An international NGO operating food-distribution programmes in a heavily sanctioned territory receives a wire-transfer rejection from its correspondent bank. The funds were heading to a local partner for logistics costs. The bank's compliance system flagged the destination. The NGO's legal team asks: is there an OFAC authorisation that permits this, and what does the organisation need to do to rely on it?
Humanitarian and NGO authorisations under OFAC – whether through a standing general licence (a published authorisation permitting a defined category of transactions without a separate application) or a case-by-case specific licence (an individual written permit issued by OFAC) – are available across several US sanctions programmes, but the scope, conditions, and gaps vary significantly between regimes. As of mid-2026, OFAC administers a meaningful body of humanitarian general licences, yet gaps remain: certain activities require a specific-licence application, and banks retain the right to apply their own policies above the regulatory floor.
This page explains how these authorisations work, how they interact with UK and EU equivalents, the common points of failure, and how Calder & Vance assists NGOs, charities, and the financial institutions that serve them.
What do humanitarian and NGO authorisations under OFAC actually permit?
OFAC humanitarian authorisations generally permit the export or re-export of food, medicine, medical devices, and certain personal remittances to or through a sanctioned jurisdiction, and in some regimes the provision of services in support of those activities. The precise scope depends on the sanctions programme in question: what is authorised under one country-regime may be prohibited or subject to stricter conditions under another.
In our cross-border practice, we find that the single most common misconception is that a general licence covers everything a well-intentioned organisation wants to do. It does not. General licences typically authorise the transaction described – the transfer of food aid, say – but they do not extend automatically to the contracting, fee payments to local intermediaries, freight and logistics services, or the opening of bank accounts needed to execute the programme. Each of those activities requires its own authorisation analysis.
OFAC also distinguishes between the primary prohibitions (restrictions on US persons and US-origin items) and the reach of secondary-sanctions risk (the risk that non-US firms facilitating a sanctioned party could face US measures). An NGO headquartered in Europe but using US-dollar clearing or employing US-national staff may be subject to OFAC's primary prohibitions even if it considers itself outside US jurisdiction. That jurisdictional question is the starting point for every matter we handle.
Is the activity clearly within the four corners of a published general licence? Or does it sit in the grey zone that requires a specific-licence application or, at minimum, documented legal analysis to support reliance? That distinction decides the operational timeline.
The governing authority and legal basis
OFAC administers US economic sanctions under authority derived primarily from the International Emergency Economic Powers Act (IEEPA) and, for certain older programmes, the Trading with the Enemy Act (TWEA). Individual sanctions programmes are established by Executive Orders and implemented through programme-specific regulations. Humanitarian authorisations are embedded in those regulations or issued as stand-alone guidance documents.
Three categories of authorisation matter in practice:
- Statutory exemptions – certain humanitarian transactions are exempt directly in the underlying statute or are not caught by the definition of a prohibited transaction. These do not require a licence at all, but they are narrowly drawn and must be read carefully.
- General licences – OFAC publishes these within the programme-specific regulations. They authorise defined categories of activity without the need to apply to OFAC. The NGO must confirm its activity falls within the authorisation's terms, keep records, and in some programmes file reports.
- Specific licences – OFAC issues these on application. They are used for activities not covered by a general licence, for amounts or durations exceeding general-licence limits, or where OFAC requires transaction-by-transaction oversight. The application must demonstrate that the transaction serves a genuine humanitarian purpose and that the applicant has implemented controls against diversion.
The position above covers the standard case. Your facts – the target country, the nature of the goods or services, the identity of local partners, and the payment routes – change the analysis substantially. For a first assessment of which category applies to your programme, contact Calder & Vance at info@caldervance.com.
How does the specific-licence application process work?
A specific-licence application to OFAC is a formal submission that must set out the identities of all parties, the nature and value of the transactions, the humanitarian purpose, the countries and jurisdictions involved, the proposed controls against diversion, and the legal basis for the requested authorisation. OFAC reviews applications against the policy objectives of the relevant sanctions programme.
Processing times vary considerably by programme and by the complexity of the application. In our experience, straightforward applications for well-established humanitarian categories can take several months; applications involving novel arrangements, multiple jurisdictions, or less-familiar local partners can take considerably longer. OFAC may issue a request for additional information, which restarts the practical clock. There is no statutory deadline binding OFAC to issue a decision within a fixed period – that absence of a guaranteed timeline is a planning risk that every NGO needs to price into its programme design.
A well-prepared application reduces the risk of an information request and shortens the overall timeline. The elements that make an application stronger are:
- A precise, programme-specific description of each transaction type sought.
- Full ownership and control information for each counterparty, including local partners and implementing organisations.
- A clear diversion-risk assessment and the controls proposed to mitigate it.
- Evidence of the humanitarian purpose – programme documentation, donor records, operational plans.
- A banking and payment-channel narrative, identifying US-dollar clearing banks and their roles.
OFAC has the discretion to attach conditions to a specific licence. Those conditions – reporting requirements, transaction-volume caps, partner-vetting obligations – must be built into the NGO's operational compliance programme before the licence is used.
Cross-border dimensions: how OFSI and EU authorisations compare
Humanitarian and NGO work almost always spans multiple jurisdictions, and the authorisation required under one regime may not be sufficient under another. This is a point our practice addresses in every cross-border mandate.
Under the UK sanctions regime administered by OFSI, humanitarian licences are issued on a case-by-case basis under the Sanctions and Anti-Money Laundering Act (SAMLA) and the relevant thematic regulations. OFSI also publishes general licences for certain humanitarian categories. The UK ownership and control test (the test for whether a non-listed entity is caught because a listed person owns or controls it) differs from OFAC's mechanical 50 percent rule: OFSI applies a control analysis that can capture entities where a listed person holds less than a majority stake but exercises decisive influence. That difference can affect which local partners require a licence and which do not – and an organisation relying on OFAC authorisation for its US-person staff or US-dollar payments still needs to check the OFSI position for its UK-person staff and sterling accounts.
The EU sanctions regime, implemented through Council regulations and administered by member-state competent authorities, similarly provides humanitarian derogations. The scope of those derogations differs between EU programmes and differs again from the OFAC and OFSI positions. An NGO operating across the US, UK, and EU legal environments – as most large international NGOs do – needs a consolidated legal analysis that maps what each regime permits, where the gaps are, and which activities require an application in which jurisdiction.
There is also the question of secondary-sanctions risk. A non-US NGO using European banks to route payments through US-dollar clearing faces the risk that the clearing bank applies OFAC standards to the transaction and blocks or rejects it, even if the NGO itself has a valid authorisation under EU or UK rules. We regularly advise on this three-layer problem: OFAC primary compliance, OFSI and EU primary compliance, and the de-risking behaviour of correspondent banks in the middle.
What are the principal risk flags for NGOs and their banking partners?
Risk flags in humanitarian authorisation work fall into three broad categories: authorisation gaps, implementation failures, and bank-level de-risking. Each has a different mitigation path.
Authorisation gaps arise when an NGO assumes a general licence covers an activity it does not, or when a programme expands beyond the scope of an existing specific licence. Common examples include: adding new local partners without checking their status against the SDN List (OFAC's list of Specially Designated Nationals and blocked persons); extending activities into a sub-territory where the general licence does not apply; and paying service fees to entities connected to listed persons without recognising the payment as a separate prohibited transaction.
Implementation failures occur when an authorisation is valid on its face but the conditions attached to it are not met in practice. Record-keeping deficiencies are the most frequent issue: an NGO that cannot demonstrate, on request, that a transaction fell within the terms of the general licence is in a materially worse position at any subsequent review. Reporting obligations – some programmes require periodic reports of transactions conducted under a general licence – are missed more often than the industry acknowledges.
Bank-level de-risking is the most operationally disruptive. A financial institution's decision to decline to process a payment, or to exit a client relationship, is not a sanctions violation by the bank; it is a commercial risk-management decision. An authorisation from OFAC does not compel a bank to act. In our practice, we work with both NGOs and their banking partners to construct the transaction narrative and documentation package that allows a bank's compliance function to approve the payment with confidence. That dual-sided approach – counsel to the NGO and, separately, guidance to the bank's legal team – resolves account-access problems that a unilateral application to OFAC cannot fix alone.
If a transaction has already been blocked, or a payment has been returned, an early legal review can preserve options that narrow quickly. To discuss a flagged transaction or a bank's request for documentation, contact us at info@caldervance.com.
A common myth: general licences remove all compliance obligations
A persistent misconception among humanitarian organisations is that once a general licence exists, the compliance work is done. In our experience, this assumption creates more exposure than the absence of any licence at all.
A general licence is a conditional permission. The conditions include the nature of the goods or services, the parties permitted to rely on it, the jurisdictions it covers, and often the maximum value of individual transactions. Operating outside any one of those conditions means the transaction is not authorised – and the organisation cannot rely on the licence as a defence. OFAC's enforcement guidance makes clear that operating in excess of a licence's terms is treated the same as operating without any licence.
There is a further practical point. Even within the terms of a licence, the voluntary self-disclosure (VSD) – a mechanism under which a firm that discovers a possible violation reports it proactively to OFAC before OFAC opens its own inquiry – can significantly affect the outcome if an unauthorised transaction is later discovered. A VSD is not an admission of liability, but it requires careful preparation and timing. We advise on whether a VSD is appropriate and, if so, how to frame it to achieve the strongest result. We do not assist with any approach whose purpose is to conceal a violation or to defeat a control.
How Calder & Vance assists humanitarian organisations and their financial institutions
We act for international NGOs, UN-affiliated bodies, donor organisations, humanitarian logistics providers, and the banks and payment firms that serve them. Our work on humanitarian and NGO authorisations under OFAC covers the full lifecycle of an authorisation matter.
For organisations assessing their position before a programme begins, we assess eligibility for existing general licences, identify activities that require a specific licence, and prepare and submit the licence application, managing OFAC's queries through to a decision. We also structure the compliance programme around the authorisation's conditions: the partner-vetting process, the record-keeping obligations, and the transaction-monitoring logic that a bank's compliance team needs to see.
In a recent matter, a European humanitarian organisation was expanding its food-distribution programme into a territory subject to comprehensive US sanctions. Its US-national staff members and its US-dollar payment routes brought it within OFAC's reach. We mapped the general-licence coverage, identified the specific-licence requirements for payments to three local implementing partners, prepared the applications, and developed the diversion-risk framework that OFAC required as a condition of the licences. The organisation's programme launched without the delays that an under-prepared application would have caused.
For organisations already in difficulty – a blocked payment, a bank exit, a query from OFAC – we scope the apparent issue, advise on whether a VSD is appropriate, and manage the regulator's interaction. For financial institutions, we review the transaction documentation and provide the legal analysis that allows a bank's compliance committee to take an informed decision on whether to process.
Related practices
- Frozen account management under BIS / EAR – advice on managing accounts frozen under US export-control rules and licence applications for release
- Humanitarian and NGO authorisations under OFAC: programme design – structuring multi-year humanitarian programmes to operate within authorised parameters
- Humanitarian and NGO authorisations under OFSI – parallel UK-regime advice for organisations working across both OFAC and OFSI jurisdictions