A British engineering firm receives an order for precision components. The buyer is a legitimate commercial entity. The goods are not on any control list. But a field in the end-user certificate reads "defence-related application." At that moment, the transaction stops being a routine export and becomes a question of whether the military end-use rules (controls that can catch otherwise-uncontrolled goods when the exporter knows or is informed that they will be used in a military capacity) apply – and whether OFSI's financial-sanctions obligations compound the picture.
Military end-use controls in the United Kingdom are administered by the Export Control Joint Unit under the Export Control Order, but OFSI enforces the financial-sanctions layer that sits beneath many military-related transactions. As of May 2026, the two regimes interact in ways that catch exporters unprepared: an export that appears technically clean under dual-use classifications can still trigger OFSI obligations when a sanctioned party sits anywhere in the payment chain or ownership structure.
This guide walks through the procedure step by step, flags the most common compliance failures, and explains how the UK position diverges from OFAC and EU rules – with the practical points a compliance counsel or General Counsel needs before approving a transaction.
Step 1 – Understand which authority governs what
OFSI governs financial sanctions; the ECJU governs export licensing. A transaction touching military end-use can engage both, and a business that treats them as alternatives rather than overlapping regimes will misread its obligations entirely.
The Export Control Joint Unit (ECJU) sits within the Department for Business and Trade. It administers the licensing regime for controlled goods, technology, and software under the Export Control Order. Dual-use items, military goods, and – critically – items not otherwise listed but intended for a military end-use in certain destinations can all require a licence. The statutory basis is the relevant thematic export-control legislation, not a sanctions instrument.
OFSI sits within His Majesty's Treasury. It enforces financial sanctions imposed under the Sanctions and Anti-Money Laundering Act (SAMLA) and the thematic sanctions regulations that flow from it. OFSI's jurisdiction is triggered by the financial flows, not the physical movement of goods. Even where the ECJU grants an export licence, OFSI's rules remain independently applicable. Can a payment be processed if the ultimate end-user is, or is owned by, a designated person? That is an OFSI question, not an ECJU question.
In our experience, the disconnect between these two authorities is the single most common structural misunderstanding we encounter in cross-border trade-compliance work. A business can hold a valid ECJU licence and still commit a financial-sanctions breach by receiving or processing payment through a channel that involves a listed entity.
Step 2 – Map the military end-use trigger conditions
Military end-use controls bite when an exporter knows or has been informed that goods intended for export will be used in connection with military activities in a country subject to an arms embargo or equivalent restriction. The trigger is knowledge – actual or imputed – not the inherent nature of the goods.
Under the Export Control Order, this creates a catch-all licensing requirement for goods that would otherwise be freely exportable. The ECJU's published guidance sets out the indicators that should prompt an exporter to seek clarification or a licence. These include: unusual specification requests that point toward military rather than civilian use; requests for quantities inconsistent with the stated civilian purpose; end-user certificates that are vague, inconsistent, or issued by entities with no apparent commercial reason for the goods; and payment routing through jurisdictions or intermediaries associated with arms procurement.
Each indicator in isolation may be explainable. Their combination is the warning sign. We regularly advise exporters to document not only what they checked but why they reached the conclusion they did – because OFSI and the ECJU both examine the adequacy of the pre-transaction due-diligence process, not just its outcome.
The OFSI dimension adds a further layer. Even where military end-use controls do not apply to the goods themselves, if the transaction involves a person designated under any of the UK sanctions regulations – including thematic regimes where arms or defence-sector activities are the subject of the designation – OFSI's prohibitions on making funds available are directly in play. The question shifts from "are these goods controlled?" to "does any person in the transaction chain appear on a UK sanctions list?"
Step 3 – Screen the full transaction chain, not only the named buyer
Screening only the stated end-user is not sufficient. The ownership and control test (the UK test for whether a non-listed entity is caught through a listed person's ownership of, or control over, it) means that an unlisted buyer can carry OFSI implications because of who owns it.
A thorough screen covers: the buyer; the buyer's beneficial owners to the applicable threshold; intermediaries and freight forwarders; the financial institutions processing payment; the entity named as end-user on any certificate; and any party identified in the end-use or re-export undertaking. Where any of those parties is designated, or is 50 percent or more owned by designated persons in the aggregate, OFSI's prohibitions on making funds or economic resources available are engaged.
There is a further complication specific to military end-use. Some UK sanctions regulations include sectoral restrictions that do not require individual designation. A transaction with the defence sector of a particular sanctioned country may be prohibited even where none of the specific individuals involved appear on any list. The restriction operates at the level of the sector. Businesses that screen only named individuals will miss this category of exposure entirely.
Record-keeping matters here too. OFSI expects firms to maintain records that demonstrate the adequacy of the screening process. The relevant instruments set out record-keeping obligations, and in our experience OFSI's enforcement review will examine whether the firm's records support the compliance conclusion it reached.
How does the UK position differ from OFAC and EU rules?
The UK, the United States, and the European Union each administer military end-use controls and financial sanctions, but the legal bases, thresholds, and enforcement postures diverge materially – and that divergence has direct consequences for a business operating across more than one jurisdiction.
Under the US regime, the Bureau of Industry and Security (BIS) administers a military end-use and military end-user rule under the Export Administration Regulations (the EAR). BIS's rule applies to items that are not otherwise controlled if the exporter has knowledge that they will be used for military end-use in countries identified in the applicable country list. The standard is explicit: knowledge includes a reason to know. OFAC administers the sanctions layer in the United States, and the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) applies mechanically. Control is not the test; the ownership figure alone determines status.
The EU position is governed by the relevant Council Regulations and the EU dual-use rules. The EU applies a catch-all mechanism under which competent authorities in Member States can require an authorisation for the export of items not listed when the exporter is informed, or is aware, that they are or may be intended for military use. The EU regime also operates an arms embargo enforced through Council decisions. Critically, the EU's sanctions and export-control instruments are separate legislative instruments – the financial-sanctions prohibition sits in the relevant Council Regulation, while the export-licensing obligation sits in the dual-use and military-goods rules. A business exporting from an EU Member State must satisfy both independently.
Where does the UK diverge? The UK post-Brexit regime follows a broadly similar two-track structure – OFSI for financial sanctions, ECJU for export controls – but the instruments and the sanctions lists are now UK-specific. UK designations may differ from EU and US designations. In our cross-border practice, we have seen situations where a counterparty is designated under one regime but not another, meaning a transaction that is permissible under EU rules requires an OFSI licence, or vice versa. The stricter prohibition governs each jurisdiction, but a business operating across all three must track all three lists simultaneously.
For businesses with a US nexus, BIS's extraterritorial reach also matters. US-origin technology and software can carry EAR obligations even when the export is made from outside the United States. That means an exporter in the UK dealing in items that incorporate US-origin technology may face both ECJU and BIS licensing questions on the same transaction. Those questions are legally independent and must each be answered on their own terms.
The position above covers the standard case. Your facts – the goods, the destination, the payment chain, the origin of the technology – change the analysis significantly.
For an initial assessment of your transaction's exposure across OFSI, the ECJU, and BIS, contact Calder & Vance at info@caldervance.com.
Step 4 – Apply for a licence or confirm a valid exception
Where the analysis in Steps 1 to 3 reveals that a licence is required – whether from the ECJU for the export itself, or from OFSI for a financial transaction that would otherwise be prohibited – the application procedure must follow the correct route for the correct authority.
For ECJU licences, the exporter applies through the SPIRE system. The application must identify the goods precisely, provide the end-use and end-user details, and address any indicators that have been identified in the due-diligence process. The ECJU will assess the application against the strategic export licensing criteria. Incomplete applications or applications that do not address obvious risk flags cause delay and can result in refusal. In our experience, the quality of the pre-application due-diligence package is the single most significant determinant of outcome.
For OFSI, the position is different. OFSI issues licences under SAMLA for otherwise-prohibited financial-sanctions transactions. The licensing ground must be applicable to the proposed transaction; not every transaction qualifies for a licence, and OFSI's available grounds are set out in the relevant thematic regulations. A business cannot simply apply for a licence and expect that one will be issued if the facts do not meet an applicable licensing ground. The firm preparing the application must identify the correct ground, demonstrate that the transaction meets it, and provide supporting documentation.
Timing is relevant. OFSI licensing decisions are not instantaneous, and a business that identifies a potential sanctions issue only on the eve of completion will have limited options. Early identification – at the due-diligence stage, before contracts are signed – preserves the full range of options, including restructuring the transaction to avoid the issue entirely.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com.
Step 5 – Address the risk flags practitioners see most often
Five patterns appear repeatedly in matters we advise on. Each represents a compliance gap that a well-designed programme should close.
Incomplete ownership mapping. Businesses screen named parties but do not map ownership chains to the applicable depth. The ownership and control test operates through layers of intermediate companies. A buyer that appears clean at the surface can be caught at the second or third level of ownership. Automated screening tools help, but they do not substitute for a manual review of company registers and beneficial-ownership filings where the risk profile warrants it.
Over-reliance on the end-user certificate. An end-user certificate is a starting point, not a conclusion. OFSI and the ECJU both accept that a false or misleading certificate does not remove the exporter's obligation to exercise independent judgment. Where the surrounding facts are inconsistent with the stated end-use, the certificate does not provide a clean answer. It provides one data point among several.
Failure to re-screen on contract variation. Long-term supply contracts are screened at the outset and then not revisited. Sanctions designations change. A counterparty that was clean when the contract was signed may be designated during its term. We advise clients to build re-screening triggers into contract management processes – at renewal, at each significant order, and whenever the news environment changes materially around a counterparty's home jurisdiction.
Treating OFSI and ECJU as mutually exclusive. A business that obtains an ECJU licence assumes it has no OFSI issue. That is incorrect. The two regimes are independent. An ECJU licence does not address the financial-sanctions question. Both must be assessed on each transaction that could engage either.
Insufficient documentation. The final pattern is documentation failure. A business may have conducted a reasonable due-diligence process but recorded nothing, or recorded it in a way that does not reconstruct the analysis. If OFSI or the ECJU later reviews the transaction, the absence of contemporaneous records makes a reasonable-process defence very difficult to establish. Record-keeping discipline is not a bureaucratic exercise; it is an enforcement-risk management tool.
Step 6 – Know when to involve counsel
An exporter should involve external counsel early. Not every transaction requires it, but several indicators suggest the risk profile has moved beyond routine compliance work.
The first is a positive screen hit. If screening reveals that any party in the transaction chain appears on a UK, US, or EU sanctions list – even a tentative match – the analysis must be done properly before the transaction proceeds. A false positive must be confirmed as such on a documented basis; a true positive requires advice on the implications and options.
The second is an information request or warning from the ECJU or OFSI. Both authorities can reach out to a business to flag a concern. These communications carry implications for the business's obligations going forward. They are not routine correspondence.
The third is a voluntary self-disclosure question. Where a business identifies a potential past breach, the question of whether to make a VSD (voluntary self-disclosure to a regulator) is a legal and strategic decision, not a compliance-process one. OFSI has published guidance on its approach to VSDs, and the decision to disclose – and how – affects the subsequent enforcement posture materially. Taking that decision without legal advice is a significant risk in itself.
The fourth is cross-border complexity. Where a transaction engages both OFSI and OFAC – because the goods incorporate US-origin technology, or the payment clears through a US correspondent bank – the analysis must address both regimes simultaneously. The position under each may differ, and a clean result under one does not answer the question under the other.
We have acted for exporters, manufacturers, and trading houses at each of these points. In a recent matter, a manufacturing business in the engineering sector identified a potential military end-use indicator late in a procurement process. We assessed the ownership chain, classified the exposure under both ECJU and OFSI, confirmed that an OFSI licence ground was available, and supported the licence application. The transaction proceeded within the permitted timescale.
Related practices
- Deemed export and technology controls under the EAR – US BIS classification, deemed-export analysis, and licence applications for technology transfers
- Military end-use rules: OFSI guide part 3 – further procedural detail on licensing grounds and OFSI practice
Common misconceptions about military end-use compliance
One persistent myth holds that military end-use controls only apply to goods that are inherently military in character. This is wrong, and acting on it creates serious exposure.
The catch-all mechanism under the Export Control Order applies to goods that have no inherent military characteristics and that appear on no control list. The trigger is the intended end-use – in the hands of the buyer, after the export. An exporter of industrial components, scientific instruments, or commercial electronics can face a military end-use licensing requirement if the evidence points toward military application in a relevant destination. The nature of the goods does not provide a safe harbour.
A second misconception is that a clean result from an automated screening platform answers the sanctions question. Screening platforms are tools; they are not analysis. They match names against lists. They do not assess ownership chains, sectoral restrictions, or the application of the catch-all mechanism. A business that relies exclusively on a platform's green output as its compliance conclusion has not completed its obligations; it has only started them.