A commodity trading house with offices in Singapore, London, and Houston completes its standard counterparty screen. The buyer clears every internal watchlist. The letter of credit is issued. Two weeks later, the financing bank suspends payment: a correspondent bank in New York has flagged the underlying shipment under a US secondary-sanctions programme. The trade-finance leg of the transaction – not the commercial contract – was where the control failed.
Building effective trade-finance sanctions controls across multiple regimes requires a structured, sequential programme that maps every payment leg to the regime that governs it, tests ownership and control at the time of each transaction rather than at onboarding, and assigns clear escalation responsibilities before a letter of credit is presented or a guarantee is called. As of August 2026, businesses operating across US, UK, EU, and Asia-Pacific trade-finance markets must account for at least four distinct enforcement postures, each with different ownership thresholds, licensing routes, and reporting windows.
This guide walks through the steps a compliance-oriented trade-finance function should take – from regime mapping and counterparty screening to payment-instruction controls, escalation, and ongoing programme testing.
Step 1: Map your trade-finance footprint to the regimes that govern it
The first step is determining which sanctions regimes attach to each transaction leg – and that determination is driven by facts, not by where your head office sits. A letter of credit denominated in US dollars, processed through a US correspondent bank, or issued by a US-owned subsidiary engages OFAC's jurisdiction regardless of where the underlying goods are loaded.
The US Office of Foreign Assets Control (OFAC) asserts jurisdiction over any transaction that touches the US financial system, involves a US person, or is denominated in USD. The UK Office of Financial Sanctions Implementation (OFSI) governs transactions where a UK-nexus exists – a UK-incorporated entity, a UK branch, or a sterling payment. The EU Council regulations apply when an EU-established person or an EU-currency clearing route is involved. Singapore's Monetary Authority and Japan's Ministry of Finance each operate autonomous regimes that can apply to payments routed through those financial centres, even where neither the buyer nor the seller is locally incorporated.
The mapping exercise should produce a transaction matrix: for each trade type (letter of credit, documentary collection, open-account trade finance, guarantee), list the payment currencies, the correspondent-bank routes, the entities involved in each leg, and the goods categories. Each row of that matrix will show one or more applicable regimes. Where more than one regime applies, the stricter prohibition governs.
In our experience, businesses underestimate the number of regimes in play. A single shipment of industrial equipment from a European manufacturer to a South-East Asian buyer, financed through a London bank and settled in US dollars, can engage OFAC, OFSI, the EU Council regulations, and the MAS regime simultaneously. Identifying this at the transaction-design stage – not after the payment instruction is sent – is the purpose of the mapping step.
Step 2: Screen counterparties, ownership chains, and goods at the right moment
Effective screening in trade finance must occur at three distinct points: at counterparty onboarding, immediately before a transaction is approved, and again when payment instructions are received – because designation status changes, and an entity that was clear at onboarding may be listed by the time the letter of credit is presented for payment.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in aggregate by blocked persons as themselves blocked) means that a non-listed counterparty can be caught if its ownership chain contains blocked persons holding 50 percent or more in the aggregate, directly or indirectly. The calculation aggregates all blocked-person holdings; two listed persons each holding 30 percent of the same entity together reach the threshold, even if neither does alone.
Under OFSI and the EU Council regulations, the test is broader: ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person's direct or indirect ownership or ability to direct its activities) can capture an entity even below the 50 percent threshold if a designated person exercises effective control. That divergence is material. A counterparty that passes the OFAC ownership test may still be caught under OFSI or EU rules if a designated person sits on the board or holds contractual veto rights.
Goods screening is equally important. Dual-use items, items on the US Commerce Control List, and goods subject to sectoral restrictions all require classification before the transaction is approved. A single mis-classified shipment can expose an exporter to penalties under the Export Administration Regulations (EAR), quite apart from any sanctions exposure. Have you confirmed the ECCN (Export Control Classification Number under the US Commerce Control List) for every item in the trade-finance transaction you are about to approve?
Screening should also cover the vessel, the flag, and the port of loading and discharge. OFAC's maritime programmes impose restrictions on named vessels; ports in certain jurisdictions trigger separate due-diligence requirements under multiple regimes.
Step 3: Design payment-instruction controls that reflect regime divergence
Payment-instruction controls are the operational layer where trade-finance transactions are most frequently interrupted – and where the cost of a control failure is highest, because a blocked payment can trigger a mandatory reporting obligation alongside the commercial disruption.
Under OFAC, when a US person or a US financial institution encounters blocked property, it must block the funds and report to OFAC within a short statutory window. The obligation attaches to the intermediary as well as the originating party. OFSI imposes a parallel obligation: a person who holds or controls funds belonging to a designated person, or who becomes aware that they do, must report to OFSI as soon as practicable. The EU Council regulations require notification to competent authorities when funds subject to an asset freeze are identified.
Each of these obligations is triggered at the payment-instruction stage. Controls should therefore include: (1) automated screening of all payment instructions against current designation lists before execution; (2) a hold-and-review procedure that freezes the instruction rather than rejecting it outright, preserving the option to block and report; (3) a clear escalation chain so that a compliance officer, not an operations clerk, makes the decision on how to proceed; and (4) a record-keeping system that logs every instruction reviewed, the screening outcome, and the action taken.
Record-keeping disciplines differ by regime. Under OFAC guidance, records relating to blocked property and licensing must be maintained for a defined period. OFSI's enforcement guidance signals that contemporaneous records of the decision-making process – not just the final outcome – are examined in enforcement enquiries. We regularly advise clients to treat the records of a payment-instruction review as potential evidence and to write them accordingly.
The position above covers the standard case. Your facts – the payment currency, the correspondent-bank chain, the nature of the goods, and the specific designations in play – change the analysis materially. For an initial assessment of your payment-instruction controls under the applicable regimes, contact Calder & Vance at info@caldervance.com.
Step 4: Address the cross-border divergence points that most often cause problems
The divergence between regimes is not merely academic. In practice, the differences that cause the most difficulty in cross-border trade finance are the ownership and control test, the scope of secondary-sanctions risk, and the treatment of export-control licences alongside financial-sanctions authorisations.
On ownership and control: as noted above, OFAC's 50 percent threshold is mechanical, while OFSI and the EU apply a broader control analysis. A trade-finance programme designed around OFAC-only screening will miss entities that a UK or EU bank – acting as the confirming or paying bank – would be required to treat as caught. If your financing bank is UK or EU-incorporated, it will apply its own regime analysis to the same counterparty. Where the analyses diverge, the bank's stricter position governs the payment.
On secondary-sanctions risk: the US secondary-sanctions programmes impose consequences on non-US persons who engage in significant transactions with certain designated entities or in certain sectors, even without a US nexus. A Singapore-incorporated trading house dealing through a non-US bank can still face the risk of being designated itself if its transactions fall within the secondary-sanctions perimeter. Our practice regularly encounters businesses that have correctly concluded they have no US nexus – and have missed the secondary-sanctions analysis entirely.
On the interaction between export-control licences and financial-sanctions authorisations: these are separate instruments, issued by separate regulators, and one does not substitute for the other. A BIS export licence for a controlled item does not authorise the associated financial transaction if OFAC prohibits it. Conversely, an OFAC specific licence for a financial transaction does not authorise the export of a controlled item without the relevant export licence. Trade-finance controls must address both tracks.
The UN Security Council Consolidated List adds a further layer. UN designations operate independently of autonomous national-regime designations. An entity removed from the OFAC SDN List may remain on the UN Consolidated List, maintaining prohibition under every UN-member-state regime that has incorporated the relevant Security Council resolution into domestic law.
Step 5: Build an escalation and decision framework before the problem arrives
The most consequential failures in trade-finance sanctions compliance occur not because a control was absent, but because the escalation path was unclear at the moment a hit was identified. An operations team that does not know whether to reject, hold, or block a payment – and who to call – will make the wrong choice under time pressure.
The escalation framework should specify: who in the compliance function holds the authority to make a blocking or rejection decision; what information they need before deciding; how long the hold can last before a provisional blocking report must be submitted; and who is authorised to communicate with the regulator.
Voluntary self-disclosure, or VSD (voluntary self-disclosure to a regulator of an apparent violation), is a factor in the penalty calculations of OFAC, OFSI, and BIS. A well-constructed escalation framework should include a clear decision point on whether to disclose, supported by legal advice. Timing matters: regulators' guidance consistently signals that early, complete disclosure is treated more favourably than late or partial disclosure. The escalation framework should preserve the option rather than pre-empt it.
If a transaction has already been flagged, or a payment instruction has been suspended by a correspondent bank, an early review with experienced sanctions counsel can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss a specific situation in confidence.
Step 6: Test and update the programme on a rolling basis
A trade-finance sanctions control programme that was accurate twelve months ago may not be accurate today. Designation lists change frequently across all major regimes; new sectoral restrictions are added; export-control commodity classifications are revised; and the secondary-sanctions perimeter shifts with each new executive order or regulation. A programme that is not regularly tested against current rules is a programme that has already started to fail.
Testing should have two components. The first is technical: confirming that the screening tools feed from current list data, that the data refresh cycle is appropriate for the risk level of the business, and that the ownership-chain logic correctly applies the relevant regime's aggregation rules. A tool calibrated to the OFAC 50 percent threshold will not correctly apply the OFSI and EU control analysis unless it has been specifically configured to do so.
The second component is operational: running a sample of recent trade-finance transactions through the programme as a retrospective audit, to identify hits that should have been generated and were not, and near-misses that were escalated correctly but where the documentation was inadequate. We have acted for businesses in this process and consistently find that the gap between written procedures and operational practice is widest at the payment-instruction stage – precisely where the legal risk is highest.
Firms regulated in Australia face an additional obligation under the autonomous sanctions regime administered by DFAT. The testing and review cycle for a multi-regime programme should reflect each applicable jurisdiction's current enforcement posture, not only the regimes the business considers its primary exposure.
Related practices
- Sanctions compliance audit and testing – Australia – programme testing and gap analysis under the Australian autonomous sanctions regime.
- Trade-finance sanctions controls – EU guide – detailed treatment of EU Council regulations in the trade-finance context.
- Trade-finance sanctions controls – EU guide 2 – advanced EU regime analysis including the EU Blocking Regulation and dual-use export controls.
Common mistakes and the myth that a single compliance check is enough
The single most persistent misconception in trade-finance sanctions compliance is that a counterparty screen at onboarding satisfies the obligation. It does not. Onboarding screening is a starting point. The legal obligation under every major regime attaches at the moment a transaction is executed or a payment is made – and designation lists are updated between onboarding and transaction execution.
A closely related mistake is treating the OFAC SDN List as the only relevant list. A business that screens only against the SDN List will miss entities on the OFAC Sectoral Sanctions Identifications (SSI) list, which impose transactional restrictions that differ from outright blocking; entities on OFSI's consolidated list; persons on the EU asset-freeze list; UN-listed parties; and entities on BIS's Entity List who are subject to export-licence requirements rather than financial sanctions. Each list captures different conduct and requires a different compliance response.
A third common failure is the absence of a de-risking (a financial institution exiting a relationship to avoid sanctions exposure) analysis before exiting a relationship. Exiting a trade-finance relationship with a counterparty that has a sanctions nexus can itself trigger a reporting obligation under certain regimes, and the timing and manner of the exit can affect the firm's enforcement position. The decision to exit should be taken with the same structured analysis as the decision to proceed.
Finally, many businesses treat the financial-sanctions analysis and the export-control analysis as separate workstreams that never intersect. In trade finance, they intersect at every transaction involving controlled goods. The goods, the end-user, the end-use, and the financial flows must all be assessed together. A transaction that is financially permissible may be export-control-prohibited, and vice versa.