A payments team at a UK-headquartered trading group receives a wire. The beneficiary's account is held by a firm whose parent appears on the UK consolidated list of financial sanctions targets (the master list maintained by His Majesty's Treasury of all persons and entities subject to UK asset-freezing and other restrictions). The instruction cannot be processed. The funds sit. Every day the commercial relationship erodes. Who authorises the payment – and on what legal basis?
Payment authorisations under OFSI – OFSI (the Office of Financial Sanctions Implementation, the UK authority responsible for licensing, guidance, and enforcement of financial sanctions) – are the mechanism by which a business or individual obtains permission to make a payment that would otherwise be prohibited by the UK sanctions regime. The governing legal basis is the Sanctions and Anti-Money Laundering Act, known as SAMLA, and the thematic regulations made under it. Without a valid licence or a specific payment authorisation, processing the payment constitutes a strict-liability breach – intent is not a defence. Payment authorisations ofsi legal support is, in our experience, one of the highest-stakes and most time-sensitive applications a compliance team will face.
This page explains the governing authority, the procedure for obtaining an authorisation, how the OFSI test differs from its OFAC and EU equivalents, the risk flags that practitioners watch, and how Calder & Vance assists businesses seeking to unblock a payment lawfully.
What is a payment authorisation and who issues it?
A payment authorisation under OFSI is a form of specific licence (a case-by-case permission to conduct a transaction that the applicable regulations would otherwise prohibit) directed specifically at releasing or transferring funds to, or for the benefit of, a designated person or entity. OFSI issues licences under SAMLA and the relevant thematic sanctions regulations. The licence is the only lawful route for a payment that touches a designation; there is no self-executing exemption equivalent to some US general licences for humanitarian payments.
OFSI administers several licensing grounds relevant to payments. The most commonly used are the basic needs ground, which covers essential living costs and routine legal fees for individuals, and the prior obligations ground, which covers contractual arrangements concluded before the designation took effect. A legal fees ground covers reasonable professional-services payments in defined circumstances. The applicable ground turns entirely on the facts: the nature of the payment, its timing relative to the designation, the identity of the ultimate beneficiary, and the source of the funds.
OFSI operates within the broader UK financial sanctions architecture. The Treasury's sanctions directorate sets policy; OFSI implements it. Licence applications go to OFSI directly, and OFSI may consult the Treasury, the Foreign Commonwealth and Development Office, or sectoral regulators when the payment raises policy questions. Understanding which stakeholder holds the decision is part of the adviser's role.
The legal test: ownership, control, and the "benefit" question
A payment is prohibited under the UK financial sanctions regime not only when it goes directly to a designated person, but also when a designated person or entity would benefit from it – whether directly or indirectly. This benefit test is broader than many compliance teams initially appreciate. It captures situations where a non-designated intermediary would pass funds on to a designated ultimate recipient, and it captures indirect benefit through profit-sharing, debt-offset, or intra-group flows.
The ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) further extends the reach of the prohibition. Under SAMLA and the thematic regulations, a non-designated company can be caught if a designated person owns or controls it. Control under the UK rules is broader than the mechanical fifty-percent threshold used by OFAC. It encompasses situations where a designated person can secure a particular outcome in the management or affairs of an entity, even without majority ownership. That breadth is the compliance risk that surprises cross-border transactions most often.
For a payment to a company in which a designated person holds a minority stake, the analysis must establish two things: first, whether the company itself is caught by ownership and control; and second, whether the designated minority shareholder would benefit from the payment in any way. If either answer is yes, an authorisation is required before the payment can proceed. In our experience, businesses frequently underestimate the second limb because they focus on the ownership chain and overlook commercial benefit flowing back to the shareholder.
How does the OFSI process compare with OFAC and the EU?
Cross-border transactions rarely sit under a single regime. A payment between a UK bank and a US correspondent bank may be subject to both OFSI and OFAC simultaneously; an EU counterparty may face obligations under the relevant EU Council regulation as well. The OFSI process, the OFAC specific-licence process, and the EU licensing process each have distinct requirements, timelines, and standards of review – and the most restrictive prohibition governs.
Under OFSI, the applicant submits a written application setting out the licensing ground, the facts of the payment, the parties, and supporting documentation. OFSI does not publish a fixed processing timeline, and the window for straightforward applications differs from that for complex multi-party transactions. The process is administrative; there is no hearing in the first instance, though refused applications can be challenged by way of judicial review before the High Court.
OFAC processes specific-licence applications through its licensing division. The OFAC process is broadly comparable in structure, but the available licensing grounds, the documentation requirements, and the policy priorities differ materially. A payment that OFAC would authorise under a general licence (a standing authorisation permitting a defined category of transactions without a separate application) may require a specific licence from OFSI. That asymmetry creates compliance gaps for institutions that assume parallel licensing.
EU licensing for payments to designated persons operates under the relevant Council regulation and the competent authority of the member state where the credit institution is established. EU licensing grounds broadly mirror the UK grounds, but the control test and the benefit analysis may be applied differently across member states. When a transaction involves a UK entity, an EU entity, and a US correspondent, all three regimes must be addressed in parallel. Failing to obtain one authorisation while the others are in place leaves the payment in breach.
The position above covers the standard multi-jurisdictional case. Your facts – the counterparty, the payment route, the regime in play, and the timing relative to any designation – change the analysis materially. For an assessment of your exposure under OFSI or a parallel regime, contact Calder & Vance at info@caldervance.com.
What documents does OFSI require for a payment authorisation application?
Every OFSI payment authorisation application must establish the licensing ground, identify all parties to the payment, and demonstrate that the authorisation sought is proportionate to the legitimate purpose. The documentary requirements vary by ground, but practitioners consistently see certain categories of evidence matter most.
For a prior obligations application, OFSI will want to see the underlying contract predating the designation, evidence that the obligation arose before the designation took effect, and a clear account of the payment flow. The timing analysis is critical: a contract signed after designation will not ordinarily satisfy this ground, even if negotiations began earlier.
For a basic needs application in relation to an individual, evidence of the specific expenses claimed is needed. OFSI applies the ground narrowly: it is directed at genuine subsistence and routine maintenance costs, not at maintaining a pre-designation lifestyle. Legal fees applications require detailed invoicing and confirmation that the fees are for advice or representation and not for any prohibited purpose.
Common documentation errors include incomplete ownership charts that do not trace to the ultimate beneficial owner, missing evidence of the designation date relative to the transaction trigger, and failure to account for intermediate entities in the payment chain. Each error extends processing time and may result in OFSI requesting additional information, which resets the practical clock on the matter.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Incomplete applications that are returned without a decision may require resubmission, losing whatever informal priority position they had in the queue. Contact Calder & Vance at info@caldervance.com before submitting a complex or time-sensitive application.
Risk flags: what signals a payment needs an authorisation?
Screening a payment against the UK consolidated list is necessary but not sufficient. The most serious compliance failures arise not from missed list hits, but from the failure to trace indirect benefit or to apply the ownership and control test correctly to a multi-layered structure.
The following patterns consistently generate authorisation requirements in our practice:
- A direct payment to a non-designated company where a designated person holds 50 percent or more of the shares, directly or through nominees – bringing the OFAC mechanical threshold and the broader UK control test both into play.
- A payment to a non-designated company in which a designated person holds a minority stake, where the designated person is also a creditor whose loan is to be repaid from the funds received.
- Intra-group payments where a designated parent owns subsidiaries in multiple jurisdictions and the payment to any subsidiary could benefit the parent.
- Release of escrowed funds or trade-finance proceeds where a designated exporter or seller is the ultimate beneficiary.
- Payments under insurance or reinsurance contracts where the designated person is the policyholder or a named beneficiary.
- Settlement of pre-designation judgments or arbitral awards where the judgment creditor has since been designated.
In each of these patterns, the institution processing the payment cannot rely on the absence of a direct list hit. The benefit question must be answered on the full facts. Where doubt remains, the correct course is to seek OFSI guidance or to apply for an authorisation before processing. Processing without authorisation in a situation of genuine uncertainty is not a safe harbour; it is a risk that may lead to enforcement.
What happens if a payment is processed without authorisation?
Processing a payment that should have been authorised by OFSI is a strict-liability breach of the relevant sanctions regulations. Under SAMLA, OFSI may impose a civil monetary penalty on any person that has breached a financial sanctions prohibition, whether or not there was knowledge of the breach. The civil penalty regime allows for penalties up to a defined statutory maximum – either a set figure or a percentage of the transaction value, whichever is higher. The precise figures are set by the applicable thematic regulations and are subject to legislative revision; verify the current position before relying on any stated amount.
OFSI has published enforcement guidance identifying the factors it weighs when determining whether to impose a penalty and at what level. Those factors include whether the breach was self-reported, the seriousness of the breach, the duration, the response of the business, the existence of compliance arrangements, and co-operation with OFSI's investigation. A voluntary self-disclosure – known as a VSD (a voluntary self-disclosure to a regulator, made proactively before the regulator initiates contact) – is a significant mitigating factor. OFSI's enforcement guidance explicitly acknowledges that timely VSDs can reduce the penalty range.
Beyond the civil penalty, OFSI may refer serious or repeated cases to the Crown Prosecution Service or the relevant prosecuting authority for criminal investigation under SAMLA. The criminal threshold is higher – it requires knowledge or reasonable cause to suspect – but the consequence is uncapped criminal liability and potential imprisonment. Financial institutions processing high volumes of payments face particular exposure when a compliance failure is systemic rather than isolated.
A single undetected breach in a correspondent banking chain can also expose the originating institution to secondary compliance action from its own regulator – the Financial Conduct Authority or the Prudential Regulation Authority – on grounds of inadequate financial-crime controls. The interaction between OFSI enforcement and prudential supervision is a dimension of the risk that payment-processing businesses must plan for explicitly.
How Calder & Vance assists with OFSI payment authorisations
Our work on OFSI payment authorisations covers the full scope of a matter, from initial triage through to resolution. We assess eligibility, prepare and submit the licence application, and manage OFSI's queries throughout the review period. Where a payment involves parallel OFAC or EU obligations, we co-ordinate the licensing approach across regimes so that the authorisations are aligned and the gap between them is closed.
In a recent matter, a financial institution in the trade-finance sector identified a potential conflict between a payment instruction and an ownership-chain involving a designated entity under the UK regime. The institution was unsure whether the non-designated operating company was caught by the ownership and control test. We mapped the ownership chain, assessed the control question under SAMLA and the relevant thematic regulations, prepared a briefing for the institution's compliance committee, and submitted the authorisation application to OFSI with a targeted prior-obligations argument. The matter proceeded through the OFSI review process; the institution had a clear record of its compliance steps throughout.
We also assist businesses that have processed a payment and subsequently identified a potential breach. In that situation, our work covers scoping the apparent violation, advising on voluntary self-disclosure, and preparing the penalty defence if OFSI commences a formal investigation. The steps taken in the hours and days after a potential breach is identified can define the outcome of any subsequent enforcement review.
Our practice operates across the major regimes, which means we can tell you not only what OFSI requires, but where the OFSI position diverges from OFAC or from the relevant EU licensing ground – and whether that divergence creates a risk that a single-regime authorisation will not resolve.
Related practices
- Frozen account management under BIS/EAR – US export-control-linked account freezes and release procedures.
- Payment authorisations under the UN regime – navigating Security Council committee licensing for UN-listed persons.
- Release of blocked funds under the EU regime – Council-regulation licensing and competent-authority applications for EU-designated entities.
Common misconceptions about OFSI payment authorisations
One persistent myth is that a payment authorisation from OFSI is routine or automatic once the applicant identifies a legitimate licensing ground. That assumption leads businesses to underinvest in the application and to set unrealistic timelines for their commercial counterparties. In practice, OFSI applies a genuine substantive review. The application must demonstrate that the facts satisfy the ground as a matter of law, not merely assert it. Applications that are submitted without documentary support, or that conflate two licensing grounds, are routinely returned or refused at first instance.
A second misconception is that the existence of an OFAC general licence for a comparable payment class means that OFSI will follow the same approach. The two regimes are independent. A US general licence permits the payment for the purposes of OFAC's jurisdiction; it has no effect on the OFSI prohibition. UK-connected banks processing OFAC-permitted payments to designated persons still require an OFSI authorisation if the payment touches the UK financial system or involves a UK-person counterparty. We regularly advise US-facing financial institutions that have relied on a US general licence and inadvertently left the OFSI position unaddressed.