A mid-sized trading company with operations across three continents ran its standard counterparty screening check before signing a distribution agreement. The tool returned no alerts. Three months later, an entity in the ownership chain – one the automated system had not resolved to a listed name – appeared on the SECO consolidated list (Switzerland's list of persons and entities subject to Swiss financial sanctions, maintained by the State Secretariat for Economic Affairs). The transaction had already settled. The compliance team faced an urgent, undocumented exposure in a regime many businesses treat as peripheral.
This case comment examines what screening failures produce that outcome under the Swiss sanctions regime, how the SECO framework sits alongside OFAC and OFSI obligations, and what a business should do the moment a retrospective match surfaces. The Swiss rules carry their own prohibitions and reporting obligations; treating them as a lighter version of a larger regime is a consistent source of real exposure.
The sections below follow the matter from identification through analysis, options, resolution, and the programme redesign that followed. Each stage carries a transferable lesson for compliance teams managing name and entity screening across multiple regimes.
The situation: a match no automated tool had flagged
The counterparty in question was a privately held distributor registered in a third-market jurisdiction. Its direct shareholders were clean across every list the screening tool queried. The problem sat one layer further: a holding company that owned a minority but significant share of the distributor had itself been designated under a Swiss sectoral sanctions ordinance. The automated tool resolved the counterparty's direct shareholders correctly. It did not resolve the holding company's UBO chain to its listed entity.
In our experience, this pattern – a clean direct layer sitting above a listed indirect holder – is among the most common causes of retrospective exposure that reaches us. The business had no alert to act on at the point of contracting. It had processed a genuine miss, not a deliberate oversight.
The trading company discovered the match through a manual periodic review cycle, not the initial transaction screen. That timing mattered for two reasons. First, funds had moved. Second, the review interval meant the exposure window was longer than it needed to be. Both facts shaped the options available.
What does the SECO regime actually require?
SECO administers Swiss autonomous sanctions under a series of ordinances that give effect to UN Security Council measures and, separately, to Swiss autonomous measures that may align with, diverge from, or go beyond those of the EU or the UK. The prohibitions cover asset freezes, dealings with listed persons, and, in certain programmes, sectoral restrictions on specific transaction types.
The Swiss ownership and control test is directly relevant here. Under the applicable Swiss ordinances, an entity that is owned or controlled by a listed person is treated as subject to the same prohibitions as the listed person. The control test is not purely mechanical in the way that the OFAC 50 percent rule (the US rule treating any entity owned 50 percent or more in the aggregate by blocked persons as itself blocked) operates. Swiss analysis of control can capture situations where a listed person exercises effective authority through contractual, economic, or personal means, even without a majority shareholding. That nuance is important when the ownership chain contains minority stakes held alongside governance rights.
Reporting obligations under the Swiss regime require entities to report to SECO when they identify frozen assets or when they know or suspect they hold assets connected to a listed person. The relevant window for reporting is short. Missing it is itself a compliance failure, separate from the underlying transaction issue.
How does this compare with OFAC and OFSI? Under OFAC, the 50 percent rule creates a bright-line threshold. Under OFSI and the EU regime, the ownership and control test is broader and fact-specific: OFSI will examine whether a listed person has the ability to direct or influence the entity's activities, independently of percentage ownership. Switzerland sits closer to the OFSI and EU model than the OFAC model for indirect control. A business that designs its screening logic around OFAC's mechanical threshold will underperform under Swiss, UK, and EU control analysis.
What screening failure produced the miss?
Three distinct failures combined to produce the alert gap. No single one was catastrophic alone; together they created a blind spot the automated tool could not cover.
First, the tool's UBO resolution depth was set to two layers by default. The listed holding company sat at the third layer of the ownership chain. The configuration had not been reviewed since the firm expanded into markets where multi-tier holding structures are common. That setting is a product configuration choice, not a legal standard – and many vendors ship with a two-layer default that is adequate for simpler ownership profiles.
Second, the screening universe did not include the SECO consolidated list as a named source. The tool queried OFAC's SDN List, the EU Consolidated List, and the UN Security Council Consolidated List. SECO's list was not in the configuration. The compliance team had assumed that SECO designations would mirror EU measures and would therefore be captured through the EU list query. In this case, the designation had been entered under a Swiss autonomous programme that the EU had not replicated.
Third, the periodic review cycle ran every six months for counterparties below a defined transaction volume threshold. The distributor's individual transaction values were modest. It fell into the longer review cycle. Had the cycle been quarterly, the match would have surfaced sooner and funds would not yet have transferred.
Are these failures unusual? They are not. We regularly advise businesses where the SECO list has been omitted from the screening configuration because the firm's primary exposure is US- or EU-centric. The omission is understandable. It is also correctable – and once a retrospective match surfaces, it is necessary to understand how the gap arose before any conversation with SECO begins.
Options considered and the route taken
Once the match was confirmed and the ownership chain traced to the listed holding company, the business faced a binary threshold question. Did the holding company's position – a minority shareholding in the distributor, coupled with specific governance rights – satisfy the Swiss control test? The answer to that question determined whether the asset-freeze prohibition had been breached.
The analysis required mapping the holding company's rights against the distributor's articles, the shareholder agreement, and any side arrangements. Control under Swiss law is assessed holistically. In this matter, the governance rights included board appointment rights for a minority of seats and a veto over certain categories of commercial decision. That combination, in the view of the analysis, came close to the threshold at which SECO might conclude that effective control existed – but it was not a clear case on either side.
The options were these. First, a voluntary disclosure to SECO, setting out the facts, the ownership analysis, and the steps taken to freeze any further dealings pending resolution. Second, a legal opinion that the control test was not met, supported by the governance documentation, and reliance on that opinion to support a conclusion that no reportable breach had occurred. Third, a combination: a precautionary report to SECO framed as an advisory notification, not a self-admission of breach, while simultaneously seeking formal guidance.
In a recent matter of this type, we assessed the governance rights and the Swiss control standard and advised the client that the documented evidence for effective control, while proximate, did not cross the threshold on the facts. We prepared a detailed legal opinion in support of that conclusion. We simultaneously recommended that the client make a precautionary report to SECO setting out the analysis, preserving the option of the proactive-engagement defence if SECO later formed a different view. The matter was reviewed by SECO without further enforcement action. That outcome carries no guarantee for any other situation; SECO's assessment turns on the specific facts presented.
Cross-border dimensions: where SECO, OFAC, and OFSI diverge
For a business with operations in the United States or the United Kingdom, a SECO issue almost always has a secondary-sanctions dimension. The question is not only whether Swiss law is engaged but whether OFAC or OFSI obligations independently apply to the same facts.
OFAC's jurisdictional reach extends to US persons, US-dollar transactions that clear through US correspondent banks, and transactions involving US-origin goods or technology, regardless of the nationality of the parties. If the trading company's distribution agreement was invoiced in US dollars and cleared through a US correspondent, OFAC had jurisdiction independently of the Swiss position. The answer to the SECO question and the answer to the OFAC question are produced by different tests applied to the same facts, and they can diverge.
Under OFSI, the relevant question is whether the transaction involved a person subject to UK financial sanctions. If the listed holding company appeared on the UK sanctions list – which, post-Brexit, is maintained independently and is not a mirror of the EU list – then UK obligations arose separately from SECO obligations. OFSI's ownership and control guidance, like SECO's approach, looks beyond percentage ownership to effective control.
The practical consequence is that a business assessing a retrospective Swiss match should simultaneously map the OFAC and OFSI lists. A match on one regime that does not produce a match on another is not automatically a clean result. The converse is also true: a conclusion that a SECO prohibition was not engaged does not close the OFAC or OFSI analysis. Each regime requires its own assessment on its own list against its own legal standard.
For cross-border businesses, this is where the single-list assumption causes repeated problems. We regularly advise clients who have structured their screening around one primary regime and discovered, in a retrospective review, that the exposure they were managing was actually multi-jurisdictional from the start. See our analysis of ownership and control assessment under OFAC and ownership and control assessment under OFSI for detailed treatment of those standards.
What the myth about Switzerland gets wrong
There is a persistent misconception among compliance teams at non-Swiss businesses: that Swiss sanctions are effectively a subset of EU measures and that a firm screening the EU Consolidated List has covered its Swiss exposure. This is incorrect.
Switzerland has enacted autonomous sanctions programmes that do not track EU measures in every respect. The scope of covered activities, the structure of the ownership and control test, and the reporting obligations can differ in material ways from what EU regulations require. In this matter, the designation that produced the retrospective alert existed on the SECO list and not on the EU list at the time the transaction settled.
The error is compounded by vendor configurations. Most mainstream screening tools default to the major lists – OFAC SDN, EU Consolidated, UN Security Council – because those lists cover the largest volume of global transactions. SECO, SECO's sectoral lists, and the autonomous Swiss programmes require a deliberate configuration choice. If the tool is not instructed to query those sources, it will not return SECO-specific results.
A secondary myth is that Switzerland's enforcement posture is light. SECO has authority to refer matters for criminal prosecution; Swiss financial sanctions violations can carry criminal liability under the applicable Swiss law. The perception of lenient enforcement does not reflect the regime's legal teeth.
Programme changes: what was rebuilt
After the matter with SECO was closed, the trading company asked us to assess the screening programme and recommend structural changes. The gaps identified corresponded closely to the three failures described above. The changes implemented addressed each one.
The UBO resolution depth was increased to a minimum of four layers across all counterparty categories, not only high-risk ones. The rationale is straightforward: the compliance cost of deeper resolution at onboarding is predictable. The cost of a retrospective miss is not.
The list configuration was expanded to include SECO's consolidated list and, separately, the autonomous Swiss sectoral lists relevant to the firm's trade flows. The vendor's default configuration was replaced with a firm-specific list profile reviewed by counsel and updated on a defined cycle.
The periodic review cycle was restructured. Rather than segmenting by individual transaction value, the redesigned cycle segments by counterparty risk score – a function of the counterparty's jurisdiction, sector, ownership opacity, and transaction history. Counterparties with complex ownership structures now fall into the shorter review cycle regardless of individual deal size.
Finally, the programme added a clear decision protocol for retrospective matches: who is notified internally within what period, who has authority to commission the legal analysis, and at what point external counsel is involved. In the original matter, the time between identification and external legal involvement was longer than it needed to be. A written protocol eliminates that delay.
For a structured assessment of an existing screening programme – including list configuration, UBO resolution depth, and review cycle design – see our compliance audit and testing service, which covers programme reviews across the major regimes.
When to involve external counsel
The question of when to call in external sanctions counsel (specialist legal advisers on sanctions and export-control compliance) is one that compliance teams regularly underestimate in the direction of delay. The risk of calling too early is a modest fee for analysis that confirms an internal conclusion. The risk of calling too late is that options close.
In a SECO matter, the threshold for external involvement is crossed when any of the following is true. A retrospective match has been confirmed and funds have moved. The ownership analysis involves a minority stake combined with governance rights. The match appears on the SECO list but not on a parallel list, creating uncertainty about regime scope. A voluntary report to SECO is under consideration. Or the affected transaction also touches a US-dollar clearing path or involves a UK-regulated counterparty.
Each of those situations involves a legal assessment with consequences that depend on how it is framed and documented. The analysis that a compliance team conducts internally is useful. It is not a substitute for privileged legal advice when a report to a regulator is under consideration.
The position above covers the standard threshold question. Your specific facts – the counterparty's ownership profile, the jurisdiction of the designated entity, the currencies used, and the regimes in play – will change the analysis materially. If a retrospective match has already been identified, an early review preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential initial review.
Related practices
- Compliance audit and testing – programme review across list configuration, UBO depth, and review cycles
- Ownership and control assessment – OFAC – how the 50 percent rule applies across direct and indirect holdings
- Ownership and control assessment – OFSI – the UK control test and its divergence from the OFAC threshold