A financial institution based in the European Union receives a payment instruction for an account held in the name of a corporate entity. Overnight, a new Council regulation adds the account holder to the consolidated list of designated persons. The funds are now frozen. What must the institution do? What may it permit? And what documentation must it produce to demonstrate that it handled the situation lawfully?
Frozen-account management under the EU sanctions regime requires the immediate blocking of funds and economic resources belonging to, owned by, or controlled by a designated person, followed by prompt notification to the competent national authority and strict ongoing maintenance of the freeze. As of June 2026, the legal basis is the relevant Council Regulation implementing each EU sanctions programme, enforced by the competent authority in each Member State. The EU ownership and control test – which catches not only directly listed entities but also entities owned or controlled by them – determines the precise scope of what must be frozen.
This guide walks through the EU frozen-account regime step by step: the legal trigger, the notification obligations, the licensing route for permitted payments, the cross-regime comparison practitioners need, and the risk flags that most commonly produce enforcement exposure.
Step 1: Understanding the legal trigger – what causes an account to become frozen?
An account becomes frozen at the moment a designated person acquires that status under the applicable EU Council Regulation, not at the moment the institution discovers the designation. This distinction matters. EU regulations are directly applicable across all Member States on publication in the Official Journal of the European Union. There is no grace period between publication and the obligation to freeze.
The ownership and control test extends the freeze beyond accounts held directly in the name of the listed person. Entities that are owned – meaning 50 percent or more of the ownership interest is held by a designated person or by multiple designated persons in aggregate – are caught automatically. So are entities that a designated person controls through other means, including through rights, contracts, or structural arrangements that allow the listed person to determine their decisions. In our experience, the control limb of this test produces the most uncertainty. Ownership is often measurable; control requires a qualitative judgment on governance facts.
One operational point that firms regularly overlook: the EU test differs from the US position in a legally significant way. Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) is a bright-line mechanical threshold. EU law adds the control dimension on top. A counterparty with a listed minority shareholder who holds board veto rights may be frozen under EU rules even though the same entity would pass the OFAC ownership screen. Compliance teams that rely on a single screening methodology across both regimes will miss these cases.
Step 2: Immediate obligations – what the institution must do on discovery
On identifying a frozen or newly designated account, the institution must immediately block all funds and economic resources and must refrain from making any funds available – directly or indirectly – to or for the benefit of the designated person. This is not a notification obligation that substitutes for the freeze; it is a parallel obligation that accompanies it.
The notification obligation runs to the competent national authority. Each EU Member State designates its own competent authority for financial sanctions purposes; in practice this is typically the central bank, the financial intelligence unit, or the ministry of finance. The institution must report the existence of frozen funds and the action taken. Timelines for notification vary by Member State implementation, but the expectation in most jurisdictions is prompt – measured in days, not weeks. Verify the applicable national timeline before relying on any general statement about deadlines.
Record-keeping is a parallel and ongoing obligation. The institution must document the basis for the freeze, the assets frozen, the date and method of identification, and all subsequent communications with the competent authority. EU practice, and the guidance issued by most national competent authorities, requires records to be retained for a period aligned with the anti-money-laundering record-keeping rules applicable in that Member State – in many cases five years. Accurate records are the primary defence in any subsequent enforcement review.
What about the account holder? The designated person retains no right of access to frozen funds. However, certain basic expenses – provided they qualify under the applicable derogation structure – may be met through a licensed payment. The institution should not unilaterally determine that a payment qualifies; it should seek authorisation from the competent authority.
Step 3: Identifying and applying derogations – when is a payment from a frozen account permitted?
EU Council Regulations governing financial sanctions consistently include a set of derogations (standing authorisations permitting defined categories of payment from or to a frozen account, subject to conditions). These are not exceptions to the freeze; they are tightly drawn permissions that require the institution to demonstrate compliance with each condition before making any payment.
Common derogation categories across EU programmes include basic needs payments (food, rent, medical costs, taxes), reasonable professional legal fees, and, in some programmes, extraordinary expenses. The scope of available derogations differs by programme. A derogation that exists in one EU regime may be narrower or absent in another. This programme-specificity is a practical trap for compliance teams managing multiple EU sanction programmes simultaneously.
The procedure for using a derogation typically requires the institution or the designated person to apply to the competent national authority. The authority assesses whether the conditions are met and, if satisfied, issues a specific authorisation. In some programmes the competent authority must also notify the European Commission before the authorisation takes effect. Where that notification step applies, the institution must wait for the window to pass before executing the payment. Acting too early – processing the payment after national authority approval but before the Commission window has elapsed – is itself a breach.
We regularly advise institutions on structuring derogation applications so that the supporting documentation anticipates every condition the competent authority will assess. A gap in the application – an undocumented expense category, a missing invoice, an incomplete identity verification – typically produces a request for further information that extends the process, during which the payment remains blocked.
How does the EU licensing route compare to OFAC and OFSI?
The EU, OFAC, and OFSI all maintain licensing mechanisms that permit transactions that would otherwise be prohibited, but the procedural architecture differs in ways that change how practitioners prepare applications.
Under OFAC, the licensing process distinguishes between general licences (standing authorisations that permit a defined category of transactions without a separate application) and specific licences (case-by-case authorisations). OFAC publishes general licences alongside programme-specific rules; a transaction that clearly falls within a general licence requires no application. Where a general licence does not apply, the applicant submits to OFAC directly. OFAC publishes response-time guidance, though actual timing varies by programme complexity and case volume. Our guide on frozen-account management under OFAC addresses that process in detail.
Under OFSI – the UK Office of Financial Sanctions Implementation – the licensing structure is similarly divided between general and specific licences. OFSI's enforcement guidance and its published licensing statistics make the UK system somewhat more transparent in terms of expected timelines than some EU competent authorities. However, post-Brexit divergence between the UK consolidated list and the EU list means that a payment lawful under an OFSI licence is not automatically lawful under the applicable EU regulation, and vice versa. Dual-regime clients must obtain separate authorisations. Henry Ashworth's practice on UK sanctions covers the OFSI side of that analysis.
The EU licensing route operates at Member State level. There is no single EU licence-issuing body. The competent authority of each Member State applies the EU regulation but assesses applications through its own procedural norms, timelines, and documentation expectations. For a multinational holding frozen accounts in multiple EU jurisdictions, this means managing parallel applications to multiple authorities, each with its own process. Coordination between advisers in each jurisdiction is operationally important. Where that coordination involves local counsel in the relevant jurisdiction, Calder & Vance manages the cross-regime picture and ensures consistency of the legal positions advanced.
Japan's financial-sanctions regime – administered under the Foreign Exchange and Foreign Trade Act – also requires separate authorisation for payments involving designated parties. Our guide on frozen-account management under Japan's regime is relevant where accounts span EU and Japanese counterparties. For businesses with exposure to BIS and EAR classifications alongside EU financial sanctions, our service on frozen-account management under BIS and the EAR addresses the export-control dimension that sometimes intersects with financial-sanctions positions.
What is the EU approach to unfreezing an account – and when does it apply?
An account is unfrozen when the designation underlying the freeze is removed or expires. Under EU law, designations are reviewed periodically; in certain programmes the Council must actively renew the designation at defined intervals, failing which it lapses. Where a designation lapses or is annulled, the obligation to freeze falls away and the frozen funds become accessible.
Delisting – the removal of a person or entity from the designated list – can occur through the Council's own review process or through a successful legal challenge before the EU General Court. An annulment action before the General Court is the primary judicial route. The General Court has annulled designations where the Council failed to provide adequate statement of reasons, where the evidence relied upon was insufficient, or where the designated person was denied effective access to the reasons for listing. A successful annulment produces a retroactive legal effect; the designation is treated as never having been valid, though the practical recovery of economic losses requires further proceedings.
Practitioners should note that annulment does not automatically produce compensation for loss suffered during the freeze period. A separate action for damages before the EU courts is required, and the standard of proof is demanding. For clients considering this route, the realistic outcome is restoration of access rather than full financial reparation. Have you assessed whether the evidential basis for the designation would withstand General Court scrutiny?
The separate question of targeted derogations pending delisting arises where a designated person has an urgent and documented need to access funds and a formal delisting is not yet available. In those circumstances, an application to the competent national authority for a specific derogation – supported by detailed documentation of the need, the amount, and the absence of a less restrictive route – is the operative mechanism. This is not a shortcut to delisting; it is a temporary permission that leaves the designation in place.
Risk flags and common failure points
In our cross-border practice, the following patterns produce the largest share of enforcement exposure in EU frozen-account matters.
Delayed identification of the freeze obligation. Where screening tools are not updated in real time against the EU consolidated list – including the designations published by the Council at irregular intervals between regular update cycles – there is a gap between the legal trigger and the institution's awareness. During that gap, permitted transactions may have been processed that are now retrospectively unlicensed. The EU regime does not provide a good-faith defence equivalent to those available in some other regimes; the obligation is strict.
The control limb missed by ownership-only screening. As noted above, entities that are controlled by a designated person but not majority-owned are caught by EU law but may not be caught by a screening tool calibrated to the OFAC 50 percent threshold. A listed person with significant but minority influence over a board – through rights, contracts, or information access – can trigger the EU control test. Screening protocols that do not include a governance review will miss this.
Indirect benefit. The prohibition covers making funds available directly or indirectly to or for the benefit of a designated person. A payment to an unlisted third party that discharges a debt owed to a listed person is caught. Payments for services that will be performed by a listed person's wholly-owned subsidiary are caught. The indirect-benefit analysis is one of the most fact-sensitive assessments in EU frozen-account management, and it is regularly underweighted.
Programme-specificity of derogations. As described above, not every derogation is available under every EU programme. Applying for a derogation that does not exist in the governing programme wastes time and may signal to the competent authority that the institution has not read the applicable regulation carefully. Before submitting, confirm which derogations the specific programme provides.
Multi-jurisdiction synchronisation failures. A business with frozen accounts in more than one EU Member State and also under non-EU regimes must synchronise its compliance positions. A derogation obtained in one Member State does not create permission in another. An OFSI licence does not authorise an EU payment. Managing these positions independently, without a single cross-regime view, regularly produces inadvertent violations in the jurisdictions that are not the primary focus.
Is your institution's sanctions-monitoring programme designed to catch all five of these failure modes? If any one of them is unaddressed, the exposure is real and potentially material.
A common misconception – and the myth practitioners should correct
A persistent belief among in-house teams is that the obligation to freeze applies only to assets the institution itself holds for the designated person, and that payments passing through the institution to a third-party account are outside the freeze obligation. This reading is incorrect.
EU financial-sanctions regulations prohibit making funds available to or for the benefit of a designated person, as well as freezing those held. A payment instruction that would transfer funds to any account where a designated person would benefit – even indirectly, even where the account is held at another institution, even where the immediate payee is not listed – falls within the prohibition. The institution processing the payment is the compliance point. This is why screening of payment instructions in real time, against the full ownership and control analysis, is an obligation that extends well beyond asset-management functions.
The same misconception appears in the context of trade finance. A letter-of-credit issuing bank sometimes assumes that the trade-finance instrument, rather than the underlying payment, is the unit of analysis. It is not. The funds movement is the operative event, and the prohibition applies to it.
Related practices
- Frozen-account management under BIS and the EAR – export-control licensing where financial and trade sanctions intersect
- Frozen-account management under Japan's regime – comparative guide to Japanese FEFTA obligations and licensing
- Frozen-account management under OFAC – US specific-licence process, general licences, and OFAC practice
The position above covers the standard structure of the EU regime. Your specific facts – the nature of the asset, the Member State in which it is held, the programme under which the designation was made, and the cross-border elements of the transaction – change the analysis materially.
Contact Calder & Vance at info@caldervance.com for an assessment of your EU frozen-account obligations.