A UK-incorporated trading house receives payment instructions from a European counterpart. The beneficiary account is held at a bank subject to a financial-sanctions designation. The bank's own compliance team flags the transfer as potentially blocked. The trading house wants to know: does a general licence cover this? Who checks eligibility? What obligations arise once a payment is made under one?
General licence eligibility under OFSI – the UK's Office of Financial Sanctions Implementation – turns on whether a proposed transaction falls within the precise scope of a licence that HM Treasury has already issued. A general licence (a standing authorisation that permits a defined category of transactions without a separate application) is not a blanket exemption. Each instrument specifies who may rely on it, for what purpose, and subject to what record-keeping and reporting conditions. As of June 2026, OFSI administers these instruments under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the relevant thematic regulations.
This briefing sets out the authority and legal basis for OFSI general licences, the eligibility and scope questions a business must work through, the obligations that attach once reliance is claimed, how the position compares with OFAC and the EU, and the risk flags that should prompt legal review before a transaction proceeds.
Who administers general licence eligibility under OFSI, and what is the legal basis?
OFSI, a unit of HM Treasury, is the sole authority for financial-sanctions licensing in the United Kingdom. It issues general licences under SAMLA and the relevant thematic regulations that implement UK sanctions programmes. The legal basis sits in SAMLA itself: it empowers the Treasury to grant licences permitting conduct that would otherwise breach a financial-sanctions prohibition. General licences derive from that power and are published on the OFSI website and in official notices.
The practical significance of this architecture is that OFSI – not the sanctioned counterparty's bank, not a compliance officer's internal memo – determines what the licence permits. A business relying on a general licence is relying on a published legal instrument. If the transaction exceeds that instrument's scope, the reliance fails and the prohibition applies regardless of any internal sign-off.
OFSI operates under ministerial oversight. Where Treasury policy shifts, licences can be varied, suspended, or revoked. In our cross-border practice, clients sometimes assume a general licence is permanent once issued. It is not. Businesses should monitor OFSI's published updates to confirm that the instrument they rely on remains in force and unchanged.
For businesses also subject to US sanctions – and many UK-incorporated entities are – it is worth noting that the Office of Foreign Assets Control (OFAC) administers a parallel licensing system under the International Emergency Economic Powers Act (IEEPA) and related authorities. The two regimes do not align mechanically. What OFSI permits is not necessarily what OFAC permits, and vice versa. That divergence is covered in a later section.
What does the eligibility test look like in practice?
Eligibility for a general licence under OFSI rests on three concurrent questions: Is the proposed activity within the subject-matter scope of the licence? Does the person seeking to rely on it fall within the class of persons the licence names or describes? And do the conditions attached to the licence – including any reporting or record-keeping obligations – bind the relying party?
Subject-matter scope is often the threshold question. OFSI general licences are drafted narrowly. A licence covering humanitarian payments, for instance, does not extend to commercial transactions that have an incidental humanitarian benefit. A licence covering wind-down transactions covers the specific types of activity named in the instrument, not the broader concept of closing out a relationship. In our experience, overly broad readings of general-licence scope account for a significant share of the eligibility queries we receive. The question to ask is not "could this transaction plausibly fall under the licence?" but "is this transaction squarely within what the licence says?"
The class of permitted persons matters equally. Some OFSI general licences name a category of institutions – for example, credit institutions, or legal practitioners acting on specific matters – and a business outside that class cannot rely on the licence even if the transaction type fits. Businesses must verify their own legal character against the licence's defined class.
Conditions are not optional. They are legal obligations. A general licence that requires prior written notice to OFSI before a transaction proceeds makes that notice a precondition. A licence requiring that a licensed payment be directed to a specified purpose makes directing it elsewhere a breach. Eligibility and compliance with conditions are not two stages; they are a single analysis.
What are the ongoing obligations once a business relies on a general licence?
Relying on an OFSI general licence triggers a suite of obligations that run concurrently with the licensed transaction and, in most cases, after it. These fall into three practical categories: transaction records, reporting to OFSI, and monitoring of the licence's continuing validity.
Record-keeping is mandatory. OFSI's enforcement guidance specifies that persons relying on a licence should maintain complete and accurate records of the transactions conducted under it. The general expectation in UK sanctions practice is that records are retained for a period consistent with financial-regulation standards. Businesses already subject to the Financial Conduct Authority's record-keeping rules should apply at least that standard; those outside regulated financial services should take formal advice on what OFSI's guidance requires in their sector.
Reporting obligations vary by licence. Some instruments require a relying party to notify OFSI of a transaction before it proceeds. Others require periodic reporting of all transactions conducted under the licence during a reference period. A few require immediate notification if circumstances change – for example, if the relying party discovers that the licensed purpose is no longer being met. Reading the reporting conditions precisely, before the first transaction, is not optional. It is the condition of the licence.
Monitoring matters because OFSI amends general licences. A transaction that was eligible when initiated may, if it spans several weeks, proceed under a licence that has since been varied. In our practice, we advise clients with recurring transactions under a general licence to build a review step into their payment-approval workflow rather than relying on a one-time eligibility assessment.
The position above covers the standard case. Your facts – the counterparty, the purpose of the payment, the licence version in force, the applicable thematic regime – change the analysis. For an assessment of your exposure under OFSI, contact Calder & Vance at info@caldervance.com.
How does OFSI's general licence regime compare with OFAC and the EU?
Cross-border businesses frequently face the same transaction under two or more overlapping sanctions regimes. Understanding where OFSI, OFAC, and the EU converge – and where they diverge sharply – is essential before a business acts.
OFAC issues both specific licences (case-by-case authorisations) and general licences (standing authorisations published on the OFAC website). OFAC general licences are often broader in their initial formulation than OFSI instruments but carry their own eligibility conditions and are programme-specific. Critically, an OFAC general licence does not carry any authority in the UK. A UK business that is a "US person" for OFAC purposes – or that transacts in US dollars or through a US correspondent – must satisfy OFAC eligibility requirements separately from OFSI's.
The EU operates through Council regulations and, within them, general derogations or authorisations that competent authorities in each Member State implement. The EU framework is regulation-by-regulation: a derogation in one Council regulation does not automatically apply under a different programme. Compared to OFSI, EU general authorisations are often conditioned on prior competent-authority approval, making the EU system in many respects closer to a specific-licence model for the relying party.
The critical practical rule is that where two or more regimes apply simultaneously, the stricter prohibition governs. If OFSI permits a payment under a general licence but OFAC has not issued a comparable authorisation, the US position blocks the transaction for any party with OFAC nexus. The reverse is equally true. Businesses must conduct regime-by-regime eligibility analysis, not a single composite check.
Switzerland (SECO) and Canada (GAC) operate their own licensing regimes. Neither OFSI's general licences nor OFAC's general licences carry any legal effect in those jurisdictions. For transactions that touch multiple regimes, co-ordinating legal review across each applicable jurisdiction is the only reliable approach.
What are the principal risk flags that indicate a compliance problem?
A mismatch between the transaction type and the licence's defined scope is the most common eligibility failure. It tends to arise where a business relies on a general licence that was granted for a specific context – humanitarian, wind-down, legal fees – and the transaction has acquired additional commercial dimensions not originally present. If the purpose has shifted, re-check the licence from scratch.
Counterparty changes present a second risk. Many OFSI general licences are framed by reference to a specific designated person or category of designated persons. If the counterparty has been re-designated, if a new designation has captured a shareholder, or if an ownership restructuring has changed the designated person's position, the original eligibility assessment is stale.
A common myth worth addressing directly: some businesses assume that obtaining a general licence number, or simply identifying that a general licence exists in the relevant programme area, is itself a compliance sign-off. It is not. The existence of a licence does not confirm eligibility for the specific transaction. The specific transaction must be mapped against the specific licence terms. Eligibility is transactional, not programmatic.
Reporting failures – sending the required notice late, or not at all – are a distinct category of breach from transacting outside scope. OFSI can pursue a failure to comply with a licence condition independently of any question about whether the underlying transaction was substantively permitted. The obligation to report is a free-standing legal duty.
A fourth risk flag arises where the relying party is not certain whether it falls within the licence's class of permitted persons. In our experience, this uncertainty most often arises for non-UK entities operating through UK subsidiaries, or for entities in financial-sector-adjacent roles – payment processors, custodians, intermediary banks – whose status within a licence's defined class is genuinely unclear. That uncertainty requires legal review, not a unilateral eligibility determination.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
When does OFSI enforce, and what are the consequences of getting eligibility wrong?
OFSI has civil monetary penalty powers under SAMLA for breaches of financial-sanctions prohibitions. The civil enforcement track does not require a criminal standard of proof. Where a breach is established, OFSI can impose a civil penalty, publish details of the breach, or – where a criminal standard is met and referral occurs – pass the matter to law-enforcement authorities. OFSI's published enforcement guidance sets out its general approach to deciding whether to impose a penalty and at what level.
The key point for general-licence eligibility is that transacting outside the scope of a licence is not a technical irregularity. It is a breach of the underlying prohibition that the licence was relied upon to excuse. The licence does not retrospectively validate out-of-scope transactions. An entity that discovers it relied on a general licence for a transaction that was in fact outside scope has a potential breach on its hands, not a paperwork problem.
OFSI's enforcement guidance identifies voluntary disclosure as a relevant mitigating factor. A business that identifies a potential breach and makes a timely, complete, and candid voluntary self-disclosure (a voluntary self-disclosure, or VSD, is a proactive report to a regulator before a breach is discovered externally) to OFSI is in a materially different position from one that waits for OFSI to identify the issue. Timing matters enormously. So does the quality of the disclosure.
In a recent matter, a financial-services business relied on an OFSI general licence for a series of operational payments. A review uncovered that two of those payments were directed to a purpose that the licence's conditions did not cover. We scoped the apparent violation, advised on voluntary self-disclosure, and prepared the disclosure to OFSI on the firm's behalf. The matter was resolved through the enforcement process without escalation to criminal referral. The outcome is not indicative of any guarantee – but the lesson is that early, precise action shapes the result.
How does OFSI treat ownership and control for licence eligibility purposes?
A general licence granted in respect of a designated person may also cover – or may specifically exclude – entities that the designated person owns or controls. The test under UK sanctions law is an ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person). Unlike OFAC's purely mechanical 50 percent or more aggregate ownership threshold, the UK test encompasses both ownership and control, meaning an entity can be caught even where the designated person holds less than fifty percent of the shares if the designated person exercises effective control by other means.
This distinction is consequential for licence eligibility. A business relying on an OFSI general licence for dealings with a designated person's subsidiary must confirm that the subsidiary's ownership and control position does not itself make the subsidiary a sanctioned entity – or that the licence's scope extends to it expressly. Where control, rather than ownership, is the relevant nexus, that analysis requires careful legal assessment rather than a simple ownership-percentage check.
The EU applies a conceptually similar control test under the relevant Council regulations. OFAC applies the fifty-percent rule mechanically. In our cross-border practice, the divergence between these tests is a consistent source of transactional complexity, particularly for corporate groups with layered or joint-venture structures where a designated person holds a non-majority economic interest alongside governance rights.
Related practices
- Frozen account management under BIS and EAR – managing blocked and frozen assets under US export-control and sanctions regimes
- Humanitarian authorisation under Australia's sanctions regime – eligibility, scope, and application process under DFAT
- Humanitarian authorisation under EU sanctions – derogations, competent-authority approval, and cross-regime interaction