A commodity-trading firm arranges a letter of credit through its London correspondent bank. The beneficiary passes automated screening. A week later, a manual review flags the freight forwarder as an entity that may fall within the ownership and control (the UK test for whether a non-listed entity is caught through a listed person's ownership or controlling influence) provisions of the relevant UK financial-sanctions regulations. The facility is already partly drawn. What happens next?
Trade-finance sanctions controls under OFSI are governed by the Sanctions and Anti-Money Laundering Act ("SAMLA") and the thematic sanctions regulations made under it. Every UK-regulated financial institution involved in a trade-finance transaction – issuing bank, confirming bank, forfaiter, invoice financier – must screen counterparties, goods, routes, and intermediaries against the OFSI Consolidated List and apply the ownership-and-control test before processing any payment or document. A failure to do so is not merely a compliance gap; it can constitute a strict-liability civil offence carrying a significant penalty.
This guide walks through each operational step, maps the points at which OFSI's approach diverges from OFAC and the EU, and identifies the risk flags that most often trigger enforcement attention.
Step 1: Understand who and what OFSI's trade-finance controls catch
OFSI's trade-finance controls catch any person who is party to, or who facilitates, a financial transaction that confers an economic benefit on a designated person or entity. Under SAMLA and the relevant thematic regulations, "designated persons" are those listed on the UK Sanctions List – which may differ from the UN Consolidated List and from OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons) after the UK's autonomous listings diverged from EU and US positions following Brexit.
The prohibitions extend beyond the account holder. A letter of credit that names a clean applicant but routes funds through a blocked intermediary freight forwarder can engage the prohibitions just as directly. In our experience, the most commonly overlooked parties in trade-finance structures are the beneficiary's bank (particularly correspondent banks in high-risk corridors), the shipping agent, and the insurer. Each must be screened. The goods themselves – their end use, their classification, and their declared destination – are also part of the picture, particularly where export-control overlaps apply.
Does your screening programme cover the full transaction chain, or only the named applicant and beneficiary? That distinction has defined a significant number of enforcement outcomes we have observed in our cross-border practice.
Step 2: Map the legal basis and the governing authority before you design your controls
OFSI administers UK financial sanctions under SAMLA and the statutory instruments made under it; it operates within HM Treasury and has the power to impose civil monetary penalties on a strict-liability basis, meaning intent is irrelevant to whether a breach occurred. The relevant thematic regulations set out the prohibitions applicable to each sanctions programme.
Understanding the legal basis matters for control design because SAMLA creates a distinct legal duty to report. Where a person knows or has reasonable cause to suspect that a counterparty is a designated person, there is a statutory obligation to report that suspicion to OFSI without delay. This is separate from the anti-money-laundering suspicious-activity reporting obligation, and the two regimes run in parallel. Many trade-finance compliance programmes are designed around AML and treat OFSI reporting as secondary. That is a structural error.
The legal basis also determines the licensing route. OFSI issues both general licences (standing authorisations that permit a defined category of transactions without a separate application) and specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction). In trade finance, general licences are the faster route where the transaction falls within a defined category; where it does not, a specific-licence application must be prepared and submitted before the transaction proceeds.
As of mid-2026, OFSI has published general licences covering certain humanitarian, diplomatic, and wind-down transactions. Verify the current position before relying on any general licence; OFSI amends and revokes them without extended notice.
Step 3: Apply the ownership-and-control test to every relevant entity
The UK ownership-and-control test catches non-listed entities that are owned or controlled by a designated person, even if the entity itself is not on the UK Sanctions List. "Owned" means a designated person holds more than 50 percent of the shares or voting rights, directly or indirectly. "Controlled" is a broader and more judgment-intensive test: it looks at whether the designated person can otherwise exercise decisive influence over the entity, for example through contractual rights, board composition, or informal direction.
This is a material divergence from the OFAC position. Under OFAC's 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked), the test is purely mechanical – the threshold is 50 percent aggregate ownership, and control in the wider sense is not a separate ground. OFSI and the EU both apply a control limb, meaning an entity that a designated person controls but does not own above the threshold may still be treated as caught. In practice, this makes the UK and EU tests harder to resolve from public corporate records alone.
In a recent matter, a trade-finance team at a UK-regulated bank identified that a beneficiary's parent company was not itself listed but appeared to be subject to the direction of a listed individual through a management agreement. We advised on the ownership-and-control analysis, supported the bank in preparing a precautionary OFSI notification, and assisted in structuring the internal escalation. The matter was resolved without enforcement action, but the timeline from initial flag to resolution was tighter than the team had anticipated.
The practical steps for applying this test are:
- Obtain corporate-registry documentation for the counterparty and each material intermediary, going at least two layers up the ownership chain.
- Screen each natural person with more than 25 percent beneficial ownership against the UK Sanctions List and the UN Consolidated List – a lower threshold than the 50 percent trigger, but the appropriate starting point for investigative depth.
- Assess whether any listed person exercises control through non-ownership means: read the constitutional documents and any material contracts disclosed in public filings.
- Where uncertainty remains, escalate to compliance counsel for a written assessment before the facility is confirmed or drawn.
Step 4: Screen goods, routes, and documents – not only parties
Party screening is necessary but not sufficient. Effective trade-finance sanctions controls under OFSI also require screening of the goods being financed, the shipping route, the ports of call, and the trade documents themselves for internal consistency. A bill of lading that names a clean port of loading but describes goods that are controlled under the UK export-control regime – or that shows a vessel with a history of flag changes in high-risk jurisdictions – raises a separate and parallel set of questions.
OFSI's enforcement posture has paid increasing attention to trade-finance structures where the transaction documents are facially clean but the goods or route present an obvious connection to a sanctions-relevant destination. In those cases, a "clean" party screen is not a defence. The question is whether the financing entity knew or had reasonable cause to suspect the connection.
The cross-regime dimension is significant here. The EU's dual-use export-control rules and the UK Export Control Order both apply to the classification and licensing of goods that could have both civilian and military applications. A UK bank financing a transaction that involves controlled goods without any licence being in place may face both an OFSI trade-finance breach and an ECJU export-control exposure. In our cross-border practice, we regularly advise trade-finance teams on both simultaneously, because the facts that trigger one set of questions almost always trigger the other.
Document-level red flags to build into your review process include:
- Descriptions of goods that are vague, internally inconsistent, or inconsistent with the stated commercial purpose.
- Multiple amendments to the letter of credit, particularly where the beneficiary name, the port, or the goods description changes after initial issuance.
- Transhipment through a jurisdiction that has been the subject of a sanctions advisory.
- Vessel names or IMO numbers that do not match the stated route on public vessel-tracking sources.
Step 5: Manage the OFSI reporting obligation in real time
The statutory reporting obligation under SAMLA requires a relevant firm to report to OFSI as soon as practicable once it knows or has reasonable cause to suspect that it holds funds or economic resources of a designated person, or that a counterparty is a designated person. There is no statutory grace period, and OFSI treats delay in reporting as an aggravating factor in any subsequent enforcement assessment.
In trade finance, this obligation can crystallise at any stage of the transaction lifecycle. The obligation may arise when a shipment is in transit, when documents are presented, or when a reimbursement claim is made by a confirming bank. Operationally, this means that the compliance escalation pathway must be able to produce a decision – screen, hold, report – within a timeframe measured in hours rather than days once a flag is raised.
The reporting obligation also has a record-keeping corollary. OFSI expects firms to maintain records of the basis on which they concluded that reporting was not required as well as the records of what was reported. In our practice, we advise maintaining contemporaneous written records of every screening decision that involved a judgment call, because those records form the foundation of any enforcement defence if a transaction is later scrutinised.
Compare this with OFAC's reporting regime, where a VSD (voluntary self-disclosure to a regulator) is an optional but penalty-mitigating step. Under OFSI, the initial duty to report is a legal obligation, not a discretionary mitigation choice. That difference in structure requires different compliance-process design. If your trade-finance programme was built around OFAC's VSD model, it will not meet the OFSI statutory standard without modification.
Step 6: Design and test the operational control architecture
A trade-finance sanctions control programme under OFSI has five operational layers, each of which must function independently and interact correctly with the others.
First, automated screening: the screening engine must cover the UK Sanctions List, the UN Consolidated List, and any additional lists required by the institution's risk appetite. Screening must run at the point of onboarding and at the point of transaction, and it must be triggered again by any amendment to the transaction documents.
Second, a manual-review protocol: automated screening generates false positives and may miss ownership-and-control risks that require human judgment. The manual-review protocol must set out who reviews, within what timeframe, against what criteria, and with what escalation path.
Third, a hold and investigation workflow: when a transaction is placed on hold pending investigation, there must be a defined process for communication with the customer, document preservation, legal escalation, and OFSI notification if the investigation confirms a match.
Fourth, a licensing workflow: where a specific licence is needed, the application must be prepared by a person with sufficient knowledge of OFSI's requirements. An incomplete or poorly framed application can delay the outcome by months. We regularly assist trade-finance teams in preparing OFSI licence applications where the standard approach has stalled.
Fifth, a record-keeping system: records of screening decisions, ownership-and-control analyses, reports to OFSI, and licence applications must be retained for the period required by the relevant regulations. Verify the current retention period applicable to your institution against the regulations in force at the time.
Testing the architecture is as important as building it. Controls that are well-designed on paper but that fail when a transaction moves through the system quickly – as trade-finance transactions do – provide no real protection. Periodic control testing against realistic transaction scenarios, including scenarios with embedded red flags, is part of a defensible compliance programme.
Step 7: Address the cross-regime exposure – OFAC, EU, and UN dimensions
A trade-finance transaction processed through a UK-regulated institution rarely touches only OFSI. Secondary-sanctions risk under OFAC arises where a transaction has a US-dollar leg, involves US-origin goods, or uses a US person (including a US correspondent bank) in the chain. OFAC's reach in trade finance extends to any transaction that "touches" the US financial system, and the extraterritorial dimension means a breach can occur even where the UK-regulated entity believed the transaction was wholly outside US jurisdiction.
The EU regime applies where the counterparty, the financier, or the goods have a material EU connection. Where a transaction involves a UK-regulated institution and an EU-regulated confirming bank, both regimes apply in parallel, and the stricter prohibition governs. A UK general licence that permits a category of transaction may have no equivalent in the relevant EU regulation, meaning the EU bank cannot proceed even where the UK bank can. We have advised on several transactions where this divergence stalled a trade-finance facility at the EU correspondent stage.
The UN Consolidated List is the baseline. UK, EU, and OFAC sanctions each incorporate UN designations, but all three regimes also carry autonomous listings that go beyond the UN list. A counterparty may be clean against the UN list and simultaneously designated under one or more autonomous regimes. Screening against the UN list alone is not an adequate control.
For multinationals with operations in Singapore, the UAE, or Japan, local sanctions regimes may also apply. Singapore's MAS-administered controls and Japan's Foreign Exchange and Foreign Trade Act both carry trade-finance-relevant prohibitions that can interact with the UK and EU positions. In our cross-border practice, we advise institutions to map the applicable regimes at the outset of any transaction involving a counterparty or corridor that is known to carry elevated sanctions risk.
Related practices
- Sanctions compliance audit and testing – stress-testing existing controls against live transaction scenarios.
- Trade-finance sanctions controls under OFSI: advanced considerations – structured finance, supply-chain finance, and SBLC-specific issues.
Common misconceptions about trade-finance sanctions controls
The most persistent myth we encounter in our practice is that a clean party screen – the named applicant and beneficiary passing automated screening – discharges the compliance obligation. It does not. The ownership-and-control test, the goods-and-route review, and the document-consistency check are all independent obligations. A passed party screen reduces one dimension of risk; it does not eliminate the others.
A second persistent myth is that OFSI's enforcement activity is limited to the largest and most obviously wilful breaches. OFSI's published enforcement guidance makes clear that it will take action for less serious breaches and that it will consider the adequacy of the firm's compliance programme as a factor in determining the response. An institution that can demonstrate a well-designed, tested, and documented programme is in a materially better position than one that cannot, even where both face the same underlying facts.
A third misconception – particularly common among institutions whose primary sanctions exposure has historically been OFAC-facing – is that the OFSI regime is a simplified version of the OFAC regime. It is not. The control limb of the ownership-and-control test, the strict-liability reporting obligation, the different general-licence architecture, and the divergence between the UK Sanctions List and the SDN List all create compliance requirements that do not translate directly from OFAC practice. A programme that was built for OFAC and then adapted at the margin for OFSI will have gaps.
If a transaction has already been flagged, or a payment instruction has already been processed against a counterparty that is now under review, an early legal review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.