A European distribution business has spent years supplying components to a regional partner. Then a Council regulation amends the list of designated persons, and that partner's ultimate beneficial owner appears as a designated entity. The business now holds an active supply contract, outstanding invoices, and a long-running banking relationship – all of which have become, overnight, potential sanctions violations. How does it unwind this exposure lawfully, and within what timeframe?
Winding down sanctioned exposure under EU rules means executing a structured, time-limited exit from transactions, relationships, and asset positions that a Council regulation now prohibits – without triggering new violations in the process. The governing instruments are the relevant thematic Council regulations, administered and monitored at EU level by the Council and the European Commission, and enforced by the competent authorities of each member state. As of January 2026, the EU operates some of the most prescriptive wind-down rules of any major regime, and missteps during the exit period can generate liability even where the underlying exposure predates the designation.
This briefing covers the legal basis for EU wind-down obligations, the procedure and tests that govern an orderly exit, how the EU position diverges from OFAC and OFSI, the risk flags that most commonly generate enforcement exposure, and when to involve specialist counsel.
Who administers EU sanctions and what is the legal basis for wind-down obligations?
EU sanctions are adopted by the Council of the European Union acting under the Treaty on European Union, with the operative prohibitions set out in directly applicable Council regulations. The Council regulations are binding in all member states without further transposition. The European Commission monitors implementation and issues guidance. Enforcement, however, sits with the competent authorities designated by each member state – typically a financial-intelligence unit, a ministry, or a central bank – meaning that the standard of supervision and the speed of enforcement response differ materially across the bloc.
Wind-down obligations arise from specific provisions within the relevant thematic regulations. Those provisions authorise, or sometimes require, a business to complete defined categories of activity – settling an existing contractual obligation, closing a financial position, returning assets – within a fixed period after the designation takes effect. The authorisation is usually granted by way of a general authorisation (a standing permission for a defined class of wind-down activity, operative without a separate application) or a specific authorisation (a case-by-case licence from the competent authority of the relevant member state, required where the general authorisation does not apply or where the transaction exceeds its conditions).
The critical point is that a wind-down general authorisation does not suspend the underlying prohibition. It permits narrow, defined actions. Activity that falls outside the terms of that authorisation – even activity that appears commercially incidental to the wind-down – is prohibited. In our cross-border practice, we regularly advise businesses that have inadvertently extended a relationship beyond the authorisation's scope while attempting to close it.
What does the EU prohibit, and what does a wind-down authorisation actually permit?
EU regulations typically prohibit making funds or economic resources available to a designated person, directly or indirectly, and freeze all funds and economic resources owned or controlled by designated persons. The prohibition is broad: it covers payment, credit extension, the release of security, the provision of services, and the transfer or delivery of goods.
A wind-down authorisation carves out a limited exception. The carve-out normally permits completion of transactions that were contracted before the designation date, provided that the transaction is completed within the authorised period and that any funds paid to a designated counterparty are themselves frozen on receipt. The key phrase is "contracted before." A business that enters a new obligation after the designation date – even to facilitate an orderly exit – does not benefit from a wind-down authorisation and may need a separate specific licence.
What is frequently misunderstood is that the authorisation covers the completion of the pre-existing obligation, not the preservation of the commercial relationship. Rolling over a credit facility to give a designated counterparty time to find alternative financing is not wind-down; it is a new extension of credit that the prohibition catches. Renewing an insurance policy, extending a lease, or providing post-sale technical support after the designation date are each discrete acts requiring separate analysis. Do these sound like minor administrative steps? In enforcement terms, they are not.
The position above covers the standard case. Your facts – the counterparty structure, the goods or services involved, the member state whose competent authority has jurisdiction, the specific regulation in play – change the analysis materially. For an initial assessment of your EU wind-down position, contact Calder & Vance at info@caldervance.com.
How does the EU ownership and control test apply during a wind-down?
The EU test for determining whether an entity is caught by a designation does not rest on a fixed numerical ownership threshold alone; it extends to control – meaning the ability of a designated person to direct or influence the entity's decisions, whether through ownership, governance rights, contractual arrangements, or other means. This is a materially different test from OFAC's mechanical 50 percent aggregate-ownership rule, and it requires a fuller structural and legal analysis.
For wind-down purposes, the ownership and control test matters because it determines whether a counterparty is itself a designated entity – triggering the freeze and the prohibition – or merely associated with one. A business attempting to wind down a relationship with an entity that is owned but not majority-controlled by a designated person may find that its counterparty is not itself subject to the freeze, yet that any payment to it that would in practice benefit the designated person is nonetheless prohibited. The indirect-benefit analysis is where EU wind-down practice becomes technically demanding.
The EU General Court has, in a series of annulment proceedings, addressed the standards of reasoning required when the Council relies on ownership and control to extend a designation. Those judgments inform how practitioners assess the strength of a designation and, by extension, the scope of the prohibition that flows from it. We regularly advise businesses on whether an entity in a counterparty's ownership chain is correctly treated as designated under the applicable regulation before any wind-down strategy is settled.
How does the EU wind-down regime compare with OFAC and OFSI?
The divergence between the three major regimes is operationally significant for any business with cross-border exposure. Understanding where they differ is not an academic exercise – it determines which competent authority holds the licensing power, which wind-down period applies, and which misstep generates the most serious enforcement risk.
Under OFAC, the ownership test is the mechanical 50 percent aggregate rule. Wind-down general licences under OFAC typically state a defined period – often expressed in calendar days from the designation date – within which specific categories of activity may be completed. OFAC's general licences are published and publicly available; the terms must be read precisely. Transactions that do not qualify under a general licence require a specific licence from OFAC, and OFAC processes licence applications on a facts-and-circumstances basis, with timelines that vary significantly by programme.
Under OFSI – the UK's Office of Financial Sanctions Implementation – the ownership and control test is similar in structure to the EU test, extending beyond a numerical ownership threshold to cover practical control. The UK's wind-down provisions are found in the relevant thematic regulations made under the Sanctions and Anti-Money Laundering Act ("SAMLA"). OFSI has a licensing function that operates separately from EU competent authorities, and since the UK's departure from the EU, the lists and the authorisation structures have diverged. A business dealing with a counterparty that is designated under both EU regulations and UK sanctions may need separate authorisations from two different competent authorities to complete the same wind-down transaction.
The practical consequence of this divergence is that the most restrictive regime governs the specific leg of the transaction to which it applies. A payment from a UK bank to a designated party requires OFSI authorisation even if an EU competent authority has already issued a licence. There is no mutual recognition between the regimes. For more on the OFSI wind-down regime, see our briefing at Wind-down Exposure under OFSI Explained. For the OFAC position, see Wind-down Exposure under OFAC Explained.
If a transaction has already been flagged by a correspondent bank, or a filing has been refused by a competent authority, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review of your position.
What is the procedure for obtaining a specific authorisation from an EU competent authority?
Where a wind-down general authorisation does not cover the activity, or where its conditions are not met, a business must apply for a specific authorisation from the competent authority of the relevant member state. The applicable member state is generally determined by where the applicant is established or where the funds or economic resources are located – though the precise allocation rules vary across regulations and across the regimes of different member states.
A specific authorisation application requires the applicant to identify the legal basis for the request – typically a derogation provision in the relevant Council regulation – and to demonstrate that the conditions for the derogation are met. Those conditions commonly include that the funds will be used for a specified purpose (completion of a pre-existing contract, humanitarian purpose, or legal costs), that the transaction will not benefit the designated person beyond what is necessary for the permitted purpose, and that the applicant is not itself subject to designation.
Applications should be accompanied by documentary evidence: copies of the pre-existing contract, payment schedules, ownership and corporate-structure charts, and any relevant correspondence with the counterparty. Competent authority processing times differ significantly across member states. Some issue decisions within a few weeks; others take considerably longer. The regulated timeline is not uniform across the bloc, and businesses planning a wind-down should allow for this uncertainty when structuring their exit. In our experience, applications that are incomplete or that fail to identify the specific derogation ground are returned or refused without substantive consideration.
A related practical point is that competent authorities frequently ask questions during the review process. Responding promptly and accurately is important. An inconsistent or incomplete response can delay the authorisation, and in some member states it can trigger a referral to the enforcement function. Preparing a thorough, internally consistent application file from the outset reduces that risk.
What are the principal risk flags during an EU wind-down?
Several patterns of conduct generate disproportionate enforcement risk during an otherwise well-intentioned wind-down. Awareness of them is the first line of risk management.
- Late identification of the designation. A business that does not screen counterparties against the Consolidated List and the relevant EU list on a rolling basis may not identify a new designation for days or weeks. Any activity during that gap – payments, deliveries, service provision – is potentially in breach, regardless of intent. Screening should be triggered by every list update, not only at onboarding.
- Continuing service obligations. Maintenance contracts, software licences, and IT support agreements are frequently overlooked. Each renewal or support ticket raised after the designation date requires analysis. The fact that the service was originally contracted before the designation does not make every post-designation act automatically authorised.
- Indirect payments and netting arrangements. A business that nets a payable to a designated entity against a receivable from it – or that allows a third party to make or receive payments on its behalf – is making funds available indirectly. Netting against a designated counterparty requires specific analysis before execution.
- Failure to freeze on receipt. Where a wind-down authorisation permits completion of a contract, funds received from a designated person must typically be frozen immediately on receipt in an account notified to the competent authority. Businesses that receive funds and apply them to general accounts without freezing are in breach of the freeze obligation, even if the receipt itself was authorised.
- Record-keeping failures. EU regulations require businesses to maintain records of their transactions with designated persons and of any notifications or applications made to competent authorities. A failure to maintain adequate records is itself a breach and complicates enforcement defence.
The myth we encounter most often in this area is that a business has nothing to worry about provided it acted in good faith and was trying to exit the relationship. Good faith is a factor that competent authorities and courts may take into account in assessing penalty, but it is not a defence to the breach itself. The prohibition is strict. Liability does not require intent to violate the rules; it requires only that a prohibited act occurred.
When should a business involve specialist counsel in an EU wind-down?
Specialist counsel adds most value at three points in an EU wind-down: before the exit strategy is fixed, when a specific authorisation is needed, and when a potential breach has been identified.
Before the strategy is fixed, counsel can map the ownership and control chain of the counterparty, identify which provisions of the relevant regulation apply, assess whether a general authorisation covers the proposed activity, and – if it does not – identify the correct derogation ground for a specific authorisation. This analysis is most efficient when done before the business has committed to a contractual exit mechanism, because some exit structures are authorisable and others are not.
When a specific authorisation is required, counsel can prepare the application, identify the competent authority with jurisdiction, and manage the authority's queries. In our experience, a well-prepared application reduces processing time and the risk of a referral to the enforcement function.
When a potential breach has been identified – a payment was made after the designation date, a service was continued without authorisation, a freeze obligation was missed – counsel can scope the apparent violation, assess whether it falls within a minor-infraction category that the competent authority may handle through a remediation process, and advise on whether a voluntary disclosure is appropriate. Early disclosure, where the regime supports it, can be a significant mitigant. Delay, by contrast, narrows options. The voluntary self-disclosure (VSD) mechanism – a proactive disclosure to the competent authority before it has identified the breach – is available under the enforcement guidance of several member states and is treated as a meaningful mitigant in penalty assessments.
In a recent matter, a financial institution in central Europe identified that a long-standing correspondent-banking relationship had become exposed following a Council regulation update. We assessed the ownership and control chain, confirmed the scope of the applicable general authorisation, and advised on the specific authorisation required for the final settlement leg. The matter was resolved within the authorised period without enforcement referral. For related considerations in the correspondent-banking context, see our correspondent banking and de-risking service page.
Related practices
- Correspondent Banking and De-risking (OFAC) – counterparty screening, secondary-sanctions risk, and relationship exit strategy
- Wind-down Exposure under OFAC Explained – OFAC general-licence conditions, ownership test, and licensing procedure
- Wind-down Exposure under OFSI Explained – UK SAMLA regime, OFSI authorisation process, and comparison with EU