A freight forwarder books a vessel for a commodity shipment crossing three jurisdictions. The cargo is legitimate. The shipper is clean. But the vessel's last port of call sits under a UN Security Council asset-freeze, and one intermediate charterer has an undisclosed ownership link to a listed entity. The transaction closes. The exposure does not.
Maritime and shipping sanctions under the UN Consolidated List operate through Security Council resolutions adopted under Chapter VII of the UN Charter, which bind all 193 member states. The obligations are implemented nationally – through OFAC in the United States, OFSI in the United Kingdom, and the relevant Council regulations in the European Union – and they catch vessels, charterers, cargo owners, port operators, and financial institutions involved in a sanctioned transaction, regardless of flag state. As of January 2026, the UN regime remains the legal foundation on which every national maritime sanctions programme is built.
This guide walks through the maritime and shipping sanctions compliance process step by step: the governing authority, the key obligations and ownership tests, the cross-regime comparison that trip up well-resourced teams, the practical due-diligence sequence, the risk flags that most commonly produce enforcement exposure, and when to involve counsel.
Step 1 – Understand the governing authority and legal basis
The UN Security Council adopts resolutions under Chapter VII of the UN Charter, and those resolutions create binding obligations for all member states, overriding inconsistent domestic law. The UN Consolidated List is the authoritative record of designated individuals and entities; asset freezes and travel bans flow directly from it.
In practice, no business transacts with the UN Consolidated List directly. Each member state implements the relevant resolution through its own national instrument. OFAC implements it through the relevant programme regulations under IEEPA or TWEA. OFSI implements it through regulations made under the Sanctions and Anti-Money Laundering Act (SAMLA). The EU implements it through a Council Regulation and a parallel Council Decision. The result is that a UN-listed entity is almost always on the SDN List, the UK Consolidated List, and the EU asset-freeze list simultaneously – but not necessarily vice versa. National autonomous sanctions can go further than the UN baseline.
For maritime transactions, the practical implication is immediate: a vessel, port agent, or cargo counterparty that appears only on the UN Consolidated List still triggers prohibitions under every national implementation. Checking only one national list is not adequate. The screening programme must reach all relevant implementations, and it must be repeated at each stage of the transaction lifecycle, not only at inception.
Step 2 – Map the transaction parties and the asset chain
Maritime transactions are structurally complex, and that complexity is where sanctions exposure hides. The parties to screen extend well beyond the named shipper and consignee.
The transaction map for a single shipment typically includes the vessel owner, the registered operator, the technical manager, the commercial manager, the charterer (time or voyage), the sub-charterer, the cargo owner, the cargo financier, the freight forwarder, the port agent at the load port, the port agent at the discharge port, any transhipment port operator, the commodity trader, the insurance underwriter, and the protection-and-indemnity club. In our experience, teams that screen only the direct counterparty – the entity they contract with – miss exposure sitting two or three steps back in this chain.
Each of these parties must be checked against the UN Consolidated List and, separately, against the national implementations relevant to the regimes in play. Where a party is not a natural person or a named entity but a vessel, the vessel's IMO number and flag state should also be verified against relevant vessel-based designations and port-state advisories. Vessel flag changes and name changes are documented evasion indicators; screening on name alone is insufficient.
The ownership and control question is equally important. The UN Consolidated List designates named persons and entities, but the national implementations extend that designation to entities owned or controlled by listed persons. Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) applies mechanically: aggregate ownership by blocked persons of 50 percent or more means the entity is treated as blocked, whether or not it is separately listed. Under OFSI and the EU, an ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) adds a broader control dimension: an entity can be caught even where the ownership stake falls below the mechanical threshold, if a designated person exercises effective control.
Step 3 – Apply the screening sequence across all regimes
A multi-regime screening sequence is not optional for maritime transactions; it is the operational baseline. A single shipment touching US-dollar clearing, a UK-based insurer, and an EU port operator falls simultaneously within the reach of OFAC, OFSI, and the relevant EU Council regulation. Each regime has its own list, its own ownership-and-control extension, and its own prohibitions.
The sequence should proceed in this order. First, check all identified parties against the UN Consolidated List. This establishes the universal baseline. Second, screen against the OFAC SDN List and any relevant OFAC programme-based lists, because US-dollar transactions and US-person involvement trigger OFAC jurisdiction regardless of where the transaction occurs physically. Third, screen against the UK Consolidated List, noting that OFSI's ownership and control guidance covers control as well as ownership and applies to subsidiaries and shell structures. Fourth, screen against the relevant EU consolidated list if any party, goods, or transaction leg touches the EU. Fifth, where the route includes ports in Singapore, the UAE, Japan, or other implementing jurisdictions, check the relevant national lists for those regimes.
The cross-regime screening gap that we most regularly see in practice is a selective approach: a firm screens against the SDN List because its bank requires it, but does not screen against the UK or EU lists because those are treated as someone else's concern. For a transaction that uses a London P&I club and European commodity finance, that gap creates direct and unhedged exposure.
Where a name generates a potential match, the match must be resolved before the transaction proceeds. A potential match that is allowed to sit unresolved is, for enforcement purposes, treated the same as a confirmed match that was ignored.
The position above covers the standard screening case. Your specific facts – the counterparty's corporate structure, the vessel's ownership chain, the route, the commodity, and the regimes in play – will change the analysis materially. For a transaction-specific assessment, contact Calder & Vance at info@caldervance.com.
Step 4 – Conduct ownership and control analysis for non-listed counterparties
The most significant source of undetected maritime sanctions exposure is not the directly listed entity – it is the unlisted intermediate company with a listed beneficial owner that sits behind a legitimate-looking corporate structure.
Ownership analysis begins with the direct counterparty and works backwards through the ownership chain until natural-person beneficial owners are identified or the chain terminates in a listed or state-owned entity. For maritime transactions, this means reviewing corporate registry data, vessel registration records, charter-party disclosures, and commercially available vessel-tracking and ownership databases. Where a counterparty declines to provide ownership information that is not publicly available, that refusal is itself a risk indicator.
Control analysis is a further step beyond ownership. Under OFSI guidance and the relevant EU Council regulations, a person or entity that a designated individual has the practical ability to direct – even without a majority stake – may be treated as controlled by that person for purposes of the asset-freeze. In our cross-border practice, this has particular relevance for maritime structures involving nominee shareholders, discretionary trust arrangements, or management agreements that separate legal ownership from economic control.
Where the analysis produces a genuine ambiguity – an ownership chain that cannot be fully traced, or a control relationship that falls in a grey area – the correct step is not to proceed on the assumption that the position is clean. Proceeding without resolution is the decision that produces enforcement exposure. The correct step is to either obtain clarifying information, seek a specific licence where the applicable regime provides for one, or involve counsel to assess whether the position supports a reasoned compliance judgment.
Step 5 – Identify the specific maritime risk flags
Maritime transactions produce a set of risk flags that are distinct from other sanctions contexts. Recognising them early is what separates a managed exposure from an enforcement matter.
Automatic identification system (AIS) manipulation is the most widely documented indicator. A vessel that disables, falsifies, or gaps its AIS transponder without a plausible operational reason – such as a genuine safety or security circumstance – raises an immediate question about the purpose of the dark period. AIS gaps that coincide with port calls in sanctioned territories, or that are followed by a sudden change in the vessel's declared location, are a strong indicator of risk. In our experience, AIS verification should be part of the standard diligence checklist for any vessel-level transaction.
Ship-to-ship transfers conducted outside declared ports, particularly in international waters, are a recognised risk vector. They are not inherently prohibited – they occur for legitimate operational reasons – but an undisclosed ship-to-ship transfer involving an unknown second vessel requires active investigation, not passive acceptance.
Flag state and registration changes that occur shortly before or after a fixture are a further indicator. Repeated changes in a vessel's name or flag, particularly in combination with a change in operator or manager, are consistent with ownership-concealment activity and should prompt enhanced diligence.
Commodity and route mismatches warrant attention. A bulk carrier with no prior record in a particular commodity, travelling a route inconsistent with its declared cargo, is a flag that the cargo description may not reflect the actual goods carried.
Finally, documentation gaps – missing or inconsistent bills of lading, unclear cargo ownership, unusually short payment terms, requests for third-party payment to an unrelated entity – are indicators common to both financial-crime and sanctions-evasion patterns. Each one, individually, may have an innocent explanation. In combination, they require a step back and a considered judgment before proceeding.
Step 6 – Handle a potential match or a blocked transaction
When screening produces a confirmed match against the UN Consolidated List or any national implementation, the prohibited transaction must not proceed and any identified blocked property must be frozen and reported under the applicable national regime's requirements.
In the United States, a blocked transaction requires reporting to OFAC. The window for that report is short – the regulations under IEEPA set a specific filing deadline, and practitioners should verify the current period applicable to their transaction before relying on any figure cited here. In the United Kingdom, a firm that holds blocked funds or assets must report the position to OFSI. The reporting obligation is separate from any licence application. In the EU, the relevant national competent authority must be notified under the applicable Council regulation.
Where a transaction has been blocked or a potential violation has been identified, the question of voluntary self-disclosure arises. A VSD (voluntary self-disclosure to a regulator) is a structured submission to the relevant authority that acknowledges the apparent violation, describes the circumstances, and demonstrates the steps taken to remediate the position. Under OFAC's enforcement framework, a timely and complete VSD is treated as a significant mitigating factor in any civil penalty calculation. OFSI's enforcement guidance reflects a similar approach. The decision to submit a VSD, and the scope and content of that submission, requires legal advice; a poorly constructed VSD can create more exposure than it resolves.
If a transaction has already been flagged, or a filing has been blocked, an early review of the facts and the applicable regime's reporting requirements can preserve options that narrow with time. For advice on a specific matter, contact Calder & Vance at info@caldervance.com.
Step 7 – Design a repeatable maritime sanctions compliance programme
A single transaction review is not a compliance programme. The shipping and maritime sector requires a systematic, repeatable process that applies across the business and is maintained as the applicable regimes change.
An effective maritime sanctions compliance programme rests on five elements: a written risk assessment that reflects the firm's specific trading routes, counterparty profile, and commodity mix; a documented screening procedure that covers all transaction parties and all relevant lists; an ownership-and-control analysis process that goes beyond direct counterparties; clear escalation procedures for potential matches and risk flags; and a record-keeping practice that preserves the evidence of the diligence conducted.
On record-keeping: the major national regimes require firms to retain transaction and compliance records for defined periods. The specific retention period varies by regime, and practitioners should verify the current requirements in the applicable jurisdiction; but as a working principle, records should be preserved for a minimum of five years from the date of the transaction or the compliance action, whichever is later, and in some regimes for longer. That five-year baseline, as reflected in OFAC's published guidance, reflects the minimum period an enforcement authority expects to be able to examine.
The programme also needs a maintenance cycle. The UN Consolidated List is updated by the relevant Security Council committees without advance notice. National implementations follow, but not always at the same moment. A firm whose screening database is refreshed only quarterly is operating with a material gap. In our practice, we advise real-time or near-real-time list integration as the standard for any business with active maritime transaction flow.
Cross-regime divergence requires dedicated management. The UN baseline is implemented differently by each national authority, and the autonomous sanctions added by OFAC, OFSI, and the EU can catch counterparties or transactions that the UN Consolidated List does not. A compliance programme built only to the UN baseline will miss those national extensions. The programme should explicitly address the full set of regimes relevant to the firm's business, with a process for updating the scope as the firm enters new markets or changes its counterparty profile.
Related practices
- Correspondent banking and de-risking under OFAC – managing US sanctions exposure in financial transaction chains
- Payment and escrow structuring under the Australian sanctions regime – structuring cross-border payments to manage sanctions risk