A payment firm in Frankfurt processes a wire transfer from a corporate client. Mid-settlement, the system flags a beneficial owner on the EU Consolidated List. The account is frozen automatically. The client – a legitimate trading company with one listed minority shareholder – cannot access working capital. Operations stall within days. What happens next, and who decides?
Under EU sanctions regulations, a frozen account (an account holding funds or economic resources that may not be moved, transferred, altered, or accessed without prior authorisation) remains locked until a competent authority in the relevant member state issues a specific licence or the underlying designation is lifted. The freeze is immediate and self-executing on designation. No court order is required, and no grace period applies. As of June 2026, the EU regime is administered through directly applicable Council regulations, but enforcement – and licensing – rests with member-state competent authorities, creating a multi-jurisdiction compliance challenge for any cross-border business.
This guide walks through each stage of frozen-account management under the EU regime: from the moment a freeze is triggered to the restoration of access, with cross-regime comparisons where the analysis diverges from the OFAC and OFSI positions.
Step 1 – Recognise the trigger: when does an EU freeze attach?
An EU freeze attaches the moment a person or entity is added to the relevant Council regulation's annex, or the moment a financial institution identifies that an existing account holder meets the designation criteria. The trigger is objective. The institution does not need to receive a formal notice; the obligation follows the law, not the notification.
The designated person need not be the account holder directly. The EU's ownership and control test (the standard for determining whether a non-listed entity is caught because a listed person owns or controls it) extends the freeze to entities that a designated person owns or controls. "Owns" in the EU sense covers direct and indirect holdings. "Controls" adds a qualitative dimension: the ability to direct the entity's decisions, whether through formal shareholding, board representation, contractual rights, or other means. This is a broader and more judgement-intensive test than the US 50 percent rule (OFAC's mechanical rule treating entities owned 50 percent or more by blocked persons as themselves blocked), which ignores control entirely where the ownership figure falls below the threshold.
In our practice, a significant share of frozen-account situations arise not from a direct designation but from a belated discovery that an indirect owner or controller is listed. Have you mapped the full beneficial-ownership chain, or only the first layer of shareholders?
The practical implication is that the freeze can attach retroactively in a compliance sense: an account may have been transacting normally for months before a screening review identifies the connection. Once identified, the institution must freeze immediately and – under many member-state implementations – report to the competent authority within a short statutory window.
Step 2 – Freeze and report: immediate obligations on the institution
On identifying a freeze obligation, a financial institution must act on two tracks simultaneously: freeze the assets and notify the competent authority. These are distinct obligations, and failure on either track can constitute a separate breach.
The freezing obligation is absolute. The institution may not allow any debit, transfer, payment, or alteration of the account balance. This includes standing orders, scheduled loan repayments, and management fees. The account holder's consent is irrelevant. The institution's internal credit policies are also irrelevant. What matters is whether the funds fall within the scope of the applicable Council regulation.
The reporting obligation requires the institution to notify the member-state competent authority. The form, timing, and content of that notification vary by member state. Some require notification within a defined number of business days; others use a "without delay" standard. We regularly advise institutions on how to structure the initial notification to preserve licensing options. A poorly drafted notification – one that characterises the account holder in unhelpful terms, or that fails to distinguish between the designated person and the non-designated account holder – can narrow the licensing window before the application is even filed.
Cross-regime note: under OFSI (the UK's Office of Financial Sanctions Implementation), a similar reporting obligation applies, but the form of the report and the competent authority differ. A firm with accounts in both the EU and the UK faces parallel and non-identical obligations that must be managed on separate timelines. Similarly, if the account holder also has US nexus, OFAC's reporting requirements run independently. We routinely advise on coordinating these parallel tracks to avoid a compliance gap in one regime while addressing another.
Step 3 – Assess whether a derogation applies
EU Council regulations provide several categories of derogation – standing permissions that allow certain transactions with frozen accounts without a case-by-case licence. Identifying whether a derogation applies is the first substantive analytical step after the freeze.
Common derogation categories include: additions to the frozen account (for example, interest or dividends credited by a third party, which may be added but then themselves become frozen); essential needs (typically covering food, rent, medical expenses, and similar basic requirements for natural persons); and legal fees or fees for routine legal services, which are permitted up to a defined threshold in some regulations. The specific categories, conditions, and monetary limits vary between thematic sanctions regulations – the regime covering one designated country or sector differs from the regime covering another.
This is where institutional compliance teams most frequently err. We have seen firms apply the derogation conditions from one Council regulation to an account frozen under a different regulation, where the derogation either does not exist or carries a different monetary ceiling. Derogation analysis must always be conducted by reference to the specific regulation under which the freeze was applied – not by analogy to a more familiar regime.
Where no derogation covers the required transaction, the account holder or the institution must apply for a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction), which is examined in Step 4.
How does the EU licensing process work for frozen accounts?
A specific licence application under the EU regime is submitted to the member-state competent authority in the jurisdiction where the account is held. The EU does not operate a centralised licensing authority; there is no EU-level equivalent to OFAC or OFSI. This decentralised structure means that the applicable procedures, forms, processing timelines, and evidential standards differ between member states.
Despite that variation, the substantive basis for the licence must be found in the relevant Council regulation. The most commonly relied-upon grounds for a frozen-account licence are: satisfaction of basic needs (for natural persons), payment of reasonable professional fees, and – in some regulations – release of funds for the prior acquisition of goods or services. Each ground carries conditions. The "reasonable professional fees" ground, for example, typically caps the quantum and requires the competent authority to be satisfied that the payment will not benefit the designated person beyond a permitted degree.
Building the application correctly matters enormously. In our experience, applications that succeed at first instance share three characteristics: they identify precisely which derogation ground applies and why the facts satisfy its conditions; they distinguish clearly between the account holder and the designated person (where they are different); and they provide documentary evidence of the specific transaction or series of transactions for which access is sought, rather than requesting blanket unfreezing. Applications that request general access – "please allow the account to operate normally" – are routinely refused.
Competent authorities also vary in how actively they engage with applicants during the review process. Some will request additional information; others will determine the application on the papers submitted. Prompt and complete initial documentation reduces the risk of a negative determination on procedural grounds.
The position in the European context should also be contrasted with the UK regime. OFSI determines licence applications centrally for the whole of the United Kingdom. Processing timelines at OFSI are published and updated periodically. OFAC operates a similarly centralised model in the United States. The EU's member-state model can be more efficient in some jurisdictions and considerably slower in others. Where an account holder has assets frozen in multiple EU member states, parallel applications may need to run in parallel – to different authorities, on different timelines, with potentially different outcomes.
The position above covers the standard case. Your facts – the specific regulation, the member state, the nature of the account holder, and the type of transaction sought – change the analysis at every stage.
For an assessment of your licensing options under the EU regime, contact Calder & Vance at info@caldervance.com.
Step 5 – Challenging the underlying designation
A licence releases specific transactions; it does not restore the account to normal operation. Where the designation itself is contested, a delisting route may be more appropriate than repeated licence applications. Understanding when to pursue each path is a core part of the strategic assessment.
The EU offers two principal challenge routes. First, an administrative review: the designated person or entity petitions the Council to review the listing, presenting new evidence or arguing that the listing criteria are not met. Council reviews can result in delisting, but the Council has wide discretion and is not obliged to delist simply because the applicant contests the basis. Second, an annulment action before the EU General Court: the designated party challenges the Council regulation (or decision) that imposes the designation. The General Court examines whether the Council correctly applied the legal criteria and whether due process was observed. An annulment does not itself unlock the account; if the Court annuls the designation, the Council may re-list with corrected reasoning.
In our cross-border practice, we assess both routes simultaneously and advise on sequencing. A Council petition may be faster and preserve the relationship with the authority; an annulment action provides a more robust procedural check but takes considerably longer and carries cost. For businesses where cash-flow impact is immediate and severe, the licensing route and the challenge route are not alternatives – they must run in parallel.
Cross-regime comparison: under OFSI, a designation challenge takes the form of a written request to HM Treasury followed – if unsuccessful – by judicial review in the domestic courts. OFAC offers an administrative petition for removal from the SDN List, and US persons may seek judicial review in federal court. The EU General Court is unique in the breadth of substantive review it applies to EU Council designations, and experience before that court indicates that well-evidenced petitions on proportionality and factual basis have historically attracted careful scrutiny.
Risk flags and common mistakes in frozen-account management
Frozen-account situations concentrate compliance risk in a short window. The mistakes that create additional liability are almost always made in the first seventy-two hours.
The most consequential error is allowing transactions to proceed after a screening system generates a "potential match" while the compliance team investigates whether the match is a false positive. EU law does not provide a "reasonable doubt" grace period. If the institution has reason to believe the freeze obligation applies, it must act as though it does apply – and resolve the question of whether the match is genuine afterwards. Transacting during that investigation window can constitute a breach of the asset-freeze obligation.
A second common error is notifying the wrong competent authority. In a cross-border group, an account may be held at a branch or subsidiary in member state A, operated through a back-office in member state B, and the account holder may be incorporated in member state C. The notification obligation runs to the competent authority where the funds are held, not where the group is headquartered.
A third error – relevant to the common myth we address in this section – is assuming that because the account holder is not itself designated, the freeze does not apply. The ownership-and-control test means this assumption fails in a significant subset of cases. Where a listed person holds a minority stake but can demonstrably control the entity's decisions, the EU's control limb can apply even where the stake is well below 50 percent.
If a transaction has already been executed after a freeze obligation attached, or if a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.
What are the record-keeping and ongoing monitoring obligations?
The EU sanctions regime imposes ongoing obligations that run for the duration of the freeze and beyond. Financial institutions must maintain records of all frozen assets, all transactions blocked, all derogations applied, and all licence applications and outcomes.
The record-keeping standard under EU law requires that documentation be sufficient to allow competent authorities to verify compliance after the fact. In practice, this means a contemporaneous decision log: when the freeze was identified, what action was taken, which derogation was assessed and why it did or did not apply, what was submitted to the competent authority, and when. A reconstruction prepared months after the event – when an authority inquires or an enforcement process commences – carries far less weight than a log prepared at the time.
Ongoing screening is equally important. A frozen account does not become dormant from a compliance standpoint. Sanctions lists change. New designations can bring additional connected parties within scope. Delistings can lift freeze obligations that were previously mandatory. The institution must continue to monitor both the applicable lists and the account holder's ownership structure while the freeze remains in place.
Cross-regime comparison: OFAC's record-keeping requirements for blocked property are similarly demanding, and BIS maintains comparable standards for export-control matters. OFSI's enforcement guidance places particular emphasis on documentation of how a compliance decision was reached. Across all major regimes, the practical standard is the same: write it down at the time, retain it for the applicable statutory period, and be prepared to produce it on request.
Related practices
- Frozen-account management under BIS/EAR – licensing and authorisation under US export-control rules for frozen-account situations
- Frozen-account management under EU: advanced licensing – deeper analysis of EU-specific licensing conditions and cross-border coordination
- Frozen-account management under Japanese sanctions – the applicable country regime for frozen-account situations with Japan nexus