Calder & Vance International Sanctions & Compliance Counsel

Licensing & Authorizations · Canada

Payment authorisations under Canada: what businesses must know

A Canadian freight forwarder arranges settlement of a logistics invoice. The beneficiary's parent company sits on a Government of Canada consolidated list. The payment processor flags the transfer. Does a permit exist? Who applies? How long does it take? The answers determine whether the deal closes or the relationship ends.

Payment authorisations under Canada's sanctions regime are governed by the Special Economic Measures Act ("SEMA") and administered by Global Affairs Canada ("GAC"), the federal department responsible for sanctions licensing. A business that needs to make or receive a restricted payment must obtain a specific permit from GAC before the funds move. No blanket general authorisation applies to most commercial transactions; the permit requirement is case-by-case and fact-specific. As of June 2026, the Canadian regime applies across all major country-specific and thematic programmes administered under SEMA and, separately, under the United Nations Act for UN-mandated measures.

This guide walks through the governing authority, the permit procedure, the cross-regime comparison a cross-border business needs, the risk flags that cause applications to fail, and the point at which legal counsel becomes indispensable.

Step 1 – Understand the governing authority and legal basis

Canada's payment authorisation regime sits under SEMA, administered by GAC's Sanctions Bureau, which is the sole authority for issuing permits in respect of country-specific economic measures. Where the measure originates from a UN Security Council resolution, the United Nations Act provides a parallel and sometimes overlapping basis; the licensing authority for UN-mandated measures may also run through GAC, but the legal instrument differs and the applicable restrictions are set by reference to the UN Consolidated List rather than by a domestic GAC list alone.

Understanding which instrument applies to your particular transaction is the first analytical step. A payment caught under a country-specific SEMA regulation differs from one caught under a UN-Act order in terms of the prohibitions in scope, the permit conditions, and the penalties for breach. In our cross-border practice, the most common early error is treating all Canadian sanctions as a single undifferentiated block. They are not.

GAC publishes consolidated lists of designated persons and entities. A payment is ordinarily restricted when it is made to, for the benefit of, or on behalf of a listed person, or when it involves property owned or controlled by a listed person. The ownership and control test under the Canadian regime requires assessment of both direct and indirect interests; a payment routed through an intermediary that is itself owned or controlled by a listed person is caught.

The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. For an initial assessment of whether your payment requires a Canadian permit, contact Calder & Vance at info@caldervance.com.

Step 2 – Determine whether the payment is in fact restricted

Not every payment that touches a sanctioned country or a counterparty with listed shareholders is automatically restricted; the prohibition follows the property and the person, not the geography alone. Before seeking a permit, a business must determine whether the payment is caught by the applicable prohibitions.

The core questions are four. First, is the direct recipient a listed person under the applicable SEMA regulation or UN-Act order? Second, is the direct recipient an entity owned or controlled by a listed person, even if itself unlisted? Third, does the payment indirectly benefit a listed person – for example, by discharging a debt owed by the payer to a third party who in turn owes funds to a listed person? Fourth, does the payment involve property that is itself frozen or blocked under the regime?

If the answer to any of these questions is yes, the payment is presumptively restricted and a permit is required before it can lawfully proceed. If the answer is no on all four, the payment may proceed without a permit – but a record of that assessment should be retained, because GAC expects businesses to document their screening decisions. Undocumented reliance on a self-assessment is a risk flag if the position is later challenged.

There is also a category that practitioners refer to as "close questions" – situations where ownership or control is unclear because intermediate structures obscure the beneficial interest. These require a formal ownership and control analysis before the payment can be treated as unrestricted. We regularly advise on exactly these cases, and the analysis is not always quick.

Step 3 – Prepare and submit the permit application to GAC

A Canadian sanctions permit application is made directly to GAC's Sanctions Bureau; there is no pre-application or eligibility screening stage, unlike some other regimes. The application must set out the identity of the parties, the nature and value of the payment, the legal basis for the restriction, and the grounds on which the permit is sought.

GAC will consider permit applications on a case-by-case basis. Grounds for a permit can include, among others: humanitarian purposes, the protection of Canadian persons, the wind-down of a pre-existing contract, or the furtherance of a policy objective consistent with the overarching sanctions programme. There is no exhaustive published list of grounds; the analysis turns on the specific regulation and the facts of the transaction.

The application package should, as a minimum, include:

  • A clear description of the transaction, including payment amount, currency, and route.
  • Full corporate information on each party – the applicant, the counterparty, and any relevant intermediary.
  • A legal analysis mapping the restriction to the applicable instrument.
  • A statement of the grounds on which the permit is sought, supported by documentary evidence.
  • Details of any parallel authorisation sought from a foreign authority (see the cross-regime section below).

Processing times are not prescribed by statute and vary by programme and complexity. In our experience, straightforward applications under well-established programmes can be resolved within weeks; applications raising novel questions or involving complex ownership structures can take considerably longer. GAC may request additional information, which restarts the practical clock. Build significant lead time into any transaction that requires a permit.

If a transaction has already been flagged by a payment processor, or a filing has been refused, an early review can preserve options that narrow with time. Contact our team at info@caldervance.com for a confidential review.

How does Canada's permit process compare with OFAC, OFSI, and the EU?

Canada's permit regime is more discretionary and less procedurally codified than the US OFAC licensing process, but more centralised than the EU system, which distributes licensing authority across member states. Each of these differences has practical consequences for a business operating across multiple jurisdictions.

United States – OFAC: OFAC issues both specific licences (case-by-case authorisations) and general licences (standing authorisations covering defined categories of transactions). The US system is the most extensively documented, with publicly available guidance on application procedures, processing timelines, and frequently issued licence types. Where a general licence covers the transaction, no application is needed. Canada has no comparable general-licence infrastructure for most payment scenarios; the default is a specific permit, every time.

United Kingdom – OFSI: OFSI administers financial-sanctions licensing under the Sanctions and Anti-Money Laundering Act ("SAMLA") and issues licences against published licence grounds. The licence grounds under OFSI are statutory and listed in the relevant thematic regulations, which differs from Canada's more open-ended discretion. OFSI also maintains a reporting obligation: a person who knows or suspects that a counterparty is a designated person must report to OFSI. Canada's SEMA includes a disclosure obligation with different triggers, and the two should not be conflated in a cross-border compliance programme.

European Union: EU sanctions licensing is administered by the competent authority of the member state in which the applicant is established, applying a framework set by the relevant Council Regulation. This decentralised model means that the same transaction can attract different outcomes in different member states, depending on national practice and interpretation. The EU regime also applies an ownership and control test to catch non-listed entities controlled by listed persons, which broadly tracks the Canadian position – but the precise thresholds and the method of aggregation differ between regimes, and a transaction that is permittable in one regime may not be in another.

The practical lesson: where a single payment touches two or more of these regimes – for example, a Canadian exporter using a US-dollar correspondent payment to a European beneficiary – each regime must be assessed independently. The most restrictive prohibition governs in practice; a permit from GAC does not authorise the same payment under OFAC, and vice versa. We have acted for businesses that secured a Canadian permit only to discover that a US-dollar clearing bank declined the payment on OFAC grounds. Cross-regime co-ordination is not optional; it is the work.

What are the risk flags that cause permit applications to fail or stall?

GAC permit applications fail or are delayed for identifiable, avoidable reasons. Understanding these failure modes is more useful than knowing only the procedure, because the preparation phase is where outcomes are made or lost.

Inadequate ownership analysis. An application that asserts the payment is for an unlisted counterparty, without conducting a full ownership and control review of that counterparty's corporate structure, is vulnerable. GAC will ask. If the underlying ownership chain was not traced, the application is deficient.

Incomplete documentation is a related problem. Applications that lack corporate registry extracts, beneficial-ownership confirmation, or evidence of the contractual basis for the payment regularly attract information requests that add weeks or months to the process.

Misidentified legal basis. Applying under the wrong regulation – for example, under a country-specific SEMA programme when the relevant designation is under a UN-Act order, or vice versa – produces a procedurally defective application. The authority must be correctly identified before the permit ground can be properly argued.

No cross-regime assessment. An application that does not address whether the same payment requires parallel authorisation from a foreign authority (OFAC, OFSI, an EU competent authority) signals to GAC that the applicant has not fully understood the transaction. It does not, strictly, render the Canadian application defective on its own terms; but it is a marker of incomplete preparation, and it creates the separate risk that a Canadian permit is issued while the payment remains blocked elsewhere.

Finally, timing. A permit application submitted after funds have been frozen, or after a payment has already been attempted, is not impossible – but it is materially harder. GAC's discretion does not disappear, but the applicant must now explain what happened and why the permit was not sought in advance. In our experience, this explanation substantially complicates the application.

When should a business involve sanctions counsel?

Early involvement of qualified counsel materially improves both the speed and the outcome of a permit application. The question practitioners are asked most often is: at what point does it become necessary?

A business should involve counsel when any one of the following is true. The counterparty is listed, or there is a reasonable basis to suspect it is owned or controlled by a listed person. The transaction involves a jurisdiction subject to broad SEMA measures. The payment is in US dollars and therefore routes through a US correspondent, creating parallel OFAC exposure. The counterparty has been added to a list after the contract was signed, and the business needs to know whether and how the pre-existing contract can be wound down. A payment processor or correspondent bank has declined or held the transaction. Or an enforcement action or voluntary self-disclosure (VSD – a proactive report to the regulator of a potential violation) is under consideration.

Is it worth applying for a permit without legal support? In simple cases, yes – a business with well-documented facts, a clear permit ground, and prior experience of the GAC process can navigate a straightforward application. But where the ownership chain is complex, the permit ground is unclear, the transaction is high-value, or a cross-regime analysis is needed, specialist input is cost-effective against the alternative of a delay, a refusal, or an enforcement inquiry.

The AUDIENCE_MYTH worth addressing here is the belief that a sanctions permit from any authority provides a safe harbour across all regimes. It does not. A Canadian permit covers the Canadian prohibition. It has no legal effect on OFAC, OFSI, or an EU member state competent authority. A business that proceeds on the basis of one permit while ignoring a parallel restriction elsewhere has not managed its risk; it has only partially addressed it.

Record-keeping, reporting, and post-permit obligations

Obtaining a permit is not the end of the compliance obligation. SEMA regulations impose record-keeping requirements on persons who deal with property under a sanctions programme, and a permit adds its own conditions. Permit conditions are set by GAC on a case-by-case basis and may include requirements to report the completion of the transaction, to retain specified documentation, and to notify GAC of any material change in the facts underlying the application.

Businesses operating under a Canadian permit should maintain a compliance record that covers: the permit itself; the application and all supporting documents; all correspondence with GAC during the application and post-issuance; records of the transaction as executed; and evidence of compliance with each permit condition. These records may be required by GAC on request and would be the first documents sought in the event of an enforcement inquiry.

The disclosure obligation under SEMA – which requires persons to disclose to GAC that they hold or control property that belongs to or is held for the benefit of a designated person – applies independently of the permit process and is not extinguished by a permit application. A business that discovers, mid-transaction, that a counterparty is designated must consider its disclosure obligations immediately, before the payment proceeds.

Cross-border record-keeping adds a layer of complexity. If the same transaction also falls under OFAC, OFSI, or an EU programme, each regime may impose its own record-keeping obligation with its own retention period. Aligning those obligations into a single, coherent documentation regime is part of what a properly designed compliance programme does. We regularly advise compliance teams on exactly this integration challenge.

Related practices

Frequently asked questions

What are the steps to authorise a restricted payment under Canada?
To authorise a restricted payment under Canada's SEMA regime, a business must: (1) confirm that the payment is in fact caught by the applicable SEMA regulation or UN Act order; (2) identify the correct permit grounds; (3) assemble a complete application package, including ownership analysis, transaction documentation, and the legal basis; (4) submit the application to GAC's Sanctions Bureau; and (5) await a decision, responding promptly to any request for additional information. No payment should be made before the permit issues. Cross-regime clearance from OFAC, OFSI, or an EU authority may also be required depending on the payment route and the currency.
What is the most common mistake in payment authorisations?
The most common mistake is proceeding with a payment on the basis of an incomplete ownership and control analysis – typically because screening identified no direct match but the underlying corporate structure was not traced. A non-listed entity that is owned or controlled by a listed person is itself caught under SEMA. Failing to identify this exposes the business to an unsupported payment, which may constitute a violation even where no deliberate breach was intended. Documenting the ownership-chain review before the payment moves is the most effective safeguard.
How does Canada differ from other regimes here?
Canada's SEMA permit regime is more discretionary and less procedurally standardised than OFAC's licensing system, which publishes detailed guidance and issues general licences covering common transaction types. Unlike the EU, Canada does not distribute licensing authority across sub-national authorities; all SEMA permits issue from GAC centrally. Unlike OFSI, Canada's permit grounds are not exhaustively enumerated in statute, giving GAC broader discretion but also making outcomes harder to predict. A permit from GAC has no legal effect in any other jurisdiction; parallel clearance is required where the payment also touches a US, UK, or EU prohibition.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.