A trading company ships precision components to a distributor in a third market. The end customer, it later emerges, supplies equipment to a military body subject to OFAC designation. The shipment is already on a vessel. Was the transaction prohibited? Could the company have known? These are exactly the questions that OFAC's military end-use regime is designed to answer – and the answers carry civil and criminal consequences.
Military end-use rules under OFAC form part of the broader US sanctions architecture administered by the Office of Foreign Assets Control. They restrict the supply of goods, technology, and services where the ultimate end-use is military and the end-user is a sanctioned party or entity operating in a sanctioned context. The rules are distinct from, but closely aligned with, the parallel military end-use and end-user controls administered by the Bureau of Industry and Security under the Export Administration Regulations. As of May 2026, both regimes remain in active enforcement posture, and cross-border businesses face exposure from either or both.
This guide sets out the governing authority, the substantive test, the procedural steps a business should follow, the most common points of failure, how the regime compares with the UK and EU positions, and when to involve specialist counsel.
Step 1: Understand the governing authority and legal basis
OFAC derives its authority over military end-use questions primarily from the International Emergency Economic Powers Act and the relevant programme regulations issued under it. The Office administers a suite of country and thematic programmes; military-related restrictions appear in several of them, covering the acquisition of arms, military equipment, and defence-related goods and services by designated parties and designated sectors.
That starting point matters for two reasons. First, the prohibition is programme-specific: the precise scope of what is restricted – goods only, or goods and services and technology together – depends on which OFAC programme applies to the counterparty or territory in question. Second, OFAC's authority under IEEPA is not limited to US persons. Secondary-sanctions provisions in certain programmes create exposure for non-US firms that facilitate transactions a US person could not conduct. A European or Asian business that routes components through a third-country distributor to a sanctioned military end-user can trigger secondary-sanctions risk even if no US person touches the deal.
In our cross-border practice, we regularly advise clients who assume that OFAC's reach stops at the US border. It does not. The extraterritorial dimension of OFAC's military-related restrictions is one of the most consequential – and most underappreciated – aspects of the regime.
Separately, BIS administers military end-use and end-user controls under the EAR. Those controls apply to items on the Commerce Control List and to items below the CCL threshold that nonetheless have apparent military end-use in specific countries of concern. OFAC and BIS controls overlap but are not identical. A transaction that is clear under BIS may still be prohibited under OFAC, and vice versa. Before committing to any transaction with a potential military dimension, a business must assess both regimes in parallel.
Step 2: Identify whether the transaction has a military end-use dimension
The central question in any military end-use analysis is whether the goods, technology, or services being transferred will be used – directly or indirectly – for military purposes by a party that is, or may be, subject to OFAC-programme restrictions. That question is rarely answered by a single document. It requires active due diligence across the transaction chain.
The term "military end-use" encompasses the incorporation of items into defence articles, the development or production of military equipment, and the operation of military infrastructure – but the precise scope varies by programme. What is common across programmes is the concept of "knowledge": if a business knows or has reason to know that an end-use is military and prohibited, proceeding with the transaction is a violation, regardless of whether the business has seen documentation to that effect.
The "reason to know" standard is where most enforcement cases find their footing. It is not a purely subjective test. OFAC looks at whether a reasonable compliance function, applying the information available at the time, ought to have identified the red flags. Common indicators include:
- A buyer or intermediary in a jurisdiction with a high concentration of sanctioned military entities.
- A purchase order that does not match the stated commercial use (quantity, specification, or configuration inconsistent with civilian applications).
- An end-user certificate that is incomplete, inconsistent, or from an entity whose identity cannot be verified.
- A distributor that declines to name or document the ultimate customer.
- Payment routed through a financial institution with known military-sector exposure.
Does your screening programme look beyond the immediate buyer to the stated end-user? In our experience, many compliance functions screen the named counterparty and stop there. That is insufficient where the programme in question covers indirect transfers.
Step 3: Screen counterparties and the full ownership chain
Effective screening for military end-use exposure requires checking the buyer, the distributor, any known intermediary, and the stated end-user against the full range of OFAC lists – the SDN List (OFAC's list of Specially Designated Nationals and Blocked Persons), the Non-SDN Menu-Based Sanctions List, and any sector-based list relevant to the applicable programme. It also requires applying the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) to each entity in the chain.
The 50 percent rule is aggregated. Two blocked persons each holding a minority stake in a distributor can together bring that distributor within the rule. Screening tools that run a name against a list but do not map beneficial ownership will not catch this. A business that relies on automated screening alone, without a layer of ownership-and-control analysis for higher-risk transactions, is operating below the standard that OFAC's enforcement guidance expects.
For military end-use specifically, the screening should be extended to include a check of BIS lists: the Entity List, the Denied Persons List, and the Unverified List. An entity on the BIS Entity List but not on the OFAC SDN List may still carry restrictions on the transaction; an entity on neither list may still trigger a "reason to know" flag if the end-use indicators described in Step 2 are present.
Record all screening steps. OFAC's guidance makes clear that contemporaneous documentation of a compliance decision is a significant mitigating factor if the transaction is later scrutinised. A business that cannot reconstruct its pre-transaction screening cannot demonstrate good faith.
How does the EU position compare, and why does it matter for cross-border deals?
Under EU Council regulations, military end-use restrictions on exports to sanctioned entities or territories operate through a dual mechanism: the asset-freeze and the separate arms-embargo provisions, supplemented in many programmes by controls on the supply of goods and technology capable of military application. The EU rules apply to EU persons and, in certain programmes, to transactions conducted within the EU or in EU currency.
The critical divergence from OFAC is the ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person) standard. Under EU regulations, an entity that is owned or controlled by a listed person is itself subject to the prohibitions, even if the ownership percentage is below 50 percent – provided that control can be demonstrated through other means such as board influence, contractual rights, or a power of instruction. OFAC's test is primarily mechanical: 50 percent or more ownership triggers the prohibition. The EU test is broader and fact-dependent.
For a business operating across the Atlantic, this divergence is operationally significant. A transaction that passes the OFAC ownership test may still be prohibited under EU rules if the counterparty is controlled by a listed person through a mechanism short of majority ownership. We regularly advise multinationals that run a single OFAC-calibrated screening protocol across all jurisdictions: that protocol is not compliant with EU obligations.
The UK position under OFSI and the relevant thematic sanctions regulations broadly mirrors the EU control test for ownership and control purposes. OFSI's guidance makes clear that control is assessed on substance, not purely on shareholding percentages. A UK person or a UK-nexus transaction therefore requires analysis under the UK test even where OFAC clearance has been obtained.
Does your cross-border compliance protocol account for these divergences? If the answer is no, a transaction that appears clean in the US may expose your business to enforcement action in the UK or EU.
Step 4: Obtain and verify end-user documentation
Where a military end-use risk has been identified – or where the transaction involves goods or technology with plausible military application – the business should obtain an end-user certificate or equivalent undertaking from the buyer and, where practicable, the ultimate end-user. That document should specify the intended use, the end-user's identity and business, and a commitment not to re-export or transfer to a prohibited party.
Documentation alone does not extinguish liability. OFAC does not apply a "paper compliance" standard. If the documentary record is internally consistent but the physical facts of the transaction – the goods, the destination, the route – suggest a military end-use, enforcement attention will follow. The documentation is a component of the defence, not a substitute for genuine due diligence.
In a recent matter, a manufacturing business supplying components with recognised civilian and military applications obtained end-user certificates from its distributor in a third market. A subsequent review identified that the distributor had re-supplied a portion of the goods to an entity on the SDN List without notifying the manufacturer. We assisted in scoping the exposure, advising on voluntary self-disclosure (VSD – a submission to OFAC proactively reporting an apparent violation), and preparing the submission. The matter was resolved without a public enforcement action, in part because the contemporaneous documentation demonstrated that the manufacturer's original transaction had been conducted in good faith. Outcome statements of that nature are fact-specific; no similar result can be guaranteed.
For complex supply chains, consider implementing a contractual flow-down: a clause in the distributor agreement requiring the distributor to obtain equivalent end-user documentation from each sub-purchaser and to notify the original seller of any potential military-end-use transaction. That clause does not eliminate risk, but it is evidence of a systemic compliance effort and may support a mitigated penalty position.
Step 5: Assess the licensing position and exceptions
Not every transaction that touches a military end-use context is automatically prohibited. OFAC's programme regulations include general licences and permit applications for specific licences in defined circumstances. A general licence (a standing authorisation that permits a defined category of transactions without a separate application) may authorise certain transactions relating to personal communications, humanitarian goods, or other defined categories – even in the context of a programme with military-related restrictions.
A specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) is available for transactions outside the scope of any general licence, where OFAC determines that the policy interest in permitting the transaction outweighs the prohibition. Military end-use transactions are among the more difficult licensing cases: OFAC's policy posture is cautious, and the evidentiary burden on the applicant is correspondingly higher. Timelines for specific-licence review in complex cases can be extended; verify the current position before relying on a particular estimate.
Under the EAR, BIS administers its own licensing regime for military end-use items. A BIS licence does not substitute for an OFAC licence where OFAC jurisdiction is engaged, and an OFAC licence does not resolve a BIS requirement. A complete pre-transaction analysis must address both.
The position under EU and UK law is comparable in structure but distinct in procedure. EU Council regulations provide for competent-authority derogations in member states; OFSI in the UK administers a licensing function under SAMLA and the relevant thematic regulations. The criteria for a licence and the processing timeline differ materially from OFAC's. A business seeking authorisation for a cross-border transaction should not assume that a licence obtained from one authority satisfies the requirements of another.
Step 6: Respond to a red flag or a potential violation
When a transaction has already proceeded and evidence emerges that it may have involved a prohibited military end-use, the business faces a different set of decisions. Concealing the transaction is not an option; it compounds the violation and converts what may be a civil matter into a potential criminal referral to the Department of Justice. The question is how quickly to act and whether to submit a voluntary self-disclosure.
OFAC's VSD process is a significant mitigant. Under OFAC's enforcement guidelines, a timely, complete, and accurate VSD is treated as a factor that substantially reduces the base civil penalty. The decision to submit a VSD should be taken promptly: delay reduces the mitigation credit available and may be interpreted as indicative of bad faith if the violation later comes to OFAC's attention through another channel.
Before filing a VSD, scope the apparent violation carefully. What is the precise nature of the prohibited conduct? Is the goods transfer the only issue, or are there associated service or payment flows that also require analysis? Is the violation limited to OFAC, or does it also engage BIS controls? Are there parallel reporting obligations under UK or EU law? The scope of the disclosure should be accurate and complete; a VSD that omits material transactions does not receive full mitigation credit and may create additional exposure.
In parallel with scoping the violation, preserve all relevant documents: shipping records, screening documentation, end-user certificates, correspondence with the buyer and distributor, and internal compliance notes. OFAC's investigative process is document-intensive, and the ability to demonstrate contemporaneous good-faith efforts is a material factor in the penalty calculus.
Related practices
- Deemed export and technology controls under BIS and the EAR – advisory on technology-transfer controls, ECCN classification, and deemed-export licensing
- Military end-use rules under OFAC: guide 4 – further analysis of advanced screening methods and compliance-programme design for military end-use risk
- Military end-use rules under OFSI – UK-regime counterpart: OFSI's approach to military end-use restrictions and licensing