A cross-border payment that looked routine at the outset can stall the moment a counterparty, an intermediary bank, or a destination account flags against a Canadian sanctions list. The compliance officer asks: is a payment authorisation available? How long will it take? What happens if the firm pays first and applies later? As of June 2026, Global Affairs Canada (GAC, the authority that administers Canada's autonomous financial sanctions under the Special Economic Measures Act – "SEMA") processes a meaningful volume of payment-authorisation requests each year, and the procedural expectations are more demanding than many cross-border businesses anticipate.
Canada's payment authorisation regime allows a regulated person or entity to seek a case-by-case permit to conduct a financial transaction that would otherwise be prohibited under SEMA or a related thematic sanctions instrument. GAC assesses applications on the merits of the specific transaction, not on a general commercial-reasonableness standard. Authorisations are not guaranteed, processing timelines are not statutory, and the obligation to freeze and report does not pause while an application is pending.
This guide walks through the legal basis, the step-by-step procedure, the most consequential risk flags, and where Canada sits relative to the OFAC, OFSI, and EU positions – so that a compliance officer or general counsel can decide quickly whether to apply and how to present the strongest possible case.
Step 1: Establish whether a prohibition actually applies
The first step is to confirm that the payment is genuinely prohibited, not merely uncomfortable. Canada's sanctions instruments under SEMA prohibit dealings in property – including payments – connected to designated persons. A payment authorisation is relevant only when the prohibition is engaged.
This sounds obvious, but in our experience a significant proportion of authorisation queries arrive before anyone has confirmed the legal basis. A counterparty appearing on a third-country list, or matching a name on an internal watchlist, does not automatically engage a Canadian prohibition. Confirm the designation against the Consolidated Canadian Autonomous Sanctions List, the UN Consolidated List as incorporated by Canadian instrument, and the relevant thematic SEMA regulations. If the counterparty, the account holder, or the intermediary bank is not on the applicable list, the payment may proceed subject to ordinary due diligence. If the match is confirmed, move to Step 2.
One practical complication: ownership and control (the test for whether a non-listed entity is treated as caught because a listed person owns or controls it) operates in Canada as a facts-and-circumstances analysis. Unlike the mechanical 50 percent or more aggregate rule under OFAC, GAC applies a broader control test that can extend a prohibition to entities a listed person directs without majority ownership. Mapping the ownership and control chain before submitting an authorisation request is essential; an incomplete map can produce a permission that still leaves residual exposure.
Step 2: Identify the correct authorisation instrument and authority
GAC administers the permit regime under SEMA through its Sanctions Policy and Operations Division. Each set of thematic sanctions regulations – the instruments that implement Canada's autonomous measures – may contain its own permit or authorisation provision. The scope of what can be authorised varies by instrument.
Some thematic regulations permit GAC to authorise dealings in property that would otherwise be prohibited, provided the Minister is satisfied the authorisation is not contrary to the object of the relevant sanctions instrument. Others carry narrower bases, such as humanitarian or consular grounds. Confirming which instrument applies, and which authorisation basis it carries, is a threshold exercise that precedes any drafting. Submitting a request under the wrong instrument, or under a basis the instrument does not contain, draws a rejection that is difficult to overcome and may telegraph a compliance weakness to the regulator.
A parallel question is whether the UN Security Council provides a carve-out or a licence route for the same transaction. Canada implements all binding UN Security Council resolutions through the United Nations Act. Where the relevant UN sanctions committee offers a humanitarian or other exemption, it may be necessary to secure that committee approval before, or concurrently with, a SEMA authorisation – or the SEMA application may need to reference the UN route to show it is not inconsistent with the multilateral measure.
The position above covers the standard case. Your facts – the counterparty, the payment route, the instrument in play, and any UN overlap – change the analysis materially. For an initial view on which authorisation basis is available, contact Calder & Vance at info@caldervance.com.
Step 3: Freeze, report, and manage the account before and during the application
The obligation to freeze property connected to a designated person arises immediately on designation and does not pause while an authorisation application is pending. This is a critical distinction from the mental model some businesses carry.
Under SEMA, persons in Canada and Canadians abroad must freeze property they hold or control that belongs to, or is held for the benefit of, a designated person. A reporting obligation to GAC accompanies the freeze in most thematic instruments. The obligation to report is not contingent on an authorisation being sought or granted.
In practical terms, this means a payment that was in transit when a designation occurred may need to be pulled back, held, and reported before any authorisation process begins. Processing systems that auto-execute on settlement day introduce particular risk here. We regularly advise financial institutions and corporates on the immediate operational steps when a freeze obligation crystallises mid-transaction – the sequencing of freeze, report, and authorisation request matters to how GAC assesses the application.
Record-keeping is also live from the moment of the freeze. GAC expects documentary evidence of the date, the value, and the basis of the freeze as part of any subsequent authorisation dossier. Businesses that cannot reconstruct that sequence face a harder application. Keep records for at least as long as your jurisdiction's general commercial record-keeping period and, where an investigation is live or reasonably foreseeable, indefinitely.
If a transaction has already been flagged, or a payment has been frozen and not yet reported, an early review can preserve options that narrow with time. Contact us at info@caldervance.com.
How does Canada's payment authorisation procedure compare with OFAC, OFSI, and the EU?
Canada's system is substantively similar to the specific-licence model under OFAC, but several procedural and substantive differences change the practical experience for a business operating across multiple regimes.
Under OFAC's specific-licence (a case-by-case authorisation from the US Office of Foreign Assets Control), an applicant submits a written request to OFAC explaining the transaction, its parties, and the applicable policy basis. OFAC publishes general guidance on policy considerations and, in some programmes, general licences that authorise categories of transactions without individual applications. Canada does not operate a published general-licence mechanism comparable to OFAC's; each payment authorisation under SEMA is case-by-case unless the relevant thematic regulation contains a built-in exemption.
The UK's OFSI operates a specific licence (a case-by-case authorisation from the Office of Financial Sanctions Implementation) regime. OFSI publishes licence categories and grounds – for example, legal fees, basic expenses, and prior obligations – that provide structured bases for applications. Canada's instrument-by-instrument approach means there is no single published list of authorisation grounds; each thematic regulation must be read on its own terms. That said, humanitarian purposes and maintenance of the minimum necessary for daily living are commonly available bases across Canadian instruments.
Under EU Council regulations, derogations from financial-sanctions prohibitions are administered by the competent authority of each Member State, not by a central EU body. A business seeking authorisation in Germany, France, and the Netherlands for the same transaction may need to apply to three different competent authorities. Canada, by contrast, operates a single federal authority in GAC, which simplifies the routing question even if it does not simplify the substantive analysis.
One divergence that frequently catches multi-regime businesses: Canada's control test for non-listed entities is broader in scope than OFAC's mechanical ownership rule, though it is roughly aligned with the OFSI and EU approaches. A payment that OFAC would treat as permissible because a listed person's ownership sits below fifty percent may still be prohibited under SEMA if GAC would characterise that person as controlling the payee. Cross-regime mapping is not optional on these facts.
What are the most significant risk flags in a payment authorisation application?
Several patterns reliably increase the risk of a refusal, a delay, or a regulatory inquiry. Knowing them before drafting is more valuable than knowing them after a rejection.
The first is an incomplete ownership and control map. GAC will ask about beneficial ownership as part of the application assessment. If the applicant submits a partial structure chart and GAC identifies a layer that has been omitted – even through inadvertence – the application is unlikely to succeed and the omission itself may become a compliance concern. Map every layer before filing.
The second is a failure to demonstrate a genuine commercial or humanitarian purpose. Authorisations are not available merely because a transaction is financially convenient. The applicant must articulate why the transaction falls within an authorisation basis the relevant regulation supports. A generic commercial rationale without a specific legal hook will be rejected.
The third is submitting after the payment has already been made. An after-the-fact authorisation request signals either that the applicant was unaware of the prohibition – a compliance weakness – or that it proceeded in the expectation of obtaining permission retrospectively. GAC does not offer a retrospective authorisation that cleanses an already completed prohibited transaction. If a payment has been made that should not have been, the question shifts from authorisation to disclosure and enforcement risk.
The fourth, which we observe with particular frequency in the financial-institution context, is reliance on a third country's authorisation as a substitute for a Canadian one. An OFAC general licence, an OFSI licence, or an EU Member State derogation does not authorise the same transaction under Canadian law. Each regime is self-contained. Where a Canadian person – including a Canadian bank, a Canadian branch, or a Canadian-incorporated subsidiary – is party to the transaction, a Canadian authorisation is required independently of what other regimes have permitted.
A fifth risk flag is inadequate documentation of the counterparty and end-use. GAC expects the applicant to evidence who is receiving the funds, for what purpose, and how they will be used. Vague end-use descriptions or counterparty chains that terminate in opaque structures are red flags that will generate requests for further information and may produce a refusal.
How Calder & Vance assists with Canada payment authorisations
Our sanctions practice covers all major regimes, including Canada, from a single team. We do not route Canada matters to affiliated firms or local correspondents for the substantive legal analysis; the work is handled in-house by advisers with hands-on experience of the SEMA authorisation process.
For payment authorisation matters, we assess eligibility, prepare and submit the authorisation request, and manage GAC's queries through to determination. Where the transaction also engages OFAC, OFSI, or EU rules, we run the cross-regime analysis concurrently. In our cross-border practice, the most valuable work often happens before filing: stress-testing the ownership and control map, confirming the authorisation basis, and structuring the application dossier so that it answers GAC's likely questions before they are asked.
For a business that has already frozen an account or held a payment and is now managing the reporting and authorisation process simultaneously, we assist with the sequencing: freeze confirmation, reporting to GAC, and the authorisation dossier, together with parallel disclosures where another regime is also engaged.
A recent matter illustrates the pattern we see most often. A financial-services firm identified a match against the Canadian autonomous sanctions list for a standing payment instruction to a corporate counterparty. The firm had frozen the pending payment but was uncertain whether a reporting obligation had been triggered and whether an authorisation was even available given the instrument in play. We mapped the ownership and control chain, confirmed the legal basis for the authorisation, prepared the submission, and co-ordinated the reporting obligation. The matter was resolved in an ordered way without enforcement escalation. That outcome cannot be guaranteed in any case – but early, structured action is consistently associated with better results.
Does your compliance programme address the specific Canadian authorisation pathway, or does it treat Canada as a residual item once OFAC and EU steps have been taken? In our experience, that gap is the most common source of Canadian sanctions exposure for multi-regime businesses.
Common myth: a Canadian authorisation is the same process as an OFAC licence
Many compliance teams approach their first Canadian authorisation by analogy with OFAC. The OFAC specific-licence process is familiar; the OFAC website publishes guidance on policy bases; OFAC general licences handle a wide range of recurring situations. The assumption is that Canada works roughly the same way.
It does not, in three important respects. First, there is no published general-licence mechanism in the SEMA system to cover recurring categories of transaction. Each payment authorisation is assessed individually. Second, the authorisation basis is contained in each thematic regulation separately; there is no single SEMA-wide licensing guide that lists all available grounds. Third, the control test that determines whether a non-listed entity is caught is broader than OFAC's mechanical ownership rule. A business that has obtained an OFAC general licence covering a transaction type should not assume that licence provides any comfort under Canadian law for the Canadian nexus of the same transaction.
Treating Canada as a straightforward OFAC analogue is the single most common compliance gap we encounter in multi-regime financial-crime programmes. The regimes share the same policy goals, but the procedural and substantive differences are consequential enough to require independent legal analysis for each Canadian-nexus payment.
Related practices
- Frozen account management (BIS / EAR) – managing US export-control freezes and account-hold obligations
- Payment authorisations under Canada: advanced scenarios – complex ownership structures and multi-regime payment holds
- Cross-border payment authorisation guide – comparing OFAC, OFSI, EU, and Canada authorisation procedures