A freight forwarder in the United Kingdom prepares to ship precision components to a buyer in South-East Asia. The invoice clears internal approval. The shipment is scheduled. Then a junior compliance analyst flags a name on the consignee's board that appears – with a slight spelling variant – on a UK financial sanctions list. The shipment halts. The question that follows is not merely whether to proceed. It is whether the business has a screening programme capable of catching that flag the first time, every time.
Denied-party screening under OFSI – the Office of Financial Sanctions Implementation – requires a systematic check of counterparties, beneficial owners, and intermediaries against the UK financial sanctions lists, including the Consolidated List of asset-freeze targets maintained under OFSI's authority. The obligation sits within the broader UK sanctions and export-control regime and intersects directly with BIS Entity List obligations for shipments with a US-origin nexus. No single screening run is sufficient; the check must repeat at each material change in the transaction or counterparty.
As of May 2026, OFSI administers financial sanctions under the Sanctions and Anti-Money Laundering Act ("SAMLA") and the thematic regulations made under it. This guide sets out the step-by-step screening process, explains where the UK regime diverges from OFAC and EU equivalents, identifies the risk flags that most frequently cause problems in practice, and describes when to involve specialist counsel.
Step 1 – Identify the Correct Lists and the Authority Behind Them
The first step is knowing which lists govern your transaction and which authority publishes them. For UK financial sanctions, OFSI maintains the UK Consolidated List of designated persons subject to asset-freeze, travel-ban, and related measures. The list is published on the UK government's financial sanctions register and is updated without prior notice when a designation is made.
The UK Consolidated List is not the only list in scope. For exporters, the Export Control Order (administered by the ECJU) and – critically – the US Entity List (administered by BIS under the Export Administration Regulations, "the EAR") may apply where goods, software, or technology have US-origin content or are produced using US-origin technology above applicable de minimis thresholds. A consignment that clears OFSI screening may still be prohibited if the end-user appears on the BIS Entity List and the item falls within BIS jurisdiction. The two lists are maintained by different authorities with different legal bases and different update cycles; conflating them is one of the most common errors in export compliance.
At this stage, build a master list of the sources your programme must check:
- UK Consolidated List (OFSI, updated continuously)
- BIS Entity List and Denied Persons List (US Department of Commerce, updated on a rolling basis)
- OFAC Specially Designated Nationals list ("SDN List") – relevant for any USD-clearing leg or US-nexus transaction
- EU consolidated list (for transactions touching EU-incorporated entities or EU-jurisdiction goods)
- UN Security Council Consolidated List
In our experience, firms that maintain a single aggregated screening database – refreshed at a defined frequency – are far better positioned than those running separate spot-checks against individual lists. The aggregated approach also makes it easier to demonstrate a coherent compliance posture to OFSI should a query arise.
Step 2 – Map Every Party to the Transaction
The second step is identifying all parties whose names must enter the screening queue. A common failure is to screen only the named counterparty. The obligation extends further.
Under OFSI's published guidance, the asset-freeze prohibition applies not only to a designated person directly but also to entities owned or controlled by a designated person. The ownership and control test – the UK test for whether a non-listed entity is caught through a listed person – is broader in the control dimension than the equivalent OFAC 50-percent rule. OFAC applies a mechanical 50 percent or more aggregate-ownership threshold. OFSI, and the EU, apply an additional control test: a designated person who can direct the entity's affairs, even through minority ownership or contractual rights, may cause that entity to fall within the prohibition.
For each transaction, the party-mapping exercise must capture:
- The direct counterparty (buyer, seller, agent, distributor)
- Ultimate beneficial owners above the relevant ownership threshold
- Directors and persons with significant control
- Freight forwarders, carriers, and logistics agents involved in the shipment
- Banks and financial intermediaries on the payment chain
- End-users named in an end-use certificate or end-user statement
Missing any one of these categories can expose the firm to civil penalties under SAMLA and, where the relevant thematic regulations so provide, criminal liability. Map the full chain before screening begins.
Step 3 – Run the Screening and Manage Name-Match Alerts
With a confirmed party list and a defined set of lists, the screening run itself is straightforward in principle but demanding in execution. Automated screening tools query the lists against the names, aliases, and identifiers you provide. The output is a set of potential matches – "hits" – that your compliance team must then review.
Name-match alerts require structured triage. Not every hit is a true match. Transliteration variants, common surnames, and partial identifier overlap all generate false positives. A structured triage process should ask:
- Does the name match phonetically and visually across all known aliases?
- Do the date of birth, nationality, or identifier data points confirm or rule out a match?
- Is there a business address, registration number, or SWIFT/BIC that aligns with the listed entry?
- Has the counterparty provided ownership disclosure sufficient to rule out listed beneficial owners?
Where a potential match cannot be ruled out on the available information, the transaction should pause. Proceeding on an unresolved hit without documented analysis is itself a compliance failure, regardless of whether a match is ultimately confirmed. Document the triage reasoning in writing. OFSI's enforcement approach places weight on the quality of documented decision-making as a factor in assessing culpability.
The BIS Entity List adds an additional dimension. A party on the Entity List is not necessarily subject to an asset freeze; the restriction is on the export, re-export, or in-country transfer of items subject to the EAR to that party, unless a specific licence is obtained from BIS. Where a counterparty appears on the Entity List, the question shifts from financial-sanctions compliance to export-licence compliance. The two analysis tracks are parallel, not sequential.
Step 4 – Apply the Ownership and Control Test for Non-Listed Entities
Step 4 addresses the analysis that many screening programmes omit entirely: assessing whether an apparently unlisted counterparty is nevertheless caught through the ownership or control of a designated person. This is the step that separates a rudimentary screening run from a genuinely effective denied-party review.
Under SAMLA and the thematic regulations made under it, an entity that is owned or controlled by a designated person is subject to the same prohibitions as if it were designated itself. OFSI has published guidance on how it interprets ownership and control, and practitioners advising on OFSI matters treat this test as a live analytical obligation – not a box to tick after automated screening returns a clean result.
The control question is fact-specific. Relevant indicators include:
- A designated person holds a majority of voting rights
- A designated person has the right to appoint or remove a majority of the board
- A designated person has a contractual right to direct the entity's commercial decisions
- The entity acts exclusively as a commercial vehicle for a designated person's benefit
How does this compare with other regimes? Under OFAC, the test is purely mathematical: 50 percent or more aggregate ownership, regardless of control. A designated person holding 48 percent does not trigger the OFAC ownership rule. Under OFSI and the EU, that same person may still catch the entity through the control limb. For a business operating between the United Kingdom and the United States, this divergence is material: a transaction that OFAC considers clean may still be prohibited under OFSI. Running only US screening logic against a UK-regulated supply chain is a recognised gap.
In our cross-border practice, we regularly advise clients who have inherited a counterparty due-diligence process designed for OFAC compliance and have not yet adjusted it to the OFSI control test. The adjustment is not complex. But it must be deliberate.
For related analysis on the US-side entity screening process, see our guide on deemed-export technology and BIS/EAR controls, which covers the Entity List analysis for technology transfers.
What Are the Risk Flags That Most Often Cause Problems?
Six risk patterns recur across the matters we handle. Each is distinct; each requires a specific response.
Transliteration and alias gaps. Designated persons' names appear in the lists in transliterated form that may differ from the spelling used in commercial documentation. A single-language screening run that does not test aliases will miss these cases. Effective tools apply fuzzy matching and alias libraries maintained by the list authorities.
Nested ownership structures. A designated person holding an indirect stake through multiple layers of intermediate companies will not appear on a company register extract as a direct shareholder. Corporate-registry searches at a single level are insufficient for high-risk counterparties. We advise clients to require beneficial-ownership declarations from counterparties and to verify them against available registry data.
Transaction updates not triggering a re-screen. A counterparty that was clean at contract signature may be designated before shipment. Policies that screen only at the onboarding stage, and not at payment, at shipment, and on designation-list updates, create the gap that enforcement actions exploit. The screening obligation is continuous, not point-in-time.
Mis-classification of the BIS Entity List as an OFSI matter. The Entity List is a BIS export-control instrument under the EAR. It is not a financial-sanctions list and OFSI does not administer it. Compliance teams that route Entity List hits to their financial-sanctions process, rather than to their export-licence process, handle them incorrectly. The applicable procedure differs, and the remedy (a licence application to BIS) is distinct from the OFSI licensing route.
Failure to document clean results. OFSI's enforcement guidance places weight on documented compliance effort. A screening result that shows no match is only defensible if it was conducted systematically and recorded. An undocumented clean screen is, in practice, no screen at all.
Secondary-sanctions exposure from OFAC. A UK-incorporated exporter with no US nexus in its transaction may nonetheless face secondary-sanctions risk if its bank processes US-dollar settlements. Payments routed through US-correspondent banking infrastructure carry an OFAC exposure layer that sits alongside the OFSI analysis. We regularly advise on structuring payment flows to manage – not to evade – this layer of risk within the bounds of applicable law.
Step 5 – Escalate, Licence, or Decline: The Decision Sequence
Once triage is complete and the analysis of ownership and control has been documented, the decision sequence has three possible outcomes. Understanding which applies – and acting within the correct timeframe – is where compliance work meets legal advice.
Situation A – confirmed hit against a designated person: The transaction is prohibited. If property of a designated person is in your possession or control, OFSI must be notified under the relevant reporting obligation. A specific OFSI licence may be available for certain transactions – for example, for legal fees, basic living expenses, or certain pre-existing contractual obligations. A specific licence application to OFSI should be prepared promptly. Timeline: a short statutory reporting window applies; do not delay notification pending the licence outcome.
Situation B – confirmed Entity List hit with a US-origin nexus: A licence application to BIS is the standard route for controlled items. Alternatives include restructuring the transaction to avoid items subject to the EAR, or applying a relevant licence exception – where the facts support one. The analysis of which exceptions may apply is technical and must be conducted against the item's Export Control Classification Number ("ECCN," the alphanumeric designation assigned to items under the US Commerce Control List) and the specific end-use and end-user characteristics.
Situation C – unresolved potential match with ambiguous data: The transaction must pause. Additional due-diligence steps – a beneficial-ownership declaration, a registry search, a request for audited accounts – should be deployed. If the ambiguity cannot be resolved, OFSI's compliance team can be contacted for informal guidance on the position; this does not constitute a formal licence application but can inform the decision. In our practice, we assist clients in preparing well-structured informal query letters that frame the question precisely and reduce the risk of a drawn-out exchange.
If a transaction has already been flagged or a filing has been refused, an early review can preserve options that narrow with time. For a confidential review of a potential breach, contact us at info@caldervance.com.
Step 6 – Record-Keeping, Programme Testing, and Ongoing Monitoring
A screening programme that produces good outputs but leaves no audit trail is vulnerable in enforcement. OFSI's enforcement guidance and the broader UK sanctions compliance framework expect firms to maintain records of their screening decisions, their triage analyses, and their escalation steps. In our experience, firms that cannot produce contemporaneous documentation of a screening decision – not a retrospective reconstruction – face far greater difficulty in an OFSI inquiry.
Record-keeping should capture:
- The date and time of each screening run
- The lists checked and the version or update date of each
- The names and identifiers entered
- The output of the screen (hits, false positives, clean results)
- The triage analyst's reasoning for each hit disposition
- The escalation path and the decision taken
Programme testing is a distinct obligation. Screening logic – particularly fuzzy-match thresholds and alias libraries – must be tested periodically against known true-positive cases to confirm it is functioning correctly. A tool that is misconfigured to suppress alerts below a certain match score may return clean results on a designated person. Periodic testing with synthetic or historical positive data is good practice and is increasingly expected by regulators and auditors.
Ongoing monitoring means that the programme re-runs screening automatically, or at defined intervals, against existing relationships when the lists are updated. OFSI and other list authorities designate persons without advance notice. A counterparty clean at payment may be designated before the goods clear customs. Automation of list-update triggers is the practical solution for firms with large counterparty populations.
For a comparative approach to how SECO in Switzerland handles denied-party screening obligations, see our guide on entity-list screening under the SECO regime. For EU dual-use classification and its interaction with denied-party lists, see our guide on EU dual-use classification and the BIS/EAR.
A Common Misconception: One Screen Is Enough
The most persistent myth in denied-party screening practice is that a single check at the start of a commercial relationship is sufficient. It is not.
OFSI's enforcement approach, and the equivalent posture of OFAC and the EU, treats compliance as a continuing obligation. Designations are made at any point in a transaction lifecycle. The obligation to freeze assets or stop a shipment arises the moment a designation takes effect – not on the firm's next scheduled review. Firms that screen at onboarding and then again only at annual relationship review are accepting an enforcement gap for every intervening designation. The question a compliance committee should ask is not "did we screen?" but "are we screening continuously?"
A related misconception is that passing OFSI screening clears all UK export-control obligations. OFSI administers financial sanctions. The ECJU administers export licences. A counterparty that is clean on the UK Consolidated List may still require a specific export licence under the Export Control Order for controlled goods or technology. The two regimes are complementary, not overlapping, and both must be checked independently.
In a recent matter, a logistics business operating on UK-EU corridors assumed that its OFSI-aligned screening programme also covered its export-licence obligations. It did not. We were instructed to review the programme, map the gap between the financial-sanctions check and the export-control check, and redesign the compliance architecture. The corrected programme addressed both layers and produced a single workflow for the team. Matters of this kind are routine in our practice; the fix is achievable but requires the gap to be identified before enforcement does.
Related practices
- Deemed-export technology and BIS/EAR controls – classification, licence requirements, and end-use compliance for US-origin technology transfers
- Entity-list screening under the SECO regime – how Switzerland's denied-party obligations compare with OFSI and OFAC