A payment firm's compliance team screens a new corporate client. The corporate is not on any list. But one of its shareholders is. Does the prohibition extend? Does the account get blocked? The answer determines whether a relationship is lawful – or a violation waiting to be discovered.
Under the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked), a company need not appear on any list to be subject to the full prohibitions that apply to a designated person. The rule derives from OFAC's guidance under IEEPA and applies automatically. 50 percent or more aggregate ownership by one or more blocked persons is the trigger – no further intent or knowledge is required.
This guide walks through the ownership analysis step by step, identifies the risk flags that most compliance programmes miss, and explains where OFAC's approach diverges from the UK OFSI and EU positions.
Step 1: Understand what the 50 percent rule actually says
The rule holds that any entity owned 50 percent or more in the aggregate, directly or indirectly, by one or more persons on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) is itself treated as blocked – regardless of whether it appears on that list. OFAC's guidance under IEEPA establishes this position. The mechanism is automatic and self-executing.
Two points follow immediately. First, the analysis is ownership-based, not control-based. A blocked person who controls a company but holds only a minority stake does not trigger the rule under OFAC's formulation – though the position changes when you cross into OFSI or EU territory. Second, the threshold is aggregate: multiple blocked shareholders whose combined holdings reach fifty percent will trigger the rule, even if each individually falls below it.
A corporate holding a thirty-percent stake and a second listed person holding twenty-one percent together reach the threshold. Neither triggers it alone. That aggregation dynamic is where the most serious compliance gaps tend to appear.
Step 2: Map the ownership chain accurately
The analysis cannot stop at the first corporate layer. Indirect ownership is explicitly within scope. If a blocked person owns sixty percent of Company A, and Company A owns sixty percent of Company B, then the blocked person indirectly owns thirty-six percent of Company B through that chain. Add a direct holding and the threshold may be crossed even at the B level.
In our experience, automated screening tools that query a commercial database often capture direct, registered ownership but miss intermediate holding vehicles – particularly those incorporated in jurisdictions with limited public registry disclosure. We regularly advise compliance teams to treat any chain that cannot be fully resolved as elevated risk until the gap is closed.
The practical steps at this stage are:
- Obtain the full ownership and control structure chart, not just the UBO summary.
- Identify all legal persons and natural persons holding five percent or more at each tier.
- Check each against the SDN List and, where relevant, the OFAC-consolidated lists for the relevant programme.
- Aggregate holdings across all listed persons at each tier.
- Recompute indirect holdings proportionately through each intermediate vehicle.
Documentation matters. OFAC's enforcement posture treats inadequate recordkeeping as an aggravating factor. Record the methodology, the sources consulted, and the date of the check.
Step 3: Identify whether any SDN holds an indirect majority
Indirect ownership follows a multiplicative logic. A blocked person's indirect percentage through a chain of entities is calculated by multiplying their ownership stake at each tier downward. If that product, alone or added to direct holdings and other blocked-person holdings, reaches the threshold, the rule applies to the entity at the bottom of the chain.
This step demands a methodical ledger rather than an impressionistic review. Which entities sit between the blocked person and the target? Are there trusts, funds, nominee arrangements, or special-purpose vehicles? What is the ownership interest at each link in the chain?
A practical scenario illustrates the point. In a recent matter, a financial institution was onboarding a trading company for a trade-finance facility. The trading company itself was clean. Its majority shareholder – a holding company incorporated offshore – appeared clean too. Only at the third tier did our analysis surface a listed person holding a decisive interest in the holding company. The holding company's interest in the trading company, multiplied back, crossed the fifty-percent threshold. The facility could not proceed without a specific licence or a restructuring of the ownership.
Have you mapped the entire chain back to natural persons? Partial maps create false comfort.
The position above covers the standard analytical case. Your facts – the sector, the jurisdiction of incorporation, the structure of the intermediate vehicles, the programme in play – change the analysis materially.
For an assessment of your counterparty's ownership structure and its OFAC exposure, contact Calder & Vance at info@caldervance.com.
Step 4: Apply the cross-regime comparison – OFAC vs OFSI vs EU
The OFAC ownership test is mechanical. OFSI and the EU layer a control test on top. Understanding the difference is not academic: many cross-border businesses are simultaneously subject to more than one regime.
Under OFSI (the UK's Office of Financial Sanctions Implementation), the prohibition on dealing with a designated person extends to entities that are owned or controlled by that person. Control is assessed on a functional basis – influence over the board, practical direction of affairs, the ability to block or compel decisions. A minority shareholder who in practice runs the company may bring it within OFSI's scope even if the fifty-percent ownership test is not met.
The EU position is substantively aligned with OFSI on this point. The relevant Council regulations capture entities owned or controlled by a designated person. Control is assessed by reference to the ability to exercise a decisive influence over an entity, whether through ownership, contractual rights, or other means.
The practical implication is directional. OFAC's test is a bright line: you are either above fifty percent aggregate ownership or you are not. OFSI and EU tests are fact-sensitive and require a broader enquiry. A transaction that passes the OFAC test may still be prohibited under OFSI or EU rules if a listed person exercises control short of majority ownership. When a transaction or relationship is assessed under multiple regimes simultaneously, the stricter prohibition governs.
We regularly advise multinational clients and financial institutions whose transaction chains touch US-dollar clearing, UK-based entities, and EU-incorporated counterparties. The three-regime analysis is not a luxury: it is a compliance baseline for any cross-border deal of substance.
Step 5: Identify the risk flags that most programmes miss
Five patterns recur in our practice as the sources of live OFAC exposure on the ownership question.
Aggregation across unrelated beneficial owners. Compliance systems often screen owners individually. They do not aggregate across unrelated SDN-listed persons who each hold a minority stake. Two or more listed persons together can cross the threshold even if neither does so alone. The system must aggregate, not just flag.
Layered intermediate structures. Holding companies, investment funds, and SPVs add layers that obscure the ultimate listed-person interest. Each additional layer reduces the apparent percentage at the target level, but the rule reaches all the way down. Chain arithmetic must be applied mechanically.
Post-designation changes. A counterparty that passed the analysis twelve months ago may not pass today. Designations are added continuously. A shareholder who was not listed at onboarding may have been designated since. Periodic re-screening of existing relationships is a compliance obligation, not merely a best practice.
Recently acquired entities. M&A transactions and corporate reorganisations change ownership structures. An acquisition that brought in a new shareholder may also have brought in a listed-person interest. Post-acquisition ownership mapping should be treated as a fresh analysis, not an update to an old one.
Fragmented data sources. Company registries in different jurisdictions use different data standards, update at different frequencies, and disclose different information. A check against one registry may miss a beneficial owner registered elsewhere. Multi-source verification, with documented gaps, is the standard practice.
If a transaction has already been flagged, or a filing has produced an unexpected result, an early review preserves options that narrow with time.
To discuss a potential issue under OFAC's ownership rules, write to Calder & Vance at info@caldervance.com.
Step 6: Decide when to involve sanctions counsel
Counsel involvement is not triggered only by a confirmed hit. It is appropriate – and often more cost-effective – at an earlier point in the analysis.
Consider involving counsel in the following situations:
- The ownership chain cannot be fully resolved and the missing information is in a jurisdiction with limited registry transparency.
- The aggregate calculation is close to the threshold and the margin of uncertainty is material.
- The subject entity has changed ownership in the past twelve months through an M&A transaction.
- The transaction involves simultaneous exposure under OFAC, OFSI, and EU rules – and the three analyses are producing different results.
- A counterparty has proposed a restructuring to bring ownership below the threshold, and the business needs to assess whether that restructuring is operationally genuine and legally sufficient.
- An existing customer relationship triggers a retrospective ownership question following a new designation.
The decision matrix runs as follows. Where the ownership chain is complete, all sources agree, no listed person approaches the threshold, and the transaction is within a single, well-defined regime, an in-house analysis with documented methodology is typically sufficient. Where any of these conditions is absent, counsel review adds the layer of legal judgment that enforcement proceedings – and regulators – will look for.
A common objection is that the ownership check is a factual exercise and does not require legal input. This confuses the data-gathering phase with the legal assessment. The determination of whether a particular structure constitutes indirect ownership within the meaning of OFAC's guidance requires interpretation, not only arithmetic. Interpretation is where legal risk concentrates.
Step 7: Document, retain, and re-screen
The ownership analysis is not a one-time event. Three obligations run continuously.
Documentation must record the methodology applied, the sources consulted (and the date of each), the persons and entities examined, the aggregate calculation, and the conclusion. An undocumented analysis that turns out to be correct provides no protection in an enforcement context. OFAC's published enforcement guidance treats the existence and quality of a compliance programme – including its documentation standards – as a mitigating factor in penalty determinations.
Record retention: OFAC regulations require that records related to transactions subject to their scope be retained for a defined period. Verify the current retention obligation for the specific programme applicable to your transaction. Five years is the figure cited in OFAC's general guidance as a baseline, though specific programme regulations may differ – verify before relying on that figure.
Re-screening must be periodic. The SDN List is updated continuously; new designations are made without advance public notice. Any counterparty that passed analysis at onboarding must be re-screened at intervals determined by the client's risk appetite and programme design. High-risk counterparties and counterparties in sectors with elevated designation frequency warrant more frequent review.
In our practice, we also recommend that clients build a trigger-based re-screening protocol: any publicly reported ownership change in a counterparty should automatically generate a fresh analysis, independent of the scheduled periodic cycle.
Related practices
- Sanctions compliance audit and testing (Australia) – structured review of screening logic, ownership-chain methodology, and programme design.
- The 50 percent rule under OFSI – how the UK ownership and control test compares with the OFAC position.
- OFSI ownership and control: advanced issues – functional control, trust structures, and cross-regime divergence under UK sanctions.