – EU sanctions – structure and scope of EU enforcement exposure review
- Mitigation factors under Singapore enforcement – how MAS and Singapore's regime treat voluntary disclosure
- Mitigation factors under UAE enforcement – enforcement posture and disclosure practice for UAE-nexus transactions