A technology exporter is about to ship dual-use components to a distributor in a third market. The end-user certificate names a commercial buyer. But intelligence from the exporter's logistics team suggests the goods may reach a military end-user. Does OFAC's military end-use regime apply? Who bears the risk if the shipment proceeds? These are not theoretical questions. A single mis-classified transaction under the applicable rules can expose an exporter to penalties that are difficult to reverse and reputational damage that is permanent.
Military end-use rules under OFAC and the broader US export-control regime impose strict controls on the transfer of specified goods, software, and technology to military end-users and military end-uses, regardless of the stated purpose at the point of sale. As of May 2026, the rules operate across OFAC sanctions programmes and the Export Administration Regulations administered by the Bureau of Industry and Security, creating overlapping obligations that require co-ordinated analysis. Providing military end-use rules OFAC legal support is a core element of our export-controls practice.
This page explains the governing authority, the key tests a US-nexus business must apply, where the regime intersects with UK and EU export-control obligations, the risk flags our clients most commonly encounter, and how Calder & Vance assists at each stage of the matter.
What is the governing authority behind military end-use controls?
The prohibition on supplying certain items to military end-users sits primarily in the Export Administration Regulations, administered by the Bureau of Industry and Security under the authority of the Export Control Reform Act and IEEPA. OFAC's sanctions programmes add a second and sometimes independent layer: where a military end-user is itself designated, or is owned or controlled by a designated party, OFAC's rules on blocked transactions and on the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) apply independently of any BIS determination.
The practical result is that a single transaction involving a military-linked buyer may simultaneously trigger a BIS licence requirement, an OFAC asset-freeze obligation, and a reporting obligation. None of those three requirements is satisfied by compliance with the others. In our cross-border practice, we see transactions blocked at the OFAC layer that cleared an earlier BIS classification review – precisely because the licensing teams did not run the ownership-and-control analysis in parallel.
Instrument names matter here. Exporters should not rely on a generic description of the rules. OFAC administers country-specific and thematic sanctions programmes. BIS maintains the Commerce Control List (CCL, the schedule of controlled items and their Export Control Classification Numbers) and the Entity List. A military end-use question almost always involves at least two of these instruments, and often all three.
How does the military end-use test work in practice?
The test for military end-use has two elements: the nature of the goods and the identity and purpose of the end-user. Both must be assessed independently, and an error in either produces a compliance gap.
On the goods side, items subject to military end-use controls include those with an ECCN (Export Control Classification Number under the US Commerce Control List) that carries a relevant control reason, and items that are EAR99 (goods not specifically listed on the CCL but still subject to the EAR) where the exporter has reason to know the item will reach a military application. Practitioners sometimes assume that EAR99 goods are unconstrained. That assumption is wrong: under the applicable military end-use and end-user controls, EAR99 items remain subject to licence requirements once a red flag arises.
On the end-user side, the relevant question is whether the ultimate recipient is a military end-user – meaning an entity of, or acting on behalf of, a national military or the national police of a destination subject to heightened control. Intermediaries do not cure the problem. Where a civilian distributor on-sells to a military end-user, the transaction chain as a whole is caught from the moment the exporter has reason to know of the ultimate destination. That is the "reason to know" standard, and it imposes an affirmative duty to investigate red flags rather than disregard them.
What counts as a red flag? Our practice treats the following as triggers for enhanced diligence: inconsistency between the stated civilian application and the technical specification of the goods; a buyer with known or suspected government or defence links; routing through a jurisdiction that is the subject of a thematic sanctions programme; a request to omit standard end-use documentation; and a price substantially below or above the market rate without explanation. Any single red flag is sufficient to require a hold and an analysis before the shipment proceeds.
The position above covers the standard case. Your facts – the counterparty, the classification of the goods, the jurisdiction of the end-user, and the programmes in play – change the analysis materially.
For an assessment of your specific exposure under OFAC and BIS military end-use controls, contact Calder & Vance at info@caldervance.com.
Where do OFAC, BIS, and UK and EU controls interact?
A cross-border transaction involving US-origin goods or US-person involvement will almost always engage at least two regimes simultaneously, and for exporters operating out of the United Kingdom or the European Union, the interaction becomes more complex still.
Under the UK Export Control Order and the guidance of the Export Control Joint Unit, the UK applies its own military end-use catch-all – a control that can be applied to goods not otherwise listed when there are grounds to suspect a military end-use in a destination subject to an arms embargo or equivalent restriction. The UK test is intelligence-informed and can be applied rapidly, without advance notice to the exporter. Businesses that assume a UK licence is unnecessary because the goods are not on the UK Military List should verify that assumption against the catch-all provision before each shipment.
The European Union applies a parallel military end-use control under its dual-use rules. EU Regulation 2021/821 extended the scope of controls specifically to address military end-use risk, introducing a mechanism that allows member states to require a licence for goods not listed in the Annex where there are reasonable grounds for suspecting a military end-use in a destination subject to an arms embargo. The EU's control is not identical to the BIS regime in its trigger or in its scope. Exporters operating through EU entities must therefore assess both the EU position and the US position independently. Relying on a US licence to satisfy an EU obligation – or the reverse – is a common and potentially costly error.
Where a military end-user is also a designated party on the UN Security Council Consolidated List, all three regimes – US, UK, and EU – impose independent obligations, and the strictest prohibition governs. That principle is not merely a default: it is a substantive compliance requirement that multinationals operating in multiple jurisdictions must operationalise in their screening and authorisation workflows.
Japan, Singapore, and the UAE each maintain their own military and strategic export-control regimes. For businesses routing through those jurisdictions, local counsel in the relevant jurisdiction should be engaged. Calder & Vance co-ordinates with local counsel where required, without sub-contracting the US, UK, or EU analysis.
What are the most common risk flags, and how should a compliance team respond?
Risk flags in military end-use matters are not always obvious. Some of the most significant arise not from the identity of the buyer but from the structure of the transaction and the information available at the time of shipment.
The first and most consequential risk flag is a gap between the stated end-use and the technical characteristics of the goods. A dual-use component with a specification suited to military applications is a higher-risk item regardless of the civilian certificate that accompanies it. Compliance teams should map technical specification against the population of known military applications and flag any overlap for senior review.
The second flag is a change in routing at a late stage of the transaction. Goods that were originally destined for a low-risk commercial buyer and are re-routed to a new consignee shortly before shipment warrant a full re-screen of the new destination and recipient. In our experience, late routing changes are one of the most reliable indicators of diversion risk.
The third flag is beneficial ownership opacity. A military entity may interpose one or more civilian holding companies between itself and the transaction. The 50 percent rule requires that an entity owned in the aggregate by blocked persons at or above that threshold is itself treated as blocked – but the aggregation calculation requires visibility of the full ownership chain. Automated screening tools that screen only the immediate counterparty will not detect this risk.
The fourth flag is an unusual payment structure: a request for payment in a third-country currency, through an intermediary bank in a jurisdiction with known transshipment risks, or under a letter of credit that obscures the ultimate beneficiary. These structures do not in themselves establish a violation, but they are red flags that require resolution before the transaction is approved.
A practical response to each of these flags involves three steps: hold the transaction, document the reason for the hold, and conduct a proportionate investigation. The investigation should be proportionate to the risk indicated. A straightforward routing inconsistency may be resolved by obtaining updated end-use documentation. A beneficial-ownership question may require a full ownership-chain analysis. What is not proportionate is to proceed without investigation on the basis that the red flag is unlikely to indicate a real problem.
What does a voluntary self-disclosure involve, and when is it necessary?
Where a business identifies that a transaction may have breached a military end-use control – whether under OFAC's sanctions programmes or BIS's regulations – it faces an early decision about whether to make a VSD (voluntary self-disclosure to a regulator). That decision has significant practical and legal consequences and should be taken with counsel.
OFAC treats a timely and co-operative VSD as a significant mitigating factor in its enforcement analysis. The same is true of BIS. However, a VSD is not a shield and does not guarantee a particular outcome. The form of the disclosure, the completeness of the facts provided, the quality of the remediation plan, and the speed of the filing all affect how the agency receives it. A VSD that is technically filed but substantively thin, or that is filed after the regulator has already begun its own inquiry, does not carry the same weight as a well-prepared, proactively filed disclosure.
The decision whether to file is itself complex. Not every potential violation warrants a VSD. The applicable agency guidance identifies factors that are weighed in the balance, including the presence or absence of wilful conduct, the number of transactions involved, the value of the goods, and the nature of the military end-use concern. In our practice, we advise clients to conduct an internal scope review before filing, to establish the precise scope of the issue, the applicable remediation steps, and the likely regulatory posture before committing to a disclosure.
If a transaction has already been flagged, or an export licence has been refused on military end-use grounds, an early review can preserve options that narrow with time.
Contact Calder & Vance at info@caldervance.com for a confidential review of a potential breach or a refused licence.
A common misconception: civilian sales are automatically exempt
One of the most persistent myths in military end-use compliance is that a transaction involving a civilian buyer, documented with a standard commercial invoice and end-use certificate, is automatically outside the scope of military end-use controls. This is not the position under the applicable US, UK, or EU rules.
The applicable control is triggered by the ultimate end-use and the ultimate end-user – not by the immediate buyer or the documentation the exporter holds at the time of the transaction. A civilian distributor who on-sells goods to a military entity does not cure the original exporter's liability if the exporter had reason to know of the military destination. The end-user certificate records what the immediate buyer has certified; it does not record what the exporter knew or should have known about the downstream use of the goods.
Compliance programmes that rely exclusively on end-use certifications without a parallel red-flag analysis are structurally inadequate for military end-use risk. We regularly advise clients who have inherited compliance programmes designed around documentation rather than risk analysis. Updating those programmes to include a red-flag review and a proportionate diligence protocol is not merely best practice; in the current enforcement environment, it is the minimum standard that regulators expect.
Have you reviewed your compliance programme against the current red-flag guidance? If not, the analysis should happen before the next shipment of dual-use goods leaves your warehouse.
How Calder & Vance assists with military end-use rules under OFAC
Our export-controls practice covers the full spectrum of military end-use matters, from pre-transaction classification and licence assessment through to enforcement defence and voluntary self-disclosure.
For businesses assessing a transaction, we classify the item against the Commerce Control List, confirm whether a military end-use licence is required, assess the OFAC ownership-and-control position of the proposed end-user, and advise on the interaction with any UK or EU control that may apply in parallel. Where a licence is required, we assess eligibility, prepare and submit the licence application, and manage the regulator's queries through to determination.
For businesses that have identified a potential violation, we scope the apparent violation, advise on voluntary self-disclosure, and prepare the penalty defence – co-ordinating the OFAC and BIS positions where both regulators are in scope.
For compliance teams seeking to build or test a military end-use programme, we test the screening logic, map ownership and control across the supply chain, and redesign the programme to address the red-flag standard that BIS and OFAC guidance prescribes. Our programme reviews are structured to produce a written gap analysis and a prioritised remediation plan.
In a recent matter, a precision-engineering business faced a query from its freight forwarder about a routing change on a dual-use component shipment. We conducted an accelerated ownership-and-control analysis of the proposed new consignee, identified a military-linked beneficial owner at the third layer of the ownership chain, and advised the client to hold the shipment. The matter was resolved without a regulatory filing. That outcome was possible only because the client acted on the red flag rather than proceeding on the basis of the existing commercial documentation.
We do not advise on circumventing or evading sanctions.
Related practices
- Deemed export and technology controls under BIS/EAR – classification, deemed-export licensing, and cross-border technology-transfer advice
- Military end-use diligence and supply-chain screening – ownership-chain analysis, red-flag reviews, and counterparty due diligence
- Export-control enforcement defence and voluntary self-disclosure – scoping apparent violations, preparing disclosures, and managing agency enquiries
Frequently asked questions on military end-use rules under OFAC
How long does applying military end-use rules take under OFAC?
There is no single statutory timeline because the process depends on whether a transaction requires a specific licence, a diligence review, or an enforcement response. A pre-transaction classification and ownership review can often be completed within a defined short window where the facts are straightforward. A licence application to BIS or an OFAC authorisation request follows a separate procedural track, and timelines vary by programme and complexity. We advise clients to build a buffer into transaction timelines rather than treating regulatory review as an afterthought. Verify the current processing position before relying on any indicative period.
What are the main risks in military end-use rules under OFAC?
The primary risks are civil and criminal penalties for prohibited exports, loss of export privileges, and reputational damage. A business that proceeds despite a red flag faces the possibility that OFAC or BIS will treat the violation as wilful, which substantially increases the penalty exposure. Secondary risks include supply-chain disruption where goods are seized in transit, and counterparty liability where a distributor in the transaction chain is also found to have violated the applicable rules. Early identification and a documented response to red flags significantly reduces enforcement risk.
Do we need specialist counsel for military end-use rules?
For routine transactions involving well-classified goods and known end-users, an experienced in-house compliance team may manage the analysis. However, where a red flag arises, where a transaction involves a military-linked counterparty, where a licence is required, or where a potential violation is under review, specialist counsel materially reduces risk. The overlap between OFAC's sanctions programmes and BIS's export-control rules means that a single transaction can engage two federal agencies, two sets of penalty provisions, and – for businesses with UK or EU operations – two additional regulatory regimes. In our experience, multi-regime matters are where unco-ordinated in-house advice produces the most significant gaps.
About the author
J. M. Aldridge advises multinationals and financial institutions on US sanctions and export controls, with a focus on OFAC licensing, secondary-sanctions risk, and BIS classification. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.