A UK-headquartered bank receives a real-time payment instruction. Mid-process, its screening system flags the originating account holder against the Office of Financial Sanctions Implementation (OFSI) consolidated list. The payment stops. But the obligation does not end there. What must the institution do with the funds already received? How long can they sit untouched? And what criminal exposure attaches to getting the answer wrong?
As of June 2026, frozen-account management under OFSI rules governs how a person who holds, controls, or has access to funds or economic resources belonging to a designated person must treat those assets once a financial-sanctions prohibition takes effect. The obligation is not merely to stop a transaction – it is to immobilise the asset, report it, and seek specific authorisation before any dealing. The Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the relevant thematic financial-sanctions regulations together form the governing legal basis; OFSI administers and enforces the regime.
This briefing sets out who the obligations bind, what they require in practice, how the ownership and control test operates, where UK rules diverge from OFAC and EU positions, the licensing route for access to frozen funds, and what enforcement looks like when things go wrong.
What is the legal basis for frozen-account obligations under OFSI?
The legal basis for frozen-account management in the United Kingdom is SAMLA, together with the thematic regulations made under it – covering, for example, the relevant country-specific and sectoral financial-sanctions programmes. SAMLA confers the power to designate persons and to impose financial-sanctions prohibitions; the thematic regulations set out the specific prohibitions applicable to each programme and any general licences already in effect.
OFSI, a unit of HM Treasury, administers the regime. It publishes the UK Consolidated List of designated persons, issues specific and general licences, receives reports of suspected violations, and carries out civil enforcement. Criminal prosecution for the most serious breaches is a matter for the Crown Prosecution Service.
The prohibitions imposed by SAMLA and the regulations operate in rem as well as in personam. They attach to the funds or economic resources themselves, irrespective of which institution or individual happens to hold them at a given moment. A bank, a solicitor, a property manager, or an individual creditor can each find themselves holding frozen assets without having been a party to any original transaction with the designated person.
In our cross-border practice, we see the in rem character of the obligation most acutely in correspondent-banking arrangements and escrow situations, where the holding institution had no direct relationship with the designated counterparty at the time of initial receipt.
Who is bound – and what exactly is "frozen"?
Any person in the United Kingdom, or any UK person wherever they are located, who holds, controls, or has access to funds or economic resources owned, held, or controlled by a designated person is bound by the prohibition on dealing with those assets. The prohibition covers making funds available – directly or indirectly – as well as dealing in them.
"Funds" under the relevant thematic regulations covers financial assets and benefits of every kind, including cash, bank balances, negotiable instruments, and interest accruing on frozen balances. "Economic resources" is a wider category: it includes any asset that can be used to obtain funds, goods, or services – real property, intellectual property, receivables, and vehicles, among others.
The prohibition on making funds or economic resources "available" is broader than a simple freeze. It captures new credit lines, loan drawdowns, dividend payments, and even the provision of services for which the designated person would not need to pay. The test is whether the act would give the designated person access to value.
A common error is to treat a frozen account as merely "on hold." In our experience, institutions sometimes continue to apply standing instructions – for instance, automatically crediting interest, or executing pre-authorised direct debits – without recognising that each such action requires either a general licence covering that act or a specific licence from OFSI.
How does the OFSI ownership and control test determine what is frozen?
An asset is frozen not only when it belongs directly to a named designated person, but also when a designated person owns or controls the entity that holds the asset – a position that reflects both SAMLA and UK-specific guidance on ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person's holding or influence).
On the ownership limb, the UK position applies a 50 percent or more threshold – comparable to the OFAC 50 percent rule. An entity in which a designated person holds, directly or indirectly, 50 percent or more of the shares or voting rights is treated as itself subject to the prohibition. Aggregation of holdings across multiple designated persons applies.
The control limb goes further. Where a designated person can exercise significant influence or control over an entity – through contractual rights, veto powers, board appointment rights, or other means – even a minority holding may suffice. This is a material divergence from the OFAC position, which is purely mechanical at the 50 percent threshold and does not ordinarily extend to control without majority ownership.
Under EU Council regulations, the position mirrors SAMLA in including both ownership and control tests, making EU and UK outcomes largely consistent on this point – though the detailed guidance and enforcement emphasis of the respective regulators can differ. For businesses operating across both regimes simultaneously, the practical rule is to apply the stricter test: if either the UK or the EU position captures an entity, treat it as frozen for both purposes.
The cross-regime divergence from OFAC is most consequential for US-headquartered groups with European subsidiaries. A European subsidiary may be bound to freeze an account that its US parent's counsel has assessed as outside the OFAC perimeter. Counsel across both regimes should review any such structure concurrently.
What must a holder of frozen assets do? Obligations, timelines, and reporting
Once an account or other asset is identified as frozen, the holder has three concurrent obligations: to immobilise the asset immediately, to report the holding to OFSI, and to obtain authorisation before any dealing – including the accrual and credit of interest and any other routine maintenance of the account.
The reporting obligation requires a person who knows or has reasonable cause to suspect that they hold a frozen asset to report that fact to OFSI as soon as practicable. The report must identify the asset, the basis for concluding that a sanctions prohibition applies, and any transaction or activity that has already occurred with the asset. OFSI guidance makes clear that delay in reporting – even a brief delay once the holder has become aware – is itself a matter that can be taken into account in enforcement.
Record-keeping obligations run alongside the reporting duty. Persons subject to OFSI's regime must maintain adequate records of their frozen-asset holdings and of any transactions connected to a designated person. Five years is the standard record-keeping period under the relevant thematic regulations, consistent with the UK's broader financial-crime record-keeping architecture. Documents supporting any licence application or authorisation granted should be retained for the same period.
Interest and other earnings on a frozen balance are themselves frozen automatically. They become part of the frozen account and cannot be transferred, released, or set off against other liabilities without a licence. This is an area where, in our experience, treasury operations and custody desks frequently need targeted guidance: the treatment of accruals is not always reflected in the default configuration of account management systems.
The position on fees owed to the holding institution is materially different. OFSI guidance and the relevant thematic regulations contemplate the possibility of crediting fees and charges directly to a frozen account as an entry that reduces the balance – but the precise conditions, and whether any general licence covers that act, must be verified against the applicable programme's general licences before the institution proceeds.
The licensing route: how to access frozen funds lawfully
A specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) from OFSI is the principal mechanism for accessing or dealing with frozen funds where no general licence already covers the transaction. OFSI may grant a specific licence for a defined list of purposes set out in the thematic regulations – commonly including basic living expenses, legal fees for the representation of the designated person, and humanitarian purposes.
A general licence (a standing authorisation that permits a defined category of transactions without a separate application) already covers certain routine acts across most UK sanctions programmes – for example, allowing a bank to continue administering a frozen account to the extent necessary to preserve the asset's value or to comply with regulatory requirements. The scope of any applicable general licence must be read carefully; acting beyond its terms without a specific licence is itself a breach of the prohibition.
OFSI's licensing process requires a detailed application: the identity of the designated person, the nature of the frozen asset, the purpose for which access is sought, and evidence that the purpose falls within a permitted ground. Applications must be accompanied by supporting documentation. OFSI does not publish fixed processing timelines for specific-licence applications, but applicants should plan for a period of weeks to months depending on the complexity of the case and the programme involved – and the position should be verified against current OFSI guidance before reliance.
The position above covers the standard case. Your facts – the type of asset, the applicable sanctions programme, the nature of the proposed transaction, and any concurrent obligations under OFAC or EU regulations – change the analysis materially. To discuss a licence application or a delisting route, write to info@caldervance.com.
For businesses that also face obligations under the US Export Administration Regulations or related licensing regimes, our team has documented the procedural comparisons in detail. See our related service on frozen-account management and the BIS/EAR licensing structure for the US parallel.
Cross-regime considerations: where OFSI, OFAC, and EU obligations diverge
A multinational institution holding frozen assets faces potential concurrent obligations under OFSI, OFAC, and the relevant EU Council regulations – and the three regimes do not always reach the same conclusion about what is frozen, who can authorise access, or what must be reported.
On scope, OFSI applies on a territorial-and-nexus basis (UK persons, UK-incorporated entities, conduct in the UK) while OFAC's jurisdiction extends extraterritorially to US persons, US-dollar transactions, and conduct involving US-origin technology or software – irrespective of where that conduct occurs. An EU-incorporated subsidiary of a UK group may therefore face OFSI obligations through its UK-group nexus and separate EU obligations under the applicable Council regulation, while also having OFAC exposure if the transaction touches the US financial system.
On licensing, the grounds and the decision-maker differ. OFSI grants specific licences under SAMLA. OFAC grants licences under its own IEEPA-based authority. The EU licensing route runs through the competent authority of the relevant Member State. Each application is independent; a licence from one authority does not authorise the act under the other regime. In a complex matter, three parallel licence applications may be required simultaneously.
On penalties, the three regimes take materially different approaches to civil enforcement. OFSI's civil monetary penalty regime is based on the higher of a percentage of the value of the breach or a fixed statutory ceiling, with the relevant thematic regulations setting the applicable maximum – amounts that have risen significantly since SAMLA introduced the civil penalty power. OFAC's civil penalty base is typically the greater of the transaction value or a per-transaction statutory maximum. EU Member States enforce penalties under national law, producing variation across the bloc. In all three regimes, the penalty base for the most serious breaches is set by statute and is not subject to negotiation as to the base – though mitigating factors, including voluntary self-disclosure and the quality of the compliance programme, are assessed in each case.
If a transaction has already been flagged, or an application has been refused under one regime, an early cross-regime review can preserve options that narrow with time. Contact us at info@caldervance.com for a confidential assessment.
Common risk flags in frozen-account management
The risk flags that drive enforcement referrals to OFSI cluster around a predictable set of operational failures. Identifying them early is the difference between a managed disclosure and an enforcement action.
Delayed de-listing reconciliation is the first. When OFSI removes a person from the UK Consolidated List, assets that were frozen do not automatically unfreeze until the institution has confirmed the removal and satisfied itself that no concurrent designation applies under OFAC, EU, or UN authority. Acting on a de-listing notice without checking for parallel designations has produced enforcement outcomes across multiple regimes.
Interest and fee accruals without licence cover are the second. As noted above, automatic credit of interest to a frozen account, or the deduction of custody fees without a general licence explicitly covering that act, constitutes a dealing in frozen funds. The systemic nature of such acts – occurring across many accounts simultaneously – tends to produce aggregated breach values that attract disproportionate attention in enforcement.
Ownership-chain gaps are the third. Screening a legal-entity counterparty at the surface level, without mapping indirect holdings and the control limb, produces false-negatives. A counterparty that is not on the list may nonetheless be an entity that a designated person controls. The control-limb inquiry requires human judgment, not only automated list-checking.
Inadequate reporting timelines are the fourth. OFSI expects reporting as soon as practicable once a holding institution has knowledge or reasonable cause to suspect. Institutions that internally investigate for several weeks before reporting – even with the genuine aim of producing a complete and accurate report – face the risk that OFSI views the delay itself as aggravating.
Does your institution have a documented escalation protocol that distinguishes between the moment of suspicion and the moment of confirmed designation? In our experience, the gap between those two stages is where reporting delays accumulate.
Enforcement posture and the role of voluntary self-disclosure
OFSI's enforcement posture has hardened progressively since SAMLA conferred the civil monetary penalty power. OFSI publishes enforcement decisions, including decisions where a penalty was imposed or where a referral to law enforcement was made, providing a growing body of guidance on the factors it weighs.
The principal aggravating factors in OFSI's published guidance include: actual knowledge of the designation at the time of the breach; failure to report in a timely manner; systemic or repeated breaches; and failure to co-operate with OFSI's information requests. The principal mitigating factors include: proactive reporting before OFSI became aware; prompt remediation of the breach; a well-designed compliance programme at the time of the breach; and a genuine absence of intent to evade.
A voluntary self-disclosure (VSD) – disclosure to OFSI by the holder of the breach, before OFSI has initiated contact – is the single most effective mitigation available once a potential violation has been identified. The timing of the VSD is critical: the benefit attaches most strongly to disclosures made before OFSI has any notice of the issue. A VSD filed after an OFSI information request has been received does not carry the same weight.
We regularly advise institutions on the structure and timing of VSDs – both to OFSI and, where concurrent obligations exist, to OFAC under BIS and OFAC's own voluntary disclosure frameworks. The scope of the VSD and the supporting analysis can affect the subsequent enforcement trajectory significantly; this is not an administrative filing that should be prepared without experienced sanctions counsel.
A complementary analysis of the general-licence eligibility framework as it operates across comparable export-control regimes is available at our guide to general-licence eligibility under the BIS/EAR, and for further comparative reference see the second part of that analysis.
A common misconception: OFSI will grant a licence quickly if the designated person has legitimate needs
A persistent myth in this area is that OFSI treats licence applications as essentially administrative in nature – that where a designated person has an obviously legitimate requirement (paying legal fees, covering utility bills, meeting mortgage payments), the licence will follow as a matter of course and within days.
That is not an accurate description of the process. OFSI is required to assess each application against the statutory grounds for licensing and, in doing so, to weigh the risk that the authorised payment or dealing might in some manner benefit the designated person beyond the narrow permitted purpose. Applications for legal-fees licences, in particular, require detailed supporting material, and the assessment involves questions about the nature of the legal proceedings and the fee arrangements.
We have acted for financial institutions, property managers, and individuals who held frozen assets and needed licensed access urgently. The matters in which the best outcomes were achieved shared one feature: the application was prepared and submitted with complete documentation at the outset, avoiding the delays that OFSI's requests for further information can introduce. Preparation, not urgency, is the variable within the applicant's control.
Related practices
- Frozen-account management under the BIS/EAR – US parallel regime: licensing structure, scope, and procedural obligations
- General-licence eligibility under the BIS/EAR – when a standing authorisation applies and when a specific licence is required
Frequently asked questions: frozen-account management under OFSI
Who administers frozen-account management under OFSI?
OFSI – the Office of Financial Sanctions Implementation, a unit of HM Treasury – administers the UK financial-sanctions regime, including frozen-account management obligations. OFSI publishes the UK Consolidated List, issues specific and general licences, receives reports from persons who hold or encounter frozen assets, and carries out civil-penalty enforcement. For the most serious criminal breaches, OFSI refers matters to the Crown Prosecution Service. OFSI is distinct from ECJU, which administers UK export controls, and from OFAC, the US equivalent authority.
What does OFSI prohibit in relation to frozen-account management?
OFSI prohibits any dealing in, or making available of, funds or economic resources owned, held, or controlled by a designated person, unless a licence or other authorisation covers the act. This includes crediting interest to a frozen account, executing standing instructions, releasing balances, providing new credit, and paying dividends – as well as transferring, converting, or disposing of the frozen asset. The prohibition attaches to the asset itself and binds any person who holds, controls, or has access to it, regardless of how they came to hold it.
How is frozen-account management enforced under OFSI?
OFSI enforces frozen-account obligations through a civil monetary penalty regime introduced by SAMLA, with criminal referral available for the most serious cases. Civil penalties are calculated by reference to the higher of a percentage of the breach value or a statutory ceiling under the applicable thematic regulations. Key factors in OFSI's assessment include knowledge of the designation, timely reporting, systemic versus isolated nature of the breach, and the quality of the existing compliance programme. Voluntary self-disclosure before OFSI becomes aware of a breach is the most effective mitigant available to an institution that identifies a potential violation.
About Henry Ashworth
Henry Ashworth advises on UK financial sanctions and export controls, including OFSI licensing and enforcement, and judicial-review challenges to designations. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.