A continental European trading company – call it the client – held a long-standing contract with a supplier operating through a third-country intermediary. Routine payments flowed without incident for years. Then, in early 2026, the client's bank froze an outbound transfer. The reason: the intermediary's ultimate beneficial owner appeared on a Council designation list. The payment was now caught by EU financial-sanctions prohibitions. No one in the client's compliance team had mapped the ownership chain beyond the first tier.
Payments caught by EU financial-sanctions rules require a specific authorisation (a case-by-case licence issued by the competent national authority permitting an otherwise prohibited payment) before they can be released. The governing instruments are the relevant Council Regulations, which prohibit making funds available to or for the benefit of a designated person. As of June 2026, the authorisation route remains open under the EU regime – but the application must be properly constructed and routed to the right authority.
This case comment walks through how that matter developed, the legal questions it raised, the authorisation route we pursued, and the lessons it carries for any business facing a similar position.
The situation: how a routine payment became a sanctions problem
EU financial-sanctions rules prohibit making funds available, directly or indirectly, to or for the benefit of a designated person. The prohibition is not limited to direct transfers. It reaches payments where a designated person benefits economically from the transaction, even if the immediate counterparty is not itself on a list.
In this matter, the client had contracted with an intermediary company. That company was not designated. Its parent holding entity – sitting one tier above – was also not listed. But the holding entity was itself 50 percent or more owned by a person who appeared on the EU Consolidated List (the list maintained by the Council under the relevant thematic Regulation). Under the EU ownership and control test, an entity owned or controlled by a designated person is treated as caught by the prohibitions applicable to that person.
The client had screened the direct counterparty and the first-tier parent. It had not mapped the second tier. The bank, applying its own broader screening logic, identified the link. The transfer was frozen pending clarification.
This is a pattern we see with regularity in our cross-border practice: ownership-chain screening that stops one or two levels short of the point where the designation sits. The consequences range from a blocked payment – manageable with prompt action – to an apparent violation that attracts regulatory attention. The distinction often turns on how quickly the business identifies the issue and what it does next.
What is the EU ownership and control test, and how does it compare with OFAC?
The EU ownership and control test asks, first, whether a designated person holds a majority or controlling stake in the entity and, second, whether that person exercises effective control through other means. Both limbs matter. The EU position differs materially from OFAC's mechanical 50 percent rule because EU rules add a qualitative control strand: a minority shareholder who exercises effective control through contractual rights, board representation, or veto powers may be treated as controlling the entity even without a majority stake.
OFAC's approach is arithmetic. If one or more SDN List (OFAC's list of Specially Designated Nationals and blocked persons) persons own in aggregate 50 percent or more of an entity, directly or indirectly, that entity is itself treated as blocked. Control is irrelevant to the test; ownership alone is determinative once the threshold is crossed.
OFSI – the Office of Financial Sanctions Implementation, which administers UK financial-sanctions law under the Sanctions and Anti-Money Laundering Act – applies a test closer to the EU position: it examines both ownership and control, looking at the totality of influence a designated person exercises over an entity.
Why does the divergence matter in practice? Consider a business operating under contracts that touch all three regimes. A structure in which a designated person holds 45 percent and exerts contractual control may be treated as caught under EU and UK rules but not automatically under OFAC. A business relying on OFAC clearance to assume cross-regime clearance will reach the wrong conclusion. In our experience, that assumption is one of the most common structural errors in cross-border due diligence.
What authorisation route was available under the EU regime?
EU financial-sanctions rules contain a licensing mechanism that permits specific transactions otherwise caught by a prohibition, provided the applicable conditions are met. The competent authority is the national authority of the EU Member State where the applicant is established – in this matter, the national financial-sanctions authority in the client's home jurisdiction.
The grounds for a payment authorisation under the EU regime typically include: satisfaction of a pre-existing contractual obligation, release of funds necessary for basic living expenses or humanitarian purposes, or a purpose specifically permitted under the applicable Council Regulation. This matter turned on the pre-existing contract ground. The payment had been due before the designation was made effective; the client had a legal obligation to pay and had attempted to do so in the ordinary course.
The application required the client to demonstrate:
- the legal basis for the underlying payment obligation, including the contract and invoice;
- the ownership and control structure of the counterparty chain, including the link to the designated person;
- confirmation that no part of the funds would be made available to the designated person beyond what is incidental to a legitimate pre-existing obligation; and
- the amount, currency, routing, and timing of the proposed payment.
We prepared the application, mapped the ownership chain in a form the authority would accept, and structured the legal argument around the pre-existing obligation ground. The authority required supplementary information at one point – a standard feature of EU licensing processes, in our experience – and we managed that exchange on the client's behalf. Authorisation was granted. The payment was completed. The relationship with the supplier was preserved, subject to ongoing monitoring of the ownership structure.
What risk flags should the client have caught earlier?
Four risk flags were present in this matter before the bank intervened. Any one of them, identified early, would have allowed the client to seek authorisation proactively rather than reactively.
First, the ownership chain had not been mapped to the level of ultimate beneficial ownership. Screening tools configured to check only listed entities at the immediate-counterparty level will miss designations sitting higher in a structure.
Second, the client's compliance programme did not include a periodic review of existing counterparties against current designation lists. Designations are made on an ongoing basis; a counterparty clean at onboarding may be caught by a list update months or years later. The obligation to not make funds available to a designated person is continuous, not a one-time check.
Third, the client had no documented escalation procedure for a bank freeze. When the transfer was blocked, the initial internal response was to query the bank rather than to obtain sanctions legal advice. That cost time. In a payment-authorisation matter, early engagement with the competent authority is often preferable to delay: some ground conditions for authorisation may be harder to establish once a transaction has been stalled for a significant period.
Fourth, the contract with the intermediary contained no sanctions representation or warranty. A well-drafted clause requires the counterparty to represent that it is not owned or controlled by a designated person and to notify the client of any change in its ownership structure. Had that clause been present, the client would have had both an early warning mechanism and a stronger legal position vis-à-vis the intermediary.
What is the lesson for similar businesses: compliance architecture before the problem arrives
The central lesson from this matter is not that EU payment authorisations are difficult to obtain – they are available and, with a properly constructed application, can be secured. The lesson is that the application process is reactive and costly compared with the investment required to prevent the problem.
Compliance programmes designed around EU financial-sanctions obligations should address three structural requirements. They should map the full ownership and control chain of material counterparties, not only the first tier. They should include a periodic rescreening cycle – the frequency will depend on the risk profile of the counterparty and the sector – rather than treating initial onboarding screening as final. And they should build in a documented response procedure for a sanctions-triggered bank freeze or payment refusal, so that the business does not lose time deciding who to call.
A common misconception in mid-market businesses is that EU payment authorisations are an emergency measure available only in exceptional circumstances and that seeking one is itself a signal of wrongdoing. Neither is accurate. The authorisation route is built into the regime precisely because legitimate commercial transactions can be caught by sanctions prohibitions through no fault of the applicant. Applying for authorisation promptly and transparently is the correct compliance response. Attempting to reroute the payment, restructure the transaction to obscure the link, or delay disclosure is not.
Is your current screening programme configured to map ownership to the level at which designations typically sit? That is the question worth asking before a bank places a freeze call.
Cross-border dimension: what if multiple regimes are engaged?
In several similar matters, the client's payment touched not only the EU regime but also OFAC and OFSI – for example, where the client held USD accounts with a US correspondent bank, or where the supplier held assets in the United Kingdom. The question then becomes: can a single authorisation route resolve the position across all three regimes, or must the client apply to each authority separately?
The short answer is that authorisations are regime-specific. An EU Member State authority cannot grant permission that binds OFAC or OFSI. Where a payment involves a US dollar clearing leg, any OFAC-caught prohibition requires a separate OFAC specific licence (a case-by-case authorisation issued by the US Treasury's Office of Foreign Assets Control). Where a UK-nexus element is present – for example, a UK-incorporated entity in the payment chain – an OFSI licence may also be required.
In our cross-border practice, we regularly advise clients on parallel applications to multiple authorities. The sequencing matters: it is generally more efficient to identify all engaged regimes at the outset and to prepare coordinated submissions rather than to secure one regime's authorisation only to discover a parallel prohibition in a second regime weeks later. The documentation requirements overlap substantially, and a well-structured factual record prepared for one authority can form the basis for submissions to others.
The position under OFAC is stricter in one respect: where a US-nexus transaction involves a Specially Designated National, OFAC's licensing criteria are evaluated against a "foreign policy and national security" standard that gives the agency broad discretion. EU Member State authorities, applying the Council Regulation, apply grounds that are more explicitly codified. The practical implication is that an EU authorisation is not a reliable indicator that OFAC would reach the same outcome.
If the payment had involved a Singapore dollar leg or settlement through a UAE correspondent, additional regulatory positions would have needed to be assessed. Singapore and the UAE maintain their own financial-sanctions regimes with distinct grounds for authorisation and distinct competent authorities. The strictest prohibition applicable across all engaged regimes governs the transaction: cross-regime clearance requires that each regime's requirements are satisfied.
The position above covers the standard case. Your facts – the currency of the payment, the jurisdiction of the banks involved, the nationality of the counterparties, and the identity of the designated person – change the analysis materially. For a confidential review of a pending payment or a bank freeze, contact Calder & Vance at info@caldervance.com.
When to involve counsel: the decision sequence
If a bank freezes a payment or declines to execute a transfer citing sanctions concerns, the decision sequence is straightforward. Confirm in writing what the bank has identified as the sanctions basis for the refusal. Obtain the relevant designation data – which list, which regime, which designated person – as quickly as possible. Do not attempt to reroute the payment through a different bank or currency without legal advice: doing so may create a separate compliance exposure.
Engage sanctions counsel at that point, before making any representation to the bank about the structure of the transaction. A legal analysis of the ownership and control chain, conducted promptly, will clarify whether the payment is caught and whether a licensing route is available. It will also identify whether the position needs to be reported to a competent authority – some EU Member State regimes carry an obligation to notify the authority of a frozen payment within a defined window, independent of the licensing application.
If authorisation is available, the application should be prepared carefully: accuracy and completeness matter. Competent authorities can and do reject incomplete applications, and a rejection on procedural grounds costs time without advancing the substantive position.
A proactive approach is always preferable. If a counterparty review or a corporate restructuring at a supplier triggers a concern about ownership and control before a payment falls due, the compliance team can assess the position and seek authorisation prospectively. Prospective authorisation applications carry fewer time pressures and allow the business to plan the payment timeline around the regulatory process.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss your position.
Related practices
- Frozen account management under the EAR – managing frozen accounts and licence applications under the BIS Export Administration Regulations
- Release of blocked funds: a BIS/EAR matter – practitioner account of securing fund release under US export-control rules
- Release of blocked funds: an OFAC matter – how we acted on an OFAC-blocked funds matter for a cross-border client
Frequently asked questions on EU payment authorisations
What went wrong in this payment authorisations matter?
The core failure was ownership-chain screening that stopped short of the level at which the designation sat. The client screened its direct counterparty and one tier above; the designated person sat at the second tier, owning the holding entity that in turn owned the intermediary. EU financial-sanctions rules prohibit indirect benefit to a designated person, so the payment was caught regardless of whether the immediate counterparty was itself listed. Earlier identification would have allowed a prospective rather than reactive authorisation application.
How was the EU issue resolved?
We prepared and submitted a specific authorisation application to the competent national authority in the client's home Member State, relying on the pre-existing contractual obligation ground available under the applicable Council Regulation. The application included a full ownership-chain analysis, documentation of the underlying contract and invoice, and a legal analysis of the applicable authorisation ground. Authorisation was granted and the payment was completed. No enforcement action was taken against the client.
What is the lesson for similar businesses?
Three operational changes reduce the risk significantly. First, extend ownership-chain mapping to the level of ultimate beneficial ownership, not just the first tier. Second, implement a periodic rescreening cycle for live counterparties, not only at onboarding. Third, prepare a documented internal procedure for responding to a bank freeze: identifying the competent authority, engaging legal counsel promptly, and preserving the evidentiary record needed for an authorisation application. Proactive compliance architecture is less costly than reactive licensing.
About the author
Renata Costa advises banks, payment firms, and virtual-asset businesses on sanctions screening, compliance-programme design, and financial-crime controls. Her work on EU and cross-border financial-sanctions matters includes ownership-and-control analysis, authorisation applications before EU Member State competent authorities, and compliance-programme review for regulated financial institutions. Calder & Vance – International Sanctions & Export Control Counsel.
Published: 2 June 2026
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.