A trading firm with regional operations across South-East Asia receives a strategic acquisition offer. The target company is incorporated in Singapore, carries a clean local registration, and has never appeared on any screening list. The compliance team runs the entity name through its tool. Nothing flags. The deal moves toward signing. Then a correspondent bank raises a concern: one of the target's upstream shareholders may be connected to a listed person. The question that follows is not hypothetical. It is the question that decides whether the transaction proceeds, whether existing commercial relationships survive, and whether the firm faces regulatory exposure it did not know it had.
Under the 50 percent rule and ownership analysis, a non-listed entity is treated as blocked or restricted when listed persons hold, directly or indirectly in aggregate, 50 percent or more of its ownership. The rule applies mechanically under OFAC's guidance; the EU and UK apply a parallel but distinct test that also captures control. Singapore's own applicable regime operates alongside these extraterritorial obligations, and a clean local register entry does not resolve the question under any of them.
This case comment walks through an anonymised matter our practice handled involving a Singapore-connected ownership chain, the ownership analysis it required, and the cross-regime considerations that ultimately shaped the advice. It then draws out the practical lessons for businesses and compliance teams operating in the region.
The situation: a Singapore entity with layered upstream ownership
The target company was a Singapore-incorporated trading entity whose immediate shareholders were two holding companies registered in jurisdictions with relatively limited public ownership registries. Those holding companies were themselves held by a further layer of entities. At the third remove, one ultimate beneficial owner – a natural person – appeared on a major international sanctions list.
The firm's existing screening tool had checked only the direct shareholders by name. Neither holding company appeared on any list. The tool returned a clean result. From a purely automated screening perspective, the transaction looked unproblematic. It was only when the correspondent bank applied its own enhanced due diligence – triggered by the jurisdictions of the intermediate holding companies – that the upstream ownership question surfaced.
In our experience, this pattern is more common than compliance teams expect. Layered structures are a normal feature of legitimate regional investment and trading arrangements. The problem is not the structure itself. The problem is a screening methodology that stops at the first layer and does not trace beneficial ownership through to the ultimate natural persons and their sanctions status.
The question that arrived at our desk was precise: given the upstream connection, is this Singapore entity itself blocked or restricted under any of the applicable regimes? And if it is not clearly blocked, what obligations attach to a counterparty transacting with it?
What the ownership analysis required across three regimes
Answering that question meant applying the ownership and control tests under three distinct regimes in parallel: the OFAC rules applying to any US-nexus in the transaction, the EU Council regulation rules applying to EU-incorporated parties in the deal, and Singapore's own applicable country regime applying to local conduct.
Under OFAC's guidance, the 50 percent rule (the rule treating an entity as blocked when sanctioned persons own it 50 percent or more in the aggregate) applies regardless of how many intermediate layers sit between the listed person and the entity. Aggregation across multiple listed persons is required. In this matter, the upstream natural person held, through the chain of holding companies, a stake that we assessed against that threshold. The precise figure – and whether it crossed 50 percent – turned on the accuracy of the ownership data obtained. That data quality problem is itself a recurring risk in layered structures.
Under the EU rules, the test is ownership and control – a broader standard than OFAC's mechanical threshold. Control can be established through contractual arrangements, board composition rights, or other mechanisms that give a listed person decisive influence, even when formal equity ownership sits below 50 percent. For an EU-incorporated party to the deal, this meant the analysis extended beyond the bare equity percentages.
Under Singapore's applicable regime, the prohibition structure and its interaction with the UN Consolidated List and autonomous designations follow their own statutory basis. The obligations on Singapore-incorporated entities and persons conducting business in Singapore are set by that regime, and a Singapore counterparty cannot discharge its obligations simply by demonstrating that the entity is unlisted locally. The cross-referencing obligation – checking against the UN Consolidated List and applicable autonomous designations – sits alongside the domestic screening requirement.
What this meant in practice: the ownership analysis had to be conducted three times, against three sets of rules, with different data inputs potentially producing different results under each. That is not unusual in a cross-border transaction with parties in multiple jurisdictions. It is, however, frequently underestimated by in-house compliance teams who treat sanctions screening as a single-pass exercise.
How the ownership chain was mapped and the data gaps addressed
Mapping the ownership chain in this matter required obtaining corporate documentation from multiple jurisdictions. Some of that documentation was publicly available through local registries. Some required direct requests to the client and, through the client, to the target. Some information about the upstream layers was incomplete or contested.
Where data was incomplete, the analysis could not simply assume the best case. The approach we took was conservative: where a holding percentage was uncertain within a range, we applied the analysis to the top of that range. If the result at the top of the range crossed the 50 percent threshold under OFAC's test, the matter was treated as requiring a licence or a restructuring of the transaction, not a risk acceptance decision.
This conservatism is not excessive caution for its own sake. Ownership data gaps are themselves a risk flag. A counterparty whose ownership structure cannot be fully traced is a counterparty whose sanctions status cannot be fully confirmed. That uncertainty has direct legal consequences in jurisdictions where strict liability applies to dealings with blocked persons. Regulators do not accept "we could not obtain the data" as a defence to what turns out to be a prohibited transaction.
In this matter, the documentation exercise eventually produced a sufficiently complete ownership map. The upstream natural person's aggregate stake, traced through both holding companies, came in below the 50 percent threshold under OFAC's mechanical test. That was a material finding. But the analysis did not end there.
What the control analysis added – and why it changed the advice
For the EU-incorporated party to the transaction, the ownership conclusion under OFAC's test was necessary but not sufficient. The EU test extends to control. Control can exist even where formal equity ownership sits below the threshold. We examined the governance arrangements of the target entity: board appointment rights, veto rights over material decisions, the structure of any shareholders' agreement, and the terms of any management contract.
What we found was that the upstream natural person held contractual rights that, read together, gave that person the practical ability to block material decisions of the target board. That is control for EU purposes, regardless of the equity percentage. For the EU party, the transaction therefore required more careful structuring than a straightforward equity-only analysis would have suggested.
The UK position under OFSI's ownership and control test runs parallel to the EU test in substance. Where the same upstream person is listed on the UK Consolidated List, the control analysis would reach the same result. In this matter, the upstream person appeared on a list that is shared across several regimes. That meant the UK party – had there been one in this transaction – would have faced the same finding.
This divergence between the mechanical OFAC test and the broader EU/UK control test is a recurring source of practical difficulty in cross-border transactions. A transaction that appears permissible under one regime's ownership analysis may be prohibited under another's. The only safe approach is to run both analyses fully, not to assume that a clean result under one regime resolves the question across the board.
The position above covers the standard analytical sequence. Your specific facts – the counterparty's jurisdiction, the goods or services involved, the parties' nationalities, and the regimes in play – change the analysis considerably. For a structured review of a specific transaction or counterparty, contact Calder & Vance at info@caldervance.com.
The options considered and the route the client took
Once the ownership and control analysis was complete, the client faced a decision. The options were not binary. Between "proceed as planned" and "walk away" lay a range of structured approaches, each carrying its own risk and timeline profile.
The first option was to seek a specific licence from the relevant authority where required – that is, a case-by-case authorisation to conduct an otherwise prohibited transaction. Licence applications require a well-developed factual record and a clear articulation of the policy basis for the authorisation. Timelines vary by regime and by the complexity of the application; they are not short. For a time-sensitive acquisition, the licence route introduces execution risk.
The second option was transaction restructuring: adjusting the transaction terms to remove the sanctioned nexus before closing. In practice, this meant requiring the target to address the upstream ownership arrangements – either by the listed person divesting the relevant interest or by removing the governance rights that gave rise to the EU control finding – as a condition precedent to the acquisition. This is a workable route where the parties have leverage and the timeline permits, but it requires the target's co-operation and its own legal process.
The third option was a risk acceptance decision: to document the analysis, conclude that the residual risk was below an acceptable threshold, and proceed. This option was not available here. The control finding under the EU test was not marginal. The upstream person's listed status was clear. A documented risk acceptance in those circumstances would not have provided a meaningful defence.
The client chose the restructuring route. As a condition precedent, the target was required to obtain a legal opinion from local counsel confirming the removal of the governance rights identified, and to provide updated corporate documentation evidencing any ownership changes required. Completion was conditional on those steps. The matter proceeded on that basis. We make no representation about how a comparable matter would be resolved in different circumstances.
If a transaction has already been flagged, or a filing has been rejected, an early review can preserve options that narrow with time. Contact us at info@caldervance.com for a confidential assessment.
Risk flags for businesses transacting in or through Singapore
Businesses operating in or through Singapore face a compliance environment that requires active management of both local obligations and the extraterritorial reach of the OFAC, EU, and UK regimes. Several risk flags appear consistently in our cross-border practice.
The first is de-risking (a financial institution exiting a relationship to avoid sanctions exposure). Correspondent banks serving Singapore-incorporated entities apply their own OFAC and EU analyses to transactions that pass through their rails. A Singapore entity with a clean local screening result can still find its transactions blocked at the correspondent banking layer because a US or EU bank has applied a stricter analysis to the upstream ownership chain. This matters to any business that relies on cross-border payment flows.
The second risk flag is data availability. Singapore maintains strong corporate registries, but the intermediate holding layers in regional structures are often in jurisdictions where beneficial ownership data is less accessible. The inability to trace the full chain does not reduce the obligation; it increases the risk of an undetected prohibited connection.
The third is the aggregation question. Two listed persons each holding a minority stake in the same entity may, together, reach the 50 percent threshold. Screening tools that check each person individually, without aggregating related holdings, will miss this. Have you verified that your tool aggregates across connected persons, or does it assess each counterparty in isolation?
The fourth is the distinction between the UN Consolidated List and autonomous designations. Singapore's applicable regime cross-references the UN list. Autonomous designations by OFAC, the EU Council, or OFSI apply to any transaction with a US, EU, or UK nexus regardless of whether Singapore law requires their recognition. A transaction that is compliant under the local list-checking requirement may still be prohibited because a party falls on an autonomous list that is not incorporated into the local regime.
The fifth flag is timing. Ownership structures change. A counterparty that was clean at the time of the initial due diligence may have a different ownership profile at completion, or six months into a long-term supply arrangement. Ongoing monitoring – not a one-time pre-transaction check – is the standard that major regulators and correspondent banks now expect.
The lesson for similar businesses
The core lesson from this matter is architectural: ownership analysis must be built into the transaction process as a structured, multi-regime exercise, not treated as a checkbox that a screening tool completes automatically.
A common objection is that running a full multi-regime ownership analysis on every transaction is disproportionate. We regularly advise clients on how to calibrate this. A risk-based approach that focuses enhanced analysis on transactions above a certain value, involving counterparties in higher-risk jurisdictions, or where correspondent banking relationships require it is both defensible and operationally realistic. The key is that the calibration is documented, tested, and updated as the regulatory environment changes.
A second objection is that the 50 percent rule is a US rule and does not apply to non-US businesses. This is the myth that costs firms most. The OFAC regime applies to any transaction with a US nexus – a US-dollar payment, a US counterparty, a US-incorporated entity in the chain, or goods or technology of US origin. In a Singapore context, where cross-border trade and finance frequently involve US-dollar clearing and US-origin goods, the extraterritorial reach of OFAC's rules is a live operational question, not an abstract legal point.
In our cross-border practice, we also observe that firms which have invested in strong compliance programmes at the entity-screening level often have significant gaps at the ownership-and-control level. The two exercises require different data inputs, different analytical logic, and – for the control analysis – a degree of legal judgment that automated tools do not provide. The gap between what the tool says and what the law requires is where enforcement risk lives.
What practical steps should a business take following a matter like this? First, audit the methodology your screening tool applies to beneficial ownership. Does it trace beyond direct shareholders? Does it aggregate? Does it capture governance rights? Second, ensure your pre-transaction diligence protocol specifies what ownership documentation must be obtained and at what depth before a deal is approved. Third, align the analysis to all regimes with a nexus to your transaction, not only the local regime. Fourth, build ongoing monitoring into your contract terms where the relationship is long-term.
Related practices
- Sanctions compliance audit and testing – structured review of screening methodology, ownership analysis gaps, and programme design against multi-regime standards.
- Name and entity screening: an EU matter – a case comment on screening failure and the EU ownership-and-control test in a cross-border context.
- Name and entity screening: an OFSI matter – analysis of a UK financial-sanctions screening gap and the OFSI ownership test applied to a non-listed entity.