A mid-sized European bank receives a request from its respondent institution in a third market. The respondent's ownership chain includes a shareholder that recently appeared on a Council regulation consolidated list. The relationship manager asks the obvious question: must the account be closed? The compliance function faces a harder one: if the account is closed, does the bank breach the EU prohibition on making funds unavailable without a licence – or expose itself to regulatory criticism for arbitrary de-risking (the practice of exiting financial relationships to reduce sanctions and financial-crime exposure rather than managing risk in a calibrated way)?
As of January 2026, the EU regime does not contain a single regulation that codifies "correspondent-banking de-risking" as a defined obligation. What it contains is a dense, interlocking set of asset-freeze prohibitions, ownership-and-control tests, and licensing pathways that, taken together, drive the de-risking decisions made daily by EU-authorised banks. The obligation to screen, the prohibition on providing financial services to designated parties, and the requirement to freeze assets upon designation together define the legal perimeter. The commercial decision to exit a relationship beyond that perimeter is governed by supervisory expectations, not hard law.
This briefing sets out who administers the EU rules, what the prohibitions actually require, how the ownership-and-control test shapes the correspondent-banking analysis, where the EU position diverges from OFAC and OFSI, and when a bank should involve sanctions counsel rather than its compliance function alone.
Who administers the EU sanctions regime that drives de-risking decisions?
The EU sanctions regime is administered at two levels: the Council of the European Union adopts the legal instruments – regulations and decisions – that set the prohibitions, and competent authorities in each member state enforce them. There is no single EU-level enforcement agency equivalent to OFAC or OFSI. A French bank answers to its national authority; a German institution to a different one. This decentralised structure is one of the most practically significant features of the EU regime for correspondent-banking compliance.
Council regulations are directly applicable in all member states without implementing legislation. They create rights and obligations that bind persons and entities established or operating within the EU, as well as EU nationals and EU-incorporated entities acting anywhere. The European Banking Authority publishes guidelines on anti-money-laundering and sanctions risk management that inform supervisory expectations across the bloc, but enforcement remains national.
In our cross-border practice, the decentralisation creates a real problem for groups with banking subsidiaries in multiple member states. A decision by the French authority to tolerate a particular respondent relationship does not bind the German authority. Groups need a harmonised internal standard set to the most conservative national interpretation, not to an average.
The EU General Court and, on appeal, the Court of Justice of the European Union provide judicial oversight of Council designation decisions. An entity challenging its designation on the EU list has a right to bring an annulment action before the General Court. That procedural right is central to the EU's constitutional framework for sanctions and is distinct from the licensing and exemption mechanisms available to banks managing active relationships.
What does the EU prohibit, and how does it drive correspondent-banking exits?
The core EU financial-sanctions prohibition has two limbs: first, the obligation to freeze the funds and economic resources of designated persons and entities; second, the prohibition on making funds or economic resources available, directly or indirectly, to or for the benefit of those persons. Both limbs apply to financial institutions operating within the EU's jurisdictional reach. The second limb is the one that most directly shapes correspondent-banking decisions.
What counts as "making funds available" in the correspondent context? Executing a payment instruction through a correspondent account, settling a trade-finance transaction, or maintaining a credit facility for a respondent bank that is itself designated – or that is owned or controlled by a designated entity – would each fall within the prohibition. The analysis does not stop at the respondent's name. It extends to what the respondent does and who ultimately benefits.
This is the legal driver of de-risking. A correspondent bank cannot simply verify that its respondent institution is not itself on the EU consolidated list. It must satisfy itself that the respondent's underlying customer base and transaction flow will not route prohibited value through the correspondent account. In practice, that assurance is difficult to obtain from smaller respondents in high-risk jurisdictions. The result is exits that are commercially, rather than legally, compelled.
The EU regime also prohibits the provision of specific services – financial services, insurance, and certain professional services – to designated parties. For banks, the combined effect of the asset-freeze and services prohibitions means that a respondent which becomes designated mid-relationship triggers immediate obligations. The account must be frozen. Outgoing payments must stop. Incoming payments must be flagged. None of this requires a conscious commercial decision; it is a legal obligation that attaches from the moment of designation.
The position above covers the standard case. Your facts – the respondent's jurisdiction, its beneficial-ownership structure, the nature of the transaction flow, and the specific sanctions programme in play – change the analysis materially.
To discuss how EU sanctions obligations apply to a specific correspondent relationship, contact Calder & Vance at info@caldervance.com.
How does the EU ownership-and-control test apply in the correspondent context?
The EU applies an ownership and control test (the rule that a non-listed entity is treated as caught where a designated person owns or controls it) that differs in a material respect from the OFAC 50 percent rule (OFAC's mechanical test that treats an entity owned 50 percent or more in the aggregate by blocked persons as itself blocked). The EU test is not purely mechanical. It looks at both ownership – the Council regulations specify a threshold in many programmes, often 50 percent – and control, which can be established even below the ownership threshold through board representation, contractual rights, or other means of determining the entity's strategic decisions.
For a correspondent bank, this distinction matters. A respondent institution in which a designated person holds a minority stake may still be caught under the EU control test if that person exercises decisive influence over the respondent's management. A screening tool that checks only for majority shareholdings will miss the control limb entirely.
In our experience, banks most frequently mis-apply the test in two ways. First, they treat the ownership threshold as a safe harbour: if the designated person holds less than fifty percent, they assume the entity is clear. The EU control test means no such safe harbour exists. Second, they screen the respondent bank against the consolidated list but do not map the respondent's ownership chain to identify indirect designated-person interests. Both failures expose the correspondent to enforcement risk.
The practical consequence for correspondent-banking relationships is that ongoing ownership monitoring is an obligation, not a one-time check. A respondent that was clean at onboarding may become caught later if a designated person acquires an interest or if the Council adds a pre-existing owner to the list. Automated screening against static records does not satisfy this requirement.
Where does the EU position diverge from OFAC and OFSI?
Three divergences are most consequential for a correspondent bank managing relationships across multiple regimes.
First, the ownership test. As noted above, OFAC's rule is mechanical at the 50 percent level. OFSI's test under the UK regime similarly combines an ownership threshold with a control analysis, but the statutory language and the supervisory guidance differ from the EU approach. A respondent that clears the OFAC 50 percent rule may still be caught under EU or OFSI control analysis.
Second, the licensing pathway. OFAC issues both general licences (standing authorisations for defined categories of transactions) and specific licences (case-by-case authorisations) for transactions that would otherwise be prohibited. The EU licensing regime operates through national competent authorities and is less standardised across member states. A specific licence obtained in one member state does not automatically authorise the same transaction in another. For a correspondent bank operating across multiple EU jurisdictions, this creates a structural compliance problem that a US-centric approach to licensing does not solve.
Third, enforcement posture. OFAC issues civil enforcement actions publicly and publishes penalty calculations under its published enforcement framework. EU enforcement is national and its visibility is uneven. In some member states, enforcement actions against banks for sanctions failures have been publicised. In others, the enforcement record is less transparent. The result is that a cross-border bank calibrating its compliance programme cannot simply benchmark against a single disclosed enforcement baseline.
Does this mean that EU de-risking decisions are less consequential than OFAC-driven ones? They are not. Supervisory risk – the risk of a national competent authority finding a correspondent bank in breach and imposing measures including licence conditions, fines, or management accountability – is real and increasing. We regularly advise banks that underestimated the severity of EU member-state enforcement until they received a supervisory letter.
For a detailed comparison of how OFAC sanctions obligations affect correspondent-banking relationships, see our service page on correspondent-banking de-risking under OFAC.
What are the key risk flags in correspondent-banking relationships under EU sanctions?
A correspondent bank faces heightened risk in several identifiable scenarios. Recognising them early allows the relationship to be managed rather than terminated at crisis point.
The first flag is opacity in the respondent's beneficial-ownership structure. A respondent that cannot or will not provide a complete and current ownership map – including indirect interests held through nominees or chains of holding companies – creates an unresolvable verification problem. Under the EU control test, unresolved ownership is not a neutral position. It is a risk that the bank is unable to quantify and therefore unable to manage.
The second flag is geography. A respondent domiciled in, or with material transaction flows through, a jurisdiction subject to comprehensive or thematic EU sanctions programmes carries an inherently higher base risk. The screening obligation does not diminish in that context – it intensifies. The correspondent cannot meet it by relying on the respondent's own compliance attestations.
The third flag is transaction pattern. A respondent whose payment flows are inconsistent with its stated business profile, or that routes significant volumes of transactions for third-party customers without adequate correspondent-level information, puts the correspondent in the position of providing services whose ultimate beneficiary it cannot verify. This is precisely the scenario the EU prohibition on indirect provision is designed to catch.
The fourth flag is timing. A respondent that has been the subject of media reporting, a regulatory enquiry in its home jurisdiction, or adverse findings in a mutual evaluation report is at materially elevated risk of designation or supervisory action. In a regime where designation is immediate in legal effect, a correspondent bank that has not updated its risk assessment following adverse public information is poorly positioned if the respondent is subsequently listed.
If a transaction has already been flagged, or a relationship is the subject of a supervisory enquiry, an early review can preserve options that narrow quickly. Contact Calder & Vance at info@caldervance.com for a confidential review.
What does the EU regime require when a respondent becomes designated mid-relationship?
The legal obligations on a correspondent bank when its respondent is designated are immediate, sequential, and non-discretionary. Understanding the sequence matters because errors in it can create secondary liability.
First, the correspondent must freeze any funds or economic resources it holds for or on behalf of the designated respondent. This includes the balance of any correspondent account and any pending settlement obligations. The freeze does not require a separate administrative act by the bank; it attaches by operation of the Council regulation from the moment of designation.
Second, the correspondent must cease executing outgoing payment instructions that would make funds available to or for the benefit of the designated respondent. Instructions already received but not yet executed must be reviewed individually. Whether a payment instruction in the settlement queue constitutes "making funds available" turns on the facts – who ultimately receives value, and whether any EU-regime general authorisation or national exemption applies.
Third, in most EU member states the competent authority must be notified. Reporting timelines and formats vary by member state, but the obligation to notify is standard across the major programmes. Failure to report is itself a breach, independent of the underlying transaction. Record-keeping obligations attach to all frozen assets and to the steps taken upon identification.
Fourth, if the bank holds frozen funds, it must consider how to manage them going forward. In limited cases, a specific authorisation from the national competent authority may permit certain operations on the frozen account – for example, to meet maintenance fees or legal costs of the designated entity. These authorisations are narrow, require a formal application, and do not permit a resumption of normal correspondent activity.
In our experience, banks most often fail at step two. The mechanics of freezing a balance are understood. The discipline of reviewing the settlement queue for pending outgoing instructions – and the corresponding analytical work of determining which of them route value to the designated party – is operationally demanding and is frequently done incompletely under time pressure.
A common misconception: the EU regime does not prohibit de-risking
A persistent myth in correspondent-banking compliance is that the EU sanctions regime requires banks to maintain relationships with respondents they cannot adequately screen, on the basis that exit itself constitutes a prohibited action. This is incorrect.
The EU financial-sanctions regime prohibits specific transactions and specific services to designated parties. It does not impose a duty to bank. A correspondent bank's decision to exit a respondent relationship that carries unacceptable risk – where the ownership chain is opaque, the transaction profile is inconsistent with representations, or the volume of due-diligence requests has become unmanageable – is a commercial risk-management decision. It is not prohibited by Council regulations.
What the EU regime does require is that the decision to exit is not itself used as a vehicle for facilitating a sanctions breach. A correspondent that exits a relationship precisely in order to allow a designated party to move funds through an unmonitored channel – rather than to manage compliance risk – would face a different analysis. The distinction is between legitimate risk management and deliberate evasion. Calder & Vance assists exclusively with the former.
A second misconception is that de-risking decisions require no documentation. They do. A correspondent bank that exits a relationship and faces subsequent supervisory scrutiny will need to demonstrate that the exit was based on an objective, documented risk assessment. Undocumented decisions – however commercially rational at the time – are indefensible in a supervisory review.
For further reading on related obligations under the US regime, see our analysis of divesting sanctioned interests under OFAC and the OFAC divestment process in detail.
When should a correspondent bank involve sanctions counsel?
Not every de-risking decision requires external advice. A well-structured internal compliance function, operating against a documented sanctions policy and with access to current consolidated lists, can manage routine screening and standard exit decisions. But several scenarios regularly exceed what an internal function can address alone.
The first is a designated respondent with contested ownership. Where the ownership chain includes entities whose connection to a listed party is disputed – where the respondent asserts that a shareholder is not, in fact, the person named on the list, or that the interest has been transferred – the bank faces a legal question about the reach of the freeze obligation. That is a sanctions law question, not a compliance operations question.
The second is a multi-jurisdictional relationship. A correspondent bank serving a respondent with operations or ownership across multiple EU member states, the United Kingdom, and the United States faces the risk that its assessment under one regime is correct and its position under another is not. In our practice, the EU-OFAC divergence on the control test and the EU-OFSI divergence on licensing pathways produce the most frequent gaps.
The third is a supervisory enquiry. When a national competent authority opens an investigation or requests information about a correspondent-banking relationship, the bank's responses are material to the outcome. Early involvement of counsel at this stage preserves options – including the availability of a voluntary disclosure where a breach has occurred – that narrow as the enquiry progresses.
The fourth is a proposed exit that is itself contested. A respondent institution that disputes the grounds for exit and threatens regulatory or legal action puts the correspondent bank in the position of needing to defend its decision in a forum outside its compliance function's experience. Counsel with specific experience of EU sanctions analysis and correspondent-banking practice is the appropriate resource at that point.
Related practices
- Correspondent-banking de-risking under OFAC – licensing, screening, and exit decisions under the US OFAC regime
- Divesting sanctioned interests under OFAC – the procedure, timeline, and risk profile for OFAC-driven divestment
Frequently asked questions: correspondent-banking de-risking under EU
Who administers correspondent-banking de-risking under EU?
The Council of the European Union adopts the sanctions regulations that govern financial-services prohibitions, and national competent authorities in each member state enforce them. There is no single EU-level enforcement body. A bank's primary regulator is the authority in its home member state. The European Banking Authority publishes supervisory guidance that informs national expectations but does not itself investigate or penalise individual banks. For groups operating across multiple member states, the absence of a single EU enforcement authority means the standard must be set to the most conservative national interpretation applicable to the group.
What does EU prohibit in relation to correspondent-banking de-risking?
EU Council regulations prohibit two core things relevant to correspondent banking. First, they require the immediate freezing of funds and economic resources belonging to or controlled by designated persons and entities. Second, they prohibit making funds or economic resources available, directly or indirectly, to or for the benefit of those persons. Both limbs apply to correspondent accounts. EU law does not prohibit a bank from deciding to exit a respondent relationship for risk-management reasons. It prohibits transacting in a way that provides financial value to a designated party. The commercial de-risking decision sits outside the legal prohibition; the transaction it prevents would not.
How is correspondent-banking de-risking enforced under EU?
Enforcement is carried out by national competent authorities in each EU member state. The range of available measures includes administrative fines, supervisory conditions on a bank's licence, requirements to appoint independent monitors, and in serious cases referral for criminal prosecution. The visibility of enforcement actions varies significantly across member states. Banks operating across multiple jurisdictions face the additional risk of parallel national enforcement proceedings for the same underlying failure. Voluntary disclosure to the relevant competent authority, where a breach has been identified, is a factor considered in most national enforcement frameworks. The timing of disclosure affects its mitigating value.
About the author
Claire Dubois advises on EU sanctions, including Council-regulation analysis, ownership-and-control questions, and annulment actions before the EU General Court. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.