A trading company in Singapore signs a re-export agreement for specialised components. The end buyer is in a third country. The goods originated in the United States. No one on the compliance team considers OFAC. Six months later, a correspondent bank flags the payment. The deal, the relationship, and potentially the company's access to the US financial system are now at risk.
OFAC's jurisdiction does not stop at the US border. Under the authority of IEEPA and related statutes, OFAC asserts extraterritorial reach over any transaction that touches US-origin goods, US-origin technology, US persons, or the US financial system – wherever in the world that transaction occurs. A re-export of US-origin goods through a third country does not extinguish the US sanctions obligation; it often intensifies it.
This guide walks through the extraterritoriality analysis step by step: who is caught, what triggers the obligation, how the test compares with the UK and EU positions, and where the risk concentrates for cross-border businesses. As of May 2026, OFAC's enforcement posture on third-country re-exports remains one of the most operationally significant areas of sanctions compliance for non-US businesses.
Step 1 – Who is subject to OFAC jurisdiction?
OFAC's jurisdiction over re-exports turns on four independent nexus grounds, any one of which is sufficient to create an obligation under the applicable OFAC programme regulations.
The first ground is US-person nexus. Any US citizen, permanent resident, US-incorporated entity, or any person physically present in the United States is a US person (the category of persons directly subject to OFAC's primary-sanctions prohibitions). A US-person employee involved in any step of a re-export transaction – approving a quote, routing a payment instruction, forwarding a technical document – subjects that transaction to OFAC.
The second ground is the US financial system. Transactions that clear in US dollars typically route through a US correspondent bank. That routing makes a US financial institution a participant in the transaction. OFAC's regulations prohibit US financial institutions from processing payments that benefit sanctioned parties or sanctioned programmes. In our practice, this is the nexus ground that most frequently surprises non-US businesses: a payment denominated in US dollars between two non-US parties, for non-US goods, can still trigger OFAC exposure.
The third ground is US-origin goods and technology. The EAR (the Export Administration Regulations administered by BIS) contains its own re-export controls, but OFAC operates independently of BIS. Where US-origin goods are re-exported to a sanctioned person, a sanctioned territory, or an entity in which a blocked person holds a 50 percent or more interest – the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) – OFAC's prohibition applies regardless of where the re-exporter is located.
The fourth ground is secondary-sanctions risk. Secondary sanctions are not a direct prohibition on non-US persons; they are a threat of designation or access restriction for engaging in defined categories of conduct with certain targeted parties. Non-US businesses that engage in material transactions with certain designated parties can themselves be designated or cut off from the US financial system. This mechanism extends OFAC's practical reach well beyond primary jurisdiction.
Step 2 – What triggers the re-export obligation?
The obligation is triggered when a re-export transaction connects to a sanctioned party, a sanctioned programme, or a blocked property interest, through any of the nexus grounds described above.
The analysis runs in sequence. First: is the end buyer, the end user, or an intermediate party on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the OFAC Consolidated Sanctions List, or a UN Security Council list that OFAC implements? Second: is the end destination a comprehensively sanctioned territory under any programme currently administered by OFAC? Third: is any non-listed party in the chain owned 50 percent or more in the aggregate by one or more SDN-listed persons?
If any of these questions returns a positive answer, the transaction is presumptively prohibited absent a licence or an applicable authorisation. The sequencing matters. Many compliance teams screen only against listed persons and miss the ownership analysis entirely. In our experience, the 50 percent rule – applied through layered intermediate holding structures – is the step most frequently overlooked by re-exporters in Asia-Pacific and Gulf markets.
The content of the goods also matters, but it is distinct from the OFAC analysis. BIS controls under the EAR apply to the classification and export-licensing obligations for the items themselves. OFAC does not care about the classification number; OFAC cares about who receives value and whether that person or territory is sanctioned. Both regimes can apply simultaneously, and a clean BIS position does not produce a clean OFAC position.
What if the goods are of non-US origin but the transaction routes through a US bank? The bank is the US-person nexus. OFAC will treat the bank's processing of the payment as a prohibited transaction if the ultimate beneficiary is a sanctioned party. The origin of the goods does not cure the nexus created by the payment route.
Related practices
- Deemed export and technology controls under BIS/EAR – classification, licence requirements, and end-user controls for US-origin technology
- Re-export and extraterritoriality under OFAC: advanced issues – secondary sanctions, de-risking, and transactional structuring for complex chains
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the currency, the regime in play – change the analysis. For a preliminary assessment of your re-export exposure under OFAC, contact Calder & Vance at info@caldervance.com.
Step 3 – How does the ownership and control test apply in a re-export chain?
Applying the 50 percent rule through a multi-tier distribution chain is one of the more demanding tasks in sanctions due diligence for re-exporters, and it is where enforcement risk concentrates.
The rule applies at each level. If a blocked person owns 60 percent of Company A, Company A is blocked. If Company A then owns 60 percent of Company B, Company B is also blocked – even though no blocked natural person directly owns Company B. The chain of blocked ownership propagates downward through subsidiaries without limit, as long as the ownership at each tier meets or exceeds the threshold. OFAC has made clear that this analysis is not capped at any number of corporate layers.
Aggregation compounds the challenge. Two SDN-listed persons each holding 27 percent of a trading company clear the threshold together. A screening tool that evaluates each shareholder in isolation and returns "no match" for either will miss the combined position. We regularly advise clients to move beyond name-screening and to trace the beneficial ownership chain using corporate registry data, shareholder disclosures, and open-source intelligence before completing the analysis.
The aggregation point raises a practical question for distributors. A distributor with a large catalogue of products sold through regional sub-distributors cannot apply detailed 50-percent-rule analysis to every end buyer. Risk-based prioritisation is the accepted approach: higher scrutiny for higher-risk goods, higher-risk territories, and counterparties presenting incomplete or inconsistent ownership information. What matters for enforcement purposes is whether the compliance programme was reasonable, documented, and updated as ownership information changed.
The UK and EU positions on ownership and control diverge from the OFAC test in a way that matters practically. OFSI (the Office of Financial Sanctions Implementation in the United Kingdom) and the EU Council regulations apply an ownership and control test that looks beyond the mechanical 50 percent threshold. A non-listed entity can be caught under OFSI or EU rules even where a designated person holds less than 50 percent, if that person exercises control over the entity's decisions. In our cross-border practice, this divergence means that a transaction cleared under OFAC's 50 percent analysis may still require separate review under the applicable UK or EU programme. The stricter prohibition governs: if any regime catches the transaction, the business needs a licence or must decline.
Step 4 – What role does the US dollar play?
US-dollar clearing through the US financial system is the most operationally significant non-goods nexus for non-US re-exporters, and it is the nexus most often created inadvertently.
US correspondent banking operates through a network of US-domiciled clearing institutions. The vast majority of US-dollar-denominated international payments pass through this network. When a payment routes through a US correspondent bank, a US person – the bank – becomes a participant in the transaction. OFAC requires US financial institutions to block or reject payments involving sanctioned parties. Where a payment is blocked, the assets must be reported to OFAC within a defined period and held in a blocked account pending OFAC authorisation for release.
The practical implication for re-exporters is straightforward. Denominating a re-export transaction in US dollars is a choice to create a US nexus. If the end buyer or any party in the payment chain is sanctioned, the US correspondent bank will block the payment, file a report, and freeze the funds. The goods may already be in transit. The re-exporter then faces a blocked payment, a potential OFAC inquiry, and an obligation to cooperate with any investigation the US bank initiates.
Switching to a non-US currency removes the correspondent-banking nexus for that specific transaction – but it does not remove the goods nexus (if US-origin goods are involved) and it does not remove secondary-sanctions risk. Some secondary-sanctions programmes under OFAC explicitly capture foreign financial institutions that conduct significant transactions with designated parties, regardless of currency. The currency switch is not a compliance solution; it is at most a partial risk-reduction measure, and only for businesses that have first confirmed they face no other nexus.
If a transaction has already been flagged by a correspondent bank, or a payment has been blocked, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss the position.
Step 5 – How do secondary sanctions affect non-US re-exporters?
Secondary sanctions operate on a different legal mechanism from primary sanctions and create exposure for non-US businesses even where no US person and no US financial institution is involved in a transaction.
Primary OFAC sanctions prohibit US persons from engaging in specified transactions. Secondary sanctions – authorised under separate statutory instruments – empower OFAC to designate non-US persons who engage in defined categories of conduct with targeted parties, or to restrict their access to the US market and financial system. The conduct that triggers secondary-sanctions risk is not a violation of primary law by the non-US person; it is a category of commercial activity that the United States has determined warrants a punitive response.
For re-exporters, the categories of conduct that carry secondary-sanctions risk include: significant transactions in the energy sector with certain designated parties; significant financial transactions with certain designated financial institutions; and the supply of goods or services that materially support a designated entity's core operations. The word "significant" recurs in the statutory and regulatory language. OFAC has not defined a precise monetary threshold for significance; the assessment is fact-specific and considers the value, volume, and strategic importance of the transactions to the designated party.
Non-US businesses operating in Singapore, Japan, and the UAE face secondary-sanctions pressure even where their domestic law imposes no equivalent obligation. Singapore, Japan, and Australia have their own autonomous sanctions regimes administered by MAS/MTI, METI/MOFA, and DFAT respectively. None of these regimes automatically replicate OFAC's secondary-sanctions architecture. A Singapore-incorporated business can therefore face a secondary-sanctions risk under US law for a transaction that is entirely lawful under Singapore's domestic regime. Where the two positions diverge, the business must manage them independently.
In our cross-border practice, we regularly advise non-US businesses on how to calibrate their exposure to secondary-sanctions risk without over-restricting their commercial activity. The analysis involves mapping the relevant designated parties against the nature and value of the commercial relationship, assessing the statutory language for the applicable programme, and designing contractual and due-diligence protections that demonstrate a good-faith compliance posture.
Step 6 – Risk flags and when to involve counsel
Certain fact patterns consistently generate the highest re-export and extraterritoriality risk under OFAC, and they are the patterns that warrant early specialist review rather than internal compliance assessment alone.
The highest-risk indicators include: an end buyer or sub-distributor that declines to provide ownership or beneficial-interest information; a transaction involving goods with established dual-use potential that are destined for a region under one of OFAC's comprehensive programmes; a payment chain that involves a financial institution in a jurisdiction with documented secondary-sanctions exposure; and a transaction where the stated end-use does not match the buyer's known commercial activity.
One myth we regularly encounter is that a business has no OFAC exposure because it is not a US company, does not deal in US goods, and does not have a US parent. This framing omits the payment-routing nexus (US correspondent banking), the secondary-sanctions exposure created by the nature of the counterparty, and the possibility that the 50 percent rule catches a party in the chain that no one has looked at closely. Non-US status is not a compliance position; it is a starting point for the jurisdictional analysis.
A micro-scenario illustrates the compounding of risks. In a recent matter, a European trading company sought to re-export industrial components to a buyer in a third country. The buyer was not listed. A standard screening check returned no matches. Our review of the buyer's corporate structure identified that two shareholders, each individually below the 50 percent threshold, were together controlled by a single SDN-listed person through a holding vehicle. The aggregated ownership position exceeded the threshold. The transaction was prohibited under OFAC absent a licence. The European company had, at that point, no primary OFAC obligation – but it proposed to settle the purchase price in US dollars. That payment would have been blocked at the correspondent bank. Reorienting the due-diligence process prior to contract signature meant the company could either structure a compliant path or decline the transaction before it created liability.
The decision points for involving counsel are: when beneficial-ownership information is incomplete or inconsistent; when a transaction involves a counterparty in a region where secondary-sanctions risk is elevated; when a compliance team's internal screening has returned an inconclusive result on the ownership chain; and when a payment has already been flagged or blocked. Early involvement expands the available options. Waiting until an enforcement inquiry arrives does not.
Step 7 – How does the OFAC position compare with OFSI and the EU?
The extraterritoriality architecture under OFAC differs from the UK and EU positions in several ways that matter practically for businesses managing multiple compliance obligations simultaneously.
OFAC's reach is anchored in four independent nexus grounds. OFSI's jurisdiction under the Sanctions and Anti-Money Laundering Act (SAMLA) and the relevant thematic UK sanctions regulations is primarily territorial and UK-person based, with some extension to conduct wholly outside the UK by UK-incorporated entities. The EU Council regulations apply to conduct within the EU, to EU persons wherever located, and to activities conducted in the EU or connected to the EU financial system. Neither OFSI nor the EU has a mechanism equivalent to OFAC's secondary-sanctions architecture.
On the ownership and control test, the divergence is significant. OFAC's 50 percent rule is mechanical and based purely on ownership percentages. OFSI and the EU apply a test that includes control – meaning that a non-listed entity can be caught where a designated person directs or has the capacity to direct that entity's decisions, even below the 50 percent ownership threshold. In practice, this means that the EU and UK tests are broader in the control dimension, while OFAC's test is more precise in the ownership dimension. A cross-border business must satisfy both.
Record-keeping obligations also differ. Businesses subject to UK financial sanctions regulations must retain transaction records for a defined period under applicable UK law. EU law similarly imposes record-keeping requirements under the relevant Council regulations. OFAC's own guidance and the applicable programme regulations carry their own retention expectations. Where a business is subject to all three regimes, the practical answer is to apply the most demanding retention standard across the board and document the regime that generated each obligation.
The EU Blocking Regulation adds a further layer of complexity for EU-based businesses. That regulation prohibits EU persons from complying with certain US secondary sanctions and creates an obligation to notify the European Commission of compliance with those measures. For an EU-incorporated re-exporter facing secondary-sanctions pressure from OFAC, the Blocking Regulation creates a direct legal conflict: complying with OFAC's expectations may breach EU law, and complying with EU law may expose the business to US secondary-sanctions consequences. Managing that conflict requires specialist cross-border advice, not a unilateral compliance decision.
For UK-specific analysis of re-export obligations under OFSI, see our companion guide: Re-export and extraterritorial reach under OFSI.