A regional bank in a mid-tier market receives notice from its primary US correspondent that the relationship is under review. No formal designation has been issued. No transaction has been flagged. The correspondent cites "risk appetite" and gives a short window to respond. The downstream bank's access to dollar clearing – and, with it, its ability to serve its own clients – hangs on what happens next. This is correspondent-banking de-risking (the withdrawal or restriction of correspondent-banking services by a respondent bank's upstream counterpart, typically driven by sanctions exposure concerns) at its most acute. The question is not whether the legal risk is real. The question is whether it is proportionate, demonstrable, and manageable.
Under OFAC (the US Office of Foreign Assets Control, the primary US sanctions enforcement authority), a US correspondent bank that processes dollar-denominated payments through its correspondent network faces strict liability for transactions that touch a blocked person or a comprehensively sanctioned jurisdiction. The correspondent's exposure is real. So is the downstream bank's. But de-risking decisions are frequently disproportionate to actual legal risk – and specialist correspondent-banking de-risking OFAC legal support can document that risk differential, support remediation, and preserve the relationship.
This page sets out the OFAC regime as it applies to correspondent-banking relationships, where de-risking decisions arise, how they interact with OFSI, EU, and other regimes, and what Calder & Vance does at each stage of a de-risking matter.
What does OFAC actually require of a US correspondent bank?
A US correspondent bank's OFAC obligations flow from the statutory basis of each sanctions programme – primarily IEEPA – and are administered and enforced by OFAC through programme-specific regulations. The core obligations are identical whether the correspondent is processing a trade-finance payment, a wire transfer, or a foreign-currency settlement: it must not deal in property or interests in property of a blocked person, and it must not process transactions that benefit a comprehensively sanctioned jurisdiction.
The mechanics are transactional. Every US dollar payment routed through a US correspondent bank is touched by that bank's OFAC obligations. The respondent bank is not itself subject to OFAC unless it is a US person or has a sufficient US nexus, but the US correspondent is. That asymmetry is central to how de-risking decisions arise: the US bank carries the strict-liability exposure; the downstream bank carries the commercial consequence.
In our cross-border practice, compliance teams at US correspondents often describe the decision as binary – retain or exit. It rarely is. The risk management options between those poles include enhanced due diligence, transaction monitoring by corridor or product type, contractual representations, and periodic certification. Understanding those options is the first task when a de-risking notice arrives.
Why do de-risking decisions arise, and are they legally required?
De-risking decisions by US correspondents are not legally mandated by OFAC. OFAC does not require a US bank to exit a respondent relationship solely because the respondent operates in a higher-risk jurisdiction or serves a higher-risk client base. The decision is a commercial and compliance risk-management judgment. That distinction matters enormously in practice.
The driver is almost always perceived exposure rather than demonstrated exposure. A US bank's compliance function may score a respondent as high-risk on the basis of jurisdictional indicators – the respondent's country of incorporation, the corridors it services, the industries of its end clients – without conducting a granular analysis of the actual transaction flows and underlying customer risk. The result is exit where enhanced monitoring would suffice.
From the respondent bank's perspective, a de-risking notice typically raises three questions simultaneously. First, has a specific transaction or client triggered the decision? Second, is the decision driven by OFAC exposure specifically, or by a broader bundle of financial-crime risk including anti-money-laundering and counter-terrorist-financing concerns? Third, what information would the correspondent need in order to reassess? These are legal and factual questions, not merely relationship ones.
We regularly advise respondent banks on structuring exactly this analysis – separating the OFAC exposure element from the broader compliance bundle and preparing a documented risk-differential presentation for the correspondent's compliance function.
How does the OFAC ownership and control test apply in a correspondent-banking context?
The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked, whether directly or through layered intermediaries) is the single most common source of unexpected exposure in correspondent-banking relationships. A respondent bank with a corporate shareholder that is itself partly owned by a blocked person may be captured by the rule even though the respondent itself is not listed.
The test is mechanical. OFAC applies an aggregation principle: two blocked persons each holding less than fifty percent can together reach the threshold. The rule operates on direct and indirect ownership chains. Intermediary holding companies in low-disclosure jurisdictions are the structural feature that screening tools most frequently miss.
This is the point at which the OFAC test and the UK and EU tests diverge most sharply. Under OFSI (the UK Office of Financial Sanctions Implementation) and the parallel EU approach, the test extends to ownership and control (a broader enquiry that looks not only at equity stakes but at the ability of a designated person to exercise dominant influence). A transaction that clears the OFAC fifty-percent threshold may still be caught by an OFSI or EU control analysis. For a respondent bank with European correspondent relationships alongside its US ones, the analysis is genuinely multi-regime – and a legal opinion that addresses only OFAC may leave material risk unaddressed.
A de-risking review that maps the full shareholder register, applies the OFAC aggregation rule, and runs a parallel OFSI/EU control assessment gives a correspondent bank what it actually needs to make a proportionate decision.
What is the procedure when a de-risking notice arrives?
The initial task is triage. A de-risking notice – whether a formal termination letter, a request for enhanced documentation, or an informal signal from the relationship manager – opens a window. That window narrows quickly. Acting within the first few business days preserves options that are harder to recover once the correspondent has finalised its decision.
A structured response typically moves through four stages.
- Diagnosis. Identify what triggered the review. Is it a specific transaction, a named client, a jurisdictional corridor, or a periodic risk-scoring exercise? The answer determines the remedy. Where the correspondent has not disclosed the specific trigger, a targeted information request – framed carefully to avoid inadvertent admissions – can surface it.
- Ownership and screening analysis. Map the respondent bank's ownership chain against the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and all active programme-specific lists, applying the fifty-percent rule to each layer. Run a parallel check against OFSI's Consolidated List and the EU asset-freeze lists. Surface any exposure; document the absence of exposure where none exists.
- Risk-differential documentation. Prepare a written analysis that presents the actual legal risk to the correspondent – specific, evidenced, and separated from the general jurisdictional profile that drove the risk score. This document is the core of the retention argument. It must speak to the correspondent's compliance function, not only to its relationship management.
- Remediation design. Where genuine exposure exists, design the remediation: enhanced due diligence, client-level restrictions, product or corridor limitations, monitoring enhancements, or – where the exposure is structural – advice on licensing or on the practical route to de-designation for any affected party.
The position above covers the standard case. Your facts – the counterparty, the correspondent's specific concerns, the jurisdiction of the respondent, the regime in play – change the analysis materially. Contact Calder & Vance at info@caldervance.com for an initial assessment of your exposure.
Cross-regime risk: where OFAC interacts with OFSI, the EU, and secondary sanctions
A US correspondent bank's decision to de-risk does not dissolve the respondent bank's obligations elsewhere. In our experience, respondent banks that lose dollar-clearing access sometimes seek alternative settlement routes through European or UK correspondents, without appreciating that the same underlying exposure may engage OFSI or EU sanctions.
The interaction runs in the other direction too. A UK or EU correspondent may itself be concerned about secondary sanctions (the risk that a non-US person conducting significant transactions connected to a US-sanctioned party or programme may itself be designated or subjected to restrictions by OFAC). Secondary-sanctions exposure is programme-specific and depends on the active programmes applicable to the relevant transaction. It is not uniform across all OFAC regimes. But where it applies, it means that a respondent bank navigating a US de-risking matter may simultaneously face residual exposure through its European clearing relationships.
Switzerland, Canada, and Australia operate autonomous sanctions regimes with their own lists and their own compliance obligations. A respondent bank incorporated outside the US and the EU may face obligations under several of these regimes simultaneously. The practical implication: a de-risking matter that appears to be a bilateral OFAC question frequently requires at least a headline mapping of exposure under the other regimes a correspondent services.
If a transaction has already been flagged, or a correspondent relationship has already been suspended, an early multi-regime review can preserve options that narrow with time. Write to info@caldervance.com to discuss a confidential assessment.
Common risk flags and mistakes in managing de-risking exposure
The most consequential mistakes in correspondent-banking de-risking are not compliance failures. They are analytical failures – treating a legal risk question as a relationship problem, or treating a relationship problem as something that can be resolved by documentation alone.
The risk flags we see most frequently are these.
- Incomplete ownership mapping. Screening the respondent bank's direct shareholders and stopping there. The fifty-percent rule operates on the full chain. A two-layer holding structure in a low-disclosure jurisdiction can put a clean-looking respondent inside the rule without triggering any standard screening alert.
- Conflating OFAC risk with AML/CFT risk. A correspondent bank's de-risking decision may cite both. The legal basis for OFAC sanctions compliance and the legal basis for anti-money-laundering and counter-terrorist financing obligations are distinct. A response that addresses both without separating them gives the correspondent's compliance function less analytical clarity, not more.
- Delayed engagement with the correspondent. US correspondents' compliance cycles are not indefinite. A notice that calls for a response within a defined period is a genuine deadline. We regularly advise clients who have lost several days to internal escalation before consulting external counsel. That time is often irretrievable.
- Treating a de-risking notice as a termination. A notice is not the same as a termination. It is an opening for a structured engagement. Treating it as final before exploring the remediation options closes off routes that may have been available.
- Failing to address the cross-regime picture. A respondent that documents its OFAC position carefully but leaves the OFSI and EU exposure unanalysed presents an incomplete risk picture. A thorough correspondent will notice the gap.
A common misconception about de-risking: is all exposure disqualifying?
A persistent belief among respondent banks is that any connection to a higher-risk jurisdiction – a branch in a sanctioned corridor, a client with beneficial owners in a jurisdiction subject to a US sectoral sanctions programme, a trade-finance product used in a dual-use supply chain – is automatically disqualifying for a US correspondent relationship. That is not what OFAC requires. And that is frequently not what a proportionate correspondent bank will conclude when presented with a carefully documented risk assessment.
OFAC operates a licensing regime precisely because not all transactions connected to sanctioned environments are prohibited. Specific licences (case-by-case authorisations for otherwise prohibited transactions) and general licences (standing authorisations for defined categories of transactions) carve out significant permitted activity. A respondent bank that operates in a dual-use supply chain or services a client base that includes entities in higher-risk jurisdictions may have fully licensed or otherwise authorised activity that, when documented, materially changes a correspondent's risk assessment.
The practical implication: the answer to a de-risking notice is rarely "we have no OFAC exposure." It is more often "here is the precise scope of our exposure, here is why it is within authorised parameters, and here is the monitoring and remediation we have in place." That argument requires legal analysis. It is not a compliance self-certification.
How Calder & Vance assists with OFAC correspondent-banking de-risking matters
Our work on correspondent-banking de-risking matters follows a defined scope. We do not offer general financial crime advisory. We provide targeted legal analysis on the OFAC, OFSI, and EU sanctions dimensions of a de-risking decision, and we structure the documentation and argument that a respondent bank needs to engage a correspondent's compliance function effectively.
In a recent matter, a payments business operating across several jurisdictions received a de-risking notice from its US correspondent citing concerns about the business's exposure to a specific sectoral programme. We analysed the full ownership chain, applied the fifty-percent rule to each layer, mapped the relevant sectoral exposure, and prepared a risk-differential document for the correspondent's compliance review. The correspondent reassessed. The relationship continued under an enhanced monitoring protocol agreed between the parties.
The specific actions we take depend on the stage of the matter.
- At the initial notice stage: triage the trigger, scope the OFAC and cross-regime exposure, and advise on the response window.
- During the remediation phase: map ownership and control chains against all relevant lists, assess licensing status, and prepare the structured risk-differential analysis for the correspondent.
- Where the relationship cannot be retained: advise on the legal basis for any challenge, assess whether a voluntary self-disclosure is appropriate, and advise on the structure of any replacement correspondent relationship with regard to ongoing sanctions compliance.
- For forward-looking compliance design: assess eligibility, prepare and submit licence applications where required, and manage the regulator's queries in the context of a broader OFAC compliance programme.
The cross-regime dimension is always in scope. Every OFAC de-risking matter we handle is assessed against the OFSI and EU positions as a matter of course. For matters with a UK element, our OFSI correspondent-banking de-risking advisory service addresses the UK-specific analysis in parallel. For clients with exposure under both OFSI regimes, the extended OFSI de-risking counsel service provides integrated coverage.
Related practices
- OFAC correspondent-banking de-risking – core advisory service – licensing eligibility, application preparation, and regulator liaison
- OFSI correspondent-banking de-risking service – UK financial sanctions analysis for respondent banks