A trading company in Singapore signs a supply agreement with a distributor whose ultimate parent is based in a jurisdiction subject to US sanctions. The compliance team screens the distributor directly – it does not appear on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The deal proceeds. Six months later, an internal audit reveals that the parent owns a 50 percent or more stake in the distributor. The transaction was prohibited from the outset. The exposure is real, and the window for voluntary self-disclosure has been narrowing since the first payment cleared.
Under OFAC, a non-listed entity is treated as itself blocked when one or more blocked persons own, directly or indirectly, 50 percent or more of its equity in the aggregate. This is known as the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). The test is mechanical: intention, day-to-day management, and commercial independence are irrelevant. Separate ownership-and-control tests apply under OFSI and EU sanctions, and those divergences matter if your supply chain or financing touches more than one regime.
As of July 2026, OFAC's guidance on this test remains the primary reference for US-nexus counterparty screening. This guide walks through the assessment in six structured steps, flags the most consequential errors we see in practice, and identifies when the analysis requires specialist sanctions counsel.
Step 1 – Identify the legal basis and the governing authority
The 50 percent rule derives from OFAC's guidance under IEEPA and applies across all OFAC-administered programmes. OFAC administers economic sanctions on behalf of the US Treasury, and its guidance makes clear that the rule operates automatically: a company crosses the threshold and is blocked, regardless of whether OFAC has published its name on any list.
That automatic operation is the first thing a compliance programme must internalise. Many teams treat the SDN List as exhaustive. It is not. OFAC's position is that entities which meet the ownership threshold are blocked by operation of the programme, not by the act of listing. You can screen every published list without surfacing a blocked counterparty if the ownership chain is opaque.
The governing authority is OFAC itself, within the US Treasury. BIS administers the Entity List and related export-control restrictions under the EAR (the Export Administration Regulations), which is a distinct instrument and a distinct authority. Ownership analysis for sanctions purposes is an OFAC question; export-control licensing is a BIS question. In many cross-border deals, both questions arise simultaneously.
Step 2 – Map the full ownership chain before you screen
Effective ownership mapping traces every layer of the structure from the counterparty up to ultimate beneficial owners, not just the first tier. A counterparty that looks clean at the first level of enquiry may be caught when two listed persons each hold minority interests that, in aggregate, reach or exceed 50 percent.
Aggregation is the single most consequential feature of the rule. OFAC adds together the ownership interests of all blocked persons in a given entity. If a listed individual holds 30 percent and a separately listed company holds 25 percent, the target entity is blocked even though neither interest alone would trigger the threshold. Screening tools that record only direct, single-counterparty holdings miss this entirely.
The practical mapping exercise should:
- Identify every shareholder holding 25 percent or more at each tier, as a minimum starting point (lower thresholds may be warranted for higher-risk counterparties or jurisdictions);
- Record each holder's nationality, jurisdiction of incorporation, and any known affiliations;
- Screen each holder independently against all active OFAC programmes, not just the SDN List but also the Sectoral Sanctions Identifications List (the SSI List) and programme-specific restricted-party lists;
- Aggregate the interests of every blocked holder across the full tree.
Where ownership information is not publicly available, the assessment cannot stop at a note that records the gap. In our experience, an unexplained gap in the ownership chain of a counterparty in a higher-risk jurisdiction is itself a red flag requiring escalation, not a licence to proceed.
Step 3 – Apply the aggregation test and document your reasoning
Once the ownership map is complete, the aggregation calculation must be performed and documented in writing. Documentation matters because it is the primary evidence that a business exercised reasonable care if OFAC later reviews the transaction.
The calculation is straightforward in a simple structure: add the percentage interests held by all blocked persons, directly or through nominee arrangements, and compare the total to 50 percent. The structure becomes complex when intermediate entities are themselves partially blocked. In that scenario, OFAC's guidance applies a look-through: if a blocked person owns 60 percent of an intermediate entity, and that entity owns 40 percent of the target, the blocked person's effective interest in the target is 24 percent through that chain. That interest is aggregated with any direct or other indirect holdings.
This look-through analysis is where errors multiply. In a recent matter, a financial institution acting as a correspondent bank failed to apply the look-through to a two-tier holding structure. The ultimate blocked person's direct and indirect interests together exceeded the threshold. We assisted in scoping the apparent violation, advising on voluntary self-disclosure (VSD, a process by which a company discloses a potential violation to OFAC, generally treated as a mitigating factor in enforcement), and preparing the penalty defence. The matter resolved without a finding of a wilful violation, which was the practical objective.
Document not only the conclusion but the methodology: which sources were used, what information was requested and when, and what assumptions were made where data was incomplete. A well-documented assessment that reaches a wrong conclusion is in a materially better position than an undocumented one that happens to be correct.
How does the OFAC test differ from OFSI and EU ownership-and-control tests?
The OFAC 50 percent rule is a pure ownership test. The UK and EU regimes apply both an ownership and a control test, and that difference can determine whether a transaction is caught under one regime but not another.
Under the UK regime, OFSI applies ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person) analysis that encompasses both formal ownership of more than 50 percent of the shares or voting rights, and actual or potential control of the entity's activities or decisions. An entity owned 40 percent by a designated person might fall outside the OFAC threshold but still be caught by OFSI if the designated person controls board composition, management decisions, or key contracts.
The EU position mirrors this approach. EU Council regulations treat an entity as subject to the same prohibitions as a listed person where a listed person owns more than 50 percent of the entity, or where the listed person controls it through other means. The EU General Court has confirmed, in its review of listing and asset-freeze decisions, that control can be established through contractual arrangements, veto rights, and economic dependency even without majority ownership.
What this means for cross-border businesses is straightforward. A transaction cleared under the OFAC threshold may still be prohibited under OFSI or EU rules. The stricter prohibition governs. A business with UK or EU nexus – through counterparties, correspondent banks, group entities, or the currency of the transaction – must run the more demanding control analysis, not simply the OFAC ownership calculation. We regularly advise cross-border clients who discover mid-transaction that the UK or EU analysis captures a counterparty that the OFAC screen did not flag.
UN Security Council Consolidated List designations layer a further baseline obligation. Member states are required under Chapter VII to implement asset freezes for listed persons and entities. The UN list is generally less granular than the OFAC, OFSI, or EU lists, but it applies regardless of the national regime and cannot be waived by a member state's own licensing process.
Step 4 – Identify risk flags that require escalation or counsel
Not every ownership assessment reaches a clear answer from the documents. Certain fact patterns should trigger escalation to senior compliance management or specialist sanctions counsel before a transaction proceeds.
The risk flags we see most frequently in practice include:
- Gaps in the ownership tree – bearer shares, nominee structures, jurisdictions with limited corporate registry disclosure, or refusals to provide beneficial ownership information;
- Rapid changes in ownership – a counterparty that has changed controlling shareholders recently, particularly in a higher-risk jurisdiction, may have been restructured after a designation;
- Partial SDN match – a screening tool returns a potential match that is rated below the automatic-block threshold. A partial match requires human review, not automated clearance;
- Secondary-sanctions exposure – the transaction involves a non-US, non-SDN party that maintains significant business with a programme-restricted jurisdiction. OFAC's secondary-sanctions authority under IEEPA means that facilitating certain transactions can expose non-US businesses to the risk of US secondary measures even where the direct counterparty is not listed;
- SSI List designations – the counterparty is not on the SDN List but appears on the Sectoral Sanctions Identifications List, which restricts specific transaction types (debt, equity, and services) rather than blocking all dealings. The permitted and prohibited transaction categories under SSI restrictions require careful parsing;
- Ownership information that contradicts public sources – a counterparty's self-declared ownership differs from publicly available registry data, news sources, or prior onboarding information.
Any one of these flags warrants a pause. The position above covers the standard assessment. Your facts – the counterparty's jurisdiction, the nature of the goods or services, the currency of payment, the identity of the financing bank – can change the analysis materially.
For a confidential review of a specific counterparty or a transaction that has raised flags, contact Calder & Vance at info@caldervance.com.
Step 5 – Consider the cross-border dimension: extraterritoriality and secondary-sanctions risk
The OFAC regime reaches beyond US persons and US-incorporated entities. It applies to transactions that clear through the US financial system, to goods containing US-origin content above the applicable de minimis threshold, and – through secondary-sanctions authorities under IEEPA – to non-US persons who engage in defined categories of conduct with respect to sanctioned programmes.
This extraterritorial dimension is not a theoretical concern. In our cross-border practice, we regularly advise European and Asian businesses that have US-dollar correspondent banking relationships. A payment in US dollars routes through a US correspondent bank and is therefore subject to OFAC jurisdiction at the point of clearing. That is true whether or not the underlying transaction has any other US nexus. Has your compliance programme mapped which transactions clear through the US dollar system, and are those transactions subject to OFAC review as a result?
Secondary-sanctions risk is distinct from primary compliance. Under certain OFAC programmes, OFAC has authority to impose measures on non-US, non-blocked persons who facilitate significant transactions with designated persons or with programme-restricted jurisdictions. The threshold for "significant" is qualitative and fact-specific; it is not a fixed dollar amount. A non-US business that concludes that it has no primary OFAC obligation may still face US market access consequences if its conduct triggers a secondary-sanctions review. Qualifying this risk requires an analysis of the applicable programme, the nature of the transaction, and the business's exposure to the US financial system.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Write to us at info@caldervance.com to discuss the position.
Step 6 – Record-keeping, reporting obligations, and when to self-disclose
Once an assessment is complete, the records that supported it must be retained. OFAC requires that records relating to blocked or rejected transactions are kept for five years from the date of the transaction, and regulators expect that the full decision trail – not only the conclusion – is available on request.
Where a business identifies blocked property, OFAC's regulations require that the property be blocked and that a report be submitted to OFAC within a short statutory window. Separate annual reporting obligations apply to blocked property that remains frozen. These windows are short; the reporting obligation does not wait for the business to complete a fuller review. Identifying a probable blocking obligation is the trigger, not completing a definitive legal opinion.
VSD – voluntary self-disclosure – is the mechanism by which a business that has identified a potential violation proactively discloses to OFAC before an enforcement referral. OFAC's enforcement framework treats a genuine, timely VSD as a significant mitigating factor that can reduce a civil penalty substantially. The decision whether and how to self-disclose is among the most consequential a compliance team will make. It requires legal privilege, a properly scoped internal investigation, and careful preparation of the disclosure itself. We advise on all three elements.
The myth we hear most often at this stage is that VSD is appropriate only for large, wilful violations. In practice, OFAC's published enforcement framework applies its mitigating treatment broadly, and the failure to disclose a violation that OFAC later discovers independently is itself treated as an aggravating factor. The question is not whether the violation was wilful; it is whether the disclosure is timely, accurate, and well-documented.
Common mistakes in ownership and control assessments – and how to correct them
The most consequential error in practice is screening only the named counterparty and stopping there. OFAC's 50 percent rule operates through ownership chains, not through the identity of the entity with which the contract is signed. Businesses that run a single-entity screen, receive a clean result, and proceed have not completed an ownership assessment; they have completed a name check.
A second common failure is treating ownership data as static. Ownership structures change. A counterparty that was clean at onboarding can become blocked between onboarding and the tenth payment under a long-term supply agreement if one of its shareholders is listed during that period. Periodic rescreening is not a bureaucratic formality; it reflects the fact that OFAC can designate at any time, and the blocking obligation follows the designation, not the next scheduled review.
Third, businesses frequently underestimate the documentation burden. An assessment that concludes the counterparty is not blocked is only as strong as the evidence and reasoning behind it. Regulators reviewing an enforcement matter want to see what sources were consulted, what gaps existed, and what judgments were made in the face of incomplete information. A file that says "no match" without the underlying workings provides little protection.
Fourth – and this connects to the cross-border dimension – compliance teams sometimes apply the OFAC ownership test exclusively and assume that a clean OFAC result answers the question for UK and EU purposes. It does not. The control analysis under OFSI and EU rules is more expansive, and a business with UK or EU nexus must apply it separately.
Related practices
- Sanctions compliance audit and testing – identifying gaps in screening logic, ownership mapping, and programme design across regimes
- Ownership and control assessments: UK and EU comparison – how OFSI and EU rules diverge from the OFAC 50 percent threshold
- Secondary sanctions risk and non-US businesses – assessing OFAC extraterritorial exposure for businesses without a US presence