A commodity trader operating out of a regional hub discovers – mid-shipment – that one of its long-standing counterparties has appeared on a sanctions screening alert. The relationship spans multiple contracts, several outstanding invoices, and two open letters of credit. The question is not whether to exit. The question is how to exit without making things worse.
Winding down sanctioned exposure under the UAE regime requires a methodical, sequenced approach: identify all in-scope obligations, confirm which transactions fall within any applicable wind-down period, report to the relevant authority, and document every step. The UAE's autonomous sanctions regime – administered principally through the Executive Office for Control and Non-Proliferation (EOCN) – operates alongside the UAE's obligations under United Nations Security Council resolutions, and both layers must be addressed in parallel. Businesses that treat wind-down as a purely commercial unwinding routinely miss the reporting and record-keeping obligations that follow.
This guide walks through the wind-down procedure step by step, maps the points where the UAE regime diverges from OFAC and OFSI, identifies the risk flags that most often produce enforcement exposure, and explains when to involve external counsel.
Step 1 – Map the full extent of your exposure before you move anything
The first action in any wind-down is a comprehensive exposure map: every contract, payment obligation, asset holding, and service arrangement connected to the sanctioned counterparty or to any entity that counterparty owns or controls. Under the UAE regime, as under OFAC's 50 percent rule (the rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked), the legal prohibition extends beyond the directly named party. An entity that a designated person controls – even without majority ownership – may itself fall within the scope of the prohibition depending on the applicable instrument.
Do not assume that a counterparty not yet appearing on the UAE sanctions lists is unaffected. The UAE implements the UN Security Council Consolidated List as a matter of treaty obligation, and a designation at the UN level bites automatically within the UAE legal order. We regularly advise clients who have screened against the UAE's domestic lists but overlooked the UN layer entirely. That oversight can convert a manageable wind-down into a potential breach.
The mapping stage should produce a single consolidated register: each obligation, its current status, the parties involved (including any intermediate entity through which the exposure flows), the monetary value, and the deadline by which action is required. This register becomes the working document for every subsequent step.
Step 2 – Identify the applicable wind-down period and its limits
Whether a wind-down period is available, and how long it runs, depends on the specific instrument under which the designation was made and the terms of any general authorisation that the UAE authority has published. The EOCN and the relevant UAE Cabinet Resolutions govern the domestic autonomous programme; the UN Security Council committees govern the multilateral layer. Neither layer operates with a single universal wind-down window.
In practice, wind-down periods fall into two categories. First, an express authorisation period published by the relevant authority at the time of designation or shortly after – permitting a defined category of transactions (settlement of pre-existing obligations, repatriation of funds, closing of positions) within a stated timeframe. Second, a permission that must be obtained by application before any further transaction proceeds. These are materially different in risk profile. Acting under an assumed authorisation that does not in fact exist is not a defence; it is the act of breach itself.
A cross-border business operating between the UAE and jurisdictions subject to OFAC or OFSI must also check whether those regimes have issued a corresponding authorisation. The UAE may permit a particular step; OFAC may not. Where two regimes conflict, the stricter prohibition governs the transaction – not the more permissive one. This is the single most common source of wind-down failure that we see in cross-border matters.
What records and notifications does the UAE regime require?
UAE-regulated businesses and individuals who hold, identify, or transact in assets connected to a designated person are subject to notification and reporting obligations under the applicable UAE instruments. The EOCN is the primary point of contact for autonomous sanctions matters; for UN-list obligations, the relevant Security Council committee procedure also applies. These are not optional steps and they are not satisfied by internal documentation alone.
Record-keeping obligations attach from the moment exposure is identified, not from the moment a wind-down is completed. In our cross-border practice, the failure to begin contemporaneous record-keeping at identification – and to continue it through every subsequent step – is the single documentation error that most frequently complicates enforcement discussions later. A gap in the contemporaneous record invites questions about what was decided and when.
The record you produce should cover: the date and method by which the exposure was identified; the screening source that generated the alert; the legal analysis applied to determine the scope of the prohibition; the steps taken and the dates on which they were taken; any communications with the EOCN or other authority; and copies of all relevant transactional documents. Maintain these records for the period required under the applicable UAE instrument. Where a UK or EU nexus exists, OFSI and the relevant EU regulation impose their own record-keeping periods – and those periods may be longer than the UAE requirement.
Step 3 – Cease new business and manage pre-existing obligations
Once exposure is confirmed, no new obligations should be entered into with or for the benefit of the designated person or any entity caught through ownership and control. This prohibition is immediate. The wind-down process applies only to pre-existing obligations – contracts concluded, goods shipped, credit extended – before the designation took effect or before the business first had knowledge that it was dealing with a restricted party.
Managing pre-existing obligations involves a sequence of decisions. Which obligations can be closed or settled within any applicable authorisation period without further transaction? Which require a specific licence or permission before they can proceed? Which are simply frozen and cannot move at all pending further regulatory guidance? The answers will differ by obligation type, by regime, and by the terms of the specific designation.
Letters of credit and trade-finance instruments deserve particular attention. A confirming bank, an advising bank, and an issuing bank may each face separate exposure if they continue to process an instrument that is now tainted by a sanctioned counterparty. In a recent matter, a trading house in a regional hub had opened a letter of credit before a counterparty was listed. By the time the shipment arrived, the counterparty had appeared on the UN Consolidated List. We reviewed the applicable authorisation, confirmed that settlement of the specific instrument fell within its terms, and prepared the documentation package for the bank and the EOCN. The matter closed without enforcement action. The critical factor was the speed of legal analysis: the bank's compliance team had a decision in hand before the presentation deadline.
How does the UAE wind-down process differ from OFAC and OFSI?
The UAE, OFAC, and OFSI each approach wind-down authorisations differently, and those differences are operationally significant for any business with a cross-border footprint. Understanding the divergence is not academic – it determines which route is available, how long it takes, and what documentation the authority will expect.
Under OFAC, general licences published alongside or shortly after a designation frequently include an explicit wind-down period – often measured in days – during which a narrowly defined set of activities is permitted. The scope is strict: activities outside the stated terms are not covered, even if commercially connected to the wind-down. OFAC's guidance on the 50 percent rule is also the most detailed of the three regimes, and OFAC publishes interpretive guidance in the form of FAQs. Businesses with a US-nexus – USD-clearing, US-incorporated entities, US persons involved in the transaction – must satisfy OFAC requirements regardless of what the UAE has authorised.
OFSI, the UK financial sanctions authority, operates a specific-licence system and does not publish the same volume of general authorisations as OFAC. A specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) from OFSI can take weeks to obtain. In our experience, businesses that assume a UAE or OFAC authorisation extends to their UK operations are frequently incorrect. The UK's ownership and control test – the UK and EU test for whether a non-listed entity is caught through a listed person – is broader in scope than OFAC's mechanical 50 percent threshold and can capture entities that OFAC would not treat as blocked.
The EU regime adds a further layer for any business with a European connection. EU Council regulations impose their own prohibitions, their own authorisation procedures, and their own reporting obligations through national competent authorities. The EU's test for indirect ownership and control can reach entities that both the UAE and OFAC would leave outside the prohibition. Where a transaction touches the EU, early mapping of the EU position is not optional.
The practical implication: a wind-down that satisfies the UAE regime alone is not a compliant wind-down for a cross-border business. Build the compliance structure around the strictest applicable set of requirements.
Risk flags that most often produce enforcement exposure
Certain patterns appear repeatedly in wind-down matters that escalate to enforcement. Identifying them early – before they become part of the fact pattern – is the purpose of this section.
The first and most common is delayed identification. A screening alert generated by a counterparty-monitoring tool sits unreviewed for days or weeks. During that period, payments clear, shipments move, and invoices are issued. Each of those acts may constitute a separate breach. The administrative machinery of the business continues to operate on a relationship that compliance has flagged but not yet escalated. Autonomous sanctions regimes do not recognise an internal review backlog as a mitigating factor.
The second is partial mapping. The direct counterparty is identified and frozen. Its affiliates – subsidiaries, co-owned vehicles, related trading entities – are not. The relationship continues in a different form, through a different legal entity, effectively for the same commercial purpose. Under the ownership and control principles applied by the EOCN, OFSI, and the EU, that continuation may be a continuation of the original prohibited relationship, not a separate, clean transaction.
The third is assumption of authorisation. A business assumes that a general authorisation covering a neighbouring situation also covers its specific transaction. It does not seek a formal opinion or a specific licence. The authorisation is read broadly; the authority reads it narrowly. The gap is the violation.
A fourth risk flag, particularly relevant in the UAE context, is the failure to account for the UN layer alongside the domestic UAE programme. The UN Consolidated List feeds into the UAE regime by operation of the UAE's treaty obligations. A counterparty that is not on the UAE Cabinet Resolution lists but is on the UN list is still a restricted counterparty in the UAE. Screening only against domestic lists misses this.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the instruments in play, and the regimes with a nexus – change the analysis materially. For an initial assessment of your UAE wind-down exposure, contact Calder & Vance at info@caldervance.com.
When should you involve external sanctions counsel?
Sanctions counsel should be involved at the earliest point at which the exposure is confirmed – not after the wind-down is complete and certainly not after a notice from a regulator. The value of early involvement is not procedural: it is substantive. An experienced adviser can determine whether an applicable authorisation exists, confirm its scope, identify the cross-regime implications, and produce the documentation record in the form that an authority expects to see.
There are specific inflection points that almost always require external counsel. The first is where the designation was announced recently and the precise scope of any available wind-down period is unclear. Acting on an incorrect reading of an authorisation is indistinguishable, in outcome, from acting with no authorisation at all. The second is where the wind-down involves a multi-jurisdictional transaction – a UAE counterparty, a European bank, USD clearing, and goods shipped through a third country. Each leg may have a different legal regime, a different authority, and a different permission requirement. Coordinating those in parallel is the task of cross-border sanctions counsel. The third is where there is any possibility that value has already moved in breach of the applicable prohibition. That changes the analysis from wind-down management to enforcement defence, and the two require different approaches from the outset.
If a transaction has already been flagged, a filing has been refused, or there is doubt about whether steps taken during the wind-down were within authorisation, an early review preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com.
A final word on the myth that wind-down is straightforward once a decision to exit is made. The business decision to exit is easy. The legal execution is not. Sanctions prohibitions do not lift when commercial intent changes; they lift when the applicable authority confirms they are no longer engaged, or when the statutory requirements for authorisation are satisfied. Treating wind-down as a purely operational task – a matter for the operations team, not the legal team – is where businesses most often create the very enforcement exposure they were trying to avoid.
Related practices
- Correspondent banking and de-risking (OFAC) – managing sanctions-driven de-risking in correspondent relationships
- Winding down sanctioned exposure under the UN regime – step-by-step guide to UN Consolidated List wind-down
- Correspondent banking and de-risking – BIS and the EAR explained – export-control dimensions of de-risking decisions