A technology distributor in Southeast Asia receives an order from a new customer. The goods originated in the United States. The distributor ships them on. Three months later, it receives an inquiry from a US law firm acting on behalf of OFAC. The distributor had no US staff, no US bank account, and no US subsidiary. Why is OFAC writing to it?
OFAC's extraterritorial reach (the authority of US sanctions law to bind parties, transactions, and goods outside United States territory) extends well beyond US persons and US-incorporated entities. Any transaction that touches the US financial system, involves US-origin goods or technology, or is conducted by a non-US entity that is itself owned or controlled by a US person can fall within OFAC's jurisdiction. As of May 2026, the breadth of that reach continues to surprise businesses that assume geography alone provides protection.
This guide works through the core legal tests, the re-export question, the cross-regime comparison, the practical risk flags, and the steps a business should take before it ships, transfers, or contracts.
Step 1: Understand the jurisdictional basis – why OFAC reaches outside the United States
OFAC derives its authority primarily from IEEPA and related statutes, which authorise the President to regulate transactions that pose a threat to national security or foreign policy – a mandate courts have read broadly. The key jurisdictional hooks are four in number, and each operates independently.
First: US person jurisdiction. Any US citizen, permanent resident, US-incorporated entity, or person physically in the United States is a US person and bound by all applicable OFAC prohibitions, wherever in the world the transaction takes place. A US-person employee approving a deal from abroad is sufficient to engage this hook. Second: US nexus jurisdiction. Any transaction processed through a US financial institution – including a US correspondent bank handling a dollar clearing – brings that transaction within OFAC's reach, regardless of the nationality of the parties. Third: US-origin goods and technology. Goods, software, and technology that originate in the United States remain subject to OFAC controls when re-exported to a sanctioned destination or a sanctioned person, even after title has passed to a foreign buyer. Fourth: US-controlled foreign entity jurisdiction. A foreign subsidiary that is owned 50 percent or more by a US parent – or that the US parent otherwise controls – is treated as a US person for the purpose of certain OFAC programmes, particularly the comprehensive country-based programmes.
In our experience, businesses most often underestimate the second and third hooks. The dollar-clearing route is not a technicality: a significant share of international trade finance passes through the US correspondent banking system, meaning a non-US deal between two non-US parties can none the less move through a US bank. That single routing decision brings OFAC into the picture.
Step 2: Apply the re-export test – does the shipment trigger a US sanctions obligation?
A re-export, for sanctions purposes, is a transfer of US-origin goods, software, or technology from one foreign destination to another, or from a foreign party to a foreign end-user – including where the goods have been incorporated into a larger product. The re-export question under OFAC is distinct from (though often concurrent with) the re-export question under the Export Administration Regulations administered by the Bureau of Industry and Security.
The analytical sequence runs as follows. First, confirm whether the goods are US-origin. "US-origin" covers items manufactured in the United States, items that incorporate US-controlled components above defined de minimis thresholds, and technology that was developed under a US export licence. Second, identify the destination country and the end-user. If either is subject to a comprehensive OFAC programme – a programme that prohibits virtually all transactions with the relevant country – the re-export is prohibited even if the goods themselves are not sensitive. Third, screen the end-user against the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and the applicable non-SDN lists. A match makes the transaction prohibited irrespective of the destination country. Fourth, apply the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked) to any entity in the transaction chain.
The aggregation point under the 50 percent rule deserves particular attention. Two blocked persons each holding a minority stake can together cross the threshold. Standard automated screening tools that flag only direct SDN matches will miss this. Manual ownership-chain analysis is required wherever the counterparty's ultimate beneficial owner is not immediately transparent. Have you mapped the full chain, or only the first corporate layer?
Step 3: Cross-regime comparison – how do the UK, EU, and other regimes treat the same shipment?
OFAC's extraterritorial reach is broader than that of most other sanctions authorities, but it does not operate in isolation. A re-export that triggers an OFAC question will frequently also engage the UK, EU, or other regimes – and the analysis under each is meaningfully different.
Under UK financial sanctions administered by OFSI (the Office of Financial Sanctions Implementation), the primary jurisdictional hook is the involvement of a UK person or a transaction that takes place in the United Kingdom. OFSI's ownership-and-control test is not purely mechanical: it requires the UK to consider not only ownership above a defined threshold but also control, including the ability to direct or block decisions. That is a wider net than OFAC's 50 percent rule in some respects – it can catch an entity where a designated person holds a minority stake but exercises de facto control – but a narrower net in the sense that OFSI does not assert general jurisdiction over US-origin goods shipped between two non-UK, non-US parties. A business with no UK persons and no UK financial system exposure may avoid OFSI's reach even where OFAC is engaged.
EU sanctions, adopted by Council regulation, apply to EU persons and to transactions conducted in whole or in part in the European Union. The EU ownership-and-control test is broadly similar to OFSI's: it looks at both ownership and control, not ownership alone. The EU does not generally assert the kind of unilateral extraterritorial jurisdiction that OFAC does through the US-nexus hook, though the EU has adopted blocking-regulation provisions that respond to the extraterritorial application of certain US programmes. For a business sitting between the EU and the US, those blocking provisions create a genuine conflict-of-laws problem: complying with one regime may mean contravening the other.
Singapore, Japan, and the UAE each maintain autonomous sanctions frameworks. All three are broadly aligned with UN Security Council Consolidated List obligations under UN Charter Chapter VII, which are binding on all member states. None asserts extraterritorial reach comparable to OFAC's. However, all three may be relevant in a re-export chain: a Singapore-based trading house re-exporting US-origin goods to a sanctioned destination faces OFAC jurisdiction through the US-origin goods hook even though Singapore's own rules may not independently prohibit the transaction.
The practical consequence is a layering effect. In our cross-border practice, we regularly advise clients to map the applicable regimes at the start of a transaction – before the contract is signed – rather than treating the question as one to be resolved later. The stricter prohibition governs: where two or more regimes apply and impose different standards, the business must meet the more demanding one.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. For a preliminary assessment of your re-export exposure under OFAC and parallel regimes, contact Calder & Vance at info@caldervance.com.
Step 4: Identify the risk flags that most often produce enforcement exposure
Most enforcement actions involving re-export and extraterritorial reach share a recognisable set of preconditions. Identifying them early is the most efficient risk-management step available.
Dollar routing without a sanctions screen. Many non-US businesses route invoices through US correspondent banks as a matter of commercial convenience, without appreciating that doing so brings the transaction within OFAC's jurisdiction. The solution is not to avoid dollar routing entirely – that is often impractical – but to apply an OFAC-level screen to every transaction that will pass through a US financial institution, regardless of the apparent nationality of the parties.
Incomplete beneficial ownership verification. The 50 percent rule operates on ultimate beneficial ownership, not registered legal ownership. Corporate structures that interpose holding companies, trusts, or nominee arrangements between a blocked person and a commercial entity are a well-documented pattern in sanctions risk. A screening programme that checks only the trading name of the counterparty will not detect this.
Country-based programme gaps. Some businesses invest heavily in SDN screening but fail to maintain adequate awareness of the geographic scope of OFAC's comprehensive country-based programmes. A shipment that clears the SDN screen may still be prohibited if the ultimate destination is a country subject to one of those programmes.
Transshipment through third-country hubs. A product that passes through a free-trade zone or third-country hub before reaching its ultimate destination does not lose its US-origin status. The "pass-through" location is irrelevant to the re-export analysis.
Technology transfers treated as non-exports. Emailing technical drawings, providing access to a cloud-based design platform, or briefing a foreign national in a third country on controlled technology can each constitute a re-export for sanctions purposes. This is especially relevant for engineering and defence-adjacent businesses. Our practice regularly encounters clients who have handled goods correctly but overlooked the associated technology transfer.
US-person employees in the transaction chain. A single US-citizen employee who reviews, approves, or facilitates a transaction that would otherwise be non-US can bring the whole transaction within OFAC's jurisdiction as a US-person transaction. Employment contracts and internal approval processes should be reviewed against this risk.
Step 5: Apply the practical decision sequence before a re-export or onward transfer
A structured pre-transaction review reduces re-export risk to a manageable level. The sequence below represents the standard applied in our advisory work.
- Confirm the origin status of the goods. Are they US-origin? Do they incorporate US-controlled components above the applicable de minimis threshold? Is associated technology US-developed?
- Map the transaction chain. Identify every party: exporter, intermediary, freight forwarder, end-user, and the financial institutions involved. Note the nationality of each party and any US-person involvement.
- Screen all parties against applicable lists. Run every entity and individual in the chain against the SDN List, the applicable non-SDN lists, and the EU and UK lists. Apply the 50 percent rule to any party whose ownership structure is not fully transparent.
- Assess the destination against country-based programmes. Confirm that neither the transit country nor the ultimate destination is the subject of a comprehensive OFAC programme relevant to the goods.
- Check the financial routing. Confirm whether US correspondent banks are involved in payment. If so, apply OFAC-level screening to the transaction regardless of the nationalities of the trading parties.
- Apply parallel regime checks. Where UK, EU, or other regime obligations apply – through the nationality of a party, the location of a transaction, or the involvement of a financial institution subject to those regimes – run the analysis under each applicable regime and identify any conflicts.
- Document the review. Record the basis on which the transaction was cleared, the lists checked, the date of the check, and the person responsible. Good documentation is the first line of defence in any subsequent enforcement inquiry.
- Engage counsel on borderline cases. Where any element of the analysis is uncertain – unclear ownership, a counterparty with a name that produces an ambiguous match, a destination with which the applicable regime has a complicated history – seek a legal opinion before the transaction proceeds, not after.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential first assessment.
Step 6: Correct the common misconception – "we are not a US company, so OFAC does not apply to us"
The most persistent myth in non-US re-export compliance is that OFAC's rules are a domestic US matter. They are not. As described in Step 1, OFAC's jurisdiction reaches non-US businesses through the US-nexus hook and the US-origin goods hook without requiring any US-person involvement. A Singapore distributor, a German trading house, and a UAE freight forwarder can each face OFAC exposure on a transaction with no US parties, if the goods originated in the United States or the payment routes through a US bank.
A related misconception is that incorporating outside the United States, or deliberately avoiding US counterparties, is sufficient to remove OFAC risk. For some transactions – particularly those that involve neither US-origin goods nor US financial system clearing – that may be true. But for most businesses in global supply chains, the US financial system and US-origin components are present as background facts in nearly every deal. The question is not whether OFAC applies in principle; it is whether the specific transaction triggers a prohibition.
We have acted for businesses that assumed their non-US structure provided complete insulation, only to discover that a supply-chain component with a US manufacturer or a standard dollar-clearing route had brought OFAC into the picture. Treating the question as one that requires active verification – rather than one that resolves itself through geography – is the difference between a compliant programme and an undetected exposure.
Step 7: When to involve sanctions and export-control counsel
The moment to involve specialist counsel is earlier than most businesses realise. Three threshold events warrant an immediate call.
The first is receipt of any communication from OFAC – an administrative subpoena, a request for information, a notice of apparent violation, or a referral from a financial institution that has blocked a payment. Each of these marks the beginning of an enforcement sequence that benefits from legal management from day one. A VSD (voluntary self-disclosure to OFAC) made promptly and with well-prepared supporting analysis can be a material mitigant. A delayed or incomplete response tends to narrow the options.
The second is a proposed transaction that involves any uncertainty about US-origin status, beneficial ownership, or destination country. A pre-transaction opinion is almost always less expensive than an enforcement defence. It also creates a compliance record that demonstrates good faith if a question arises later.
The third is a compliance-programme review. Where a business is expanding into new markets, acquiring a counterparty with complex ownership, or onboarding a new product line with US-origin components, a structured review of the screening and approval process – before the first transaction rather than after a problem has emerged – is the most efficient use of legal resource.
Related practices
- Deemed Export and Technology Controls under BIS and the EAR – specialist advice on technology-transfer licensing and deemed-export compliance for cross-border businesses.
- Re-export and Extraterritoriality: Advanced Considerations – deeper analysis of the de minimis rule, foreign-produced direct-product rules, and complex multi-jurisdiction supply chains.
- Re-export Licensing and Authorisations: A Practical Guide – step-by-step guidance on applying for OFAC specific and general licences for re-export transactions.