A European trading house sells industrial components to a distributor in a third country. The distributor re-ships a portion of those goods onward. The ultimate destination triggers an OFAC-administered sanctions programme. The European seller never touched the final transaction – yet OFAC's extraterritorial reach may place it squarely in the enforcement frame. Does your business understand where the risk begins?
Re-export and extraterritorial reach under OFAC is the question of when a transaction that originates, or an actor who operates, outside the United States falls within US sanctions jurisdiction. The governing authority is OFAC, acting under IEEPA and related statutory instruments. The two principal triggers are the involvement of a US person (any US citizen, permanent resident, US-incorporated entity, or person physically present in the United States) anywhere in the transaction chain, and the use of US-origin goods, technology, or services that carry the sanctions obligation with them as they move across borders.
This page explains the extraterritoriality test, the key risk categories, where OFAC's reach diverges from the positions taken by OFSI and the EU, and how Calder & Vance supports exporters, distributors, and financial institutions working through these questions.
What is the legal basis for OFAC's extraterritorial authority?
OFAC's extraterritorial authority rests on two distinct grounds, each sufficient on its own to draw a non-US party into a US sanctions prohibition.
The first is the US-person nexus. Any transaction that involves a US person – as counterparty, intermediary bank, correspondent, insurer, or even as a minor service provider – is subject to OFAC's primary jurisdiction. Because the US dollar clearing system routes the vast majority of international payments through US correspondent banks, a dollar-denominated trade finance transaction almost always involves a US person in the processing chain. That connection alone is often enough to import OFAC jurisdiction into a deal that has no other US element.
The second ground is the US-origin content rule. Goods, software, and technology that were manufactured in the United States, or that incorporate US-origin inputs above a defined de minimis threshold, carry the OFAC obligation when they are re-exported. The logic tracks the BIS re-export rules under the EAR: once the US origin is embedded, the product does not shed its compliance obligations at the border. In our experience, non-US manufacturers who source even a modest portion of their inputs from US suppliers routinely underestimate this exposure.
The standard OFAC question – "is our counterparty on the SDN List?" – is necessary but insufficient. The more important question for a re-export scenario is: "does any step in this supply chain touch a US person, a US financial institution, or a product with US-origin content?" If the answer is yes, OFAC's rules govern.
How does the extraterritoriality test work in practice?
Applying the extraterritoriality test requires a sequential analysis of the transaction before it completes, not after.
The first step is origin mapping. Identify whether the goods, software, or technology at issue were produced in or incorporate inputs from the United States above the applicable threshold. This requires supplier disclosure and, in some cases, a formal US-content calculation. Where the content is borderline, a classification exercise under the EAR may be necessary to confirm whether the product is subject to US export controls as well as OFAC prohibitions.
The second step is chain-of-persons analysis. Map every party in the transaction – seller, buyer, freight forwarder, insurer, correspondent bank, letter-of-credit issuing bank, and any agent or broker – against the SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the Sectoral Sanctions Identifications List, and the Consolidated Sanctions List. The 50 percent rule – OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked – extends this check to entities that do not appear on the list by name. Aggregation across multiple blocked shareholders is required.
The third step is destination analysis. Certain OFAC-administered programmes impose comprehensive prohibitions on dealings with specific jurisdictions regardless of the nature of the goods or the identity of the parties. A shipment routed through or to a comprehensively sanctioned jurisdiction will be prohibited even if no individual on the chain appears on a list and even if the goods have no US content, provided a US person or US-origin product is involved.
The fourth step is licensing analysis. Where a prohibition is engaged, the question becomes whether a general licence (a standing authorisation that permits a defined category of transactions without a separate application) covers the activity. If not, a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) may be available. Licensing eligibility varies materially by programme.
The position above describes the standard case. Your specific facts – the counterparty, the goods, the supply-chain route, the financial institutions involved, and the destination – change the analysis at each step.
For an initial assessment of your re-export exposure under OFAC, contact Calder & Vance at info@caldervance.com.
Where does OFAC's position diverge from OFSI and the EU?
The divergence between the US, UK, and EU extraterritoriality positions is operationally significant for any business that must comply with more than one regime simultaneously.
OFAC's extraterritoriality is broader than either OFSI's or the EU's in two respects. First, the US-person nexus is expansive: a US sub-custodian, a US correspondent bank, or a US-domiciled insurance underwriter can import jurisdiction even if the seller, buyer, and goods are all non-US. Second, the US-origin content rule has no direct equivalent in either the UK or EU regime. OFSI's financial-sanctions rules apply to UK persons and UK-incorporated entities; they do not follow UK-origin goods around the world in the same structural way that OFAC's rules follow US-origin products.
The EU's sanctions regulations impose obligations on EU persons and EU-incorporated entities, and on conduct within the EU. The ownership and control test under EU regulations – the test for whether a non-listed entity is caught through a listed person – uses both an ownership limb and a control limb. OFAC's 50 percent rule uses only the ownership limb; control is not a separate trigger under the US approach. This means that a target entity in which a blocked person holds 40 percent but exercises operational control may be caught under EU rules but not automatically under OFAC's mechanical threshold.
For businesses operating between the United States and the United Kingdom, the practical interaction is particularly acute. OFSI and OFAC designations are largely but not identically aligned. A counterparty delisted by one authority may remain listed by the other. We regularly advise on transactions where the US and UK positions produce different outcomes for the same counterparty on the same day.
Switzerland (SECO), Canada (GAC), Australia (DFAT), Singapore, Japan, and the UAE each maintain their own sanctions regimes with varying degrees of extraterritorial application. None replicates the US-origin content rule, but several impose significant obligations on financial institutions with any domestic-market nexus. A transaction that clears OFAC may still require separate analysis under the applicable country regime for each jurisdiction in the chain.
If a transaction has already been flagged under one regime, or a filing under another has been refused, an early multi-regime review can preserve options that narrow quickly with time.
To discuss a flagged transaction or a compliance gap identified by a correspondent bank, write to Calder & Vance at info@caldervance.com.
What are the common risk flags in re-export transactions?
Re-export transactions carry a distinct pattern of risk flags that a well-calibrated compliance programme should be designed to detect before a shipment or payment clears.
The first and most frequent flag is opacity in the end-destination. A buyer who declines to name the ultimate consignee, or whose stated end-use is inconsistent with the goods ordered, warrants enhanced diligence. OFAC's guidance and BIS's red-flag indicators converge here: unusual routing, requests to omit end-use certificates, or pressure to complete before diligence is finished are all indicators of elevated risk.
The second is payment-chain complexity. A transaction that routes payment through multiple jurisdictions, uses a financial institution in a high-risk location, or involves a third-party payer unconnected to the buyer is structurally more likely to have a sanctions exposure in the chain. The correspondent bank will often identify this risk and hold the payment; at that point the seller's options are narrower than they would have been had the issue been caught pre-execution.
The third flag is an intermediate jurisdiction mismatch. A buyer located in a jurisdiction with a publicly documented history of acting as a transshipment point for sanctioned destinations requires diligence that goes beyond standard list-screening. The question is not only whether the buyer is listed, but whether the goods are likely to move onward to a prohibited destination after delivery.
The fourth flag is dual-use classification ambiguity. Goods that appear commercial but have a credible military or proliferation end-use are subject to heightened BIS and OFAC scrutiny. Where a product sits near the boundary between a controlled and an uncontrolled ECCN (Export Control Classification Number under the US Commerce Control List), a formal classification exercise reduces the risk of an inadvertent violation and strengthens a subsequent voluntary self-disclosure argument if a problem is identified later.
A fifth and often overlooked risk is the US-person employee exposure. A non-US company with US-national staff involved in approving, financing, or facilitating a transaction is a company with US persons in the chain. Their participation in an otherwise non-US transaction imports OFAC primary jurisdiction for that company.
A common misconception: "we are not a US company so OFAC does not apply to us"
In our practice, this is the most persistent myth we encounter among non-US exporters and manufacturers assessing their sanctions exposure for the first time.
The premise is understandable: OFAC is a US agency enforcing US law. Why should a German manufacturer or a Singaporean trading house concern itself with US regulations? The answer, as set out above, lies in the two grounds for extraterritorial jurisdiction. A non-US company that clears payments in US dollars, holds a US correspondent relationship, employs US nationals, or sources any material US-origin content in its products is already within OFAC's primary reach for those specific activities and transactions.
Secondary sanctions extend this further. Several OFAC-administered programmes impose consequences on non-US persons who conduct significant transactions with designated parties, even where no US person or US product is involved. These secondary-sanctions measures are separate from the primary prohibition and do not require any US nexus in the specific transaction; they operate as a disincentive at the level of the non-US actor's US market access and financial relationships. The risk is real and the enforcement record supports it.
Correcting this misconception early – before a transaction is structured, not after a correspondent bank holds a payment – is the most efficient intervention point. We have acted for non-US manufacturers and distributors who discovered their OFAC exposure only when a US correspondent refused a payment. Retroactive analysis at that stage is possible but invariably more constrained.
How Calder & Vance assists on re-export and OFAC extraterritoriality
Our practice on re-export and OFAC extraterritoriality covers the full range of legal tasks that arise in these engagements, from pre-transaction analysis to enforcement response.
For pre-transaction and pre-shipment analysis, we assess eligibility, map the ownership and control chain, confirm list status under the 50 percent rule, and produce a written opinion on whether the proposed transaction requires a licence or is covered by an applicable general licence. Where a specific licence is required, we prepare and submit the application and manage the regulator's queries through to decision.
For compliance-programme design and testing, we test the screening logic, map ownership and control across the supply chain, and redesign the programme to address the re-export and extraterritoriality risks specific to the business's sector and product range. This work regularly includes a review of the firm's payment-processing chain and its correspondent-banking relationships to identify hidden US-person nexus points.
For enforcement matters, we scope the apparent violation, advise on VSD (voluntary self-disclosure to a regulator), and prepare the penalty defence. A well-prepared voluntary self-disclosure under OFAC's enforcement guidelines is among the most effective tools available to a business that has self-identified a potential violation before a regulator does. The timing of that disclosure, and the quality of the remediation evidence, are the factors that most influence the outcome.
In a recent matter, a manufacturing business with operations across multiple jurisdictions discovered that a distributor in its chain had routed goods through an intermediate party with a beneficial owner subject to OFAC designation. We scoped the violation, assessed the US-person and US-content nexus, advised on the voluntary self-disclosure timing and content, and supported the preparation of the remediation package. The matter was handled in an orderly and structured way, preserving options that would have closed had the business waited for regulatory contact.
We also advise on the interaction between OFAC's re-export obligations and the BIS re-export rules under the EAR, and on the parallel positions under OFSI, the EU regime, and the applicable country regimes in Switzerland, Canada, Australia, Singapore, Japan, and the UAE. Multi-regime analysis is a standard component of our engagements, not an add-on.
Related practices
- Deemed Export and Technology Controls under BIS/EAR – US technology-transfer controls for foreign nationals and re-export licensing
- Re-export and Extraterritoriality under OFSI – UK financial-sanctions obligations on re-export transactions and cross-border chains
- Deemed Export under BIS/EAR vs EU Dual-Use Rules: a comparative analysis – side-by-side review of US and EU technology-transfer controls