A payment-processing firm handles hundreds of cross-border transactions each day. One morning, a wire transfer touches an intermediary bank in a third country. The beneficiary's ownership chain includes a company whose ultimate parent appears on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). The transaction has already been instructed. What happens now – and what should the firm have done before it reached this point?
Trade-transaction screening under OFAC rules is the process of checking every transaction – its parties, its goods, its routes, and its financing – against the lists and programme prohibitions administered by the Office of Foreign Assets Control, the US Treasury bureau responsible for economic sanctions. The obligation applies to US persons and, through the reach of OFAC's secondary-sanctions programmes, creates material compliance pressure on non-US institutions that process US-dollar payments or engage US-nexus counterparties. A failure to screen is not a technical lapse; it is a potential strict-liability violation carrying a significant civil penalty base, verify the current position before relying on it.
This briefing covers who administers the regime, what must be screened and why, how the ownership and control tests operate, where OFAC's rules diverge from the UK and EU positions, what the enforcement posture looks like, and when businesses should involve specialist counsel.
Who administers trade-transaction screening under OFAC, and what is the legal basis?
OFAC administers US economic sanctions under authority derived primarily from the International Emergency Economic Powers Act (IEEPA), supplemented in certain programmes by the Trading with the Enemy Act and statute-specific measures. OFAC sits within the US Treasury and operates programme-specific regulations covering individual country regimes, thematic programmes (counter-proliferation, counter-narcotics, counter-terrorism), and sectoral measures. No single consolidated "sanctions act" governs all programmes; each operates under its own regulations, issued generically rather than by section number here.
The practical consequence for a cross-border compliance team is that the applicable prohibition set must be assembled programme by programme. A transaction touching parties or goods potentially subject to one programme may also engage a second. In our experience, firms that rely on a single consolidated list check without mapping the underlying programme prohibitions regularly miss sectoral restrictions that do not generate a list-based hit.
OFAC maintains several lists relevant to trade-transaction screening. The SDN List is the best-known, but the Sectoral Sanctions Identifications List (SSI List), the Consolidated Sanctions List, the Non-SDN Menu-Based Sanctions List, and the Entity List (administered by BIS, not OFAC, but cross-referenced in screening practice) each carry distinct legal consequences. Screening against the SDN List alone is insufficient for transactions touching sectors where sectoral or debt/equity prohibitions apply.
As of January 2026, OFAC administers over thirty active sanctions programmes. The number changes as programmes are added, modified, or wound down. Any compliance programme should treat the programme list itself as a living document requiring periodic revalidation.
What must be screened? The scope of the OFAC transaction-screening obligation
The scope of OFAC's trade-transaction screening obligation extends beyond the immediate counterparty to encompass every entity that has a legal or beneficial interest in the transaction. That means the originator, the beneficiary, all intermediary financial institutions, the vessel or carrier where relevant, the goods themselves against relevant commodity-based prohibitions, the end-user, and the jurisdiction of transit.
Goods screening is an area that catches many compliance teams off-guard. OFAC's programme regulations in some thematic programmes prohibit the export, re-export, sale, or supply of specific categories of goods regardless of whether a listed person is involved. The restriction attaches to the commodity and the destination, not only to the named party. This is sometimes called a programme-based or activity-based prohibition, and it requires screening the goods classification against programme-specific commodity controls, not just screening the parties against a list.
Financial institutions processing US-dollar correspondent payments face a particular challenge. The currency creates a US nexus even for transactions between two non-US parties. OFAC has historically treated USD-clearing banks as obligated to screen all dollar-denominated messages they process, including SWIFT payment instructions, trade-finance instruments (letters of credit, documentary collections), and guarantees. In our cross-border practice we regularly advise correspondent banks and payment intermediaries on exactly this point: the dollar clears through a US correspondent, and that single connection is sufficient to bring OFAC jurisdiction to bear.
What is the minimum screening programme? OFAC does not prescribe a single mandatory technical standard. It does, however, assess the "adequacy of OFAC compliance programme" as a factor in enforcement. The five elements of an effective compliance programme, as OFAC identifies them in its framework guidance, are: management commitment; risk assessment; internal controls; testing and auditing; and training. Screening is the operational expression of the internal-controls element.
How does the OFAC ownership test work – and where does it diverge from OFSI and the EU?
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) is the primary ownership test. Any entity owned, directly or indirectly, in the aggregate 50 percent or more by one or more SDN persons is itself treated as blocked, even if it does not appear on any OFAC list by name. The rule is mechanical. Intention, day-to-day control, and the nationality of the entity are irrelevant to whether the threshold is crossed.
Aggregation requires careful attention. Two SDN persons each holding twenty-six percent of the same target together exceed the fifty percent threshold. Screening tools that evaluate shareholdings individually without aggregating across blocked persons will miss this scenario. Have you verified that your screening logic applies the aggregation rule, not just the per-person rule?
The UK and EU positions introduce a layer of complexity that OFAC's binary rule does not replicate. Under OFSI (the UK Office of Financial Sanctions Implementation) and the relevant EU Council regulations, the test covers both ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person). An entity can be caught even where the designated person holds less than fifty percent, if the designated person is judged to exercise control by other means – board composition, contractual veto rights, economic dependency. This difference is not academic. A transaction that passes the OFAC fifty-percent test can still be prohibited under UK or EU sanctions if control is established through non-ownership means.
For businesses screening cross-border transactions with a UK or EU nexus – a European issuing bank on a letter of credit, a UK-incorporated subsidiary acting as seller – applying only the OFAC mechanical ownership test is insufficient. The stricter prohibition governs within its jurisdiction. Where both regimes apply, the more restrictive position sets the floor.
The position above covers the standard case. Your facts – the counterparty's ownership structure, the jurisdictions in play, the currency of settlement, the goods being traded – change the analysis. For a cross-regime assessment of a specific transaction or counterparty, contact Calder & Vance at info@caldervance.com.
Secondary-sanctions risk: when does OFAC's reach extend to non-US parties?
Secondary sanctions are the mechanism by which OFAC's reach extends beyond US persons and US-nexus transactions to create compliance pressure on non-US entities. They do not impose a direct legal prohibition on a non-US person under US law in the same way that primary sanctions do. Instead, they threaten the non-US person with loss of access to the US financial system, designation, or other consequences if they engage in defined conduct with a target of a specific OFAC programme.
The practical effect is significant. A non-US financial institution that processes transactions for parties targeted by certain OFAC thematic programmes risks its own correspondent-banking relationships in the United States. This exposure to de-risking (a financial institution exiting a relationship to avoid sanctions exposure) has driven a substantial expansion of OFAC-standard screening by institutions that have no US operations but maintain USD correspondent accounts.
Several points define the secondary-sanctions exposure in trade transactions. First, the programme must carry a secondary-sanctions provision; not all programmes do. Second, the threshold for what constitutes "material" or "significant" engagement varies by programme. Third, the non-US entity has no formal right of representation before OFAC in the same way that a US person does, though OFAC can engage with non-US parties through informal channels and through the licensing process.
In our experience, the secondary-sanctions question is the one most frequently underweighted by non-US trading companies and their banks. The belief that OFAC rules "do not apply to us" because the company is incorporated outside the United States and the transaction does not touch the US is not legally sound if the transaction falls within the secondary-sanctions perimeter of an active programme. Specialist advice at the transaction-screening stage is considerably less costly than enforcement defence after the fact.
Risk flags in trade-transaction screening: what triggers closer review?
A transaction screening hit is the most obvious trigger for escalation, but a large proportion of trade-finance violations arise from transactions that did not generate a list-based hit at all. The prohibited conduct was activity-based, secondary-sanctions-driven, or arose from an undisclosed beneficial owner not reflected in the screening data. Recognising the non-hit risk flags is as important as managing the hits.
The following patterns consistently appear in OFAC enforcement matters and should trigger enhanced review in any well-designed screening programme:
- Unusual routing – a transaction that touches jurisdictions with no obvious commercial rationale for the route, particularly where an intermediary in a third country with limited sanctions oversight is interposed between the originator and the ultimate beneficiary.
- Opacity in the ownership chain – a beneficial-ownership structure that cannot be fully traced to natural persons, or where nominee arrangements or bearer instruments obscure the ultimate controller.
- Goods misclassification risk – a commodity description that is vague, inconsistent with the declared HS code, or inconsistent with the commercial value of the shipment.
- Cash-intensive or informal-value-transfer elements – payment patterns that diverge from trade norms for the sector and geography.
- Counterparty in a jurisdiction subject to comprehensive OFAC sanctions – even where the named parties pass screening, a transit port, a correspondent, or a vessel flagged to a comprehensively-sanctioned jurisdiction can create exposure.
- Inconsistent documentation – discrepancies between the bill of lading, the invoice, and the letter of credit on parties, quantities, or goods descriptions.
Screening tools vary considerably in their capacity to detect these patterns. A list-matching engine calibrated to produce zero false positives will also suppress true positives. In our cross-border practice, we regularly work with compliance teams to recalibrate fuzzy-matching thresholds and to introduce transaction-pattern analytics alongside static list checking. These are not competing approaches; they are complementary layers.
If a transaction has already been flagged, or if a filing has been refused or a payment blocked, early legal review can preserve options that narrow rapidly. Contact Calder & Vance at info@caldervance.com for a confidential initial assessment.
How is trade-transaction screening enforced under OFAC?
OFAC enforces primarily through civil penalties, though cases with willful conduct are referred to the Department of Justice for criminal prosecution. OFAC's civil enforcement process produces public enforcement actions that name the settling entity, describe the conduct, identify the aggravating and mitigating factors, and disclose the settlement amount. These public notices are among the most instructive data sources for compliance teams designing screening programmes.
OFAC's enforcement framework distinguishes between apparent violations (conduct that appears to breach the regulations, subject to OFAC's review) and findings of violation. A voluntary self-disclosure (VSD – a voluntary self-disclosure to a regulator) is treated as a significant mitigating factor and can reduce the base penalty substantially. The VSD process requires prompt and complete disclosure; selective or incomplete disclosure can eliminate the benefit and be treated as an aggravating factor.
Aggravating factors that OFAC consistently identifies in enforcement matters include: wilful or reckless conduct; concealment; management involvement; harm to sanctions programme objectives; and a pattern of violations rather than an isolated occurrence. Mitigating factors include: voluntary self-disclosure; strong prior compliance history; cooperation with OFAC's investigation; and remediation measures implemented after the apparent violation.
The civil penalty base is set by statute and adjusted periodically; figures change and should be verified against the current OFAC guidance rather than relied on from a secondary source. What remains constant is that the per-transaction penalty base applies per violation, and a single compliance failure that propagates across multiple transactions can multiply the theoretical maximum penalty to a level that represents an existential risk for smaller institutions.
Non-US institutions are not immune. OFAC has issued enforcement actions against non-US financial institutions processing USD transactions in violation of OFAC programme regulations. The theory of jurisdiction is the US-dollar clearing nexus; the practical effect is that non-US banks and payment firms face the same enforcement scrutiny as their US counterparts for the dollar-denominated portion of their business.
Record-keeping is a component of the enforcement equation that is sometimes overlooked. OFAC requires that records of transactions involving property blocked or rejected under the regulations be maintained for a defined period. Verify the current retention requirement before designing your document-management controls; the period applies from the date of the transaction, not from the date of any enforcement inquiry.
What does a well-designed OFAC trade-transaction screening programme look like?
A well-designed OFAC trade-transaction screening programme combines list-matching technology with human judgment at defined escalation points, and it is calibrated to the risk profile of the business rather than to a generic industry standard. The five elements that OFAC identifies – management commitment, risk assessment, internal controls, testing and auditing, training – provide the structural skeleton. The content of each element must reflect the specific programmes relevant to the institution's business, the geographies and sectors it serves, and the transaction types it processes.
List-matching technology must cover, at a minimum, the SDN List, the SSI List, the Consolidated Sanctions List, and the Non-SDN Menu-Based Sanctions List. For businesses engaged in trade finance or dual-use goods, the BIS Entity List and Denied Persons List should also be integrated. The matching algorithm must apply fuzzy matching at a threshold calibrated to minimise false negatives without creating an operationally unmanageable volume of false positives. There is no universal threshold; calibration is a risk-based judgment.
Ownership-chain screening is distinct from name-screening and requires a data source that covers ultimate beneficial ownership to the level necessary to apply the fifty-percent rule accurately. Many commercial screening databases are incomplete on beneficial-ownership data, particularly for privately held entities in jurisdictions with limited corporate-transparency requirements. Supplementing database screening with targeted enhanced due diligence for higher-risk counterparties is standard practice in well-run programmes.
In a recent matter, a logistics company handling trade-finance documentation on behalf of multiple importers found that its standard screening process checked only the named buyer and seller on the commercial invoice. A review identified that neither the shipping agent nor the freight-forwarder was being screened, and that beneficial-ownership information was not being collected at onboarding. We worked with the team to redesign the programme to screen all transaction parties and to introduce an ownership-verification step proportionate to the risk profile of each relationship. The matter highlighted how quickly a gap in programme design can expose a business that believed itself compliant.
Testing and auditing must be more than a periodic checklist review. A genuine test of screening effectiveness involves running known positive matches through the production system to verify that they generate alerts, reviewing a sample of cleared transactions to identify false-negative patterns, and stress-testing the ownership-chain logic against constructed scenarios that replicate the aggregation and indirect-ownership patterns described above. Annual testing intervals are a common floor; businesses with high transaction volumes or elevated risk profiles should test more frequently.
How do OFAC trade-transaction screening obligations interact with licensing and authorisations?
The screening process identifies potentially prohibited transactions. Licensing and authorisations are the mechanism that can permit defined categories of those transactions to proceed lawfully. OFAC issues two types of authorisation: general licences (standing authorisations that permit a defined category of transactions without a separate application) and specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction).
When a screening hit or an apparent activity-based prohibition is identified, the first question is whether an applicable general licence already authorises the transaction. General licences for each programme are published by OFAC and should be incorporated into the programme's standard operating procedures so that compliance staff can apply them without seeking fresh legal advice on routine transactions. Reliance on a general licence requires that the transaction falls exactly within its terms; over-reliance on an inapplicable general licence is itself a compliance risk.
Where no general licence applies, the business must decide whether to block or reject the transaction and, if the underlying commercial relationship has ongoing value, whether to apply for a specific licence. OFAC's specific-licence process involves a written application describing the parties, the transaction, the applicable programme, and the policy rationale for authorisation. Timelines vary by programme and by OFAC's current caseload; they should be treated as a variable that can extend substantially beyond initial estimates, verify the current processing time before committing to a transaction timeline.
A transaction that proceeds without a required licence because the business incorrectly determined that screening was negative or that a general licence applied is an apparent violation. The VSD process is available in those circumstances, and early legal advice on whether to disclose and how to structure the disclosure can significantly affect the outcome. Delayed disclosure, or disclosure that is incomplete, removes the mitigating benefit.
Related practices
- Correspondent banking and de-risking under OFAC – sanctions risk management for financial institutions handling USD correspondent flows
- Trade-transaction screening under OFSI – UK financial sanctions obligations for cross-border payments and trade finance
- OFSI trade screening: advanced issues – ownership and control, reporting duties, and licensing in UK sanctions