UK Sanctions Lawyer — OFSI Defense, Licensing & Compliance

That’s when OFSI was set up inside HM Treasury. The statutory basis is SAMLA 2018 — the Sanctions and Anti-Money Laundering Act — which handed the UK executive independent authority to impose, vary, and revoke financial sanctions without reference to any supranational body. The UK Consolidated Sanctions List is a public register. Designated persons and entities: assets frozen, receipt of funds prohibited, financial services cut off.

Jurisdiction attaches to UK nationals, UK-incorporated entities, and anyone conducting activity in the UK. GBP transactions, UK correspondent banking, UK-registered branches — all pull foreign parties into scope, sometimes unexpectedly.

OFSI is not a court. Civil enforcement is administrative: investigate, levy monetary penalties, publish enforcement notices. Where deliberate breach is evidenced, the file goes to the National Crime Agency or HMRC for criminal proceedings under SAMLA 2018.

OFAC clearance on a transaction does not satisfy OFSI obligations on the same transaction. Not a technicality — it produces real enforcement exposure. Both authorities derive some designations from UN Security Council Resolutions, but jurisdiction, penalty structure, licensing grounds, and delisting procedure diverge substantially.

US-based businesses with UK exposure — GBP accounts, UK subsidiaries, UK-incorporated counterparties — carry OFSI compliance obligations that have nothing to do with whatever OFAC analysis was run. Two distinct legal requirements. See also OFAC sanctions programs for the US-side framework.

Designation freezes UK-held assets the moment it takes effect. Banks, payment processors, solicitors, any third party holding or controlling those assets — none of them may deal with those assets without an OFSI licence. The prohibition lands on the third party. It is the bank, the firm, the intermediary that faces criminal referral, not only the designated person.

HM Treasury maintains the UK Consolidated Sanctions List through OFSI’s online interface. Records cover individuals, companies, vessels, aircraft. Three routes lead to designation: autonomous UK decisions under SAMLA 2018, UN Security Council resolutions translated into domestic law, international arrangements to which the UK is party. Since SAMLA came into force, designations have been issued across more than a dozen regimes — Russia, Belarus, Iran, North Korea, Myanmar, and thematic regimes for cyber operations and human rights violations.

Physical presence in the UK is neither necessary nor sufficient. The operative test is a UK nexus — and that nexus can be thin.

A US parent cannot instruct its UK subsidiary to act inconsistently with OFSI obligations. The UK entity is independently subject to UK sanctions law. The parent’s OFAC analysis is irrelevant to that question. A US fund manager whose UK-domiciled fund holds assets must apply the UK sanctions framework to those assets — whatever the beneficial ownership structure looks like.

Common UK nexus points for US persons: UK-regulated financial counterparties, GBP payments routed through London correspondents, UK-listed equities or debt, UK real estate, professional engagements with UK law firms or accountants. The OFAC and credit reports framework handles US-side screening. It does not touch OFSI obligations.

Any GBP payment passing through a UK correspondent bank triggers an OFSI compliance obligation for every institution in the chain. Nationality of the parties is irrelevant. The mechanism mirrors OFAC’s USD clearing doctrine but runs under UK statutory authority.

UK branches of foreign banks are treated as UK entities for OFSI purposes. A US bank’s London branch must calibrate its sanctions screening to OFSI requirements across all branch-level activity. Gaps in branch-level compliance create enforcement exposure for the branch — and can reach the foreign parent.

A UK solicitor engaged on a matter cannot receive or handle funds from a designated person without an OFSI licence. The same restriction applies to UK-registered insurers, financial advisers, and real estate agents wherever their services constitute making funds or economic resources available.

The Economic Crime (Transparency and Enforcement) Act 2022 changed the fault threshold. Before that Act, demonstrated knowledge was required. Now: reasonable cause to suspect a breach is enough for civil liability. The penalty ceiling is £1 million or 50% of the estimated breach value — whichever is higher.

OFSI’s Monetary Penalties Guidance sets out what moves the figure up or down. Aggravating: failure to screen, non-disclosure of a known breach, structuring to fragment the audit trail. Mitigating: voluntary self-reporting, cooperation with investigators, a documented compliance programme that predated the incident. The weight given to each factor depends on the facts and the severity.

Deliberate or knowing violations under SAMLA 2018. Summary conviction: maximum 12 months and/or unlimited fine. Conviction on indictment: 7 years custody. Corporate liability runs alongside individual liability — directors and senior managers face personal exposure where a breach traces to their consent, connivance, or neglect.

Criminal referrals from OFSI typically involve deliberate circumvention. Hiding a designated counterparty behind intermediaries. Structuring transactions to break the audit trail. Giving false or misleading information in the course of an OFSI investigation.

Enforcement posture shifted materially after 2022. The Russia sanctions regime added several hundred entries to the UK Consolidated List. Enforcement notices and civil penalties published in 2024 and 2025 covered financial services, real estate, and professional services.

OFSI enforcement 2025 and into 2026 reflects HM Treasury’s explicit focus on professional enablers — law firms, accountancy practices, corporate service providers. Documented compliance frameworks are no longer optional for these sectors: screening logs, escalation records, policy documentation, staff training registers.

We act for individuals, corporates, and financial institutions navigating OFSI sanctions — from emergency asset unblocking to contested designation challenges. Our work spans the full lifecycle of a sanctions matter: initial triage, licence applications, regulatory engagement, and litigation before the High Court and the Court of Appeal where required.

A blocked payment can arise from formal OFSI designation, a financial institution’s own compliance hold, or administrative error. Different basis, different legal response. A UK asset freeze lawyer identifies the basis for the freeze, engages the relevant institution and OFSI where required, submits emergency licence applications where warranted. OFSI’s licensing function runs 24 hours for genuine emergencies. Applicable urgent licence grounds: legal fees, basic living costs, humanitarian expenditure.

The terms of any licence granted at the emergency stage — scope, duration, conditions — depend heavily on how the application is framed. Legal representation at this point shapes the practical utility of whatever licence comes out.

Two instruments. General licences are published determinations authorising a defined class of activity for all persons within their scope — typically wind-down of pre-existing contracts or transactions necessary for sanctions administration. Specific licences are individual grants to a named applicant for a defined transaction or category of transaction.

An OFSI Specific Licence application is a substantive legal submission. It must identify the applicable sanctions regime, the designated person or persons, the relevant exemption ground, the proposed activity, and evidential documentation. Grounds include prior obligations, legal representation fees, basic needs of the designated person or their dependents, humanitarian circumstances. OFSI case officers engage with applicants on complex submissions. Legal representation shapes both that engagement and the scope of the licence.

Where the transaction has US-side elements, a parallel OFAC license application may run concurrently. Separate legal frameworks, separate processes.

The review does not always produce delisting. Where it does not, judicial review before the Administrative Court is available — material error of fact, procedural unfairness in the original designation process, error of law in construing the “owned or controlled” test, and disproportionality where ECHR rights are engaged. A UK Sanctions List removal application built on strong factual and legal submissions follows a materially different procedural trajectory from an unsupported review request.

The designated person — or their representative — may submit representations to HM Treasury requesting a review. The review examines whether the factual basis for designation still stands and whether the designation remains proportionate. HM Treasury must respond within the period specified in the relevant regulations.

The process is structurally distinct from OFAC SDN list removal in the US. Dual-designation cases — persons on both UK and US lists — require parallel proceedings in both jurisdictions.

An ongoing legal obligation. Not a one-time review. A compliance audit by sanctions counsel examines: adequacy of UK Consolidated List screening, transaction monitoring protocols for sanctions indicators, internal escalation and breach-reporting procedures, third-party and correspondent due diligence standards, staff training records and policy documentation.

A sanctions risk assessment maps exposure across product lines, geographic footprint, counterparty categories, and transaction types. The output is a documented risk register — it serves both regulatory defence and internal governance. For businesses with dual US-UK exposure, OFAC compliance review runs in parallel with the OFSI audit.

That’s when HM Treasury confirmed in guidance that cryptoassets are “funds” within the meaning of UK financial sanctions legislation. OFSI crypto sanctions obligations apply to cryptoasset exchanges, custodians, DeFi operators, and anyone facilitating cryptoasset transactions that involve designated counterparties. The FCA-registered VASP framework adds a regulatory layer on top.

UK crypto sanctions lawyer services cover: wallet address screening against the UK Consolidated List, OFSI Specific Licence applications for releasing cryptoassets frozen at exchange level, compliance framework design for VASPs, legal advice on the evidential standard required to show adequate screening was conducted. On-chain transactions are pseudonymous. Blockchain analytics tools reduce the legal risk — they do not eliminate it.

A person removed from the EU list may remain designated under UK law. The reverse also applies: an EU designation carries no automatic legal effect in the UK after Brexit. Two lists. Two sets of obligations. Licences must come from the relevant authority in each jurisdiction separately.

Until January 2020, UK financial sanctions ran through EU Council Regulations. SAMLA 2018 replaced that framework entirely. At departure, the UK retained EU-derived designations — then the two regimes diverged. The UK EU sanctions difference is sharpest in the Russia context: designations, asset freeze valuations, and applicable licence grounds diverge between the two regimes. An EU competent authority licence does not cover activity prohibited under UK regulations. Compliance teams that treat the regimes as interchangeable face significant exposure.

SAMLA 2018 introduced a designation standard — “reasonable grounds to suspect” — with no direct equivalent in pre-Brexit EU practice.

£28.7 billion. Approximate value of assets frozen under the Russia (Sanctions) (EU Exit) Regulations 2019 as amended, as reported by HM Treasury. The Russia regime is the single largest component of OFSI’s caseload. Still expanding.

Russia sanctions UK lawyer engagements: representation of persons designated under the Russia regime, OFSI Specific Licence applications for wind-down, legal fees and humanitarian purposes, compliance advice for UK businesses with legacy contractual exposure to Russian counterparties, defence in OFSI investigations.

The technical difficulty centres on the “owned or controlled” test. A designated person’s assets are frozen even where held through non-designated intermediary structures — provided the ownership or control chain traces back to a designated party. OFSI has published guidance on the 50% ownership threshold and control tests. Guidance alone does not resolve the question in any particular corporate structure.

Asset freezes and OFSI investigation notices run on defined procedural timelines. Early intervention — before any formal allegation — preserves the widest range of legal options. Financial and reputational outcomes both.

Available immediately:

Contact us for a consultation!