A Swiss trading company processes a routine payment to a long-standing distributor. Six weeks later, a revised sanctions ordinance is published. The distributor's parent now appears on the SECO list. The payment was compliant at the time – but was it? And what should the company do now? These questions are not hypothetical for compliance officers working across European and international trade routes.
A voluntary self-disclosure (VSD – a proactive report by a business or individual of a potential sanctions violation, submitted to the competent authority before that authority has detected the issue independently) to Switzerland's State Secretariat for Economic Affairs (SECO – the authority responsible for implementing and enforcing Swiss economic sanctions under the applicable Swiss embargo legislation) can materially affect how a matter is resolved. SECO operates a recognised, if less publicised, VSD mechanism. Submitting early, completely, and accurately is the determining factor in whether enforcement escalates or resolves at the administrative level.
This guide explains the governing regime, the disclosure procedure step by step, how the Swiss position compares with OFAC, OFSI, and the EU, the risk flags that counsel watches for, and when to involve a sanctions lawyer before contacting SECO directly.
Step 1 – Understand the governing regime: SECO and Swiss sanctions law
Swiss sanctions obligations flow from the applicable embargo legislation and associated ordinances, which SECO implements and enforces. The Federal Council issues ordinances that give domestic effect to UN Security Council measures and, in a growing number of cases, measures that align with EU and US positions on specific programmes. SECO is the central contact for businesses with potential exposure under any of those ordinances.
Swiss law differs structurally from the US and UK regimes. There is no statutory VSD programme in Switzerland with codified penalty-reduction tables. Instead, the benefit of early disclosure is exercised through SECO's enforcement discretion – the authority's established practice of treating cooperation and voluntary reporting as mitigating factors when it determines whether to refer a matter to criminal prosecution via the Federal Department of Justice or to handle it administratively. In our cross-border practice, this distinction is operationally significant. Businesses accustomed to the OFAC framework, where the agency publishes guidance on VSD credit, must recalibrate expectations before they approach SECO.
One further structural point: criminal referral under Swiss law is a genuine risk for serious violations. A VSD submitted promptly and completely reduces – though it cannot eliminate – the probability of referral. The decision whether to refer rests with SECO and, ultimately, with the competent cantonal or federal prosecutorial authority.
Step 2 – Identify and scope the potential violation before disclosing
A VSD that is incomplete or that understates the scope of the violation can be worse than no disclosure at all, because it may later be characterised as a misleading or partial report. Before contacting SECO, a business must complete an internal scoping exercise.
The scoping exercise has four elements. First, identify every transaction, payment, or delivery that may have involved a person or entity appearing on the relevant SECO-administered list, or otherwise subject to the applicable ordinance. Second, establish the relevant dates and confirm the legal position as it stood at each date – some violations arise from a gap between an EU or US listing and the Swiss domestic ordinance that follows it, and those timing questions are legally material. Third, map the corporate chain: were subsidiary entities, intermediaries, or agents involved? Fourth, identify any internal escalation failures – who knew what, and when.
In our experience, the scoping stage is where the critical decisions about the VSD's content are made. An overly narrow scope submitted in haste creates the risk of a supplemental disclosure that reads as an afterthought. An over-broad scope that flags transactions not actually in issue may create unnecessary exposure. Experienced compliance counsel can help calibrate that perimeter before a single word is sent to SECO.
Is the scope clear? If not, that uncertainty should be resolved internally first. SECO will expect a coherent, bounded account of what happened.
Step 3 – Prepare and submit the disclosure
The disclosure to SECO should be submitted in writing. Switzerland is a multilingual jurisdiction; submissions are typically prepared in German, French, or English, depending on the business's principal office and the nature of the matter. SECO accepts English, though German and French are more common for domestic operators. For cross-border businesses, a bilingual submission – English plus German – is a reasonable precaution where resources allow.
The submission should set out, clearly and in sequence: the identity of the disclosing entity and the individuals responsible for the matter internally; a factual chronology of the events constituting the potential violation; the regulatory basis – naming the relevant ordinance generically rather than by article number; the steps already taken internally to remediate the issue; and the proposed or already-implemented compliance improvements. Omitting the remediation section is a common error. SECO, like other enforcement authorities, weighs what a business has done since discovery.
The position above covers the standard case. Your facts – the counterparty involved, the goods or funds, the ordinance in issue, the timing relative to the listing, and any prior compliance history with SECO – change the analysis materially. For an assessment of your exposure, contact Calder & Vance at info@caldervance.com.
Document the submission date and retain a copy of everything submitted. SECO may follow up with questions. Treat each response as if it were a fresh disclosure – the accuracy and completeness obligations continue throughout the process.
Step 4 – Manage the post-submission engagement with SECO
After receipt, SECO typically acknowledges the disclosure and may request supplemental information. The timeline for SECO's assessment varies; there is no published statutory clock for administrative review of voluntary disclosures in Switzerland, and the process can extend over weeks or months depending on the complexity of the matter and SECO's current enforcement priorities.
During this period, the disclosing business should maintain a single point of contact with SECO, provide supplemental information promptly, and avoid any further conduct that could give rise to additional violations. If SECO requests an interview or a meeting, experienced counsel should attend. The record of that meeting may later become relevant if the matter is referred further.
SECO may resolve the matter administratively by issuing a written warning, imposing an administrative sanction, or closing the file without further action. Alternatively, it may refer the matter to the competent authority for criminal investigation. The outcome depends on the severity of the underlying violation, the quality of the VSD, the completeness of remediation, and SECO's assessment of wilfulness or negligence. No outcome can be guaranteed – that is true of every regulatory process – but a well-prepared VSD consistently shifts the probability distribution toward administrative resolution.
If a transaction has already been flagged internally or by a correspondent bank, or if a filing has been questioned, an early review by a sanctions lawyer can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
How does SECO's approach compare with OFAC, OFSI, and the EU?
The Swiss VSD mechanism operates differently from its nearest counterparts, and understanding those differences is essential for a business that faces potential exposure under more than one regime simultaneously – which, for any internationally active firm, is the normal case.
Under OFAC, voluntary self-disclosure is a formally codified mitigating factor. OFAC's enforcement guidelines describe VSD as resulting in a significant reduction in the base penalty amount for violations that qualify. The process involves a preliminary notice within a short window after discovery, followed by a full submission within a defined period. The penalty calculation is explicit and published. Under the applicable OFAC enforcement guidelines, a VSD can reduce the applicable base penalty substantially – verify the current position before relying on it.
Under OFSI, the UK's financial-sanctions authority, voluntary disclosure is likewise a recognised mitigating factor in the civil monetary penalty calculation. OFSI's published enforcement guidance treats the quality and timing of disclosure as a factor that can move a case from the upper to the lower end of the penalty range. OFSI also operates a mandatory reporting obligation for certain regulated-sector firms – financial institutions must report knowledge or reasonable suspicion of a sanctions breach within a defined period. That obligation is distinct from, and in addition to, any voluntary disclosure of a violation by the firm itself.
The EU presents a more complex picture. Sanctions enforcement in the EU is decentralised: each member state's competent authority administers breaches occurring within its territory. There is no single EU-level VSD programme. Some member states have relatively mature VSD practices; others are at an earlier stage of enforcement development. For a business with operations across several EU jurisdictions, a violation that touches multiple member states may require coordinated disclosures in each, managed in parallel.
Switzerland's position sits adjacent to – but outside – the EU. SECO administers its own list and its own ordinances. Where Swiss sanctions align with EU positions, the legal instruments are nonetheless distinct. A transaction that is subject to an EU member state's enforcement does not thereby become a SECO matter, and vice versa – though in practice the facts often overlap. Cross-border businesses must map the exposure regime by regime, not once in the aggregate. Our practice regularly advises on exactly this multi-regime mapping exercise.
The practical divergence across regimes raises a strategic question: where one disclosure is required and another is discretionary, in what sequence do you file? The answer depends on the facts of each matter, the regimes engaged, and the risk that disclosure in one jurisdiction prejudices the position in another. That is a legal judgement, not an administrative one.
Risk flags: when the standard process does not apply
Several circumstances change the risk calculus and, in some cases, disqualify a matter from the standard VSD pathway entirely. A compliance officer who identifies any of the following should involve counsel before taking any step toward disclosure.
Criminal exposure already exists. If SECO or another Swiss authority has already opened an investigation, or if there is any indication that a criminal referral has occurred or is imminent, the VSD opportunity may have closed. Submitting a VSD after an investigation has commenced does not carry the same mitigating weight and may, depending on timing and content, create additional legal risks. Swiss criminal procedure provides specific rights and obligations in that scenario which differ from the administrative process.
Multiple jurisdictions are engaged. Where the same underlying transaction involves potential violations under OFAC, OFSI, the EU, or another regime in addition to SECO, disclosures must be coordinated. A disclosure in one jurisdiction that produces a paper record may be discoverable or usable in proceedings in another. The sequence and content of each disclosure should be planned as part of a single coordinated strategy.
The counterparty was a sanctioned person. If the counterparty was not merely a company owned by a listed person but was itself a designated individual or entity at the time of the transaction, the severity of the violation is higher. SECO and prosecutorial authorities treat transactions with directly designated persons as more serious than those that engage the ownership-and-control test indirectly.
Internal failures were systemic. A one-off processing error and a systemic failure in the compliance programme present differently to an enforcement authority. SECO, like OFAC and OFSI, considers whether a violation was isolated or reflects an inadequate compliance structure. Systemic failures attract more scrutiny and require more substantial remediation evidence in the VSD submission.
Goods, not only financial transactions, were involved. Swiss export-control obligations – administered separately but with close coordination with SECO for dual-use and strategic goods – may be engaged alongside financial-sanctions exposure. A shipment of controlled goods to a sanctioned destination raises both financial-sanctions and export-control questions. The VSD strategy should address both, which may mean filings to different competent authorities.
The objection: "We can manage this internally without involving a sanctions lawyer"
The most common misunderstanding we encounter is this: a compliance team believes that because the potential violation appears minor or technical, it can prepare and submit the VSD without external counsel. The logic is understandable. The risk is real.
SECO's discretion operates in the space between what the business says happened and what SECO's own analysis concludes. A VSD that is factually accurate but legally framed in a way that inadvertently overstates wilfulness, or that omits a timing nuance that would reduce the severity of the violation under the applicable ordinance, costs the business in enforcement outcomes. Compliance teams expert in the facts are not always best placed to assess the legal framing.
The second misunderstanding is about the cross-border dimension. A business that has disclosed to SECO and considers the matter closed may have unaddressed exposure under OFSI if its UK operations were involved, or under the EU regime if a European subsidiary handled the payment. We regularly advise businesses that discover – after a unilateral SECO disclosure – that the same facts give rise to separate obligations elsewhere. Managing those obligations sequentially, rather than as a coordinated package, is avoidable and expensive.
The position above represents the general case. The decision whether external counsel adds value on a specific matter turns on the facts: the severity of the potential violation, the regimes in play, the strength of the existing compliance record, and the internal resources available. In our experience, even a brief preliminary consultation before the VSD is filed consistently produces a better-framed submission.
Related practices
- Apparent violation assessment (EU) – scoping potential breaches under EU Council sanctions regulations
- Voluntary self-disclosure: Singapore guide – how the MAS and MLAW disclosure process works for cross-border firms
- Voluntary self-disclosure: UAE guide – disclosure procedure under the applicable UAE sanctions regime