A trade-finance desk at a mid-sized bank clears a letter-of-credit application. The goods look unremarkable. The buyer's name passes OFAC screening. But no one has checked the Export Control Classification Number (ECCN – the designation that determines whether a US export-control licence is required under the Export Administration Regulations). The shipment proceeds. Months later, the Bureau of Industry and Security opens an inquiry. That sequence – clean sanctions screen, missed export-control step – is one of the most common patterns we see in cross-border trade-finance enforcement.
Trade-finance sanctions controls under the Export Administration Regulations (the EAR – the US export-control regime administered by the Bureau of Industry and Security, known as BIS) require financial institutions and their corporate clients to assess not only whether a counterparty is listed but also whether the underlying goods, technology, or software require a BIS export licence before payment or facilitation can lawfully proceed. As of August 2026, the EAR reaches any US-origin item, any item manufactured abroad from US-controlled content above the applicable de minimis threshold, and any item produced using certain US equipment or software – giving the regime a broad extraterritorial reach that sits alongside, but differs materially from, the OFAC sanctions framework.
This page sets out what BIS / EAR compliance requires in a trade-finance context, how it interacts with OFAC and OFSI obligations, what the common failure points are, and how Calder & Vance assists banks, corporates, and trading houses to build controls that hold under regulatory scrutiny.
What does "trade-finance sanctions controls under BIS / EAR" actually cover?
Trade-finance sanctions controls under the EAR cover the full chain of obligations that arise when a financial institution or trading counterparty participates in the movement of US-controlled goods, software, or technology across borders. The BIS administers the EAR under the authority of the Export Control Reform Act and IEEPA. Its reach does not stop at the US border.
The practical scope is wider than many compliance teams assume. A correspondent bank processing a US-dollar payment for a shipment of industrial equipment may be facilitating an export transaction even if it never touches the goods. A commodities trader using a US-incorporated subsidiary to arrange shipping on non-US goods may bring those goods within EAR jurisdiction through the foreign direct product rule (FDPR – the rule that extends EAR controls to certain foreign-made items produced using US technology or equipment). Documentary-credit teams, trade-operations desks, and commodity-finance units all sit within the perimeter of potential EAR exposure.
In our experience, the gap between OFAC screening and EAR classification is where trade-finance teams are most exposed. OFAC checks tell you whether a named person is blocked. They do not tell you whether the goods on the bill of lading require a BIS licence before the transaction can be funded or guaranteed.
The legal authority: how BIS / EAR sits alongside OFAC and OFSI
BIS and OFAC are separate agencies with overlapping but distinct jurisdiction. BIS controls items on the Commerce Control List (CCL – the master list of controlled goods, software, and technology classified by ECCN) and maintains the Entity List (a list of foreign parties for whom BIS has determined a licence is required for exports). OFAC administers economic and financial sanctions, maintaining the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and issuing blocking orders under the relevant country and thematic programmes.
The two regimes interact in trade-finance in several ways. A counterparty can be on the Entity List but not the SDN List – meaning OFAC screening passes but BIS licence requirements still apply. A transaction can involve goods with no ECCN designation (designated EAR99 – items subject to the EAR but not listed on the CCL, which generally require no licence for most destinations) and still be prohibited if the end-user is a denied party or a sanctioned destination. Conversely, a high-ECCN shipment to an unsanctioned party in a sensitive sector may require a BIS licence even though every OFAC check is clean.
The OFSI regime in the United Kingdom and the EU Council regulations add further layers. A transaction structured to route through a UK entity must also satisfy OFSI's financial-sanctions prohibitions, and a European bank participating in the same trade-finance chain carries EU Council regulation obligations. Where the three regimes point in different directions, the stricter prohibition governs. Cross-border trade-finance structures should be assessed against all applicable regimes simultaneously, not sequentially.
The position above covers the standard compliance architecture. Your specific transaction – the goods, the routing, the parties, the financing structure – will change the analysis materially.
To discuss your BIS / EAR trade-finance exposure, contact Calder & Vance at info@caldervance.com.
How does BIS / EAR classification work in a trade-finance transaction?
Classification under the EAR begins with determining whether the goods, software, or technology have a specific ECCN on the Commerce Control List; if not, they are EAR99. Once an ECCN is assigned, the reason-for-control columns of the CCL determine which destinations, end-users, and end-uses trigger a licence requirement. In trade finance, this classification step must happen before the instrument is issued, not after.
The practical sequence runs as follows. First, identify whether the item is subject to the EAR at all – a threshold question that turns on US-origin content, the de minimis calculation, or FDPR applicability. Second, assign or verify the ECCN. Third, screen the destination country, the consignee, the end-user, and the stated end-use against the CCL licence requirements, the Entity List, the Denied Persons List (a BIS list of parties denied export privileges), and the Unverified List. Fourth, determine whether an exception applies or whether a licence application is required. Fifth, document the analysis.
For financial institutions, steps one to three translate into documentary requirements: the bill of lading, the commercial invoice, the end-use certificate, and – for dual-use goods – the end-user statement. Instruments issued without that underlying documentary review carry enforcement risk even where the payment itself is clean from an OFAC perspective.
We regularly advise trade-finance teams on how to embed this classification review into the instrument-issuance workflow without creating unacceptable processing delays. The objective is a repeatable control, not a one-off check.
What is the extraterritorial reach of the EAR, and why does it matter for non-US banks?
The extraterritorial reach of the EAR means that a non-US bank or trading company can be subject to BIS jurisdiction even if it is not incorporated in the United States and even if the transaction never touches US territory. The key mechanisms are the de minimis rule, the FDPR, and the controls on items exported from the United States and then re-exported.
Under the de minimis rule, foreign-made items that incorporate US-controlled content above the applicable percentage threshold are subject to the EAR. The FDPR extends that reach further: certain foreign-produced items that are the direct product of US-controlled technology or software, or that are produced by a plant that is itself a direct product of such technology, can be captured by BIS controls regardless of where they are made or who makes them.
For a European or Asian bank processing trade finance in sectors such as semiconductors, advanced manufacturing equipment, telecommunications infrastructure, or aerospace components, this extraterritorial reach is directly material. A transaction that looks non-US in every visible dimension – non-US parties, non-US goods, non-US currency – may still engage EAR controls if the goods contain US-controlled inputs or were produced using US-origin process technology.
Have you mapped the US-content and FDPR exposure in your trade-finance book? Many institutions cannot answer that question without a structured review of the underlying commodity flows.
The interaction with secondary-sanctions risk compounds this. A transaction that does not directly violate BIS rules may nonetheless expose a non-US financial institution to OFAC secondary-sanctions risk if the counterparty or the underlying goods are connected to a sanctioned programme. The two analyses must run in parallel.
Common risk flags and control failures in trade-finance BIS / EAR compliance
The most common failure in trade-finance BIS / EAR compliance is the assumption that OFAC screening is sufficient. It is not. The two regimes address different risks: OFAC is primarily a person-and-country filter; BIS is primarily a goods-and-technology filter. A clean OFAC screen tells you nothing about whether the goods require a BIS licence.
Beyond that foundational gap, the recurring control failures we observe include the following.
- No ECCN verification at instrument issuance. Trade-operations teams process instruments based on the description in the commercial invoice. Descriptions such as "industrial machinery" or "electronic components" are insufficient for BIS classification purposes. Without an ECCN check, the bank cannot know whether a licence is required.
- Entity List screening limited to the SDN List. Many screening systems are calibrated to OFAC lists only. The BIS Entity List, Denied Persons List, and Unverified List require separate data feeds and separate review logic.
- No end-use or end-user verification. A valid ECCN and a clean party screen are not sufficient if the stated end-use is implausible or the end-user operates in a controlled sector. Red-flag indicators – unusual payment routes, requests to omit technical descriptions from documents, atypical freight routes – must feed into the review.
- FDPR and de minimis not assessed at the product level. Institutions that finance the manufacture or assembly of products rarely assess whether the finished goods carry US-controlled content above the de minimis threshold. That gap creates latent exposure across the trade book.
- Documentation retained for less than the required period. BIS requires records of export transactions to be kept for five years from the date of the transaction. A shorter retention policy creates enforcement risk in any subsequent BIS inquiry.
If a transaction has already been flagged by BIS, or a potential violation has been identified internally, the window for voluntary self-disclosure matters. An early review can preserve options that narrow with time.
Contact Calder & Vance at info@caldervance.com for a confidential review of a potential breach or an identified control gap.
How does a trade-finance BIS / EAR compliance programme compare across regimes?
Building a trade-finance compliance programme that satisfies BIS / EAR requirements alongside OFAC, OFSI, and EU Council obligations requires understanding where the three regimes converge and where they diverge. The divergences create the most practical difficulty.
On ownership and control, the regimes differ. OFAC applies the 50 percent rule (the rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked). OFSI and the EU apply an ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) that is broader: control through contractual or structural means can capture a company even where ownership sits below 50 percent. BIS addresses the question differently again – through its licence requirement analysis for transactions involving entities connected to controlled countries or programmes, rather than through an automatic blocking rule.
On licensing, OFAC issues specific licences (case-by-case authorisations to conduct an otherwise prohibited transaction) and general licences (standing authorisations that permit a defined category of transactions). BIS operates similarly with specific licences but also uses a system of licence exceptions – standing permissions defined by the EAR that can avoid the need for a case-by-case application where the conditions are met. OFSI in the UK issues specific licences under its own statutory regime; the EU Council issues licences (derogations) under the relevant Council regulation. The conditions and timelines differ across all four regimes.
On record-keeping, BIS requires five years of retention. OFAC's guidance points to a similar standard. OFSI's enforcement guidance specifies its own retention expectations. A single-standard policy set at the longest applicable period is the practical answer, but it must be calibrated to the data-classification rules of each jurisdiction.
In our cross-border practice, we find that institutions attempting to build a single global trade-finance compliance programme without mapping these regime-specific differences invariably create gaps. The programme looks unified but applies inconsistent standards at the transaction level.
The myth that BIS / EAR only applies to US exporters
A persistent assumption among non-US trade-finance participants is that BIS and the EAR are a US-domestic matter, relevant only to US exporters and US banks. That assumption is wrong, and acting on it has produced enforcement consequences for non-US institutions.
The EAR applies to any person who exports, re-exports, or transfers in-country items subject to the EAR – regardless of the exporter's nationality or location. Through the FDPR and de minimis mechanisms, the regime captures non-US goods and non-US transactions. Non-US financial institutions that finance, guarantee, or facilitate transactions involving EAR-controlled items are at risk of aiding and abetting a violation of the EAR, even without direct contact with the United States.
BIS has pursued enforcement actions involving non-US parties. The existence of a US-dollar correspondent relationship, a US-person employee, a US-technology component in the goods, or a US-incorporated entity anywhere in the ownership chain can each provide a basis for BIS jurisdiction over an otherwise non-US transaction.
The practical implication for trade-finance compliance officers outside the United States: EAR screening and classification cannot be delegated to US counterparties on the assumption that BIS obligations belong to the US side of the transaction. Each participant in the chain must understand its own exposure.
How Calder & Vance assists on trade-finance BIS / EAR controls
Calder & Vance works with banks, trading houses, commodity financiers, and corporates to build, test, and remediate trade-finance compliance controls under the EAR and the accompanying sanctions regimes. Our work is practical and structured around the client's transaction flows and operational constraints.
In a recent matter, a European trading house active in advanced-manufacturing supply chains had been relying solely on OFAC-calibrated screening for its trade-finance transactions. Following a commercial review that identified potential US-origin content in several product lines, we classified the relevant goods against the CCL, mapped the FDPR exposure across the product portfolio, assessed the applicable licence exceptions, and designed a revised pre-transaction review workflow for the trade-operations team. The matter reached a documented compliance position without a referral to BIS.
Our action library for trade-finance BIS / EAR engagements covers the following:
- Classification and CCL mapping: assess the ECCN for each product category in the trade book, identify EAR99 items, and map licence requirements by destination and end-use.
- FDPR and de minimis analysis: assess US-origin content across the supply chain and determine whether foreign-made goods are subject to the EAR.
- Screening programme gap analysis: test whether existing screening tools cover the BIS Entity List, Denied Persons List, and Unverified List alongside OFAC lists.
- Compliance programme design: build the five-element standard into the trade-finance workflow – policy, procedure, training, testing, and escalation.
- Licence application and exception review: assess eligibility for licence exceptions, prepare and submit BIS licence applications, and manage the agency's queries.
- Voluntary self-disclosure (VSD): scope the apparent violation, advise on voluntary self-disclosure (VSD – a self-report to BIS of a potential violation, which BIS treats as a significant mitigating factor in penalty assessment), and prepare the submission.
- Cross-regime alignment: map the EAR position against concurrent OFAC, OFSI, and EU Council obligations and resolve conflicts.
Related practices
- Sanctions compliance audit and testing – structured testing of screening logic, ownership mapping, and programme design across regimes.
- Trade-finance sanctions controls under OFAC – parallel advisory for OFAC financial-sanctions requirements in trade-finance transactions.
- Trade-finance sanctions controls under OFSI – UK financial-sanctions obligations for trade-finance participants, including OFSI licensing and enforcement.