A European trading house completes its annual counterparty review in January 2026 and finds that a key supplier has been listed under a Council Regulation that entered into force three weeks earlier. Contracts are mid-performance. Goods are in transit. Invoices are outstanding. The compliance officer's first question is not whether the listing is lawful – that is a separate proceeding – but whether the existing relationship can be wound down in an orderly way, and if so, how.
Winding down sanctioned exposure (the process of terminating or completing existing contractual arrangements with a listed counterparty in a manner authorised by the applicable EU Council regulation) requires a structured sequence: identify and freeze, assess the applicable derogations, obtain any required authorisation, execute the wind-down within permitted scope, and report. EU sanctions regulations do not automatically permit unwinding; the default is prohibition, and derogations are narrow.
This guide walks through each phase of that sequence, identifies where businesses most often go wrong, and explains where EU rules diverge from OFAC and OFSI – three regimes that frequently apply simultaneously to a single cross-border business.
Step 1: Identify the exposure and freeze immediately
The first obligation on designation is not to wind down – it is to freeze. EU sanctions regulations impose an immediate prohibition on making funds or economic resources available to, or for the benefit of, any listed person, as well as an obligation to freeze assets already held. A business that continues performing a contract after a counterparty is designated is in breach from that moment, not from the date it learns of the listing.
The practical mapping exercise therefore runs in parallel with the freeze. An EU-regulated business should identify every contract, payment stream, inventory position, and trade-finance instrument connected to the designated counterparty or to any entity that the designated person owns or controls. Ownership and control (the EU test for whether a non-listed entity is caught because a designated person holds or exercises decisive influence over it) is the critical expansion step: screening the listed name alone is not sufficient.
In our cross-border practice, we regularly see businesses that freeze payments correctly but overlook open letters of credit, ongoing shipments under free-carrier terms, or consignment stock held in a third country. Each of these is a form of economic resource that the regulation catches. Have you mapped every financial and in-kind obligation – not only the obvious receivables?
One further point on timing: EU Council regulations are typically published in the Official Journal of the European Union and enter into force on the day of publication or the specific date stated in the regulation. The clock starts then, not when your screening system flags the name. Systems that ingest list updates on a delay create a gap of genuine legal risk.
Step 2: Assess the applicable derogations and authorisations
EU sanctions regulations typically provide a set of derogations – defined categories of transaction that remain permitted notwithstanding the general prohibition – and an authorisation route that allows competent national authorities to license specific transactions on a case-by-case basis. Neither route is automatic, and the categories differ between regimes and between the thematic regulations under which the relevant designation is made.
Common derogation categories across EU regimes include: payments satisfying a pre-existing obligation before the designation date; transactions necessary for humanitarian purposes; and payments for legal fees and reasonable professional expenses. Whether a particular wind-down step falls inside one of these categories is a legal analysis, not a judgment call the compliance team should make unilaterally.
The authorisation route is more flexible but slower. A business must apply to the competent national authority of the EU member state in which it is established – typically the national treasury or finance ministry designated for sanctions purposes – and demonstrate that the transaction meets the criteria set out in the regulation. Timelines vary by member state. Some authorities process applications within a few weeks; others take considerably longer. Where a matter is time-sensitive, an early application preserves options that close if the contract lapses or goods are abandoned.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. For an assessment of your exposure under the EU regime, contact Calder & Vance at info@caldervance.com.
Step 3: Execute the wind-down within the permitted scope
Once the applicable derogation or authorisation is confirmed, execution must stay strictly within its terms. An authorisation to receive a final payment does not permit delivery of a further shipment. A derogation for pre-existing obligations does not cover obligations created or extended after the designation date. EU competent authorities scrutinise this closely, and a wind-down that exceeds the authorisation's scope is itself a breach.
The practical steps in a well-managed wind-down typically include:
- Serving formal notice of suspension or termination on the counterparty, consistent with the contract and with the regulation's notification requirements.
- Arranging the return or secure holding of goods already delivered but not yet paid for, where payment would now constitute a prohibited transfer.
- Coordinating with freight forwarders and shipping agents to divert or hold in-transit shipments if their delivery would place economic resources at the disposal of the designated person.
- Notifying relevant financial institutions – including correspondent banks and trade-finance providers – of the designation and the restricted status of pending instruments.
- Documenting every step with time-stamps, decision records, and legal sign-off, in preparation for the reporting obligation that follows.
A critical caution on third-country parties: if a third-country freight forwarder, sub-contractor, or agent continues to perform services that benefit the designated counterparty, an EU-established business that procured those services may remain exposed. The EU-based business cannot contract its way out of the prohibition simply by inserting a third-country intermediary.
Step 4: Report to the competent national authority
EU sanctions regulations require that persons holding frozen funds or economic resources notify the competent national authority promptly – in most member states, within a short statutory window after the freeze is applied. This notification obligation applies whether or not the business applies for an authorisation, and it is separate from any suspicious transaction report that may be required under anti-money laundering rules.
The notification must typically state the amount and nature of the frozen assets, the identity of the designated person, and the contractual relationship from which the exposure arises. Firms that hold these assets over an extended period may face periodic reporting obligations as well. Failure to notify is an independent infringement and is treated as an aggravating factor in any subsequent enforcement proceedings.
In our experience, the notification step is the one most often delayed. The compliance team focuses on executing the freeze and managing counterparty relations; the reporting deadline passes unnoticed. Prompt legal advice at the moment of identification prevents this entirely.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Write to info@caldervance.com to discuss the position.
How does the EU wind-down regime compare with OFAC and OFSI?
The EU, OFAC, and OFSI regimes share the same basic architecture – freeze, prohibit, permit by exception – but the divergences are operationally significant for any business subject to more than one of them simultaneously.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) is mechanical and aggregated. The EU ownership and control test captures a broader set of relationships, including situations where a designated person exercises decisive influence without holding a majority stake. A counterparty that falls just below the OFAC threshold may still be caught under EU rules. The safer default in a cross-border diligence review is to apply the stricter prohibition.
On authorisations, OFAC issues specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction) and general licences (standing authorisations that permit defined categories of transaction without a separate application) centrally through its licensing division. EU authorisations are issued by individual member-state competent authorities, which means that a business operating in multiple member states may, in theory, need authorisations from more than one authority for a single wind-down involving assets or counterparties in those member states. Coordination between authorities occurs but is not guaranteed.
Under OFSI in the United Kingdom, the licensing regime was restructured following the UK's departure from the EU. OFSI now administers a consolidated licensing process for UK financial sanctions, but the legal tests differ in important respects – particularly on control – from both the OFAC and EU positions. A business subject to all three regimes should not assume that a single analysis serves all three. A OFAC-compliant wind-down may not satisfy OFSI or EU requirements, and vice versa.
For businesses with operations in the United States, the European Union, and the United Kingdom simultaneously, the practical rule is: identify the most restrictive obligation in each regime and design the wind-down to satisfy all three. Where a permitted action under one regime would constitute a violation under another, the prohibition governs.
See also our guide on winding down sanctioned exposure under OFAC and our Japan wind-down guide for regime-specific detail on those programmes.
Risk flags: where EU wind-downs go wrong
The most common points of failure in an EU-regulated wind-down arise not from ignorance of the prohibition but from imprecision in execution.
The first risk is the continuing-benefit trap. A business may cease direct payments but fail to terminate services – logistics, maintenance, software licences, insurance – that continue to benefit the designated person indirectly. Each of these is a potential infringement regardless of whether money moves directly to the listed entity.
The second risk is the stale-authorisation problem. An authorisation granted by a competent national authority is granted in the context of facts presented at application. If the underlying facts change – the goods change category, the delivery route changes, the designated person's ownership of the counterparty changes – the authorisation may no longer cover the transaction as executed. Updated advice is required before the altered step is taken.
The third risk is multi-regime inconsistency. A wind-down executed under EU rules but not reviewed against OFAC or OFSI requirements can create exposure in those jurisdictions. This is particularly acute where the business's financial institution is a US correspondent bank subject to OFAC jurisdiction, or where the business has a UK subsidiary subject to OFSI.
The fourth risk is group-entity inadvertence. A parent company freezes correctly, but a subsidiary in a different member state continues to perform under its own contract with the same counterparty, unaware of the parent's compliance decision. An EU-wide review of all group entities' exposure at the moment of designation is essential.
A fifth and frequently overlooked risk concerns secondary-sanctions exposure. Certain EU sanctions regimes interact with regimes administered by third countries. A European business that proceeds with a transaction under an EU derogation may nonetheless expose itself to US secondary-sanctions risk if the transaction involves a third-country financial institution or person subject to OFAC jurisdiction. Our cross-border practice addresses this intersection regularly.
A common misconception: the derogation is not a permit to proceed
A persistent myth among compliance teams encountering EU wind-down questions for the first time is that the existence of a derogation in the applicable Council regulation creates a right to proceed. It does not. Derogations define a category of potentially permitted conduct; they do not authorise the specific transaction.
In practice, whether a step falls within a derogation requires a precise factual and legal analysis against the text of the applicable regulation. Member-state competent authorities interpret derogations narrowly, and there is meaningful variation in interpretation between jurisdictions. A step that the German authority considers covered may not be viewed the same way by the French authority – and either interpretation may be challenged before the national courts or, ultimately, before the EU General Court.
We regularly advise businesses that have assumed a derogation covers their position, only to find on close analysis that the transaction in question falls outside its scope by virtue of a timing issue, a change in the counterparty's ownership, or a feature of the goods that was overlooked during the initial review. Early legal engagement – ideally before the wind-down steps are taken, not after – is the single most effective risk-reduction measure available.
Related practices
- Correspondent banking and de-risking under OFAC – sanctions risk management for financial institutions and correspondent relationships.
- Winding down sanctioned exposure under OFAC – procedural guide for US-regime wind-downs and licensing considerations.