A mid-sized regional bank operating across two continents receives a notice from its primary US dollar clearing correspondent: the relationship will be terminated in sixty days. No detailed explanation is provided. The bank's compliance team suspects the decision is linked to a high-risk jurisdiction exposure the correspondent has internally assessed. The bank has no designated counterparties, no active OFAC violation on record, and a compliance programme it considers adequate. Yet the correspondent is walking away. What are the legal and commercial options? And what does this situation reveal about how OFAC's rules shape correspondent-banking decisions in ways that go far beyond simple list-screening?
Correspondent-banking de-risking driven by OFAC exposure is one of the most consequential yet least litigated pressures in cross-border financial services. The governing authority is the US Office of Foreign Assets Control ("OFAC"), which administers economic sanctions under IEEPA and related statutes. The practical trigger is not always a designation: a correspondent may exit a relationship because the respondent bank's customer book, geographic footprint, or ownership chain creates secondary-sanctions or primary-sanctions risk the correspondent is unwilling to price or manage.
This case comment examines an anonymised matter in which a respondent bank faced abrupt de-risking, traces the legal and commercial steps taken, and draws out the lessons that apply to any financial institution managing OFAC risk across a multi-jurisdiction correspondent network. The analysis covers the US position, the interaction with UK and EU rules, and the points at which specialist counsel adds the most value.
The situation: what the respondent bank was facing
The respondent bank held US dollar correspondent relationships with two US clearing banks. Both relationships were operating normally until one correspondent issued a termination notice citing "strategic risk-appetite realignment." The second correspondent requested an urgent questionnaire covering the bank's sanctions-screening methodology, geographic exposure, and ownership structure. Both events happened within the same quarter.
On the surface, the bank appeared well-positioned. It maintained a transaction-monitoring system, conducted regular list screening against the OFAC SDN List (OFAC's list of Specially Designated Nationals and blocked persons), and had a written sanctions policy. Its ownership chain had been reviewed twelve months earlier and showed no listed entities at any level. Why, then, were two correspondents moving simultaneously toward exit?
In our experience, the answer lies in a gap that compliance programmes at respondent banks consistently underestimate. US correspondents are not only assessing whether a respondent has a designated person in its customer book today. They are assessing whether the respondent's risk exposure – its geography, product mix, customer segments, and institutional ownership – creates a systemic probability of future violation that the correspondent would then be held to have facilitated. That forward-looking risk calculus operates entirely outside the SDN List. It is driven by internal compliance modelling, regulatory examination findings, and the correspondent's own OFAC exposure under the strict liability standard applicable to primary-sanctions violations.
The bank's compliance team had not documented the analysis in a form a US correspondent could readily use. Its sanctions-policy document was internally oriented. It did not articulate, in terms a US compliance examiner would recognise, how the bank assessed jurisdiction risk, how it handled wire transfers involving high-risk categories, or how it addressed the indirect exposure created by its trade-finance operations in certain third-country corridors.
The legal question: what OFAC's rules actually impose on correspondents
The strict-liability standard under OFAC rules means that a US financial institution that processes a transaction involving blocked property – even without knowledge or intent – has committed a violation. This is the foundation of correspondent de-risking: the correspondent cannot rely on the respondent's screening as a legal defence. The correspondent is itself the regulated entity; the obligation is its own.
OFAC enforcement guidance makes clear that voluntary self-disclosure, cooperation, and the quality of a sanctions compliance programme are mitigating factors in any enforcement proceeding. A US correspondent that can demonstrate it conducted appropriate due diligence on its respondents – including periodic re-assessment, questionnaires, and documented risk-rating decisions – is in a materially stronger position than one that simply extended trust. Correspondents are therefore incentivised to gather documentary evidence of a respondent's compliance posture, and to exit relationships where that evidence is insufficient or where the residual risk cannot be priced.
What this means for a respondent bank is that the de-risking decision is, in legal terms, an exercise of the US correspondent's own compliance discretion. It is not an OFAC action. There is no designation, no civil penalty, no specific licence requirement triggered by the termination notice itself. The respondent bank has no direct recourse against the correspondent under OFAC rules. Its options lie in persuasion – demonstrating that the risk has been misread – or in remediation that changes the underlying risk profile.
That distinction matters enormously for strategy. A respondent that treats a de-risking notice as though it were an OFAC enforcement action will misdirect its resources. The response must be calibrated to the correspondent's actual concern, which is evidential and forward-looking, not to the enforcement posture of OFAC itself.
The position above covers the standard case. Your institution's facts – the correspondent's stated rationale, the nature of the flagged exposure, and the specific jurisdictions in play – change the analysis materially. For a confidential review of your correspondent-banking exposure, contact Calder & Vance at info@caldervance.com.
The cross-regime dimension: OFSI, EU rules, and the divergence that matters
Respondent banks operating across multiple jurisdictions face a layered problem: their obligations under UK and EU sanctions rules are not identical to OFAC's, and the divergences create compliance gaps that correspondents actively look for. Understanding those divergences is essential to presenting a credible risk narrative to a US correspondent.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more, in the aggregate, by blocked persons as themselves blocked, whether or not listed) is mechanical. It turns on ownership percentage alone. Under OFSI and the EU rules, the test extends to ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person): a non-listed entity can be treated as subject to a restriction if a listed person holds a majority ownership interest or exercises effective control by other means. The result is that an entity not caught under OFAC's rule may still be caught under OFSI or EU rules – and an institution with UK or EU operations must map both standards across the same ownership chain.
In the matter under review, the respondent bank's ownership-chain review had applied only the OFAC 50 percent threshold. When the US correspondent's compliance team applied its own internal model – which incorporated a control-based overlay drawn from its UK affiliate's policies – a minority-shareholding relationship was flagged as a potential concern. The minority shareholder was not listed under any regime. But it operated in a jurisdiction subject to comprehensive US sanctions, and the correspondent's model treated that as sufficient to require enhanced documentation.
We regularly advise on exactly this cross-regime pattern. The divergence between OFAC's ownership test and the OFSI/EU control standard is not a technicality. It is a live compliance gap that generates real de-risking pressure when a correspondent applies a composite risk model that incorporates elements of multiple regimes. A respondent bank that has documented its analysis only to OFAC standards leaves itself exposed when the correspondent is running a hybrid model. The practical lesson is to map ownership and control to all three standards simultaneously – and to document that analysis in a form accessible to an external reviewer.
How the matter developed: the steps taken and why
The first decision was to respond to the questionnaire from the second correspondent before addressing the termination from the first. A timely, detailed response to a live information request is the most direct lever a respondent bank holds. A termination notice, once issued, is harder to reverse; a questionnaire response, if compelling, can prevent the second relationship from following the first.
We assisted the bank in preparing a structured compliance disclosure document. This was not the bank's internal policy manual reformatted. It was a purpose-built evidentiary submission covering five areas: (1) the legal basis and scope of the bank's sanctions obligations under its home-country regime; (2) the bank's screening methodology, including list sources, match-resolution procedures, and escalation protocols; (3) the ownership-chain analysis to OFAC, OFSI, and EU standards; (4) the bank's high-risk-jurisdiction policy, including the specific transaction types it did and did not accept from those corridors; and (5) its record of compliance training and internal audit findings.
The document was structured to address the questions a US examiner would ask of the correspondent's own compliance function. That framing matters. A US correspondent's compliance team is not evaluating whether the respondent is a good bank in the abstract. It is evaluating whether the respondent's programme is one the correspondent can point to in an examination as evidence of adequate due diligence. Write for that audience.
The second correspondent accepted the submission and re-assessed the relationship. It downgraded the bank from "pending exit review" to "enhanced monitoring" – a commercially significant improvement. The first correspondent's termination notice was not reversed, but the bank used the period before the termination date to establish a new US dollar clearing relationship with a different correspondent, presenting the same disclosure document as part of its onboarding pack.
If a transaction or relationship has already been flagged – or a correspondent relationship is at risk – early advice can preserve options that narrow as the notice period shortens. Write to info@caldervance.com to discuss your position in confidence.
Risk flags: what this matter illustrates for similar institutions
Several risk patterns in this matter recur across the correspondent-banking de-risking instructions we see. Each is worth examining in its own right.
Documentation gap. The single most common vulnerability is a compliance programme that is well-designed in practice but poorly documented. A compliance officer who knows how the bank handles high-risk wires is not sufficient. The knowledge must be in writing, in a form a third party can assess without speaking to the compliance officer. Examiners and correspondents both work from documents; oral representations carry no weight.
Static ownership-chain reviews. Ownership chains change. A review conducted twelve months ago does not cover a shareholder restructuring completed last quarter. In our practice, we build ownership-chain reviews as living documents with a defined refresh cycle, not one-time snapshots. The question a correspondent asks is not "did you check once?" but "how frequently do you check, and what triggers an out-of-cycle review?"
Jurisdiction exposure without documented controls. Operating in or processing transactions through high-risk jurisdictions is not itself a violation. The question is whether the institution has documented controls that constrain the exposure to permissible categories. A respondent bank with trade-finance operations in a high-risk corridor but no written policy governing the transaction types it will and will not accept in that corridor is presenting an undifferentiated risk profile. Correspondents respond to that with de-risking.
Reactive rather than proactive correspondent management. The bank in this matter was responding to notices rather than managing its correspondent relationships as a strategic compliance function. Proactive engagement – periodic outreach to correspondent compliance teams, sharing of updated ownership documentation, invitation to conduct on-site reviews – changes the dynamic. A correspondent that has recently reviewed a respondent's programme is far less likely to apply an algorithmic de-risking trigger without first seeking clarification.
Failure to map secondary-sanctions risk. Secondary sanctions under OFAC can reach non-US persons engaging in significant transactions in certain sanctioned sectors or with certain categories of designated persons. A respondent bank's customer book may include entities whose transactions, even if not themselves prohibited under primary sanctions, create secondary-sanctions exposure for the correspondent. Respondent banks that have not assessed their customer base for secondary-sanctions vectors are carrying a risk they often cannot quantify – and correspondents know it.
The lesson and the myth this matter corrects
The lesson from this matter is precise: OFAC compliance is not a point-in-time certification. It is a continuously documented risk posture that must be legible to external reviewers who do not share your institution's context, culture, or operational knowledge.
There is a persistent myth in this space that correspondent de-risking is beyond the influence of the respondent bank – that US correspondents are simply applying blunt risk-appetite rules and no amount of documentation will change the outcome. That is incorrect. Correspondents exit relationships for which they have insufficient information or insufficient confidence in the respondent's risk controls. Both of those problems are solvable. We have acted for institutions that were able to retain or replace correspondent relationships by presenting a compliance disclosure of sufficient rigour to reframe the risk assessment.
The myth has a second layer: that de-risking is an OFAC problem and therefore requires an OFAC lawyer. De-risking is a correspondent-bank compliance problem. Its solution requires understanding of what OFAC rules actually require, how US correspondents interpret those requirements, and how the interaction with UK and EU rules creates additional documentation obligations. That is precisely the cross-regime, cross-institution analysis that specialist counsel is best placed to provide.
Related practices
- Correspondent-banking de-risking (OFAC service) – advisory and documentation services for institutions managing US dollar clearing risk.
- Swiss SECO correspondent-banking de-risking matter – a parallel case comment on de-risking pressure under the Swiss regime.
- Divesting a sanctioned interest in Australia – cross-border diligence and divestment under Australia's autonomous sanctions regime.