A UK-based trading group is partway through settling a payment to a longstanding supplier. A compliance alert triggers mid-process: the transaction may touch a sanctioned jurisdiction. The question is not simply whether a specific licence is required. It is whether a licence exception (a standing authorisation in the relevant thematic regulations that permits a defined category of activity without a case-by-case application to OFSI) already covers the payment – and whether the conditions attached to that exception have been met in full.
Licence-exception eligibility under OFSI turns on a structured, condition-by-condition reading of the relevant thematic sanctions regulations made under the Sanctions and Anti-Money Laundering Act 2018. As of May 2026, OFSI administers licence exceptions across multiple regimes, each with its own trigger conditions, documentation requirements, and compliance obligations. Failing to satisfy even one condition means the exception does not apply – and the transaction is prohibited unless a specific licence is obtained.
This guide walks through the eligibility assessment step by step, compares the OFSI position with the parallel OFAC and EU approaches, and identifies the risk flags that most often cause businesses to misjudge their position.
Step 1: Identify the applicable sanctions regime and its thematic regulations
Licence-exception eligibility begins with identifying which sanctions regime applies to the transaction – because OFSI does not operate a single, unified set of exceptions. Each set of thematic regulations contains its own exceptions, and those exceptions differ materially between regimes.
The Sanctions and Anti-Money Laundering Act 2018 (SAMLA) is the primary enabling legislation. Under SAMLA, the UK Government has made separate thematic regulations for each country or thematic programme. Each instrument sets out its own prohibitions and, separately, its own list of exceptions to those prohibitions. An exception that appears in one set of regulations does not automatically apply under another.
The practical consequence is significant. A business must first identify every sanctions regime that is arguably engaged by the transaction – the counterparty's nationality, the goods or services involved, the currency and the payment route, the jurisdiction of the bank processing the funds. Only then can the eligibility analysis begin against the correct instrument. In our experience, businesses that skip this first step routinely assess their position against the wrong set of regulations. That produces false confidence, which is one of the more expensive mistakes in sanctions compliance.
Where a transaction touches more than one regime simultaneously – for instance, a payment for goods that involves both a sectoral and a geographic programme – each set of regulations must be checked independently. The exception in one instrument does not carry over to the other.
Step 2: Map the prohibition that is engaged
A licence exception is not freestanding. It is a derogation from a specific prohibition, and it can only be assessed once the prohibition it derogates from has been precisely identified.
OFSI sanctions regulations typically contain several distinct prohibitions: on financial transactions, on making funds or economic resources available, on dealing with transferable securities, on providing financial services, and on other sector-specific activities. Each prohibition is defined in the regulations. An exception that lifts the restriction on making funds available does not, as a matter of law, lift a separate restriction on providing financial services in connection with the same transaction.
This matters practically. A trade-finance bank considering a letter of credit for an otherwise compliant exporter may face two overlapping prohibitions – one on financial services, one on funds. The exception analysis must be run separately for each. Collapsing the two into a single assessment is a common error, and it is one that OFSI's enforcement guidance treats as a failure of adequate due diligence.
The position here contrasts with OFAC's approach under IEEPA-based sanctions, where general licences are often written to cover a broader bundle of activities in a single instrument. Under OFSI the drafting is more disaggregated, and compliance counsel must work through each prohibition in turn.
Step 3: Read the exception conditions strictly and in sequence
Each licence exception in OFSI's thematic regulations sets out conditions that must all be satisfied for the exception to apply. The conditions are conjunctive: all of them must be met, not just most of them.
Typical conditions include: the identity and status of the counterparty (for instance, that it is not itself a designated person or an entity owned or controlled by a designated person); the purpose of the transaction (humanitarian, legal services, or a defined commercial category); the destination of funds or goods; and, frequently, a requirement that the transaction not confer a benefit – directly or indirectly – on a designated person.
The "benefit" condition deserves particular attention. It is drafted broadly in many instruments. A payment that is structurally compliant – going to a non-designated entity, for a permitted purpose – can still fail the benefit condition if the counterparty's commercial operations are economically integrated with a designated person. In our practice, this is the condition that catches the most ostensibly straightforward transactions. Have you traced the economic benefit of the payment beyond the immediate counterparty?
The EU Blocking Regulation and the EU's own exceptions under the relevant Council Regulations take a similarly strict approach to conjunctive conditions. OFAC's general licences are structurally comparable but often contain broader carve-outs, particularly for personal remittances and certain humanitarian transactions. Where a business operates across jurisdictions, the stricter prohibition governs: a transaction that satisfies a US general licence is not automatically permitted under the corresponding OFSI exception.
Step 4: Assess ownership and control of every counterparty
Even where a counterparty is not itself on OFSI's consolidated list of designated persons, a licence exception may still fail if the counterparty is owned or controlled by a designated person – because making funds or economic resources available to that counterparty is treated as making them available to the designated person.
OFSI's ownership and control test (the UK test for whether a non-listed entity is caught because a listed person owns or controls it) is broadly comparable to the EU position under the relevant Council Regulations, but it differs from OFAC's mechanical 50 percent or more rule in one material respect: control matters, not just ownership. A designated person who holds less than 50 percent of a counterparty's shares may nonetheless control it through board composition, veto rights, or contractual arrangements. That is sufficient to bring the counterparty within scope of the prohibition – and to defeat the exception.
For the exception analysis, this means the ownership and control assessment must be completed before the exception eligibility assessment. In our experience, businesses that screen only the immediate counterparty against the consolidated list, and do not map the ownership and control chain behind it, consistently underestimate their exposure. The question is not just who is on the list. It is whether anyone on the list controls the entity you are dealing with.
The cross-border dimension adds further complexity. A UK business dealing with a subsidiary of a company based in a third jurisdiction may face OFSI's ownership-and-control test for UK-law purposes, the EU test if any EU-person or EU-territory connection exists, and OFAC's 50 percent rule if there is any US-nexus in the transaction. All three must be satisfied. The stricter result controls the overall analysis.
What are the most common eligibility mistakes – and the risk flags to watch for?
Three patterns produce most of the eligibility failures we see in cross-border practice. Understanding them is as important as understanding the formal legal test.
The first is exception-shopping: selecting the exception that appears most favourable and reading it in isolation, without checking whether every condition is met and without checking the other prohibitions that may be engaged. OFSI's enforcement posture treats this as an aggravating factor in any subsequent investigation, because it indicates a failure to apply genuine due diligence rather than a good-faith assessment that turned out to be wrong.
The second is the static screen. Compliance teams run the counterparty against the consolidated list at the time of initial due diligence and do not re-screen when a designation update is published. OFSI's designations are made by statutory instrument and take effect immediately on publication. A counterparty that was clean yesterday may be designated today. The exception analysis must be current as of the date the transaction is completed, not the date it was first assessed.
The third is an incomplete benefit analysis. As noted above, the benefit condition in many exceptions requires that no designated person benefits, directly or indirectly. "Indirectly" is not defined narrowly. Where a counterparty pays fees, royalties, dividends, or intercompany charges to an entity in which a designated person has an interest, a benefit arises. The analysis must trace economic flows, not just legal ownership.
The risk flags that should prompt immediate escalation to sanctions counsel include: any counterparty in a jurisdiction subject to a comprehensive UK sanctions programme; any payment that transits a third-country bank with its own sanctions obligations; any goods or technology that may be caught by dual-use export controls in addition to financial sanctions; and any instruction from a counterparty to route a payment differently from the usual method.
Step 5: Document the eligibility assessment and retain the record
Completing a correct eligibility analysis is not sufficient on its own. OFSI's enforcement guidance makes clear that businesses are expected to maintain records demonstrating how they reached their conclusion. A business that relies on a licence exception and cannot produce the reasoning behind that reliance is in a significantly weaker position in any subsequent investigation.
The documentation should record: the prohibition identified, the exception invoked, each condition assessed and the evidence relied upon for each condition, the ownership and control analysis for each counterparty, the date of the assessment, and the person responsible for it. Where the analysis is borderline, the record should also reflect the alternative position considered and why it was rejected.
OFSI has the power to require the production of documents and information in connection with any investigation. A well-maintained compliance record is the primary defence against a finding of inadequate due diligence. In our practice, the difference between a matter that closes at the preliminary-assessment stage and one that proceeds to a monetary penalty decision frequently comes down to the quality of the contemporaneous record. How confident are you that your documentation would withstand that scrutiny?
The record-keeping obligation is consistent across major regimes, though the specific requirements differ. OFAC's regulations and guidance call for records to be maintained for a defined period. OFSI's guidance similarly emphasises contemporaneous documentation. Under the EU Council Regulations, operators are expected to maintain adequate records to demonstrate compliance. Where a transaction is governed by more than one regime, the record should address each.
Step 6: Determine whether a specific licence is needed and when to involve counsel
Where the eligibility assessment concludes that no exception applies, the choice is between not proceeding and applying to OFSI for a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction). That is a distinct process from the exception analysis, with its own grounds, procedure, and timelines.
The grounds on which OFSI may grant a specific licence are set out in the relevant thematic regulations. Common grounds include humanitarian activity, legal fees and expenses, and extraordinary situations where OFSI has a discretionary power to grant licences for reasons it considers appropriate. Not all grounds are available under all regimes, and not all transactions that an applicant considers humanitarian will satisfy OFSI's definition.
In our experience, two situations call for specialist counsel at the earliest stage. The first is where the eligibility assessment is genuinely borderline – where a reasonable reading of the exception could go either way, the conditions are ambiguous on the facts, or the ownership and control analysis is complex. Proceeding on a self-assessed exception in those circumstances carries meaningful enforcement risk. The second is where a transaction has already been flagged by a bank or payment provider as potentially prohibited. In that situation, the window to engage OFSI and preserve the transaction may be short, and the framing of the position matters considerably.
A voluntary self-disclosure (VSD – notification to OFSI of a potential breach before it is otherwise detected) is a separate consideration. Where a business completes an eligibility assessment after the fact and concludes that a past transaction did not qualify for the exception relied upon, legal advice on whether and how to make a VSD should be obtained promptly. OFSI's enforcement guidance identifies VSD as a mitigating factor in penalty decisions. The decision to make one, and the terms on which it is framed, is one that should be made with counsel rather than unilaterally.
The position below the specific-licence route has implications for the export-controls dimension of many transactions as well. Goods, technology, or software that is subject to ECJU licensing requirements under the Export Control Order may require a separate export licence regardless of the OFSI financial-sanctions position. The two regimes operate in parallel; satisfying one does not satisfy the other.
Related practices
- Deemed export and technology controls under BIS and the EAR – advising on classification, licence requirements, and end-use controls for US-origin technology
- Licence-exception eligibility under OFSI: advanced topics – deeper analysis of borderline scenarios and contested exception conditions
- Licence-exception eligibility under SECO – the Swiss parallel regime and its points of divergence from the UK position
The position above covers the standard eligibility pathway. The specific facts of a transaction – the counterparty structure, the goods or services involved, the payment route, and the regimes in play – change the analysis materially. If you are uncertain whether an exception applies, or whether the documentation you hold is adequate, an early review preserves options that close once a transaction completes.
For a confidential review of your exception eligibility position, contact Calder & Vance at info@caldervance.com.