A UK-incorporated payments business routes a settlement through its correspondent bank. The receiving account belongs to a company whose majority shareholder was designated last quarter under the applicable UK thematic sanctions regulations. The correspondent flags the payment. Operations calls compliance. Compliance calls legal. What happens next – and how quickly it must happen – is determined entirely by OFSI's authorisation regime.
Payment authorisations under OFSI are specific or general licences issued by the UK Office of Financial Sanctions Implementation permitting transactions that would otherwise breach financial-sanctions prohibitions. Without an authorisation, processing, arranging, or facilitating such a payment exposes the payer, the bank, and any intermediary to civil monetary penalties and, in serious cases, criminal prosecution. As of June 2026, OFSI's licensing grounds are set out in the relevant thematic sanctions regulations made under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA), the UK's primary sanctions legislation.
This guide walks through the governing legal basis, the procedure for seeking an authorisation, the ownership and control test that determines whether a payment is caught in the first place, the cross-border dimension, and the risk flags that most commonly derail an application.
What legal basis governs OFSI payment authorisations?
OFSI derives its authority to grant payment authorisations from SAMLA and the regime-specific regulations made under it. Each set of thematic regulations contains its own schedule of licensing grounds; the grounds available for a given payment depend on which regime has captured the counterparty or the transaction.
The principal licensing grounds relevant to payment flows include: basic needs (reasonable living expenses and subsistence costs for a designated natural person), legal fees and legal services costs incurred by the designated person, maintenance of frozen accounts to preserve their value, extraordinary expenses permitted on humanitarian or other specific grounds, and transaction-specific grounds where OFSI is satisfied that the purpose is consistent with policy objectives. The grounds are exhaustive within each statutory instrument, not illustrative. A payment that does not fit within a stated ground cannot be authorised under that instrument, regardless of its apparent reasonableness.
OFSI distinguishes between a general licence (a standing authorisation permitting a defined class of transactions without a separate application) and a specific licence (a case-by-case authorisation for a particular payment or series of payments). General licences are published on GOV.UK and must be read carefully – their conditions, monetary caps, and reporting obligations are typically stringent. In our experience, firms rely on general licences without reading the conditions in full, and that misapplication itself constitutes a breach.
The position above describes the standard case. Your facts – the designated counterparty, the payment currency, the route through correspondent banks, the regime in play – change the analysis materially. For an initial assessment of whether your payment falls within a licensing ground, contact Calder & Vance at info@caldervance.com.
Does the ownership and control test catch the payment?
Ownership and control – the UK test for whether a non-listed entity is caught through a designated person's interest in it – is the threshold question before any authorisation analysis begins. If the counterparty or the account-holder is not itself designated and is not owned or controlled by a designated person, no authorisation is required at all.
Under UK sanctions law, a company is treated as owned by a designated person where that person holds, directly or indirectly, more than 50 percent of the shares or voting rights, or has the right to appoint or remove the majority of its board. Control is a separate and broader limb: a designated person may control an entity through contractual rights, practical dominance, or rights over assets, even where no ownership threshold is crossed. This matters because it means the UK test is not purely mechanical in the way OFAC's ownership rule operates.
Consider how this compares with the US position. Under OFAC's 50 percent rule, an entity is blocked when blocked persons own it 50 percent or more in the aggregate. The rule is binary and does not require a control analysis. Under OFSI and under EU Council regulations, the control limb extends the reach beyond the ownership threshold and introduces a qualitative judgement call. A payment that is clearly permissible under the OFAC ownership test may still require an OFSI authorisation if a UK-regulated bank is in the chain and the EU or UK control test is engaged.
Before applying for an authorisation, therefore, the first task is a mapped ownership and control analysis of the payee and every intermediate entity. Missing a two-step indirect holding is the single most common reason a payment authorisation process starts too late.
How do you apply for an OFSI specific licence step by step?
An OFSI specific-licence application follows a defined procedural sequence. Each step must be completed before the next is meaningful, and the process cannot be rushed simply by submitting an application before the facts are fully documented.
- Confirm the applicable regime and the relevant licensing grounds. Identify which thematic regulations govern the designated person. Check which grounds are available under those regulations. If none fits, there is no route to a specific licence and the payment cannot proceed. Do not begin the application until this step is complete.
- Map the ownership and control chain. Produce a verified ownership chart showing every intermediate holding between the designated person and the counterparty account. The chart must be supported by corporate registry extracts or other documentary evidence. OFSI will ask for this material; submitting it up front shortens the process.
- Gather supporting documents. The documents required vary by licensing ground. A basic-needs application for an individual requires evidence of living costs and income sources. A legal-fees application requires a fee estimate from the relevant legal adviser. An extraordinary-expenses application requires a full factual narrative. Prepare all documents before submitting.
- Submit the application through OFSI's online portal. The application form asks for: the identity of the designated person and the counterparty; the licensing ground relied upon; the amount and currency; the proposed payment route; and supporting documentation. Incomplete applications are returned without being considered on the merits.
- Respond to OFSI's queries promptly. OFSI frequently raises questions during review. In our practice, delays at this stage – particularly where queries go unanswered for several weeks – extend the overall process significantly. Designate a single point of contact with authority to respond and access to the file.
- Receive the licence and comply with its conditions. A licence is not a blank cheque. It will specify the permitted amount, the parties, the payment route, and the reporting obligations. Comply with every condition. A payment that exceeds the licensed amount, or that is routed through an unlicensed intermediary, is not covered.
- Report and retain records. OFSI's reporting obligations require the licence holder to notify OFSI once the licensed transaction is completed. Record-keeping obligations under SAMLA and the applicable thematic regulations require firms to retain all relevant documents for a prescribed period. Verify the current retention period before relying on any figure, as it can differ between regimes.
Processing times are not fixed in the statute and vary by case complexity and OFSI's current workload. Urgent applications can be flagged as such; OFSI gives priority to payments that are time-critical for humanitarian or legal reasons. That said, urgency does not guarantee a short turnaround. Build authorisation lead times into transaction timelines rather than assuming a rapid outcome.
How does OFSI compare with other payment-authorisation regimes?
Cross-border payment flows rarely engage a single regime. A sterling payment routed through a UK correspondent, touching a US dollar leg, and ending at a beneficiary in a jurisdiction with its own autonomous sanctions regime, may engage OFSI, OFAC, and a third authority simultaneously. Where two prohibitions overlap, the stricter prohibition governs, and a licence from one authority does not authorise the transaction under another.
The table of thought below maps the principal divergences a compliance team encounters.
OFAC (US). OFAC licensing is governed by the relevant programme regulations under IEEPA. Applications are submitted to OFAC's Licensing Division. The standard processing time for specific licences is not fixed and has historically varied considerably; an urgent basis can be asserted. OFAC distinguishes between specific licences and general licences as OFSI does, but the grounds are programme-specific and differ materially across OFAC's programmes. Secondary-sanctions risk under certain OFAC programmes extends reach to non-US persons who facilitate transactions with designated persons – a dimension OFSI does not replicate directly.
EU Council regulation regime. EU sanctions prohibitions apply to EU persons, EU-incorporated entities, and transactions within EU territory. Authorisations are granted by the competent authority of the relevant member state, not centrally by the Council. Each member state designates its own authority. Divergence in practice between member states – notably on processing time and documentary requirements – is real and should be anticipated. Where a payment is caught by both OFSI and an EU regime simultaneously (as it may be for a UK–EU cross-border flow), both authorisations are required independently.
SECO (Switzerland). Switzerland maintains autonomous sanctions ordinances administered by SECO. The Swiss regime broadly tracks the EU framework but is not identical to it. For a payment that passes through a Swiss correspondent or involves a Swiss-regulated institution, a SECO authorisation may be required in addition to an OFSI licence. For a fuller comparison of the Swiss process, our guide on payment authorisations under SECO sets out the procedural requirements in detail.
Singapore (MAS). The Monetary Authority of Singapore administers Singapore's autonomous sanctions regime, which is distinct from the UN-derived obligations. Singapore-regulated institutions handling payments with a sanctions dimension require separate MAS authorisation. The procedural steps and grounds differ from OFSI. Our guide on payment authorisations under Singapore's MAS regime covers this in full.
If a transaction has already been flagged by a correspondent, or a payment has been refused by an intermediary pending a licensing decision, acting early preserves the options that narrow with delay. For an urgent cross-regime assessment, contact Calder & Vance at info@caldervance.com.
What are the common risk flags in OFSI payment authorisation practice?
Most authorisation problems are foreseeable. The risk flags below appear regularly in the matters we handle, and each is addressable before it becomes an enforcement issue.
Relying on a general licence without reading the conditions. General licences carry monetary limits, permitted-parties lists, and mandatory-reporting requirements. A payment that exceeds the cap, or that is made by an entity not listed as an authorised person under the licence, is unlicensed. We regularly advise firms that have processed payments in good faith under a general licence that did not in fact cover them.
Applying for the wrong licensing ground. Where a firm identifies a broadly fitting ground – say, extraordinary expenses – but the facts actually describe a basic-needs payment, OFSI may decline the application on the ground pleaded and require a fresh application. This adds weeks. Read the statutory definition of the ground, not just its label.
Starting the application too late. Correspondent banks will not process a payment pending a licence decision. If a payment has a contractual settlement deadline, starting the application after the deadline has been missed means the harm has already occurred. Map the authorisation process into the transaction timeline at term-sheet stage.
Inadequate ownership mapping. OFSI will not issue a licence where it cannot be satisfied that the designated person's interest has been properly identified. Submitting an application with an incomplete ownership chart, or one that omits an intermediate holding company, prolongs the process and can lead to refusal.
Failing to report once the licensed payment is made. A licence does not discharge all obligations. The reporting step is mandatory. Firms that process the payment and then file nothing have complied with only part of their obligation.
Assuming the licence covers correspondent banks. A licence granted to the payer does not automatically permit a correspondent bank to process the payment. UK-regulated banks should check whether they are named in the licence or whether they need separate cover under a general licence or their own specific licence application.
Assuming a prior licence remains valid after a regulatory change. OFSI may revoke or amend a licence. Thematic regulations are amended periodically. A licence that was valid when issued should be checked against the current regulatory position before each use, particularly where a standing licence is being used for a recurring payment series.
Common misconceptions about OFSI authorisations
A persistent myth in compliance practice is that OFSI authorisations are effectively formalities – that a well-drafted application will always succeed if the payment is commercially reasonable and the parties are not high-risk. This is incorrect.
OFSI has a statutory discretion. The existence of a licensing ground does not compel OFSI to grant the licence. OFSI weighs the evidence, the policy purpose of the relevant regime, the identity of the parties, and the use to which the authorised funds will be put. Applications are refused where OFSI is not satisfied on the evidence, where the designated person's ultimate benefit cannot be excluded, or where the facts disclose a concern not addressed in the application. In our cross-border practice, we have managed applications where an initial refusal was followed by a successful resubmission once the evidential gap was identified and addressed. The point is that authorisation is not a box-ticking exercise; it is a substantive regulatory decision.
A second misconception is that a payment authorisation under OFSI is sufficient to clear a multi-regime transaction. It is not. Where the same payment engages OFAC or an EU member-state competent authority, separate authorisations are required. The OFSI licence does not speak to those regimes and does not provide cover for US-person involvement or euro-clearing through an EU institution.
Related practices
- Frozen account management and BIS/EAR licensing – managing blocked assets and applying for US export and financial-sanctions authorisations
- Payment authorisations under SECO – procedural guide to obtaining a Swiss authorisation for a restricted payment