A technology exporter in the United States identifies a potential distribution partner in a third country. Screening returns a clean result on the entity itself. But one of the partner's ultimate owners appears on OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons). Does that designation flow down to the distributor? Can the exporter proceed? The answer to both questions turns entirely on ownership and control assessments under OFAC rules – and getting that analysis wrong can block a lawful transaction or, worse, allow a prohibited one to proceed.
As of August 2026, OFAC applies a bright-line rule: any entity owned 50 percent or more in the aggregate, directly or indirectly, by one or more blocked persons is itself treated as blocked – regardless of whether it appears on the SDN List by name. Where ownership falls below that line, the analysis does not end; a separate control inquiry, and a cross-regime comparison with OFSI and the EU, may still produce a finding that prohibits the transaction.
This briefing sets out who administers the OFAC ownership and control assessment, the legal basis for the rule, how the ownership test operates in practice, where the EU and UK regimes diverge, the common errors that generate exposure, enforcement posture, and when to bring in sanctions counsel.
Who administers ownership and control assessments under OFAC?
OFAC – the Office of Foreign Assets Control, a bureau of the US Department of the Treasury – administers all US economic sanctions programmes, including the rules governing whether a non-listed entity is treated as blocked through its ownership by a designated person. OFAC's authority derives from IEEPA (the International Emergency Economic Powers Act), TWEA (the Trading with the Enemy Act), and a series of programme-specific executive orders and regulations. The rules are published in the OFAC regulations for each sanctions programme and are supplemented by OFAC's public guidance on the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked).
OFAC maintains the SDN List and publishes it publicly. The list identifies designated individuals and entities by name, aliases, addresses, and identifying information. A non-listed entity owned at or above the threshold by one or more SDN-listed persons is, as a legal matter, treated as blocked even though it does not appear by name. Compliance counsel, screening platforms, and counterparty diligence functions must therefore look beyond the list itself. The list is the starting point, not the complete picture.
It is worth asking: does your screening programme treat a clean list result as a clean counterparty result? In our experience, many do – and that gap is precisely where enforcement exposure sits.
What is the legal basis for the 50 percent rule and how does OFAC apply it?
OFAC's ownership rule is grounded in the programme regulations issued under IEEPA and TWEA. OFAC has set out the rule and its mechanics in published guidance documents, and it applies across all major OFAC sanctions programmes. The threshold is 50 percent or more aggregate ownership, measured across all blocked-person holders, whether direct or indirect. If a single blocked person holds 60 percent of a target, the entity is blocked. If two blocked persons each hold 30 percent, the aggregate reaches the threshold and the entity is equally blocked.
The rule is designed to prevent circumvention through layered holding structures. OFAC looks through intermediate entities to trace ultimate beneficial ownership. A target may be owned through a chain of three companies, none of which is itself on the SDN List. If the chain leads to a blocked-person holding of 50 percent or more at the top, the target is blocked. The number of layers is irrelevant.
Aggregation across unrelated blocked persons is a point that surprises many compliance teams. OFAC does not require that the blocked persons act in concert or have a common relationship with each other. Each person's direct or indirect holding is counted toward the aggregate. Two unconnected SDN-listed investors who each hold a minority stake in the same fund can together trigger the rule if their holdings add up to 50 percent or more.
The rule also applies recursively: if a company is itself blocked under the 50 percent rule, its subsidiaries and portfolio companies must in turn be assessed. Ownership by a blocked entity – whether named on the SDN List or blocked by operation of the rule – counts toward the aggregate for any downstream entity.
Does OFAC apply a control test as well as an ownership test?
OFAC's primary focus in published guidance is the ownership threshold, and the 50 percent rule provides the clearest bright line for compliance teams. OFAC does not publish a formal, standalone control test equivalent to the tests found in the EU and UK regimes. That said, OFAC's regulations prohibit transactions that are conducted for the benefit of blocked persons, and OFAC can and does examine whether a transaction is in substance controlled by or for the benefit of a designated party, even where the ownership threshold is not formally met.
This is not a formal control rule of the kind that the EU and UK apply, but it introduces risk where a blocked person exercises decisive operational influence over an entity below the 50 percent ownership line. Compliance counsel must therefore consider, alongside the ownership arithmetic, whether the structure of authority and decision-making could lead OFAC to treat the entity as one acting for the benefit of a blocked person. The enforcement risk is real even where formal ownership falls short of the threshold.
In a recent matter, a financial-services business asked us to review a correspondent relationship where the counterparty had a single SDN-listed investor holding just under 40 percent. The ownership test was not formally triggered. We identified, however, that the investor held board-appointment rights and consent rights over material decisions. We advised that the relationship carried an elevated benefit-to-a-blocked-person risk and recommended enhanced due diligence steps before any continuation.
How do the EU and UK regimes diverge from the OFAC approach?
The divergence between the OFAC approach and the EU and UK positions is material, and any cross-border business must understand it before it concludes that a counterparty assessment is complete.
Under the EU sanctions regulations administered by the Council of the EU, ownership is not the only trigger. The EU applies an ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person) standard. An entity can be caught not only when a listed person owns more than 50 percent of it, but also when a listed person can otherwise control it through contractual rights, structural arrangements, or de facto influence. EU guidance identifies specific indicators of control: the right to appoint or remove a majority of the board, veto rights over strategic decisions, and the ability to direct operations. These indicators are assessed qualitatively; there is no single numeric threshold.
OFSI – the Office of Financial Sanctions Implementation in the UK – administers UK financial sanctions under SAMLA (the Sanctions and Anti-Money Laundering Act). The UK regime applies a parallel ownership and control standard. OFSI's guidance specifies that an entity is owned or controlled by a designated person if that person holds more than 50 percent of the shares or voting rights, is entitled to appoint or remove a majority of directors, or otherwise has the ability to ensure that the entity's affairs are conducted in accordance with the person's wishes. The control limb, like the EU version, is qualitative and fact-specific.
The practical consequence: a counterparty might pass the OFAC 50 percent ownership test but still be caught by the EU or UK control test. For businesses operating under more than one regime – a common position for European multinationals, international banks, or any entity with US-dollar clearing – both assessments must be completed. The stricter prohibition governs where the analyses diverge.
We regularly advise clients who have completed an OFAC-focused ownership analysis and assume the EU or UK position is identical. It is not. The control limb can catch structures that the OFAC rule leaves untouched. Our cross-regime coverage means that a single ownership-and-control review covers all three positions rather than leaving a gap between them.
For a detailed account of how OFSI handles the ownership and control test, see our companion briefing: Ownership and control assessments under OFSI: explained. For the UN Consolidated List dimension, see Ownership and control assessments under the UN: explained.
The position above covers the standard case. Your facts – the ownership chain, the jurisdiction, the goods or services, and the specific regimes in play – change the analysis significantly.
For an assessment of your ownership and control exposure under OFAC and across regimes, contact Calder & Vance at info@caldervance.com.
What are the most common errors in OFAC ownership and control assessments?
Incomplete assessments are the most common source of enforcement exposure. In our practice, the errors cluster into five categories.
Screening only the immediate counterparty. Many compliance programmes screen the entity named in the contract and stop there. The 50 percent rule requires tracing ownership through every layer of the corporate chain, including intermediate holding companies in non-transparent jurisdictions.
Failing to aggregate across unconnected blocked persons. A standard screening check will flag individual names. It will not automatically aggregate the holdings of two or more SDN-listed persons who are not themselves linked in the database. Manual aggregation is required where a target has multiple minority investors.
Treating a historic clean result as current. The SDN List is updated without notice. An entity that was clean at contract signature may have a newly designated owner before closing. Ownership assessments must be refreshed at material milestones: signing, closing, payment, and delivery.
Ignoring the indirect layer. A holding company resident in a jurisdiction without mandatory beneficial-ownership disclosure may obscure a blocked-person interest. Due-diligence steps must include registry searches, filings, and where available, ultimate beneficial ownership registers.
Conflating the OFAC test with the EU and UK tests. As noted above, the OFAC ownership test and the EU and UK ownership-and-control tests are not equivalent. A business that runs only the OFAC arithmetic may miss a control-based prohibition under an applicable EU or UK regulation.
If a transaction has already been flagged, or a filing has been refused on ownership grounds, an early review can preserve options that narrow with time.
For a confidential review of a potential breach or a flagged transaction, contact us at info@caldervance.com.
How is the OFAC ownership rule enforced?
OFAC enforces sanctions prohibitions – including prohibitions that arise from the 50 percent rule – through its civil enforcement authority. Where a US person or a non-US person with a relevant US nexus conducts or facilitates a transaction with a blocked entity, OFAC can issue a civil penalty. The penalty can be calculated on a per-transaction basis, and OFAC's enforcement guidelines set out a range of aggravating and mitigating factors.
A VSD (voluntary self-disclosure to a regulator) is a significant mitigating factor under OFAC's enforcement guidelines. Businesses that discover a potential violation of the 50 percent rule – for example, because a previously undisclosed ownership stake by a blocked person comes to light – should assess whether a VSD is appropriate. The window for disclosure is not unlimited; OFAC's enforcement practice rewards early, complete, and cooperative disclosure.
OFAC also has the power to issue a finding of violation without a monetary penalty, and to refer matters involving criminal conduct to the Department of Justice. Where the violation involves wilful circumvention of the ownership rule – for example, a deliberate misrepresentation of beneficial ownership – the criminal track carries significantly greater consequences.
Enforcement does not depend on actual knowledge that the counterparty was blocked. OFAC sanctions are strict-liability in their civil form: a business that transacted with a blocked entity without knowing of the ownership link can still face a civil penalty, though the lack of knowledge is a mitigating factor. This is why the due-diligence standard must be built into the transaction process, not applied only when a red flag has already been identified.
Our team advises on both the preventive side – building ownership-tracing steps into screening and diligence workflows – and the responsive side, including scoping potential violations and preparing VSD submissions to OFAC.
A common misconception: "If it is not on the SDN List, it is not blocked"
The most persistent myth we encounter in advisory work is that the SDN List is a complete catalogue of blocked persons. It is not. The list contains the names of those who have been formally designated. The 50 percent rule creates a shadow category: entities that are legally blocked under every OFAC sanctions programme but whose names do not appear on any list.
OFAC has been explicit on this point. The obligation to avoid transactions with blocked entities applies regardless of whether the entity is listed. A business cannot rely on a clean list result as a defence where it failed to trace the ownership chain and a blocked-person interest of 50 percent or more would have been apparent from publicly available information.
The myth leads directly to the compliance gap. Screening-tool vendors market products against the SDN List and affiliated lists. Those tools are necessary but not sufficient. The ownership analysis must be layered on top: trace ownership, aggregate blocked-person holdings, and assess the result against the threshold. This is not a one-time exercise at onboarding. It must be refreshed whenever ownership information changes or when a new designation occurs that affects an existing counterparty.
Our practice regularly works with compliance teams to test the logic of their screening programmes against the ownership rule. The test often reveals that the programme flags the right names but does not aggregate holdings or follow ownership chains beyond two layers. Both gaps are closed in the same review.
For a structured assessment of whether your compliance programme covers the full OFAC ownership and control analysis, see our service page: Compliance audit and testing.
When should a business involve sanctions counsel on an ownership assessment?
Counsel should be involved at the outset of any transaction where ownership information is incomplete, layered, or concentrated in jurisdictions with limited transparency. Waiting until a red flag surfaces is a less effective approach; ownership questions become harder to resolve under deal pressure or time constraints.
Four situations call for external counsel without delay. First, where a screening tool returns a possible match on an owner two or more layers up the chain and the compliance team is uncertain whether aggregation triggers the rule. Second, where a counterparty has ownership in a jurisdiction that does not publish beneficial-ownership data and an opaque corporate structure makes direct verification impossible. Third, where an existing relationship has continued after a new OFAC designation was issued affecting a counterparty's owner. Fourth, where a transaction involves a joint venture, fund, or co-investment structure in which blocked-person interests are held alongside other investors.
In each of these situations the analysis is fact-specific and the margin for error is low. A concluded transaction with a blocked entity creates enforcement exposure even where the business had no intent to violate. Counsel's role is to complete the analysis before the transaction closes, not to manage the consequences after it does.
We have acted for financial institutions, trading companies, and multinationals in each of these scenarios. The approach is consistent: map the ownership chain in full, aggregate all blocked-person interests, assess the result against the OFAC rule, and overlay the EU and UK control tests where those regimes are in scope.
Related practices
- Compliance audit and testing – structured review of screening logic, ownership tracing, and programme design against OFAC and other regimes
- OFSI ownership and control assessments – how the UK control test diverges from the OFAC 50 percent rule
- UN Consolidated List ownership assessments – the UN dimension and its interaction with OFAC and OFSI