Sanctions compliance: building a responsive monitoring programme
The UK financial sanctions regime, administered by the Office of Financial Sanctions Implementation (OFSI) within HM Treasury, has grown materially in complexity and volume since Brexit and the imposition of extensive Russia-related sanctions following the 2022 invasion of Ukraine. The Sanctions and Anti-Money Laundering Act 2018 (SAMLA) provides the primary domestic legal framework, and financial sanctions are now implemented through a series of statutory instruments covering geographic regimes (Russia, Belarus, Iran, North Korea, Myanmar, and others) and thematic regimes (counter-terrorism, counter-proliferation, cyber, and human rights). Understanding which sanctions regimes are relevant to a firm's business is the first step — and for firms with diverse client bases and cross-border operations, this mapping exercise is more complex than it first appears.
The legal obligation under UK financial sanctions is to freeze funds or economic resources owned, held, or controlled by designated persons, and not to make funds or economic resources available to designated persons directly or indirectly. The challenge of 'indirect' availability has been highlighted in OFSI's enforcement cases and guidance: a firm that provides services to an entity in which a designated person holds an ownership or control interest may be breaching sanctions, even if it does not deal directly with the designated person. Firms must therefore understand not only their direct counterparties but also the beneficial ownership and control structures of those counterparties — a task that is resource-intensive and requires ongoing monitoring as designations change.
Screening programmes are the primary operational mechanism for sanctions compliance. Firms must screen new customers and counterparties against the UK consolidated list (and any relevant non-UK lists, for firms with US or EU nexus), and must re-screen existing customers when the consolidated list is updated. OFSI updates the consolidated list frequently — sometimes multiple times in a day during periods of intensive sanctions activity — and firms must ensure that their screening systems and processes can respond to list updates promptly. A common failing is reliance on screening systems configured to perform daily or weekly batch updates, which may result in transactions being processed before a newly designated person is identified.
OFSI's licensing regime allows firms to continue dealing with designated persons in specific circumstances — for example, to unwind existing contracts, to make humanitarian payments, or where a specific legal obligation requires dealing. Licence applications must be made before dealing, and OFSI's processing times vary significantly by licence category and current demand. Firms that identify a potential sanctions issue should seek legal advice immediately, as OFSI's general licences (which authorise certain categories of dealing without individual application) have specific conditions that must be satisfied, and reliance on an inapplicable general licence is not a defence to a sanctions breach.
Voluntary disclosure and self-reporting
OFSI's enforcement guidance makes clear that voluntary self-disclosure of a potential sanctions breach will be treated as a mitigating factor. Firms that discover a potential breach — whether through screening, a customer alert, or any other source — should assess the facts carefully, take immediate steps to freeze or suspend any affected dealings, and consider whether voluntary disclosure to OFSI is appropriate. OFSI has the power to impose civil monetary penalties for breaches without proof of knowledge or intent, making it important to demonstrate good faith and robust compliance processes even where a breach was inadvertent.