A UK-based trading group held an OFSI licence (an authorisation from the Office of Financial Sanctions Implementation permitting an otherwise prohibited payment or activity) that had taken several months to obtain. The licence covered a specific series of payments to a counterparty whose parent company appeared on the UK Consolidated List. Shortly before the licence's expiry date, the group's in-house team identified that the underlying contract had been renegotiated: the payment schedule had changed, one instalment had been split into two, and the total value had increased modestly. The team assumed the existing licence would cover the revised payments. It did not.
Licence amendments and renewals under OFSI are not automatic. A change to the payment schedule, the transaction value, or any party named in the licence may require a formal amendment application – and operating outside the precise terms of an existing licence is itself a potential breach. OFSI's enforcement guidance makes clear that the terms of a licence must be strictly observed.
This case comment walks through how that matter developed, the legal questions it raised, how we resolved it, and what the experience tells businesses that hold or are applying for OFSI licences.
The situation: what the business had, and what had changed
The group's OFSI licence authorised a defined set of payments, each identified by approximate date, amount, and recipient. OFSI licences typically operate within those four corners: they are issued against a specific factual matrix, and the parameters of that matrix are part of the authorisation itself.
When the underlying commercial contract was renegotiated, three things changed: the payment dates shifted by several weeks, one payment was split, and the total payable increased. From a purely commercial perspective the changes were minor. From a sanctions-law perspective, each change potentially took the proposed payments outside the scope of what the licence had actually authorised.
The in-house team had not flagged the renegotiation to the external counsel who had handled the licence application, nor had it re-read the licence in light of the changes. This is a pattern we see regularly. Once a licence is obtained, it is often filed and treated as a standing permission. It is not. It is a document with defined terms, and those terms must be checked against the transaction as it actually stands at the moment of each payment.
The group discovered the mismatch when its bank, on reviewing the payment instruction against the licence, declined to process it. The bank's position was correct: a bank that executes a payment in reliance on a licence it knows does not cover the transaction can itself face liability. The group now had a live payment due, a counterparty expecting funds, and no operative authorisation.
The legal question: when is an amendment or a new licence required?
Under OFSI's regime, rooted in the Sanctions and Anti-Money Laundering Act (SAMLA) and the relevant thematic UK sanctions regulations, a licence authorises only what its terms state. There is no implicit authority to extend a licence's scope to cover commercially equivalent but factually different transactions. The question is whether the variance from the licensed terms is material.
OFSI has not published a bright-line materiality test. In our experience, the following changes routinely require a formal amendment application or a fresh licence:
- Any increase in the total licensed value, even a modest one.
- A change in the identity of any party named in the licence.
- A material change to payment dates – particularly where the licence authorises payments within a defined window and the new dates fall outside it.
- A restructuring of the payment itself (for example, one payment becoming two, or a split into tranches).
- Any change to the goods, services, or purpose that the licence was issued to facilitate.
In the group's case, all of the first four applied. There was therefore no credible argument that the existing licence covered the revised transactions. The question became how quickly a compliant path could be established.
It is worth pausing here to address the cross-border dimension. The counterparty's ultimate parent was also subject to EU sanctions. The group had a subsidiary in an EU member state that had its own contractual relationship with the same counterparty. That subsidiary needed to consider whether it had equivalent EU authorisation, and whether any payment from the UK entity through an EU correspondent bank would itself trigger EU licence requirements. The UK and EU ownership-and-control tests are broadly similar but not identical: the EU test under the relevant Council regulation captures entities controlled by a listed person even where ownership falls below the threshold that would engage the UK test. Where both regimes apply, the stricter prohibition governs.
How was the OFSI issue resolved?
We were instructed within 24 hours of the bank declining the payment. The immediate priority was to stop the clock on any unintentional breach and to map the exact position before advising the client on disclosure obligations.
The first step was a precise comparison between the existing licence and the revised transaction terms. This confirmed that the licence did not cover the amended payments. The group had not yet made any payment outside the licence terms – the bank's refusal had, in effect, prevented a breach before it occurred. That fact was important: it meant the group's position was one of unlicensed intent rather than completed breach.
We then prepared an amendment application to OFSI. OFSI does not publish a fixed form for amendment applications, but the content requirements closely mirror those for a fresh specific licence (specific licence: a case-by-case authorisation for an otherwise prohibited transaction). The application identified: the existing licence by reference number; the precise changes required; the commercial reason for each change; the ownership and control analysis confirming why the counterparty remained within the ambit of the original designation; and a revised payment schedule.
We also prepared a covering letter addressing the timeline and the bank's refusal, to pre-empt any OFSI query about why the amendment had not been sought before the payment fell due. Transparency with OFSI at the amendment stage is not merely good practice – it is a substantive input into how OFSI will view the applicant in any future enforcement review, including the question of whether conduct was deliberate or inadvertent.
OFSI processed the amendment and the amended licence issued within the processing window that OFSI applies to straightforward amendments to existing licences. The group's bank then accepted the licence and processed the payments. No enforcement action was initiated. The outcome reflected the facts: no payment had been made outside the licence terms, the amendment was sought promptly, and the application was complete.
The position above covers the standard case. Your facts – the counterparty, the change in transaction terms, the jurisdiction of your bank, and any parallel EU or US position – change the analysis. If you have identified a potential mismatch between an existing licence and a transaction as it now stands, early advice protects the options that narrow with delay. Contact Calder & Vance at info@caldervance.com.
Renewals: a distinct but related risk
The same group's matter also raised a renewal question. The original licence had been issued for a defined period. The underlying contractual relationship was intended to continue beyond that period. A renewal is not the same as an amendment: it extends the period of an existing licence rather than changing its terms. But the renewal process carries its own risks that practitioners and in-house teams alike underestimate.
First, a renewal application must be submitted before expiry. OFSI does not provide a grace period for late renewals. If a licence expires before the renewal is granted, the holder is unlicensed during the gap. Any payment made in that gap – even if it would plainly have been covered had the renewal been in place – is potentially a breach.
Second, a renewal is not automatic. OFSI will reassess the application in light of the facts as they stand at the renewal date. The designation that gave rise to the need for a licence may have been modified. The counterparty's ownership structure may have changed. The commercial purpose may have evolved. OFSI may ask questions that were not asked on the original application. We advise clients to treat a renewal as a substantive re-application that happens to reference an existing licence, not as an administrative tick-box.
Third, where a licence contains conditions – for example, reporting obligations, transaction limits within a period, or requirements to notify OFSI of specified events – those conditions must have been met throughout the licence period. A renewal application that arrives alongside a record of unreported transactions, or that discloses conditions that were not observed, will draw scrutiny that a clean record avoids.
In a recent matter, a financial services firm had operated under a licence containing a condition requiring it to report any transaction above a specified value to OFSI within a short window. The firm had been making the relevant payments and reporting most of them, but two transactions had been missed in a period of staff turnover. When the renewal application was being assembled, the gap was identified. We advised the firm to include a voluntary disclosure of the missed reports within the renewal application, with a full explanation. OFSI acknowledged the disclosure and the renewal was granted. The disclosure itself became the record that demonstrated the firm's good faith. That outcome was available only because the gap was identified and addressed before OFSI found it independently.
Risk flags: what signals that a licence needs amending or renewing?
Identifying the moment at which a licence amendment or renewal becomes necessary is not always straightforward. The following signals, drawn from our practice, consistently appear in matters where businesses have either acted too late or not at all:
- Contract renegotiation: any renegotiation of the underlying contract – even one framed as a minor commercial adjustment – should trigger a check of the licence terms before the amendment is executed.
- Changes to named parties: a change in the name or structure of any party identified in the licence (including through a merger, acquisition, or internal restructuring) requires immediate review.
- New payments outside the licensed schedule: where a payment arises that is not on the licensed schedule, do not assume it is covered. Confirm it before the payment instruction is given.
- Designation changes: where the listed person whose designation created the need for the licence is removed from the list, or where a new designation captures a previously unlisted counterparty, the licence position must be reviewed. In the first case, the licence may no longer be needed. In the second, unlicensed exposure may have arisen.
- Expiry approaching within 60 days: where a renewal is needed, the application should be submitted with enough time for OFSI to process it before expiry. What constitutes adequate lead time will depend on the complexity of the matter.
- Bank query or refusal: a bank querying a licence or declining a payment is a strong signal that the licence may not cover the transaction. Treat it as a compliance event, not merely a banking inconvenience.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Reach our team at info@caldervance.com.
The lesson: licences require active management
The single most consistent finding across licence amendment and renewal matters is that businesses treat a licence as a passive document rather than an active compliance obligation. A licence is obtained, filed, and then assumed to cover whatever the commercial relationship requires until someone – usually a bank – raises a concern.
That assumption is incorrect, and it is costly. The cost is not only the risk of a breach and the enforcement consequences that follow. It is also the operational disruption of a stalled payment, the reputational effect of a bank refusal, and the loss of time while an emergency amendment application is assembled. In this matter, the bank's refusal was the first alert. That is too late in the process.
The correct model is one of licence lifecycle management: a structured review of every licence in the portfolio at defined intervals, a clear trigger process for contract changes, and a named owner who is responsible for confirming that each payment instruction is within scope before it is given. This is not a large undertaking for most businesses. It requires a one-page checklist, a calendar entry, and a competent person to run the review.
What it also requires – and this is where in-house teams benefit most from external counsel – is familiarity with how OFSI reads licence terms and what it expects of applicants. OFSI's expectations are not always intuitive from the face of the licence document. The requirement to notify OFSI of specified events, the obligation to maintain records available for inspection, and the precise scope of what is and is not authorised all require careful reading. A business that has held its licence for two years without incident may not have tested whether its reading of the licence is the same as OFSI's.
There is also a persistent myth worth addressing directly: that OFSI is primarily an enforcement body and that any contact with it – including an amendment application – creates risk. In our experience, the opposite is true. OFSI has a licensing function that is distinct from its enforcement function. An amendment application is a compliance act. A well-prepared, transparent application is treated as evidence of good faith. Enforcement risk arises from unlicensed conduct, from concealment, and from failures to report – not from proactive engagement with the licensing process. Businesses that avoid amendment applications because they fear drawing OFSI's attention typically create the very exposure they were trying to avoid.
Related practices
- Frozen account management under BIS/EAR – managing blocked funds and seeking access under US export-control rules
- Payment authorisation: a Canada matter – how a specific payment authorisation was obtained under the Canadian regime
- Payment authorisation: an EU matter – obtaining authorisation for a payment under EU sanctions regulations