A payment instruction arrives. The beneficiary bank is in a jurisdiction subject to OFAC sanctions. Your compliance team freezes the transaction and flags it for review. The clock is now running – and the question your General Counsel needs answered is not whether you face exposure, but what lawful route, if any, exists to complete the payment.
Under the US Office of Foreign Assets Control (OFAC) sanctions regime, most payments to or through a blocked or sanctioned person, entity, or jurisdiction require a specific or general licence before they can proceed lawfully. OFAC administers this authority under the International Emergency Economic Powers Act (IEEPA) and related instruments. Without a valid authorisation, the payment is prohibited – and processing it, even inadvertently, can trigger civil or criminal liability.
This page explains the authorisation regime for OFAC-regulated payments, the procedure for obtaining a specific licence, how the US position compares with OFSI and EU rules, and when to involve dedicated sanctions counsel.
What is a payment authorisation under OFAC, and who needs one?
A payment authorisation under OFAC is a formal permission – either a general licence (a standing authorisation permitting a defined category of transactions without a separate application) or a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) – that allows funds to move despite a sanctions prohibition. Any US person, any entity organised under US law, and any person conducting a transaction through the US financial system needs one before transferring value where a sanctions nexus exists.
The trigger is broader than most compliance teams assume. The sanctions nexus can arise from the identity of the sender, the recipient, or any intermediary in the payment chain. It can also arise from the currency of the transaction – dollar-denominated payments clear through US correspondent banks and therefore touch the US financial system regardless of where the originating or receiving party is located. In our cross-border practice, we regularly see non-US businesses surprised to discover that their euro or sterling transactions clear through a New York correspondent and are therefore within OFAC's reach.
Who specifically needs a payment authorisation? The obligation falls on the party that would otherwise be in violation – typically the payment originator, its bank, or any US financial institution in the clearing chain. In a complex trade-finance structure, multiple parties may each need to confirm that a general licence applies or, if it does not, that a specific licence has been obtained.
General licences: when does a standing authorisation already cover the payment?
The first analytical step in any OFAC payment-authorisation matter is to determine whether a general licence already covers the transaction. General licences are published by OFAC in the relevant programme regulations. They authorise categories of transactions – such as certain personal remittances, payments related to the importation of informational materials, or transactions incidental to legal services – without requiring any application.
Identifying the applicable general licence requires reading the specific programme under which sanctions are imposed. Each OFAC programme has its own set of general licences, and a licence that applies under one programme may not exist under another. A payment that falls comfortably within a general licence under one sanctions programme may still be prohibited if the counterparty is listed under a second programme with different rules. The practitioner's discipline here is to map every applicable sanctions programme to the specific transaction facts before concluding that a general licence covers the payment.
Common errors include assuming that a general licence in one programme extends to a related entity designated under a different authority, or reading the licence text too broadly to cover arrangements that fall outside its defined scope. If the facts are borderline, relying on a general licence without a careful written analysis is a risk that enforcement history shows regulators take seriously.
The position above covers the standard case. Your facts – the counterparty's designation history, the goods or services underlying the payment, the clearing route, and the sanctions programme in play – change the analysis. For a review of whether a general licence covers your specific payment, contact Calder & Vance at info@caldervance.com.
How does a specific-licence application work, and how long does it take?
Where no general licence applies, the only lawful route is a specific licence application to OFAC, submitted through OFAC's online licensing portal. The application must explain the transaction clearly, identify the sanctions programme and the basis for the prohibition, and provide a factual and legal case for why OFAC should exercise its discretion to authorise the payment.
OFAC has no statutory deadline for deciding specific-licence applications. Processing times are variable and have historically ranged from a matter of weeks to many months, depending on the complexity of the matter, the sanctions programme involved, and OFAC's current caseload. We do not represent, and no counsel can guarantee, any particular outcome or timeline. In our experience, well-prepared applications with a clear legal rationale and complete supporting documentation tend to progress more efficiently than incomplete or poorly framed ones. OFAC may issue requests for additional information at any stage, and each such request effectively resets the practical timeline.
The application dossier typically includes: a detailed description of the transaction; the identity and ownership structure of all parties; the legal basis for the payment; evidence supporting the claimed policy grounds (such as humanitarian need or legal obligation); and any relevant documentation linking the transaction to a permitted category. Weak applications – those that fail to address OFAC's known policy concerns or that provide incomplete counterparty information – are returned or denied without a substantive review on the merits.
OFAC licensing policy is programme-specific. For payments that arise from a trade transaction or a financial product, the application analysis must address not only the identity of the counterparty but also the nature of the underlying goods or services and their potential connection to controlled end-uses or prohibited activities. In a recent matter, a financial institution in the payments sector faced a blocked transaction involving a counterparty with indirect shareholding connections to a designated party. We scoped the ownership chain, confirmed the applicable programme, and prepared a specific-licence application with a full policy analysis. The application progressed to OFAC's substantive review stage without an information request.
Cross-border dimension: how do OFSI and EU authorisations compare?
The US specific-licence process has direct counterparts in the UK and EU, but the procedural and legal differences are material for any business operating across jurisdictions. Understanding those differences is not a theoretical exercise. Many payment-authorisation situations are, in practice, multi-jurisdictional: the same transaction may require an OFAC licence, an OFSI licence, and an EU Council derogation, each from a different authority, under different tests, with different timelines.
Under OFSI (the Office of Financial Sanctions Implementation), UK financial-sanctions licensing is governed by the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic regulations. OFSI applies a discretionary licensing test centred on defined statutory grounds (such as basic needs, prior contractual obligations, and legal costs). OFSI does not apply the same general-licence architecture as OFAC. Every UK-regulated payment that does not fall within a narrow statutory exception requires either a specific OFSI licence or a legal determination that the UK prohibition does not apply on the facts. For UK-connected payments, our OFSI payment authorisation service covers the full UK procedure.
Under EU Council regulations, the corresponding mechanism is a competent-authority derogation, administered by the relevant national authority in the member state where the asset or transaction is located. The EU regime applies its own ownership and control test (the EU and UK test for whether a non-listed entity is caught through a listed person's control), which diverges from the US 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). The EU test explicitly incorporates control alongside ownership, whereas the OFAC test is triggered purely by an aggregate ownership interest at that threshold. That divergence can produce a situation where an entity is blocked under OFAC but not caught under the EU regime – or vice versa.
A further cross-border complication arises from UN Security Council prohibitions. Where a designation originates from a Security Council resolution under Chapter VII of the UN Charter, all UN member states are bound. For transactions that touch a UN-listed party, a UN derogation route may exist independently of the national or regional authorisation. For advice on the UN route, see our UN payment authorisation service.
Where two regimes impose conflicting obligations, the stricter prohibition governs the permissible transaction. A business cannot rely on an OFAC licence to proceed with a payment if a separate OFSI prohibition remains in force. Counsel advising on cross-border payment authorisations must hold all applicable prohibitions in view simultaneously.
What are the main risk flags in OFAC payment authorisations?
The primary risk in any OFAC payment-authorisation matter is proceeding on the assumption that no authorisation is required, when in fact a general licence does not cover the specific transaction. This is the most common error we see in bofu-stage matters: a business has already made the payment, or has already committed to making it, before seeking legal review.
Several patterns recur. First, dollar clearing. Non-US businesses and their banks often fail to map the clearing route of a payment before executing it. A euro-denominated instruction that routes through a New York correspondent bank is, at the point of clearing, a US-nexus transaction. OFAC's jurisdiction attaches. Second, the 50 percent rule and aggregation. Screening tools that check only direct ownership miss cases where two or more designated persons together reach the threshold – the rule applies to aggregate indirect holdings. Third, intermediate custodians. In structured finance or correspondent banking, a US financial institution may sit between two non-US parties, and neither principal may have verified its position in the clearing chain.
The timing risk is also acute. If a transaction has been blocked by a correspondent bank, the window to take remedial action – including submitting an application, seeking a voluntary self-disclosure, or structuring an alternative arrangement – is typically shorter in practice than the statutory framework implies. Delay in seeking legal advice after a block or a rejection narrows options materially.
A common myth in this area is that an OFAC licence application signals guilt or triggers an investigation. That is wrong. A properly filed application is a routine and expected mechanism within the OFAC framework. Failure to file when a licence is required is far more likely to attract scrutiny than a well-documented application.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. For a confidential assessment of your exposure, contact Calder & Vance at info@caldervance.com.
When does a blocked payment require a voluntary self-disclosure?
Where a payment has already been processed in apparent violation of OFAC sanctions – whether through a compliance failure, a screening gap, or a misapplication of a general licence – the question of voluntary self-disclosure (VSD – a self-initiated report to a regulator) arises immediately. OFAC's enforcement guidelines treat a timely, complete, and accurate VSD as a significant mitigating factor in civil-penalty determinations. Failure to disclose a known violation, or delay that allows further transactions to proceed, can convert a mitigated outcome into an aggravated one.
The decision to file a VSD is a legal judgment, not a mechanical compliance step. It turns on whether a violation has in fact occurred, whether the apparent violation meets the threshold for mandatory reporting under the applicable programme, and how a disclosure would interact with any parallel reporting obligations – for example, to FinCEN or to a prudential regulator. In our practice, we advise clients to complete a rapid internal scoping exercise before any disclosure is made, to ensure that the VSD is accurate and does not inadvertently disclose more or less than the facts warrant.
Record-keeping obligations run alongside the disclosure analysis. Businesses processing payments with a potential sanctions nexus are required to maintain records of their screening decisions, licence reliance, and transaction documentation. These records are the foundation of any enforcement defence. For related export-control and BIS licensing matters where similar documentation obligations arise, see our frozen-account and BIS/EAR licensing service.
How Calder & Vance advises on OFAC payment authorisations
Our work on OFAC payment-authorisation matters covers four distinct phases. We do not offer a general retainer; we provide defined, action-oriented advice at each stage of the authorisation process.
In the assessment phase, we map the transaction against all applicable OFAC programmes, confirm whether a general licence applies, identify the specific prohibitions that attach, and advise on the legal and practical options available to the client. This phase produces a written legal assessment that the client can put before its board or banking counterparties.
In the application phase, we assess eligibility, prepare and submit the specific-licence application, and manage OFAC's queries. This includes preparing the full dossier, drafting the policy justification, and communicating with OFAC through the licensing portal. We set realistic expectations at the outset regarding timelines and the absence of any guarantee of success.
In the enforcement phase, if the payment has already been made or blocked, we scope the apparent violation, advise on voluntary self-disclosure, and prepare the penalty defence. This includes the written VSD submission, the legal analysis of mitigating factors, and any representations made in response to OFAC's pre-penalty notice.
In the compliance design phase, we test the screening logic, map ownership and control through the full counterparty chain, and redesign the programme to address the specific gap that produced the authorisation failure. This is particularly relevant for financial institutions and payment firms that process high volumes of cross-border transactions.
We advise multinationals, payment firms, correspondent banks, and trading houses. Our cross-regime coverage – OFAC, OFSI, and EU Council regulations under one advisory roof – means that multi-jurisdictional payment-authorisation matters do not require coordinating separate specialist teams.
Related practices
- Payment authorisations under OFSI – UK financial-sanctions licensing procedure and OFSI-specific grounds
- Frozen accounts and BIS/EAR licensing – US export-control licensing and blocked-account management
- Payment authorisations under UN sanctions – UN Security Council derogation routes and Focal Point procedure
Frequently asked questions on OFAC payment authorisations
How long does it take to authorise a restricted payment under OFAC?
OFAC has no statutory deadline for deciding specific-licence applications. Processing times depend on the programme, the complexity of the transaction, and OFAC's current licensing volume. Applications that are well-prepared and fully documented tend to progress more efficiently, but no timeline can be guaranteed. OFAC may issue requests for additional information, each of which extends the practical review period. In matters we have handled, timelines have ranged from several weeks to several months; plan accordingly and do not execute a transaction in advance of a licence being issued.
What are the main risks in payment authorisations under OFAC?
The principal risks are: executing a payment without verifying that a general licence applies; failing to identify a US clearing nexus in a payment that appears non-US; missing an aggregated ownership position that triggers the 50 percent rule; and delaying legal advice after a block or rejection, which narrows available options. A secondary risk is misreading a general licence to cover a transaction that falls outside its defined scope, which constitutes a violation even if the error is inadvertent. Robust pre-transaction screening and a timely legal review materially reduce all of these exposures.
Do we need specialist counsel for payment authorisations?
For straightforward transactions clearly covered by a general licence and documented as such, specialist counsel may not be required at the transaction level. For anything involving a specific-licence application, a borderline general-licence determination, a multi-jurisdictional payment structure, or a transaction that has already been blocked or flagged, specialist counsel is advisable. The cost of an application error – a denied licence, a missed enforcement-mitigation window, or an inadvertent violation – typically far exceeds the cost of early advice. In our experience, clients who engage counsel at the assessment stage preserve significantly more options than those who come to us after a problem has crystallised.
About the author
Renata Costa advises banks, payment firms, and virtual-asset businesses on sanctions screening, compliance-programme design, and financial-crime controls. She regularly advises on OFAC licensing and enforcement matters in the context of cross-border payment transactions, including specific-licence applications and voluntary self-disclosure. Calder & Vance – International Sanctions & Export Control Counsel.
Published: 3 July 2026
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.