The standard of proof for control findings under OFAC: compliance counsel

A business receives notice that its accounts are frozen. The designation cites a finding that a listed person "controls" the company. No ownership threshold has been crossed. The control finding is the entire basis for the block – and until that finding is successfully challenged, every transaction stops. What standard did OFAC apply to reach that conclusion, and what standard must you meet to displace it?

The standard of proof for control findings under OFAC is not codified in a single statute. OFAC applies an administrative fact-finding standard that looks past legal form to the practical and economic reality of a relationship. Control can be found on the basis of board composition, contractual rights, operational dependency, or a pattern of conduct – none of which requires a majority equity stake. Challenging a control-based designation means demonstrating, with credible and documented evidence, that the asserted relationship does not in fact meet that standard. The standard of proof for control findings OFAC legal support requires is therefore evidentiary and strategic in equal measure.

This page explains what OFAC's control analysis involves, how it differs from the tests applied by OFSI and the EU, what the common failure points are, and how Calder & Vance structures a challenge for clients who need to move quickly.

What does OFAC's control test actually require?

OFAC's control test is grounded in the practical reality of a relationship, not its formal legal characterisation. An entity need not be majority-owned by a blocked person in order to be treated as subject to that person's control. OFAC looks to the totality of the facts: who makes decisions in practice, who holds contractual override rights, who appoints or removes management, and whether the non-listed entity could realistically act against the listed person's wishes.

The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked, regardless of control) operates as a floor. Where ownership sits below that line, OFAC does not stop its analysis. It moves to the control question. This is the step that surprises many businesses: a person can own forty-nine percent of a company, hold no board seat, and OFAC may still find control if the contractual arrangements or the operating reality give that person determinative influence over material decisions.

What kinds of facts support a control finding? In our experience advising on OFAC designation challenges, the agency has pointed to factors including exclusive supply agreements that give a listed person the ability to starve the entity of inputs; financing arrangements that make the entity operationally dependent; side letters that grant approval rights over strategic decisions; and informal governance patterns visible in contemporaneous communications. None of these requires a single formal instrument. A collection of individually modest relationships can, taken together, satisfy the standard.

Does the standard require proof beyond a reasonable doubt, or something lower? OFAC is an administrative agency. It applies an administrative preponderance standard internally. When a designation is challenged, the question becomes whether the agency's factual conclusions are supported by substantial evidence and are not arbitrary or capricious under US administrative law. That is a different question from whether the original finding was "correct" in a judicial sense – and the distinction matters for how a challenge is constructed.

How does the OFAC standard differ from OFSI and EU control tests?

For a business with exposure under more than one regime, understanding where the tests diverge is as important as understanding the OFAC position alone. The three major Western regimes – OFAC, OFSI, and the EU – each reach for control-based extension of sanctions, but they do so with different legal formulations and different evidentiary expectations.

Under OFSI and the applicable UK thematic regulations, the ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) looks at both ownership and control as separate grounds. UK case law, as it has developed, distinguishes between existing, actual influence and a merely hypothetical ability to exert control. Control must be actual, not theoretical. That means the evidentiary burden runs in both directions: a designating authority relying on control must show that the listed person actually exercises it, not merely that they could.

The EU formulation under the relevant Council Regulation frames the asset-freeze prohibition to cover funds made available "directly or indirectly" to or for the benefit of a listed person, and its control threshold is set at more than fifty percent for ownership purposes. EU court jurisprudence has developed the principle that control must be proved by objective and sufficiently weighty evidence. The character of a political or economic system is not, by itself, sufficient proof that a government or its leadership controls a given private company.

What does this cross-regime picture mean practically? It means that a control finding made by OFAC does not automatically satisfy the EU standard, and vice versa. We regularly advise clients who have been designated by one authority on whether the designation has legal traction under another. The answer turns on the evidence base, not on the designation instrument itself. For a company caught by an OFAC control finding but operating primarily in EU markets, the EU legal analysis is at least as important as the OFAC challenge.

There is a further divergence worth noting. OFAC's civil-penalty liability is strict: no knowledge or intent is required for the underlying violation. That means a third party that transacts with a company OFAC considers controlled – even before any designation is issued – can face civil exposure. The OFSI strict-liability basis has been in force since 2022. EU member states are implementing minimum criminal penalties through transposition of the applicable directive. The enforcement environment across all three regimes is therefore one where a contested control finding carries immediate downstream risk for anyone who continues to do business with the affected entity.

What evidence is needed to challenge a control finding?

Displacing an OFAC control finding requires a coherent, documented case that the asserted relationship does not meet the agency's own standard. That means working backwards from the agency's stated basis and producing evidence that addresses it directly, not generically. A letter from outside counsel asserting that no control exists, unsupported by primary documents, will not move the analysis. What works is a structured evidentiary package.

The elements of a well-constructed challenge typically include several components. First, a corporate governance record that shows how decisions are actually made: board minutes, written resolutions, management committee papers, and the like. Second, the financial and commercial record that demonstrates whether the listed person has any approval right, veto, or economic dependency lever over the entity. Third, any communications record – whether email, message logs, or formal correspondence – that is inconsistent with operational control. Fourth, in cases where the original finding rested on a contractual instrument, an analysis of what that instrument actually permits versus what the agency claims it permits.

A common failure in our practice is clients who arrive with a clear factual case but no contemporaneous documentation. The story is credible; the paper trail is thin. OFAC is an administrative body and it proceeds on the record before it. If the record on which the original finding was made contained certain documents, a challenge that does not address those documents on their own terms will not succeed. Evidence produced after the fact – governance reorganisations, new agreements, revised ownership structures – may be relevant to a de-listing request going forward but does not address the historical finding.

Timing matters acutely. A reconsideration request or a petition for revocation of a designation is not a court filing with fixed procedural timelines, but it involves internal OFAC review cycles that can run for a significant period. In our experience, the fastest resolutions tend to involve matters where the evidentiary package is complete and the legal argument is precise. An incomplete filing that requires OFAC to seek further information extends the process and, critically, extends the period during which assets remain blocked and business cannot be conducted.

What are the risk flags that signal a weak position before filing?

Before committing to a formal challenge, a competent assessment of the strength of the position is essential. We do not take on matters where the honest answer to the client is that the facts support the finding. What we assess at the outset are the risk factors that weaken a challenge, because those factors determine whether to file, how to frame the argument, and whether parallel approaches under other regimes are more promising.

The first risk flag is a thin or absent governance record. If the entity has operated without formal board meetings, without written resolutions, and without documented management processes, OFAC's inference of informal control is difficult to rebut. The record vacuum operates against the entity seeking to establish independence.

The second risk flag is a financial dependency that is real and current. An entity whose sole supplier, principal creditor, or major customer is the listed person is in a structurally weak position. The commercial record may confirm, rather than contradict, the agency's analysis. Restructuring that dependency before filing may be a precondition to a credible challenge.

The third risk flag is inconsistency between the formal legal position and the operational reality. If the formal ownership structure says one thing but the entity's conduct – its contracts, its communications, its management appointments – says another, OFAC will treat the operational reality as primary. The formal structure may even be taken as evidence of an attempt to disguise rather than to evidence the actual relationship.

A fourth risk is extraterritorial exposure. A business that relies on US-dollar correspondent banking, US-person employees or contractors, or US-origin goods or technology may face concurrent pressure from the blocking of US-person facilitation even if the primary designation is under a separate programme. Addressing only the designation, and not the broader US-nexus exposure, may resolve one problem while leaving another unmanaged.

Finally, and this is the point clients most often under-weight: the myth that a delisting is automatic once the facts change. It is not. A change in circumstances – a listed person reducing their holding, a new management team, a restructured supply arrangement – does not by itself trigger a revocation. The entity must bring that change to OFAC's attention, in a form that meets the agency's evidentiary requirements, and persuade the agency that the changed facts no longer satisfy the standard on which the original finding rested. That is a lawyer-led process.

How does the S-faq-led approach work in an OFAC control challenge?

In practice, structuring a control challenge for OFAC involves answering a set of discrete legal and factual questions in sequence. Each question gates the next. The approach we use – and which we recommend to clients – works through those questions explicitly rather than treating the challenge as a single filing event.

The first question is whether the designation is susceptible to challenge on the control basis at all. That requires reviewing the original designation decision record (to the extent it is accessible), any available basis for the finding, and the entity's own internal records. If the original finding rested on a contractual instrument, the instrument needs to be analysed under the OFAC standard, not the contract law standard. An instrument that operates as an effective veto under contract law doctrine may or may not constitute control under OFAC's administrative test.

The second question is what the evidentiary gap is. Where does the entity's documentary record fall short of what is needed? This is a gap analysis, not a document-gathering exercise. The purpose is to identify what exists, what has been lost, and what can be reconstructed from third-party sources. We regularly work with clients to recover governance records from corporate secretarial providers, to obtain bank records that evidence financial independence, and to compile commercial correspondence that demonstrates arm's-length dealing.

The third question is the cross-regime dimension. Is the entity also designated, or at risk of designation, under OFSI or the EU? If so, the challenge strategy needs to address each regime on its own terms. A concession made in the OFAC proceeding – for example, an acknowledgment that a listed person had board-level involvement at a historical point – can be used against the entity in a parallel EU proceeding. The regimes must be worked simultaneously, not sequentially.

The fourth question is the licensing question. While the designation stands, can any of the entity's business activity be protected by a general or specific licence? General licences (standing authorisations that permit defined categories of transactions without a separate application) and specific licences (case-by-case authorisations to conduct otherwise prohibited transactions) are both available under OFAC's programmes. Identifying which transactions can proceed during the challenge period limits the commercial damage and, in some cases, provides evidence of OFAC's own view of the relationship – because OFAC's licensing decisions implicitly address the scope of the prohibition.

The fifth question is timing. Is there a business or legal deadline that makes speed essential – a loan maturity, a contract termination right, a regulatory filing that requires unblocked status? That deadline shapes every aspect of the challenge, from the completeness of the initial filing to whether interim relief through a OFAC-specific process is worth pursuing. We build the timeline into the matter plan at the outset.

What is the procedural path and how long should it take?

There is no single fixed timetable for an OFAC control-finding challenge. The administrative process does not operate on court-filing deadlines. What exists is a reconsideration or revocation process in which OFAC reviews submissions, may seek additional information, and ultimately determines whether the standard for the original finding continues to be met. That process can run from several months to considerably longer for complex matters.

In our experience, the most significant driver of duration is the completeness of the initial filing. An entity that submits a well-organised, legally precise, fully evidenced package gives OFAC what it needs to act. An entity that files a preliminary submission, then supplements it iteratively as OFAC identifies gaps, typically extends its own timeline materially. Preparation before filing, not speed to filing, is the variable within the entity's control.

A practical note on blocked-property obligations: 10 business days is the window within which a blocking or rejection must be reported to OFAC. That reporting obligation does not pause while a challenge is being prepared. A business that receives notice of a control-based designation – or that self-identifies that a counterparty may be captured – must address the reporting obligation as an immediate matter, separate from and prior to any challenge strategy. Failing to report in time compounds the exposure.

Record-keeping obligations continue throughout. OFAC requires that sanctions-related records be kept for five years. In a control-finding challenge, those records are not merely a compliance obligation; they are frequently the primary evidentiary source for the challenge itself. An entity that has maintained disciplined records from the point of designation – correspondence with blocked persons, transactions that were rejected, reports filed – is materially better placed than one that has not.

Parallel litigation is another consideration for certain clients. Where OFAC's finding is contested on due-process grounds – inadequate notice, failure to provide a basis – the entity may have a basis for judicial review in the US federal courts. That is a separate track with its own timeframes and standing requirements, and it interacts with the administrative reconsideration process in ways that require careful management. We work with local counsel in the relevant jurisdiction where federal court proceedings are under consideration.

How does Calder & Vance structure a control-finding challenge?

We approach control-finding challenges as a structured evidence and argument-building exercise, not as a correspondence management task. The distinction matters: OFAC engagements where law firm involvement is limited to forwarding client documents to the agency without independent legal analysis of the evidentiary standard tend to produce slower and less certain outcomes.

Our engagement on a standard of proof challenge proceeds through defined phases. The first phase is a diagnostic review: we assess the designation record, the entity's own documentary position, the cross-regime exposure, and the licensing options available in the immediate term. That phase produces a written assessment of the strength of the position and the recommended route. We do not proceed to challenge preparation without that assessment being clear to the client.

The second phase is evidence construction. We work with the entity's legal and finance teams to compile the evidentiary package, identify gaps, and address those gaps from available sources. Where the governance record requires reconstruction, we manage that process. Where third-party evidence is needed – from banks, commercial counterparties, or corporate service providers – we co-ordinate the collection.

The third phase is the legal argument. The submission to OFAC is not a recitation of the facts. It is a legal argument that the agency's standard for control findings – practical and economic reality, not formal legal form – is not met on the available evidence. That argument needs to address the specific basis on which OFAC acted, not a generic assertion of independence.

In a recent matter, a mid-size trading entity with operations across two continents faced a control-based designation that arose from a supply agreement with a listed person entered several years earlier. The agreement had been novated to a new counterparty eighteen months before the designation. We prepared an evidenced submission demonstrating that the original counterparty relationship had been terminated on arm's-length commercial terms, with supporting bank records, novation documents, and post-novation communication logs showing an entirely new commercial relationship. The matter proceeded to revocation review. We do not guarantee outcomes and the process continued for a significant period, but the filing was structured to give the agency the full factual picture from the outset.

We also advise on the OFSI and EU parallel where it arises. Where a client faces concurrent control-based findings across two or more regimes, the strategy must be co-ordinated. A submission to one authority that makes factual concessions inconsistent with the position before another creates risk that is avoidable with careful co-ordination from the start. Seeking specialist law firm support for the standard of proof for control findings OFAC legal advice early in the process is therefore not a luxury – it is a risk-management decision.

For multinationals assessing whether an existing or potential counterparty may be subject to a control finding, the same analytical framework applies in reverse: we assess ownership and control on the facts before the transaction, not after it has closed. The standard of proof question becomes a due diligence question, and the consequence of getting it wrong is not a regulatory filing problem – it is an exposure to strict-liability civil penalties.

To discuss a matter involving a control-based designation or a pending control analysis, contact Calder & Vance at info@caldervance.com. For clients who need an OFAC delisting specialist or who are looking for law firm support on the standard of proof for control findings OFAC legal advice, we offer a structured initial assessment at a defined fee.

Related practices

• Evidencing absence of control – OFAC – building the documentary record to rebut a control finding before OFAC
• OFAC vs OFSI: evidencing absence of control – comparative analysis of the evidentiary standard across the two regimes
• OFSI vs EU: evidencing absence of control – how the UK and EU control tests diverge in practice

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.