A UK-based precision-engineering company supplies specialist components to an overseas distributor. The components fall under export-control rules, and the original end-use certificates name a specific industrial customer in the receiving country. Months later, the UK Office of Financial Sanctions Implementation – OFSI (the authority responsible for enforcing financial sanctions in the United Kingdom) – opens an inquiry. The reason: the components appear to have reached a second-tier customer, one that carries a designation under the UK Consolidated List (the register of persons and entities subject to UK financial sanctions). The first-tier distributor is unlisted. The second-tier customer is not. The question becomes: did the exporter know, or should it have known?
As of April 2026, end-use and end-user controls sit at the intersection of UK export licensing – administered by ECJU under the Export Control Order – and UK financial sanctions, administered by OFSI under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA"). A failure in one regime frequently discloses a failure in the other. This matter illustrated that gap in acute form: the export-control end-use undertaking did not bind the second tier, and the OFSI prohibition on making funds or economic resources available to a designated person was engaged the moment sanctioned goods reached the listed end-user.
This case comment sets out the situation, the legal question, the analysis under OFSI and the relevant cross-border regimes, the options the exporter considered, the route taken, and the practical lessons for exporters, distributors, and compliance teams managing end-use obligations across multi-tier supply chains.
The situation: a routine supply chain conceals a designation problem
The exporter had supplied the components for several years under a standard open licence. Each shipment was accompanied by an end-user undertaking, signed by the distributor, confirming the stated industrial purpose and naming the authorised end-user. Nothing in the exporter's screening process flagged the distributor. The distributor sat outside all major designation lists at the time of each shipment.
What the exporter did not do was screen the downstream customer named in the end-user certificate. Its screening process operated at the counterparty level – the entity it invoiced – and did not extend to the declared end-user or to any sub-distributors. That gap is more common than it should be.
When OFSI opened its inquiry, it did so on the basis that economic resources – the components – had been made available directly or indirectly for the benefit of a designated person, contrary to the relevant thematic financial sanctions regulations. OFSI's jurisdiction attached not because the exporter had invoiced a listed party, but because the goods had conferred a benefit on one.
In our experience advising exporters on OFSI matters, this is precisely the scenario that catches well-intentioned businesses. The screening was real. The documentation was in place. But the programme had been designed to catch direct counterparty exposure, not second-tier beneficial receipt. Under UK financial sanctions, that distinction does not reduce the liability.
The legal question: what does "making available" mean in an indirect supply chain?
OFSI's prohibition on making funds or economic resources available to or for the benefit of a designated person extends beyond direct transactions. The operative phrase – "for the benefit of" – reaches indirect supply arrangements. Where goods pass through an unlisted intermediary and arrive at a designated end-user, the original supplier may have made those economic resources available indirectly.
The test is not limited to knowledge. SAMLA establishes civil liability on a strict basis for certain violations; an exporter does not need to have known that the end-user was listed in order to have contravened the prohibition. The knowledge question is, however, directly relevant to penalty quantum and mitigation. OFSI's enforcement guidance draws a clear line between a business that had no reasonable means of knowing and one that failed to conduct reasonable due diligence. That line is one of the most important in the penalty calculation.
What constitutes "reasonable" due diligence? OFSI does not prescribe a rigid methodology, but the consistent message from its guidance and from enforcement outcomes is that screening must reach the end-user, not merely the immediate counterparty. Where an end-user undertaking is in place, that undertaking names an entity – and that entity must be screened.
A parallel question arose under UK export-control rules. The ECJU end-use undertaking bound the distributor in respect of the stated end-user. If the goods were diverted to a different end-user, there was a potential breach of the licence condition – separate from, and cumulative to, the OFSI exposure. Two regulators. One supply-chain failure.
Cross-border dimension: how OFAC and the EU treat the same pattern
No cross-border analysis of an OFSI matter is complete without examining how other major regimes treat the same facts. The exporter in this matter had US-origin technology in the components. That single element brought BIS's extraterritorial reach into play under the Export Administration Regulations ("EAR"), even though the transaction was between UK and non-US parties.
Under OFAC's rules, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) would be the first test: was the distributor itself captured as an SDN-affiliated entity? It was not. But OFAC's rules on economic benefit to a Specially Designated National – the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) – raise the same indirect-benefit question as OFSI. A transaction structured to pass through an unlisted intermediary to a listed beneficial recipient does not escape OFAC's prohibitions.
The EU position under the relevant Council regulations is substantively similar in principle. The EU's ownership and control test (the EU test for whether a non-listed entity is caught through a listed person) applies to corporate structures; but the direct-benefit prohibition catches supply arrangements even where the intermediary is structurally clean. The EU General Court has confirmed, in the context of annulment proceedings, that designations can reach economic relationships that are not limited to formal ownership chains.
For the exporter, this convergence mattered. A voluntary disclosure to OFSI, if well-constructed, would need to account for the BIS exposure and, potentially, an EU-dimension inquiry. The compliance strategy had to span three regimes simultaneously. That is one reason why early legal involvement – before a disclosure is filed – reduces risk rather than creates it.
What options did the exporter consider?
Once the OFSI inquiry was confirmed, the exporter faced four immediate decisions. First: the scope of the apparent violation. How many shipments were affected? Were there multiple consignments that had reached the same end-user? The answer determined whether this was a single incident or a systematic programme failure.
Second: whether to make a voluntary self-disclosure – a VSD (an unsolicited disclosure of an apparent violation to the regulator before formal enforcement action is taken). OFSI's enforcement guidance treats a VSD as a significant mitigating factor. The guidance does not guarantee outcome, but it is well-established that a timely, complete, and candid disclosure reduces penalty exposure relative to a matter that OFSI discovers independently. The window for a VSD to carry full mitigating weight closes once the regulator has initiated its own inquiry. OFSI had opened a preliminary inquiry. Whether that window had fully closed was a judgment call that required early and precise legal advice.
Third: remediation. Even before a disclosure was filed, the exporter needed to address the immediate risk – suspending further shipments under the affected distribution arrangement, reviewing all open orders, and notifying the distributor of the OFSI position. Remediation that is concurrent with a disclosure demonstrates good faith and is reflected in penalty outcomes.
Fourth: the BIS dimension. Given the US-origin content, the exporter's counsel needed to assess whether a parallel disclosure to BIS was appropriate and, if so, whether the timing should be coordinated with the OFSI disclosure. Uncoordinated multi-jurisdiction disclosures carry risk: a statement made to one regulator can be read by another. Sequencing matters.
The route taken and what it involved
The exporter retained Calder & Vance to scope the apparent violation, advise on the VSD question, and manage the OFSI engagement. We prepared a full transaction review across the relevant shipment period, mapping each consignment against the screening records, the end-user certificates, and the designation timeline of the listed end-user.
The designation had been made before the final two shipments. That finding was significant. For earlier shipments – made when the entity was not yet listed – the OFSI prohibition had not yet been engaged. For the final two, the timeline showed that the exporter had made goods available after designation, without screening the declared end-user.
We prepared a VSD to OFSI that: identified the apparent violation precisely; set out the compliance history; acknowledged the programme gap; quantified the affected transactions; described the immediate remediation taken; and proposed a compliance undertaking including redesign of the screening programme. The disclosure was accompanied by a legal-framework analysis of the relevant thematic financial sanctions regulations and the applicable provisions of SAMLA.
We also assessed and managed the BIS dimension by reviewing the US-origin content in the affected components and advising on whether the threshold for a BIS disclosure was met. In this matter, the US-origin proportion did not reach the threshold at which the EAR requires reporting in the applicable circumstances, but the analysis was documented to demonstrate that the question had been addressed.
OFSI completed its review and the matter was resolved without a penalty notice. That outcome cannot be promised in any matter, and we do not suggest that it is the norm. What a well-prepared, early VSD does is place the business in the strongest possible position for OFSI to exercise its discretion in favour of a non-penalty outcome. It cannot guarantee one.
Risk flags for exporters managing end-use obligations
This matter surfaced five risk patterns we see repeatedly in export-control and sanctions compliance programmes.
Screening at the invoice level only. The most common failure. If your screening does not reach the declared end-user and any known sub-distributor, it does not meet the standard OFSI expects for a business making goods available under export licences to controlled-goods destinations.
Static screening at order entry. A counterparty that is clean when an order is placed may be designated before shipment. Sanctions lists are updated without notice – sometimes within days of a regulatory decision. Screening must be repeated before each shipment under an open licence, not merely at the point of contract.
End-user certificates treated as due diligence. An EUC is a contractual commitment by the signatory. It is not a screening tool and it is not a compliance record. The entity named as the end-user still needs to be screened. The EUC tells you who the goods are going to; it does not tell you whether that entity is sanctioned.
Licence scope confusion. Open licences carry conditions. Where those conditions include an end-use restriction or a prohibited-destination list, the conditions are part of the legal authorisation. A shipment outside those conditions is unlicensed, not merely outside the licence. That distinction matters for ECJU exposure and for whether an OFSI breach is strict or aggravated.
Delayed internal escalation. In this matter, the potential issue was identified internally several weeks before legal advice was sought. That interval did not cause the VSD window to close entirely, but it narrowed the options. An effective compliance programme should have clear escalation triggers – any screening hit on a declared end-user, any sign of diversion, any ECJU query – that bring legal counsel in before management decisions are made.
When should counsel be involved in an OFSI end-use matter?
Counsel should be involved the moment a potential OFSI issue is identified – not after the business has decided how to respond. The decisions made in the first 48 to 72 hours of an apparent violation frequently set the trajectory of the entire matter.
The myth that a VSD automatically resolves an OFSI enforcement inquiry deserves direct correction. A VSD is a mitigating factor, not an immunity. OFSI retains full discretion to issue a monetary penalty following a VSD. The weight it carries depends on the completeness of the disclosure, the speed with which it was made, the quality of the remediation, and the accuracy of the legal and factual analysis accompanying it. A partial or self-serving disclosure can be worse than no disclosure at all; it creates a record of what the business said, which OFSI can then test against what it independently discovers.
In our practice, the most effective VSD packages are those that do not try to shape the narrative in the exporter's favour, but instead present the facts transparently, acknowledge the gap, and demonstrate that the business has already closed it. OFSI's enforcement guidance is explicit that proactive cooperation and genuine remediation are the factors that pull penalty outcomes toward the lower end of the applicable range.
For businesses managing multi-tier supply chains, a review of the screening architecture before an inquiry arises is the single most cost-effective intervention available. We regularly advise exporters on programme-level reviews that map the full end-user chain, test screening logic against designation events, and redesign end-user-undertaking procedures to close the gaps this matter illustrates.
Related practices
- Deemed export and technology controls under BIS and the EAR – US-origin content analysis and classification for cross-border supply chains
- End-use and end-user controls: a Singapore matter – comparative lesson from an Asia-Pacific export-control enforcement scenario
- Entity list screening: an EU matter – EU counterpart screening obligations and the consequences of a screening failure