A regional bank in a developing market receives notice from its primary US correspondent that the relationship will be terminated in sixty days. No specific violation is cited. The correspondent simply states that the account falls outside its risk appetite. The regional bank's clients – importers, exporters, small manufacturers – lose their USD clearing window overnight. Is there a legal basis to challenge the decision? Can the relationship be restructured? And what does OFAC's actual position on de-risking (a financial institution exiting a relationship to avoid perceived sanctions exposure rather than managing it through controls) say about this situation?
Correspondent-banking de-risking under OFAC presents a specific and well-documented legal problem: US correspondent banks face civil and criminal exposure under IEEPA and the applicable programme regulations if they process transactions for blocked or sanctioned counterparties, yet OFAC has consistently noted that wholesale termination of correspondent relationships – rather than targeted, risk-based management – is not required by the rules and may itself damage the legitimate trade that sanctions programmes are designed to protect. The legal question is not whether de-risking is permissible; it is whether the facts that drive it are correct, and whether a structured compliance approach could preserve the relationship on terms both parties can defend.
This page explains the OFAC legal position on correspondent banking, the risk assessment process a US bank applies, the cross-regime dimensions that affect regional banks operating outside the United States, and what specialist counsel can do to either prevent a termination or manage its consequences.
What drives a US correspondent bank to terminate a relationship?
A US correspondent bank terminates a relationship when its internal risk assessment concludes that the cost of managing the compliance exposure exceeds the revenue generated by the account. That cost calculation is driven by four primary factors: the jurisdictions where the respondent bank operates, the nature of the respondent's own client base, the quality of the respondent's Know Your Customer (KYC) and transaction-monitoring controls, and the correspondent's own OFAC examination history.
OFAC administers the US economic-sanctions programmes under authority derived from IEEPA, the Trading with the Enemy Act (TWEA), and various programme-specific statutes. A US bank that processes a payment for or involving a person on the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) commits a strict-liability violation regardless of intent. The civil-penalty exposure under the major programmes is substantial and is calculated as a multiple of the transaction value, subject to a base amount floor. That strict-liability architecture is the root cause of de-risking: a US bank cannot fully insulate itself from the acts of its respondents.
In our experience, the formal risk-appetite decision is typically made at a senior level – head of financial-crime compliance or chief risk officer – after a periodic account review flags one or more of the following: a concentration of clients in a jurisdiction subject to a US sanctions programme; transactions routed through intermediate banks in high-risk corridors; unexplained payment references; or a regulator-identified deficiency in the respondent's AML or sanctions controls. The trigger is rarely a single transaction. It is a pattern that the correspondent's risk model cannot resolve.
What is OFAC's actual position on de-risking?
OFAC does not require US financial institutions to terminate correspondent relationships as a general compliance measure, and has stated in its guidance that risk-based programmes – calibrated to the actual exposure presented by a given relationship – are the expected standard. The agency's published compliance guidance under IEEPA emphasises a five-element framework: management commitment, risk assessment, internal controls, testing and auditing, and training. Blanket exit from a category of relationship is not among the prescribed responses to elevated risk.
That said, OFAC does not prohibit termination. A US bank is entitled to choose its counterparties. What OFAC's position means in practice is that a well-documented, well-controlled respondent bank has a legal argument that termination is disproportionate to its actual risk profile – and that argument carries weight in a structured dialogue with the correspondent.
The US interagency guidance on correspondent banking, developed jointly across the prudential regulators and the Treasury, makes a related point: when a US bank terminates a relationship with a respondent that has adequate AML and sanctions controls, it may be transferring the transaction flow to less-controlled channels, which is the opposite of the regulatory objective. This is not a defence to an OFAC violation, but it is a documented policy argument that a respondent's legal counsel can deploy. Have you reviewed whether your compliance controls are documented at the level that a US correspondent's risk team would expect to see?
The position above covers the standard case. Your facts – the counterparty, the jurisdictions of operation, the transaction types, and the quality of existing controls – change the analysis materially.
For an initial assessment of your position under OFAC, contact Calder & Vance at info@caldervance.com.
How does the risk-assessment process work from the respondent's side?
A respondent bank seeking to retain or restore a US correspondent relationship must approach the process as a structured evidence exercise, not a commercial negotiation. The correspondent's risk team is working from a model. The respondent's goal is to supply factual information that corrects the model's inputs.
The process typically proceeds in four stages.
- Gap analysis. Map the correspondent's stated concerns against the respondent's actual controls. Where the concern is jurisdictional exposure, the respondent should document which clients operate in which markets, and what screening and transaction-monitoring controls apply to each corridor. Where the concern is KYC quality, the respondent should produce its KYC policy, its beneficial ownership (the natural persons who ultimately own or control a legal entity) procedures, and a sample of the documentation held for high-risk clients.
- Sanctions-specific control documentation. The respondent should produce written evidence of its screening programme: the lists screened, the frequency of rescreening, the false-positive adjudication process, and the escalation path for potential matches. If the respondent has its own OFAC or local-sanctions compliance programme, this is the stage at which that programme must be presented comprehensively.
- Remediation commitment. Where the gap analysis reveals genuine deficiencies, the respondent should produce a credible remediation plan with timelines. An unremediated gap that the respondent acknowledges but does not address is the weakest possible position in the dialogue.
- Engagement with the correspondent's compliance team. The most effective interventions we have seen involve a direct, structured meeting between the respondent's compliance officer – or its specialist counsel – and the correspondent's financial-crime team. That meeting converts a paper risk-appetite decision into a fact-specific review. It is also the point at which OFAC guidance on de-risking can be introduced as a framing document.
In a recent matter, a mid-sized trade-finance bank in a market subject to US programme attention faced termination by two US correspondents within a short period. We conducted a full gap analysis of the bank's sanctions controls, identified three procedural weaknesses in its beneficial-ownership screening, and prepared a structured response package for both correspondents. One relationship was preserved; the other was deferred pending a twelve-month remediation period with agreed milestones. Neither outcome was guaranteed at the outset, but the structured approach produced options that a passive response would not have.
Cross-regime dimensions: when OFAC is not the only issue
A US correspondent bank assessing a respondent's risk profile does not assess OFAC exposure in isolation. In our cross-border practice, we regularly advise respondent banks and their clients that the OFAC question sits alongside – and is sometimes secondary to – the correspondent's exposure under the UK and EU regimes.
The ownership and control test applied by OFSI (the UK's Office of Financial Sanctions Implementation) and the EU Council regulations differs from OFAC's 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked). Under OFSI and the EU, a non-listed entity may be caught if it is controlled by a designated person, even where the designated person's ownership stake falls below fifty percent. Control is assessed through a broader functional analysis – voting rights, board composition, contractual veto rights, and de facto direction.
This divergence matters for a US correspondent servicing a respondent that also processes EUR or GBP transactions through the EU or UK financial system. A client of the respondent that passes OFAC's ownership test may nonetheless be caught under the EU or UK control test. The correspondent's risk assessment, if conducted by a team with international exposure, will flag that divergence. The respondent should be ready to address it.
The UN Security Council Consolidated List adds a third layer. Many national sanctions programmes – including those of Canada, Australia, Switzerland, the UAE, Singapore, and Japan – incorporate or mirror the UN list, but with varying implementation delays and domestic amplifications. A respondent that screens against OFAC lists only, and does not monitor the UN list or the major autonomous national regimes, will present a risk profile that a sophisticated correspondent will flag.
Where a respondent has operations or clients in multiple jurisdictions, the de-risking question is therefore a multi-regime question. An OFAC-only defence that ignores OFSI or the EU position is unlikely to satisfy a correspondent whose own compliance team covers all three regimes.
If a correspondent relationship has already been flagged, or a termination notice has been received, early legal review preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss your situation.
What are the risk flags that accelerate a de-risking decision?
Certain features of a respondent bank's profile escalate the correspondent's risk concern from manageable to terminal. Recognising these flags in advance – and addressing them before the correspondent's next periodic review – is the most effective form of risk management.
- Jurisdiction concentration. A respondent whose client book is heavily concentrated in one or more markets subject to a US sectoral or comprehensive programme will face a high baseline risk score regardless of its controls. The issue is not the clients individually; it is the statistical probability that some transactions touch sanctioned persons or entities.
- Shell-company exposure. Respondents that maintain accounts for high volumes of legal entities without clear beneficial-ownership documentation present a screening opacity that correspondents find very difficult to underwrite. The 50 percent rule aggregation requirement means that any entity in the book could be blocked if its ultimate ownership chain reaches a listed person.
- Nested correspondent relationships. A respondent that itself acts as a sub-correspondent for other banks – particularly banks in markets with weaker AML regimes – multiplies the correspondent's indirect exposure. Each sub-respondent's client book becomes, in effect, part of the risk calculation.
- Prior regulatory action. A respondent that has received a regulatory notice, a memorandum of understanding, or an enforcement action from its domestic regulator – even one unrelated to sanctions – will be viewed as higher-risk by a US correspondent. Regulatory history is a leading indicator of control quality.
- Unusual transaction patterns. High-volume, low-value transactions; round-number payments; transactions with no apparent commercial explanation; payments involving jurisdictions inconsistent with the respondent's stated client base. Any of these patterns will trigger enhanced scrutiny and may precipitate a review.
In our experience, respondents that address these flags proactively – through documented control improvements, updated beneficial-ownership files, and structured communication with the correspondent – almost always produce a better outcome than those that wait for the termination notice to arrive.
A common misconception: OFAC compliance is an all-or-nothing obligation
A persistent belief among respondent banks – and sometimes among their own compliance teams – is that a US correspondent has no choice but to terminate once any elevated-risk indicator appears, because OFAC's strict-liability regime leaves no room for judgment. This is not accurate.
OFAC's strict liability applies to the processing of a transaction that actually violates a prohibition – for instance, a payment to a blocked person. It does not require a US bank to exit every relationship that presents any conceivable risk of a future violation. The compliance standard is a well-tested, risk-calibrated programme that detects and blocks prohibited transactions before they are processed. A respondent with effective screening, documented KYC, and a functioning escalation process provides the correspondent with exactly the risk-mitigation evidence that OFAC's five-element framework anticipates.
The misconception matters because it causes respondents to accept termination passively, when a structured evidentiary presentation would, in many cases, change the outcome. It also causes correspondents to apply a binary risk model when a graduated, condition-based approach – such as enhanced due diligence on specific corridors, or agreed transaction limits on high-risk payment types – would satisfy both the regulatory standard and the commercial objective. We regularly advise respondent banks and correspondent-facing compliance teams on exactly this distinction.
How Calder & Vance assists with correspondent-banking de-risking
Our work on correspondent-banking de-risking under OFAC covers the full span of the issue, from early-stage risk assessment through to structured engagement with the correspondent and, where necessary, programme redesign. We do not provide banking services or compliance technology; we provide the legal analysis, strategic framing, and regulatory knowledge that the process requires.
Specifically, we:
- assess the respondent's current sanctions controls against the OFAC five-element standard and identify gaps that a US correspondent's review team is likely to flag;
- test the screening logic, map ownership and control across the respondent's client book, and redesign the programme to the five-element standard where deficiencies are identified;
- prepare the structured response package – the written analysis of OFAC's de-risking guidance, the control documentation, and the remediation plan – that the dialogue with the correspondent requires;
- advise on the cross-regime dimension: where OFSI, EU Council regulations, or UN Consolidated List exposure is also in play, we assess the full multi-regime profile and address each regime's requirements in the response package;
- where a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) or a general licence (a standing authorisation that permits a defined category of transactions without a separate application) is relevant to the respondent's transaction types, we assess eligibility, prepare and submit the licence application, and manage the regulator's queries;
- where a termination has already been executed and the respondent is seeking to establish a new correspondent relationship, we advise on how to present the respondent's risk profile to prospective correspondents in a way that is accurate, complete, and responsive to the typical risk concerns a US bank will raise.
We work with respondent banks, their holding-company parents, and with the GC or compliance teams of multinational businesses that depend on a correspondent relationship for their own USD clearing. Our fixed-fee entry points allow a respondent to commission an initial gap analysis and strategy memo before committing to a broader engagement.
Related practices
- Correspondent banking – OFAC advanced diligence – in-depth OFAC ownership-chain mapping and transaction-corridor risk assessment for correspondent relationships
- Correspondent banking de-risking under OFSI – UK financial-sanctions analysis and respondent-bank risk structuring under OFSI rules
- OFSI correspondent banking – advanced practice – ownership and control testing under the UK regime for complex correspondent-bank structures