Calder & Vance International Sanctions & Compliance Counsel

Delisting & Designation Challenges · OFAC

An OFAC matter: managing relisting risk a closer look

A trading company completes a multi-year campaign to secure removal from the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). Its counsel declares success. The business resumes operations, reopens bank accounts, and signs new supply contracts. Then, fourteen months later, a routine screening alert reappears. The company is back on the list.

Relisting – the reinstatement of a designation after a successful delisting – is a genuine and underappreciated risk in managing relisting risk under any OFAC case. It arises when the underlying conduct that prompted designation recurs, when new derogatory information emerges, or when post-delisting compliance commitments are not maintained to OFAC's standard. The governing authority is OFAC, operating under the International Emergency Economic Powers Act ("IEEPA") and related executive orders. No numerical threshold triggers automatic protection against relisting; the safeguard is behavioural and structural.

This case comment walks through an anonymised matter handled by our practice. It maps the legal question, the regime analysis, the options we examined, and the route ultimately taken. It closes with the lessons that any business or individual navigating a post-delisting environment should apply.

The situation: a delisted company and a changing compliance picture

A mid-sized commodities trading company – incorporated outside the United States, with US-dollar payment flows routed through correspondent banking relationships – had been removed from the SDN List following a successful administrative petition to OFAC. The delisting had been hard-won. It followed an extensive evidence package, a demonstration of ownership restructuring, and commitments about future conduct submitted in writing to OFAC.

What the company's principals did not fully appreciate was that delisting is not a permanent state of grace. It is a regulatory assessment made at a point in time. OFAC retains authority to redesignate any person if new information, a change in conduct, or a violation of post-delisting undertakings comes to its attention. In our experience, many businesses treat delisting as a conclusion. It is better understood as the opening of a probationary period.

In this matter, two developments converged. First, one of the company's indirect shareholders – a person not named in the original delisting petition – had subsequently appeared on an OFAC list under a separate executive order. Second, the company had resumed trading relationships with two counterparties that, while not themselves designated, operated in a sector under heavy OFAC scrutiny. Neither development was concealed; neither had been flagged to counsel. The company's compliance function had not been designed to monitor post-delisting obligations on an ongoing basis.

OFAC's review was triggered by a financial institution's voluntary self-disclosure ("VSD") – a self-report to the regulator by a bank that had detected the screening alert and, following its own internal inquiry, concluded it should notify OFAC of the apparent connection.

The legal question: what power does OFAC have to relist?

OFAC's authority to redesignate a previously delisted person rests on the same statutory and executive-order foundations as the original designation. There is no exhaustion doctrine, no double-jeopardy analogue, and no fixed waiting period before OFAC can act again. The agency need only conclude, based on available information, that the person meets the criteria for designation under the applicable programme.

This is the aspect of managing relisting risk in an OFAC case that surprises most clients. Under IEEPA-based programmes, designation decisions are made by the Secretary of the Treasury (acting through OFAC) and do not require judicial authorisation. The standard is administrative, not criminal. OFAC applies an evidentiary threshold that is considerably lower than the standard required for a criminal conviction. It does not need to prove the case beyond reasonable doubt; it needs to make a reasonable determination on available evidence.

Equally important is what OFAC is not required to do before relisting. It is not required to give advance notice. It is not required to invite submissions before the designation takes effect. The first indication a company may receive is a freeze of its assets and accounts – exactly as happened in the original designation. The procedural protections that exist are retrospective: an administrative petition for reconsideration after the fact, or – where applicable – judicial review under the relevant US administrative law standards.

This asymmetry between the ease of relisting and the difficulty of the remedy is the core risk that any post-delisting compliance programme must address. Have you mapped every commitment made to OFAC during the original delisting petition? Are those commitments still being observed?

How do OFSI and the EU treat relisting, and why does the cross-border picture matter?

The cross-border dimension of this matter was not academic. The company's banking relationships, correspondent flows, and contractual counterparties spanned multiple jurisdictions, each with its own sanctions regime. A relisting by OFAC would have cascade effects beyond US-dollar payment channels.

Under the UK regime, OFSI (the Office of Financial Sanctions Implementation) administers financial sanctions independently of OFAC. A UK delisting does not follow automatically from a US delisting, and vice versa. In this matter, the company had secured a separate removal from the UK Consolidated List during the same period. But OFSI's ability to redesignate mirrors OFAC's in the critical respect: the UK sanctions regulations contain no provision that prevents a re-designation of a previously removed person if the statutory criteria are again met. The difference is procedural: OFSI operates under a statutory framework that requires designation to follow a process set by SAMLA (the Sanctions and Anti-Money Laundering Act), and the UK courts provide a judicial review route that, in our experience, is somewhat more accessible than its US equivalent for non-US persons.

The EU position introduces a further layer. EU designations are made by the Council and must be renewed periodically under the relevant Council regulation for each programme. That renewal cycle creates a structural distinction from the OFAC model: a person delisted by the Council has a degree of procedural protection from immediate relisting because reinstatement requires a Council decision, typically supported by a Member State proposal. The EU General Court also offers an annulment route with specific procedural rights. This does not mean relisting is impossible under the EU regime; it means the path is slower and more transparent.

For the company in this matter, the practical implication was that an OFAC relisting would trigger immediate US-dollar payment freezes, likely prompt a parallel OFSI review, and generate pressure for a Member State to propose Council action. A single relisting event could therefore cascade across three regimes simultaneously. That multi-regime exposure was not reflected in the company's post-delisting compliance planning.

The options considered and the route taken

When the matter came to us – immediately after the financial institution's VSD had been filed and OFAC had acknowledged receipt – the company faced a narrow window in which its actions could still influence OFAC's assessment before any formal relisting decision was made.

We assessed three broad options. First, a reactive posture: wait for OFAC's decision and respond with an administrative petition if relisting occurred. Second, a proactive engagement: submit a voluntary communication to OFAC setting out the company's own assessment of the facts, demonstrating cooperation, and providing updated compliance evidence before any formal action. Third, a structural remedy: immediately terminate the relationships and transactions that had generated the screening concern, document those steps comprehensively, and present OFAC with evidence of corrective action taken ahead of any decision.

In our experience, option three – combining structural remedy with proactive engagement – produces the best outcome in this type of situation. OFAC's published guidance on voluntary self-disclosure and cooperation signals consistently that agencies weigh the timeliness and completeness of corrective action. A company that waits for a formal enforcement decision forfeits the opportunity to shape the agency's understanding of the facts at the most consequential stage.

We assisted the company to build an updated evidence package within a short period. That package covered four elements: a clear account of how the compliance gap had arisen, a documented termination of the relationships in question, evidence of an enhanced ongoing monitoring programme, and a statement of the company's continued commitment to the undertakings made in the original delisting petition.

The matter was resolved without relisting. OFAC closed its review after receiving the evidence package and additional correspondence. This outcome is not guaranteed in any matter of this type, and we do not present it as predictive of any future result. What it illustrates is that speed, candour, and structural action – rather than silence or delay – are the operating principles that give a company the best available chance of preserving a hard-won delisting.

Risk flags: the conditions that make relisting most likely

The conditions that raise relisting risk are identifiable in advance. They are not random. In our practice, we see the same patterns recur across OFAC matters, and each represents a structural failure that a well-designed post-delisting compliance programme would have detected earlier.

The first risk flag is an unmonitored ownership chain. When one or more shareholders change after the delisting – whether by transfer, inheritance, or corporate restructuring – and the new ownership structure is not checked against current OFAC lists, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) can re-engage. A shareholder who was clean at the time of the delisting petition may subsequently be designated under a different programme. The company then falls back within the SDN List's reach without having done anything that would have been a violation at the time of delisting.

The second risk flag is a resumption of relationships with sanctioned sectors or counterparties. This is the pattern that appeared in the matter described above. The relationships need not involve a listed person directly. OFAC's enforcement posture – particularly under programmes with broad sectoral reach – treats patterns of business as relevant to the underlying designation criteria. A company that was designated for its role in a particular sector and then delisted on the basis of exiting that sector creates significant risk by re-entering it, even through nominally clean counterparties.

The third risk flag is a failure to document compliance commitments on an ongoing basis. Post-delisting undertakings submitted to OFAC carry weight beyond the moment of submission. They create a continuing obligation. If the company cannot demonstrate, at any point after delisting, that those commitments are being actively observed, OFAC has grounds to question whether the basis for the delisting was accurately represented.

The fourth risk flag is a loss of institutional memory. Delisting processes are long and expensive. The team that ran the petition – internal or external – often disperses. The successor compliance function may not have a clear record of what was represented to OFAC, what conditions were accepted, or which relationships were terminated as part of the process. This gap in institutional knowledge is, in our experience, one of the most common and most preventable causes of relisting exposure.

Correcting the myth: delisting is not a permanent safe harbour

A persistent misconception in this area is that a successful OFAC delisting creates a form of permanent safe harbour – that having once been removed from the SDN List, a company is protected from future action absent some dramatic new violation. This is not correct.

Delisting reflects OFAC's assessment of the facts at a defined point in time. It does not create a legal entitlement to remain off the list indefinitely. It does not immunise a company from redesignation under a different programme. It does not prevent OFAC from acting on information that post-dates the delisting decision. And it does not require OFAC to apply a higher evidentiary standard than it would in an original designation.

In practice, a delisted company may face a somewhat more structured engagement with OFAC's process simply because it has a prior record of cooperation – that cooperation can be invoked as context in any subsequent proceeding. But the legal protection that flows from delisting is procedural and reputational, not substantive. The company is off the list. It is not above it.

This distinction has direct practical implications for how a business should allocate compliance resources in the period following a delisting. The period of highest risk is not immediately after delisting – when scrutiny is fresh and behaviour is cautious – but twelve to thirty-six months later, when operational pressures have returned and compliance vigilance has been allowed to drift.

Related practices

When should a delisted company involve sanctions counsel again?

A delisted company should not treat the completion of the delisting process as the end of its relationship with specialist counsel. There are at least four circumstances that, in our experience, warrant immediate re-engagement.

First, any change in the ownership or control structure of the company – including new investors, shareholder transfers, or upstream corporate restructuring – requires a fresh ownership analysis under OFAC's current list and the applicable country regime's comparable test. The analysis that supported the original petition may be stale within months of the delisting.

Second, any resumption of business in a sector, geography, or counterparty category that featured in the original designation analysis should be reviewed before contracts are signed or payments are made. The fact that the company is no longer on the SDN List does not mean that OFAC has lost interest in how it conducts itself in that sector.

Third, if a financial institution, a correspondent bank, or a business partner flags a screening concern – even a false positive – that concern should be assessed by qualified sanctions counsel before the company responds to the institution. A poorly framed response can create a record that complicates a subsequent engagement with OFAC.

Fourth, any approach from a regulator – whether OFAC, OFSI, or a foreign equivalent – should prompt immediate engagement with counsel. The window between initial regulatory contact and a formal decision is typically short. It is the window in which the most effective corrective action can be taken.

The position above covers the standard post-delisting scenario. Your facts – the sector, the ownership structure, the jurisdiction of the counterparties, and the specific programme under which the original designation was made – change the analysis materially. Contact Calder & Vance at info@caldervance.com for a confidential review of your post-delisting compliance position.

Frequently asked questions

What went wrong in this managing relisting risk matter?
The company's post-delisting compliance programme did not monitor for three conditions that OFAC assesses on a continuing basis: changes in upstream ownership, the emergence of new designations affecting indirect shareholders, and the risk profile of resumed trading relationships. No single element was dramatic; the combination created a pattern that triggered a financial institution's VSD and, consequently, OFAC's review. The root failure was treating delisting as a terminal event rather than the beginning of an ongoing compliance obligation.
How was the OFAC issue resolved?
The matter was resolved without relisting. Our team acted quickly to build an updated evidence package covering the source of the compliance gap, documented termination of the relevant relationships, evidence of an enhanced monitoring programme, and reaffirmation of the commitments made in the original petition. OFAC closed its review after receiving that package. Speed, candour, and structural corrective action – taken before a formal redesignation decision – were the operative factors. This outcome reflects the specific facts of this matter and is not indicative of any guaranteed result.
What is the lesson for similar businesses?
The primary lesson is that the period twelve to thirty-six months after delisting carries a higher risk of lapse than the immediate post-delisting period. Compliance vigilance typically fades as operational pressures return. The company should treat post-delisting undertakings as live, continuing obligations; maintain a written record of the commitments made to OFAC; monitor the ownership chain on a regular schedule; and engage counsel at the first sign of a screening alert, a counterparty concern, or a regulatory inquiry – not after a formal decision has been made.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.