A trading company based in Singapore purchases US-origin software from a European reseller. The reseller believes it has fulfilled its obligations once the goods clear the EU. Six months later, the Singapore company on-sells the software to a distributor whose ultimate parent appears on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The European reseller receives a letter from OFAC. It had no idea OFAC could reach it. That surprise is, in our experience, the single most expensive misconception in cross-border trade.
Re-export and extraterritorial reach under OFAC mean that US sanctions prohibitions follow US-origin goods, software, technology, and financial flows regardless of where they are resold or re-shipped. The governing authority is OFAC, acting under IEEPA and related statutes. Non-US persons who re-export US-origin items or process US-dollar transactions through the US financial system can fall squarely within OFAC's jurisdiction — and the penalties for getting it wrong are significant.
This guide sets out how OFAC's extraterritorial reach operates, how it differs from the position under OFSI and the EU, and what practical steps a cross-border business should take before the next shipment leaves the warehouse.
How does OFAC's extraterritorial reach work?
OFAC's extraterritorial reach rests on two independent jurisdictional hooks that can apply to non-US persons: the US-origin nexus and the US financial-system nexus. Either one is sufficient to bring a foreign transaction within OFAC's prohibitions.
The first hook is US-origin content. Where goods, software, or technology were manufactured, designed, or substantially derived in the United States, OFAC treats the items as carrying US-origin status. A subsequent resale or re-shipment by a foreign company — even if the items never touch US soil again — can constitute a prohibited transaction if the ultimate recipient is a sanctioned person or is located in a comprehensively sanctioned territory. The logic is consistent across the major OFAC programme regulations. OFAC's rules do not require a US party to be involved in the transaction at the time of the re-export.
The second hook is US-dollar clearing. The overwhelming majority of US-dollar payments clear through correspondent accounts held at US financial institutions. When a foreign entity processes a dollar-denominated payment, the funds briefly transit the US financial system. If the underlying transaction involves a sanctioned party or territory, that transit can constitute a prohibited dealing by the US financial institution — and the foreign party that initiated the payment may itself face OFAC scrutiny.
What does this mean in practice? A German trading company that invoices in dollars for goods that have US-origin components, and on-sells to a buyer with SDN-listed shareholders, can face OFAC exposure simultaneously on the goods nexus and the payments nexus. These two hooks compound each other rapidly in complex supply chains.
What is the US-origin test and how is it applied?
The US-origin test under OFAC focuses on whether a good, piece of software, or technology derives from US manufacture, design, or substantial transformation. It is distinct from — though it often overlaps with — the similar test applied by BIS under the Export Administration Regulations (the EAR) and the concept of a deemed export (the release of controlled technology to a foreign national, treated as an export to that person's home country).
OFAC does not publish a bright-line percentage for US-origin content in the same way BIS does under the EAR's de minimis rules. Practitioners advising on OFAC matters proceed on the conservative assumption that any product with meaningful US-origin content carries US-origin status for sanctions purposes. That assumption drives the structure of effective re-export compliance programmes. If you sell goods that incorporate US components, or that were designed using US-origin technology, the prudent position is to assume OFAC's rules apply to where those goods end up — not merely where you sell them.
The interaction with BIS is significant. An item that is controlled under the EAR and requires a BIS licence for re-export will often simultaneously be subject to OFAC screening requirements for the end user. The two regimes operate in parallel; a BIS licence does not authorise a transaction that OFAC prohibits, and vice versa. In our cross-border practice, we consistently see clients who have obtained BIS authorisation and then discovered an OFAC problem at the end-user screening stage — or the reverse. Both screens are mandatory and neither substitutes for the other.
For practical guidance on the BIS dimension of re-exports, see our dedicated page on deemed exports and technology controls under BIS and the EAR.
Step 1 – Map the ownership and control chain of every counterparty
Effective re-export compliance under OFAC begins with ownership mapping — specifically, identifying whether any counterparty, their parent, their ultimate beneficial owner, or a subsidiary in the transaction chain is on the SDN List or is owned 50 percent or more by SDN-listed persons, directly or indirectly.
This is the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked), and it is central to re-export risk. A counterparty that appears clean on its own entry in the SDN List may still be blocked because of upstream ownership. Screening tools that check only the direct counterparty name miss the ownership dimension entirely. Aggregation matters: two listed persons each owning twenty-five percent of the same company reach the threshold together.
For a re-export scenario, this mapping must cover:
- The immediate buyer or distributor.
- Each intermediate party in the distribution chain, where known.
- The intended end user, where identifiable.
- Any financial counterparties processing the payment.
In practice, distribution agreements and freight contracts rarely disclose the end user by default. Building contractual rights to know — and to approve — the end destination of goods is a structural component of a defensible re-export programme. Do your current distribution agreements give you that visibility?
Step 2 – Assess the transaction for secondary-sanctions exposure
Secondary sanctions are a distinct category of US extraterritorial reach. Unlike the primary prohibitions — which apply to US persons and to transactions with a US nexus — secondary sanctions (measures that penalise non-US persons for dealings with designated parties, even without a US-origin or US-payment nexus) are directed at non-US persons who conduct significant transactions with parties targeted under certain OFAC programmes.
The practical consequence is that a non-US business can face restrictions on its access to the US financial system and market even where there is no US-origin content in its goods and no dollar payment involved, provided the transaction is deemed sufficiently significant under the relevant programme. Secondary-sanctions risk is programme-specific: it applies under certain OFAC regimes and not others. The assessment requires identifying which OFAC programme is in play for the sanctioned party or territory concerned.
The cross-regime picture diverges sharply here. OFSI in the UK and the Council regulations in the EU do not, as a general matter, impose secondary-sanctions exposure of the same character. A UK or EU business that engages in a transaction with a party targeted only by a specific OFAC secondary-sanctions programme — where no UK or EU designation applies — will not breach UK or EU sanctions law on that basis alone. However, that business may still be barred from accessing the US financial system or entering the US market. For a business that depends on dollar clearing or US counterparties, that practical consequence can be as severe as a formal legal prohibition.
The position under the UK and EU regimes on re-export is addressed separately in our guides on re-export and extraterritorial reach under OFSI and advanced re-export scenarios under the UK regime.
Step 3 – Identify whether a licence or general authorisation applies
Once a potential OFAC prohibition is identified in a re-export scenario, the next step is to assess whether a general licence (a standing authorisation that permits a defined category of transactions without a separate application) or a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) covers the proposed dealing.
General licences under OFAC vary significantly by programme. Some authorise humanitarian transactions. Others cover the wind-down of pre-existing contracts. A number address personal remittances or civil-society activities. The applicability of any particular general licence to a re-export scenario requires careful analysis: the scope conditions, the duration, the parties covered, and any reporting requirements attached all affect whether a given shipment or payment is actually authorised.
Where no general licence applies, a specific licence application to OFAC is the route to lawful authorisation. OFAC considers applications on a case-by-case basis. It does not operate to a statutory deadline for determination, though in practice applications in straightforward humanitarian or civil-society categories are often determined within a few months. Complex commercial applications can take considerably longer. We regularly advise clients on assembling the factual record and legal argument for a specific licence, and on managing OFAC's queries during the review period.
The position above covers the standard case. Your facts — the counterparty's ownership structure, the programme in play, the origin of the goods, and the jurisdiction of the financial institutions involved — change the analysis substantially.
For an initial assessment of your re-export exposure under OFAC, contact Calder & Vance at info@caldervance.com.
Step 4 – Design contractual and operational controls for the distribution chain
Legal analysis of a specific transaction is necessary but not sufficient. A compliance programme for re-export and extraterritorial risk must be embedded at the contractual and operational level, so that each shipment is governed by enforceable terms that reflect the OFAC prohibitions.
The core contractual elements we advise clients to incorporate are:
- A prohibition on re-export or transfer to any SDN-listed person or to any comprehensively sanctioned territory, without exception for commercial necessity.
- A representation and warranty from the buyer that the goods will not be diverted to a prohibited end user or end use.
- A right for the seller to audit or request documentary evidence of the goods' destination.
- A termination right on any breach of the sanctions representations, exercisable without penalty to the seller.
These terms are not merely boilerplate. They serve two functions. First, they reduce the probability of a prohibited re-export by creating a contractual disincentive for the buyer to divert goods. Second, they provide evidence — in the event of an OFAC inquiry — that the exporter maintained a compliance posture and did not wilfully or recklessly disregard the risk of diversion. OFAC's enforcement framework distinguishes between egregious cases and those where a party had effective controls in place. A well-structured distribution agreement, consistently applied, is part of that record.
Operationally, the controls need to extend to how end-user certificates are collected, how screening is refreshed at shipment (not only at contract signature), and how unusual requests — for additional quantities, for specific labelling changes, or for routing through unfamiliar intermediaries — are escalated for review. In our experience, diversion attempts tend to concentrate in exactly those operational gaps between initial due diligence and actual shipment.
What are the risk flags that warrant immediate counsel involvement?
Not every re-export scenario presents the same level of risk. The following signals in a transaction warrant immediate legal review before any shipment or payment is authorised.
The first is an unfamiliar intermediary inserted late in the transaction. A new freight forwarder, sub-distributor, or logistics agent that appears after contract signature — particularly one based in a jurisdiction known for diversion risk — is a material red flag. The business reason for the change should be independently verified, not accepted from the counterparty itself.
The second is a request to route payment through a third-country bank that was not the original payment channel. Dollar payments routed through jurisdictions with limited sanctions-screening infrastructure may reflect an attempt to obscure the ultimate beneficiary.
The third is a mismatch between the stated end use and the technical capability of the goods. Dual-use items — goods with both commercial and potentially controlled applications — require particular scrutiny where the buyer's declared business is inconsistent with the item's specification. This applies both to OFAC compliance and to BIS export-control classification.
The fourth is a hit on any party in the transaction chain against the SDN List, the EU Consolidated List, or the UK sanctions list — even a partial name match — that has not been formally cleared. Partial matches should be treated as live until the match has been definitively resolved by a qualified reviewer. Clearing a match on the basis of a single distinguishing data point, without a full entity-resolution exercise, is a recurring source of exposure.
If a transaction has already been flagged, or a shipment has occurred that may involve a prohibited re-export, an early review preserves options that narrow with time. OFAC's enforcement posture takes account of whether a potential violation was self-identified, promptly reported, and remediated — and a VSD (voluntary self-disclosure to a regulator) can materially affect the outcome.
For a confidential review of a potential breach or a live transaction concern, contact us at info@caldervance.com.
How do the UK and EU regimes compare on re-export extraterritoriality?
OFAC's extraterritorial reach is, as a matter of legal architecture, broader than the equivalent under OFSI or the EU Council regulations — primarily because of the US-dollar and US-origin nexus hooks that apply to non-US persons without any equivalent mechanism in UK or EU law.
OFSI's jurisdiction under the Sanctions and Anti-Money Laundering Act (SAMLA) and the relevant thematic regulations covers persons in the UK, UK persons wherever they are, and conduct connected to the UK. A UK person who re-exports goods to an SDN-listed person will also, in almost all cases, breach UK financial sanctions if a payment is involved. But a non-UK, non-US business with no UK connection that re-exports US-origin goods does not face OFSI jurisdiction on that basis alone.
The EU position is similar in structure: the relevant Council regulations bind EU operators and those acting within EU territory. The EU does not assert jurisdiction over non-EU businesses solely on the basis that goods originated in the United States.
The practical divergence that matters most for compliance counsel is this: a non-US, non-UK, non-EU business may face OFAC exposure through the US-origin or dollar-clearing hook while facing no parallel legal obligation under UK or EU law. However, that business's EU or UK counterparties — the banks processing the dollar payments, the EU-based exporters providing the goods — may themselves face obligations under their own regimes simultaneously. In a transaction with parties in multiple jurisdictions, the strictest applicable prohibition governs for each participant. Compliance programmes must map each party's legal obligations separately, not assume a single regime covers the whole chain.
One further divergence worth noting: the EU Blocking Regulation, in certain circumstances, restricts EU persons from complying with certain US extraterritorial measures. This creates a legal tension for EU businesses with US-origin goods: they may face conflicting obligations under OFAC on one side and the EU Blocking Regulation on the other. The analysis of that tension requires specialist advice on both the applicable OFAC programme and the EU instrument in question.
A common misconception: "We are not a US company, so OFAC does not apply to us"
This is the most frequently stated and most consistently incorrect assumption we encounter in cross-border trade compliance. The position that OFAC's reach is limited to US persons is wrong as a matter of law and as a matter of OFAC's enforcement practice.
OFAC can and does assert jurisdiction over non-US entities on the basis of the US-origin and US-dollar nexus hooks described above. Non-US financial institutions that process dollar transactions can face penalties that effectively close them off from the US correspondent-banking system. Non-US companies that re-export US-origin goods to SDN-listed parties can be the subject of OFAC enforcement action. The enforcement record — while we do not cite specific penalty notices here — makes clear that OFAC does not consider non-US persons to be outside its reach simply because they are incorporated or operating outside the United States.
The correct position is that a non-US business with any US-origin content in its goods, or any dollar-denominated financial flows, should analyse its OFAC exposure as a live question — not dismiss it on jurisdictional grounds. The cost of that analysis is a fraction of the cost of an enforcement inquiry.
Related practices
- Deemed exports and technology controls under BIS and the EAR – classification, licence requirements, and end-use controls for US-origin technology.
- Re-export and extraterritorial reach under OFSI – how UK financial sanctions apply to cross-border resale and onward transfer.
- Advanced re-export scenarios under the UK regime – ownership and control questions and multi-regime interaction in complex distribution chains.