Digital-asset counterparty diligence under OFSI: legal support

A fintech business is close to completing an institutional digital-asset transaction. The counterparty has passed a name-screening check. Two days before settlement, a compliance officer traces one wallet cluster back to an entity that appears on the UK Consolidated List (the list of persons designated under UK financial-sanctions regulations). The deal halts. Legal exposure attaches at the moment of that association – not at settlement. As of January 2026, digital-asset counterparty diligence under OFSI legal support is no longer optional for any business transacting in crypto, stablecoins, or tokenised instruments with a UK nexus.

Under the UK financial-sanctions regime administered by the Office of Financial Sanctions Implementation (OFSI), the asset-freeze prohibition extends to making funds or economic resources available directly or indirectly to or for the benefit of a designated person. A UK-nexus digital-asset transaction that touches a designated person – or an entity owned or controlled by one – is prohibited regardless of intent. OFSI can impose monetary penalties on a strict-liability basis, meaning no knowledge of the violation is required to incur a penalty. The maximum penalty is the greater of £1,000,000 or 50 percent of the breach value, as currently in force and subject to any change by legislation.

This page sets out how OFSI-compliant digital-asset counterparty diligence works in practice, where the UK regime interacts with OFAC and EU rules, and what a cross-border business should have in place before the next transaction closes.

What does OFSI's asset-freeze prohibition actually catch in a digital-asset deal?

The OFSI asset-freeze prohibition reaches any conduct that makes funds or economic resources available, directly or indirectly, to or for the benefit of a designated person – and "economic resources" is interpreted broadly enough to include crypto-assets, tokenised instruments, and stablecoin balances. The prohibition is not limited to the named counterparty. It extends to any entity owned or controlled by a designated person, and to transactions that benefit a designated person even if they are routed through non-designated intermediaries.

The ownership-and-control test under UK sanctions does not have the mechanical threshold-based character of the OFAC 50 percent rule. Under OFSI, an entity that is owned more than 50 percent by a designated person is caught. But the UK test also looks at control – and UK case law has held that control means actual, existing influence rather than a merely theoretical or hypothetical ability to direct the entity. That distinction matters in practice. A counterparty might sit below any ownership threshold yet still be caught if a designated person can exercise real operational control over it.

In a digital-asset context, control can arise from wallet governance arrangements, smart-contract administrative keys, multi-signature structures, or protocol voting rights. These are not structures that a standard name-screening tool surfaces. Does your counterparty diligence reach the governance layer of the on-chain entity, or only the legal-entity registers?

The UK financial-sanctions regime is administered under SAMLA (the Sanctions and Anti-Money Laundering Act) and the relevant thematic regulations. Unlike some regimes, OFSI has a statutory reporting obligation: relevant firms – a category that includes financial institutions and, increasingly, digital-asset businesses – must report knowledge or suspicion of designated persons to OFSI. That obligation can crystallise mid-diligence, before a transaction has even settled.

How does a structured OFSI digital-asset diligence process work?

Effective digital-asset counterparty diligence under OFSI combines entity-level legal analysis with on-chain investigation – and the two must be integrated, not run in parallel silos. A gap between them is where exposure lives.

The process begins with legal-entity mapping. That means identifying the counterparty's ownership chain to the beneficial-owner level, verifying the identity of each material owner against the UK Consolidated List and the assets-freeze registers maintained under the relevant thematic regulations, and applying the ownership-and-control test to each intermediate holding structure. Where ownership is held through trusts, foundations, or nominee arrangements, each layer requires separate analysis. The review is not limited to registered shareholders: voting rights, economic entitlements, and contractual rights that give a person practical control over the entity are all within scope.

The second component is on-chain analysis. A designated person's wallet address may itself have been published by OFSI or by OFAC. Beyond published addresses, blockchain analytics tools can identify clusters of addresses that transact predominantly with a designated address, or that exhibit patterns consistent with the movement of blocked funds. We work with the leading analytics platforms to map wallet exposure before and during diligence, and to produce a documented chain-of-reasoning for the compliance file. The documentation matters: OFSI's strict-liability standard means the quality of the process is the principal evidence of good faith.

The third component is risk-categorisation and a deal-structure assessment. Where a diligence review surfaces a potential connection to a designated person, the question is not binary. The connection may be remote, indirect, or historical. The analysis must establish whether any current benefit would flow to a designated person; whether a specific licence from OFSI is needed; or whether the transaction can be structured in a way that avoids the prohibited benefit. That is a legal question, not a compliance-operations one, and it is the point at which specialist counsel adds the most value.

Where does OFSI diligence interact with OFAC and EU rules?

A digital-asset transaction rarely touches only one sanctions regime. Most institutional counterparties have exposure to multiple jurisdictions simultaneously, and the diligence file must reflect all of them.

OFAC operates on the basis of the 50 percent rule: an entity owned 50 percent or more in the aggregate by one or more blocked persons is itself treated as blocked, regardless of whether it has been independently listed. The test is mechanical, and aggregation across multiple blocked-person shareholders is counted. Under the OFAC test, control is not independently relevant – ownership is the determining factor. That is a substantive divergence from the OFSI position, and it means a counterparty that clears the OFSI ownership-and-control analysis may still be blocked under US sanctions rules if a US-person nexus exists.

Where a transaction involves a US-person participant – a US-incorporated entity, a US-dollar clearing leg, or US-origin technology underlying the platform – the OFAC rules apply in parallel with OFSI. The principle is clear: where two regimes both apply, the stricter prohibition governs the conduct of the person subject to both. Diligence must be calibrated to the strictest applicable standard, and the analysis must identify which regime produces the most conservative outcome for each component of the transaction.

The EU asset-freeze prohibitions reach the same target – making funds or economic resources available directly or indirectly to or for the benefit of listed persons – and the EU control test also applies an ownership criterion of more than 50 percent alongside a broader control analysis. The EU's transfer-of-funds regime applies a zero threshold to transfers between crypto-asset service providers: originator and beneficiary information is required regardless of the value of the transfer. That is a materially higher standard than traditional payment-screening obligations, and it places a continuous information obligation on the counterparty chain of a digital-asset business.

In our cross-border practice, the most frequent risk pattern we identify is a business that has run thorough UK diligence but has not mapped the OFAC exposure created by its US-dollar settlement leg, or has not applied EU transfer-of-funds obligations because the counterparty is not itself EU-based. Secondary-sanctions risk – the risk that OFAC measures against foreign financial institutions are triggered by dealings with designated persons – is a further layer, and it applies to non-US institutions that conduct transactions for designated persons or specified sectors.

What are the risk flags that should trigger early legal review?

Certain characteristics of a digital-asset counterparty or transaction structure should prompt legal review before the diligence process is concluded rather than at the end of it.

Wallet-address anomalies are the first category. These include counterparties that have received or sent funds to addresses that have appeared on the OFAC SDN List or equivalent published address lists; counterparties whose wallet activity shows concentration with a small number of higher-risk addresses; and transactions where the counterparty cannot provide a clear account of the source of assets. Blockchain analytics can surface these patterns efficiently, but the legal interpretation of what the pattern means – in particular whether it creates an indirect benefit for a designated person – requires legal judgment.

Opacity in governance structures is the second category. Multi-signature wallets, decentralised-protocol administrative rights, and token-voting arrangements can all vest effective control in a person whose name does not appear in any corporate register. Where the counterparty's governance documentation is incomplete, or where key participants in a governance structure have not been identified, the diligence is incomplete regardless of what the name-screening has found.

Beneficial-ownership complexity is the third. Digital-asset businesses frequently operate across multiple jurisdictions with holding structures that sit across several layers of intermediary vehicles. Where the beneficial-ownership chain includes entities in jurisdictions with limited transparency – or where nominee holders are used for non-commercial reasons – the analysis must go further than the face of the corporate documents.

A sharp or unexplained change in transaction pattern is the fourth. Where a counterparty's transaction volume, counterparty mix, or geographic routing has changed materially in a short period, that is a diversion red flag that warrants explanation before the diligence is closed.

The position above covers the standard risk-flag categories. Your specific transaction – the counterparty's structure, the asset type, the routing of settlement, and the sanctions regimes in play – will produce a fact-specific risk picture. For an early assessment of whether any of these flags applies to your transaction, contact Calder & Vance at info@caldervance.com.

Does the seller's representations warranty remove the buyer's OFSI sanctions exposure?

No. This is one of the most persistent misconceptions we encounter in cross-border digital-asset transactions, and it can produce serious consequences for a buyer who relies on it.

A contractual representation by the seller that it is not a designated person, and that no designated person has a material interest in the transaction, is a private-law mechanism. It creates an indemnity right against the seller if the representation proves false. It does not affect the buyer's independent obligations under OFSI's asset-freeze prohibitions. OFSI's strict-liability standard means that if the buyer has made funds available to a designated person, the buyer has committed a breach, even if it relied on the seller's representations and even if those representations were given in good faith at the time.

We regularly advise buyers who discover, post-completion, that a seller's sanctions representation was technically accurate on its face but did not address the control analysis. A representation that no designated person "owns" the seller may leave untouched the question of whether a designated person "controls" it within the meaning of the UK test. The two are not the same, and the representation does not substitute for the diligence.

The practical implication is straightforward: representations and warranties are a contractual backstop, not a diligence substitute. The buyer's independent obligation to conduct sanctions due diligence before making funds available runs parallel to whatever contractual protection the transaction documents provide. If a transaction has already closed on the basis of representations without independent diligence, an early review of the position can identify whether any remedial action is required and what the reporting obligations may be.

If a transaction has already been flagged or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss your position.

How does Calder & Vance support digital-asset counterparty diligence under OFSI?

We act at the intersection of UK financial-sanctions law and cross-border digital-asset transactions. Our approach is to produce a diligence file that is both legally defensible and operationally usable by the compliance team handling the transaction.

For a standard digital-asset counterparty diligence instruction, we screen the counterparty and ownership chain against the UK Consolidated List and relevant designation registers, apply the OFSI ownership-and-control test to each layer of the structure, and provide a written legal opinion on whether the proposed transaction is prohibited, whether a specific OFSI licence is required, and what risk-mitigation steps are available. Where the transaction has a US-person nexus, we apply the OFAC 50 percent rule in parallel and identify any divergence between the two regimes. Where EU rules apply, we integrate the EU control and transfer-of-funds analysis into the same file.

Where on-chain analysis is required, we coordinate with blockchain analytics partners to map wallet-cluster exposure, interpret the significance of any identified connections to designated addresses, and incorporate the findings into the legal analysis. The output is a single integrated diligence file – not a technical analytics report alongside a separate legal opinion with a gap between them.

We also advise on the OFSI licensing position where a transaction cannot proceed without authorisation, prepare and submit specific-licence applications, and manage OFSI's queries during the review period. Where a potential breach has occurred, we scope the apparent violation, advise on voluntary self-disclosure, and prepare the penalty defence.

We have acted for multinationals, financial institutions, and digital-asset businesses on OFSI-related diligence and enforcement matters. Our practice covers the major regimes under one roof, which means the cross-border analysis – OFAC, EU, and OFSI together – is produced by the same team rather than coordinated across separate external advisers.

For an assessment of your exposure or to instruct us on a specific digital-asset counterparty diligence matter, contact Calder & Vance at info@caldervance.com.

Related practices

• AIS anomaly indicators – EU service – identifying vessel-tracking red flags in cross-border trade diligence
• Ship-to-ship transfer risk – OFAC service – OFAC analysis of maritime risk in cross-border transactions
• Transit and rerouting red flags – EU service – EU-regime assessment of diversion indicators in supply chains

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.