Indicators of sham and disguised transactions under OFAC: the essentials

A logistics company in Central Europe routes a commodity shipment through an intermediary registered in a third country. The intermediary has no trading history, no website, and a registered address shared with dozens of other entities. The end-buyer's identity is obscured behind a nominee director. At first glance, the name-screening result is clean. But the transaction is a textbook sham – and under OFAC rules, the company that processed the payment is exposed.

OFAC prohibits not only direct dealings with blocked persons, but also transactions structured to disguise or obscure a sanctions nexus. As of early 2026, OFAC's guidance on indicators of sham and disguised transactions (conduct and structural features that signal a transaction has been designed to defeat sanctions controls) makes clear that the 50 percent rule – treating entities owned 50 percent or more by blocked persons as themselves blocked – operates as a floor, not a ceiling. OFAC looks past legal form to practical and economic reality. Liability under IEEPA is strict: no knowledge of the underlying nexus is required.

This briefing sets out how OFAC administers the rules on sham and disguised transactions, the indicators that regulators and compliance teams use, how OFSI and the EU approach equivalent questions, and the practical steps a compliance function should take before the next transaction is approved.

Who administers OFAC's rules on sham and disguised transactions?

OFAC – the Office of Foreign Assets Control, part of the US Department of the Treasury – administers all US economic sanctions programmes under IEEPA, TWEA, and related statutory authorities. It issues binding regulations, publishes interpretive guidance, and enforces both list-based and comprehensive programmes. The rules on sham and disguised transactions sit within OFAC's general compliance and enforcement architecture rather than in any single programme-specific instrument.

Facilitation is a distinct category of liability. A US person who facilitates a transaction that would be prohibited if conducted directly – by arranging, funding, or providing services to it – commits a violation even if the prohibited counterparty is separated by several intermediary layers. That principle is the legal mechanism that makes sham-transaction indicators operationally significant. The intermediary layer does not sever the nexus; it merely changes the question from "who is the counterparty?" to "what is the real structure behind the arrangement?"

DOJ has criminal-enforcement authority alongside OFAC's civil track. In our experience, a matter that involves deliberate structuring to conceal a sanctions nexus will almost always be considered for criminal referral, even when it begins as a civil OFAC enquiry. The two tracks run in parallel and neither displaces the other.

OFAC's Enforcement Guidelines set out the distinction between egregious and non-egregious violations, and treat voluntary self-disclosure (VSD – a proactive report to OFAC of a potential violation before the regulator raises it) as a recognised mitigating factor. Deliberate structuring is, by contrast, an aggravating factor that can push a matter firmly into the egregious category. The difference in outcome between the two categories is material.

What does OFAC prohibit in relation to sham and disguised transactions?

OFAC prohibits any transaction that is structured – deliberately or recklessly – to conceal or disguise a sanctions nexus, whether at the level of the counterparty, the goods, the routing, the payment, or the beneficial ownership chain. The prohibition is anchored in the general dealing and facilitation rules that run across OFAC's programmes. No separate "sham transaction" regulation is required: the existing prohibitions extend by their terms to transactions designed to evade them.

The ownership analysis drives a significant share of sham-structure cases. The 50 percent rule treats any entity owned 50 percent or more, in the aggregate and whether directly or indirectly, by one or more blocked persons as itself blocked. Aggregation is the point where transactions most often fail. Two blocked persons each holding a 30 percent stake in a target company reach the threshold jointly. A layered holding structure – blocked person → holding company → trading entity – satisfies the rule regardless of the number of layers.

OFAC's 2026 guidance reinforces that the 50 percent threshold is a floor rather than a ceiling. Significant minority holdings short of 50 percent are treated as a red flag requiring further investigation, not as a safe harbour. OFAC looks at the practical and economic reality of the arrangement. Does the minority holder control day-to-day operations? Does the minority holder have veto rights over strategic decisions? Can the minority holder extract the economic benefit of the transaction? These questions are not answered by a percentage figure alone.

Beyond ownership, OFAC is attentive to conduct indicators: payment routing through jurisdictions with no commercial logic, invoice values that do not correspond to market rates, counterparties incorporated shortly before the transaction, shared registered addresses across multiple entities, and nominee directors with no discernible connection to the underlying business. None of these indicators is conclusive on its own. In combination, they give OFAC grounds to look through the legal form of the arrangement and assess the substance.

What about transactions where the sham structure is not the client's doing? A business that unknowingly processes a payment through a disguised structure can still be liable on a strict basis. OFAC's strict-liability standard for civil penalties means that ignorance of the underlying nexus is not a defence, though it is a mitigating factor. Is your counterparty due-diligence process designed to surface substance, or only to clear a name-screening list?

What are the key indicators practitioners look for?

Sham and disguised transaction indicators cluster into three categories: structural, documentary, and behavioural. No single indicator is determinative, but a cluster of indicators in the same transaction elevates the risk profile substantially.

Structural indicators focus on the legal and corporate architecture of the arrangement. These include recently incorporated intermediaries with no trading history; entities registered in jurisdictions associated with opacity or elevated transit risk; shared addresses, phone numbers, or directors across ostensibly unrelated entities; ownership chains that resolve only partially, with beneficial owners obscured at a layer above the counterparty; and entities whose stated business purpose does not correspond to the nature of the transaction.

In our practice we regularly see structures where an intermediary holds no inventory, issues no purchase orders, and has no employees – but appears as the buyer of record on a contract for goods destined for a restricted end-user. The intermediary is the mechanism, not a genuine commercial participant. Identifying it requires a substance test, not a list comparison.

Documentary indicators emerge from transaction paperwork. These include invoices where prices deviate significantly from market rates without explanation; contracts that define the goods or services with unusual imprecision; bills of lading or shipping documents listing routing points with no commercial logic; end-user certificates that are unsigned, undated, or issued by an entity without apparent authority to do so; and payment instructions that introduce a new payee at a late stage, particularly where the new payee is in a jurisdiction different from the seller.

Behavioural indicators include counterparties that resist standard due-diligence requests; abrupt changes to payment terms or routing after initial agreement; pressure to close a transaction unusually quickly; and requests to use cash, cryptocurrency, or informal value-transfer mechanisms in a context where commercial practice would normally call for wire transfer or trade finance instruments. A counterparty that cannot or will not identify its ultimate beneficial owner is, in our experience, a significant behavioural signal regardless of what the list-screening result shows.

A related but distinct category concerns digital assets. Blockchain analytics is now used by regulators to trace wallet clusters, and a wallet address associated with a designated person can itself be treated as a blocked property. Transactions routed through mixers or cross-chain bridges in ways that obscure origin generate exactly the kind of traceability gap that OFAC's sham-indicator analysis is designed to address. Compliance functions handling crypto transactions should apply substance analysis to wallet provenance, not only to the named counterparty.

How does the UK approach equivalent questions – and where does it diverge from OFAC?

OFSI – the Office of Financial Sanctions Implementation at HM Treasury – administers UK financial sanctions under SAMLA and the relevant thematic regulations. The UK ownership and control test (the test used to determine whether a non-listed entity is caught through its relationship with a designated person) differs from OFAC's 50 percent rule in ways that matter operationally.

The UK test is not purely mechanical. UK case law distinguishes existing influence from a hypothetical ability to exert control: control must be actual, not merely theoretical. This means a non-listed entity may be caught by the UK test even where no single designated person owns more than 50 percent, provided a designated person has effective control in practice. The converse also applies: a non-listed entity with a designated majority shareholder may not be caught if the designated person is demonstrably unable to exercise that ownership in practice.

OFSI operates a licensing regime with defined grounds. The UK enforcement posture was sharpened in early 2026, with revised guidance introducing structured routes for early account and settlement with associated discounts. OFSI can impose monetary penalties on a strict-liability basis, and the current maximum penalty is the greater of £1,000,000 or 50 percent of the breach value – with pending legislative changes proposed to increase those limits further, though those changes should be verified before reliance.

For a business operating between the United States and the United Kingdom, this divergence has direct transactional consequences. A counterparty that is not blocked under the OFAC 50 percent rule – because the combined designated-person stake is, say, 48 percent – could still be caught by the UK control test if a designated minority shareholder sits on the board and directs the entity's commercial decisions. The correct analysis runs both tests in parallel. Where two regimes both apply, the stricter prohibition governs the conduct of a person subject to both.

How does the EU approach sham and disguised transaction risk?

EU sanctions are imposed by Council Regulation – directly applicable across member states – and Council Decision. The EU control test for asset-freeze purposes looks at control and at a direct or indirect ownership stake of more than 50 percent. Like the UK regime, it is attentive to effective control rather than to legal form alone.

The EU asset-freeze prohibition extends to making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons. The phrase "directly or indirectly" is where sham-structure analysis is most relevant: a transaction that passes economic benefit to a listed person through intermediary layers is caught, regardless of whether the immediate counterparty is on a list.

A significant development in EU enforcement practice concerns anti-circumvention. An EU anti-circumvention instrument was applied for the first time in 2026, allowing restrictions to be directed at operators in third countries where measures are being circumvented through those jurisdictions. Transit through a third country does not change an item's controlled status, and a sharp change in trade flows to a neighbouring or transit jurisdiction is treated as a diversion red flag. This instrument gives the EU a tool that goes beyond the asset-freeze and trade-prohibition rules and targets the intermediary structures that disguised-transaction arrangements typically use.

A September 2026 EU court ruling held that control must be proved by objective and sufficiently weighty evidence. The judgment reinforces that designation and the related prohibitions require a factual foundation: the legal form of an arrangement is not determinative either for the regulator or against it.

EU operators also need to be aware of the EU Blocking Regulation, which can prohibit EU operators from complying with specified third-country measures. Where an EU business is simultaneously subject to an OFAC instruction and a Blocking Regulation prohibition, the two positions must be mapped carefully before any action is taken.

When should a compliance function involve legal counsel?

Not every transaction with an unusual structure is a sham, and not every cluster of indicators means that a sanctions nexus exists. The question is whether the indicators, taken together, are explained by legitimate commercial logic – and whether that explanation is documented before the transaction proceeds, not reconstructed afterwards.

Counsel should be involved at or before the point when a compliance team identifies a combination of indicators that it cannot resolve through its standard due-diligence process. In our experience, the situations that produce the greatest exposure are those where a transaction has proceeded on the basis that name-screening returned a clean result, and the structural indicators were not followed to a conclusion. The clean-screen result addresses a different question.

Specific situations that should prompt early counsel involvement include: a transaction where the ultimate beneficial owner cannot be verified through available databases; a request to substitute a payee or counterparty at a late stage; a structure where one or more intermediate entities are recently incorporated, dormant, or resident in a jurisdiction flagged for elevated diversion risk; a transaction in goods or technologies that attract enhanced end-use scrutiny under the EAR or applicable export-control rules; and any situation where the counterparty resists standard ownership-verification requests.

Early involvement matters because some decisions taken in the days after a potential issue is identified are difficult or impossible to reverse. Blocking property and filing a report with OFAC within 10 business days of the blocking event is a legal obligation, not an option. A decision to proceed with a transaction that has been flagged but not cleared creates a different and harder legal position than a decision to pause and investigate.

Records must be kept for five years. This means that the documentation created at the time a transaction was reviewed – or the absence of such documentation – will be available to OFAC if it ever opens an inquiry. Compliance decisions made without contemporaneous records are almost impossible to defend.

The myth that name-screening alone satisfies OFAC's expectations is one we correct regularly. Name-screening is a necessary but far from sufficient element of a compliant programme. OFAC's five-element compliance commitment standard requires management commitment, risk assessment, internal controls, testing and auditing, and training. A screen that returns a clean result against a well-structured sham satisfies none of those elements beyond the narrowest reading of the internal-controls requirement.

We act for multinationals, financial institutions, and exporters on sanctions and export-control matters across the major regimes. Where a transaction or a compliance programme is being stress-tested, we assess the full ownership and control chain, map secondary-sanctions risk across the relevant regimes, and advise on whether indicators in a particular fact pattern rise to a level that warrants a VSD or a voluntary pause.

Related practices

• Affiliate-level restrictions under BIS and the EAR – understanding how US export-control rules follow ownership chains
• Stablecoin issuer obligations under OFAC – OFAC compliance for digital-asset payment businesses

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.