Sanctions Lists Explained: OFAC, UN, EU, HMT/OFSI

Sanctions screening is a key part of financial crime prevention and customer due diligence. With sanctions lists changing frequently and regulators like OFAC adding hundreds of new designations each year, businesses must stay alert to shifting risk. Effective screening helps identify restricted parties early and avoid serious regulatory penalties.

There is no single set of global sanctions lists that applies universally. Businesses may need to screen against OFAC, UN, EU and UK regimes depending on their operations and counterparties. Understanding ofac vs eu sanctions is particularly important, as these frameworks can differ significantly in scope, ownership rules and enforcement reach. Sanctions can include asset freezes, trade and financial restrictions, travel bans, and limits on providing economic resources, making screening essential for compliance.

In this guide, we break down the four major sanctions frameworks, OFAC, UN, EU and UK, explaining what each list is, how they differ, and how businesses should approach sanctions screening in practice.

What Is a Sanctions List?

A sanctions list is an official database of individuals, companies, organisations, vessels or entities designated under global sanctions lists frameworks such as OFAC, the UN, the EU and the UK Sanctions List. These parties are subject to restrictions like asset freezes, financial prohibitions or trade bans.

Sanctions lists are a key part of sanctions screening and AML compliance, helping businesses identify high-risk or prohibited counterparties and avoid dealing with designated persons or entities involved in activities such as terrorism, corruption, human rights violations or geopolitical conflicts.

The Major Global Sanctions Lists at a Glance

Understanding global sanctions lists is essential for effective compliance and risk management in international business. These frameworks form the foundation of modern sanctions screening obligations across jurisdictions.

This section compares the key sanctions lists, including the OFAC sanctions list, UN sanctions list, EU sanctions list, and UK sanctions list, and explains how they interact within global sanctions screening and compliance processes, including key differences in ofac vs eu sanctions approaches.

What Is the OFAC Sanctions List?

The Office of Foreign Assets Control (OFAC) is a U.S. Treasury agency that administers and enforces U.S. economic and trade sanctions. It targets countries, individuals, and organisations involved in activities such as terrorism, narcotics trafficking, cybercrime, and human rights abuses. OFAC compliance is essential for businesses because it can affect access to the U.S. financial system and cross-border transactions involving U.S. persons or U.S.-linked activity.

The Specially Designated Nationals and Blocked Persons List - The SDN List is OFAC’s main sanctions list and includes individuals, companies, vessels, and aircraft designated under U.S. sanctions programmes. Once listed, their assets are generally frozen, and U.S. persons are prohibited from dealing with them unless authorised. Businesses must also consider ownership and control rules, as entities linked to SDNs may also be restricted even if not directly listed.

OFAC's Non-SDN Lists - OFAC also maintains non-SDN lists covering additional sanctions measures. These may include sectoral or targeted restrictions that limit certain types of financial or commercial activity without full asset freezes. These lists are regularly updated, so compliance teams must treat them as dynamic.

Who Must Comply with OFAC Sanctions?

OFAC sanctions apply mainly to U.S. persons, including citizens, residents, U.S.-based individuals and entities, and U.S. companies and their foreign branches. In some cases, obligations can extend to foreign subsidiaries or non-U.S. persons, especially where they facilitate prohibited transactions or cause U.S. persons to breach sanctions. Due to the global role of the U.S. financial system, OFAC sanctions often have worldwide impact.

What Is OFAC's 50 Percent Rule?

The OFAC 50 Percent Rule means a company can be treated as sanctioned even if it is not on the SDN List. If one or more blocked persons own 50% or more (individually or combined), directly or indirectly, the entity is also blocked. This is why UBO and ownership checks are essential, not just name screening.

For example, if two sanctioned individuals own 30% and 25%, the company is blocked due to 55% combined ownership. This shows how indirect ownership can create hidden sanctions risk.

The rule is based on ownership, not control. However, control relationships may still create additional risk depending on the sanctions programme.

Because of this, firms must use ownership mapping and corporate structure analysis to detect indirect OFAC exposure.

What Is the UN Sanctions List?

The United Nations Security Council Consolidated List is a global sanctions database of individuals, entities, groups, and organisations designated under UN sanctions regimes. It is used for sanctions screening to identify parties subject to measures such as asset freezes, travel bans, or arms embargoes. Unlike OFAC or UK sanctions lists, the UN list is not directly enforced on private businesses but is implemented through member states’ domestic laws.

The UN Consolidated List includes key identifiers to support sanctions compliance and due diligence, such as names, aliases, original-script spellings, nationality, dates of birth, identification details, addresses, listing dates, UN reference numbers, and the relevant sanctions regime. This helps improve accuracy in sanctions screening software and reduces false positives.

Each UN sanctions regime targets specific security or geopolitical issues and may impose measures like asset freezes, travel bans, and arms embargoes, depending on the Security Council mandate.

Who Must Follow UN Sanctions?

The UN does not directly regulate private companies. Instead, UN Member States must implement Security Council sanctions through their own laws. Businesses are therefore bound by UN sanctions only through national legislation. For example, the UK applies UN sanctions within its domestic framework alongside its own sanctions regime, meaning UK businesses must comply with both.

What Is the EU Sanctions List?

EU sanctions, formally known as restrictive measures, are a foreign policy tool used by the European Union to address issues such as terrorism, human rights abuses, and geopolitical threats. These measures can include asset freezes, restrictions on making funds available, bans on financial services, travel bans, and trade controls on goods, technology, or entire sectors like energy or defence.

The European Commission maintains a consolidated list of individuals, groups, and entities subject to EU financial sanctions, updated regularly based on decisions published in the Official Journal of the European Union. This list is a key reference for sanctions screening and AML compliance, and is often used alongside other global sanctions lists such as OFAC and UN datasets when building a complete view of sanctions lists across jurisdictions.

In practice, organisations rarely rely on a single source. Instead, they compare EU data with other sanctions lists to understand exposure across different regimes, including ofac vs eu sanctions, where rules, thresholds, and enforcement approaches can differ significantly.

Who Must Comply with EU Sanctions?

EU sanctions apply to all EU operators, including EU nationals, companies in EU Member States, and any business operating within EU jurisdiction. Enforcement is handled by individual Member States, meaning penalties and implementation may vary slightly but must align with EU law.

For multinational organisations, this creates a need to screen against multiple global sanctions lists, not just EU data in isolation. This is especially important when dealing with cross-border transactions where ofac vs eu sanctions obligations may overlap or diverge depending on the parties involved.

EU Ownership and Control

Sanctions compliance goes beyond name matching. EU rules can also apply to non-listed entities owned or controlled by sanctioned persons, even if they do not appear on the list. Control may be assessed through ownership, voting rights, or board influence, and there is no single fixed threshold.

A clean screening result does not guarantee a counterparty is free from EU sanctions risk, so businesses must combine screening with ownership checks and ongoing monitoring. This is particularly important when working across multiple sanctions lists, where indirect exposure may differ between EU, UK, UN, and OFAC frameworks.

What Is the UK Sanctions List?

The UK Sanctions List is the official database published by the Foreign, Commonwealth & Development Office (FCDO). It is used for UK sanctions screening, compliance, and financial crime prevention. It includes individuals, companies, organisations, and vessels designated under UK law, along with measures such as asset freezes, travel bans, and financial restrictions. For businesses carrying out AML checks, KYC, or sanctions screening, it is the main source for identifying who is subject to UK sanctions and helps prevent prohibited dealings.

In a broader compliance context, the UK Sanctions List is one of several key sanctions lists used globally. Organisations operating internationally often compare it with other global sanctions lists, including OFAC, EU, and UN datasets, to ensure full coverage across jurisdictions.

What Happened to the OFSI Consolidated List?

Many users still search for terms like OFSI sanctions list, HMT sanctions list, or HM Treasury sanctions list due to older systems and historical guidance. These are now outdated naming conventions. In modern sanctions screening and monitoring, organisations must use the UK Sanctions List to ensure accurate customer due diligence and compliance, as relying on legacy lists can lead to missed or incorrect matches.

When comparing ofac vs eu sanctions, it is also important to recognise that terminology and data sources differ across jurisdictions. This reinforces why businesses should not rely on a single dataset but instead screen across multiple sanctions lists to reduce compliance risk.

What Does OFSI Do?

The Office of Financial Sanctions Implementation (OFSI), part of HM Treasury, enforces UK financial sanctions. It provides guidance, issues licences, investigates breaches, and applies civil penalties where necessary. The FCDO leads most sanctions designations, while HM Treasury handles certain regimes. Together, they form the UK’s financial sanctions enforcement system.

OFSI’s role is critical in ensuring that UK obligations are properly reflected within broader global sanctions lists used by financial institutions and regulated businesses. This helps align UK enforcement with international frameworks, including UN and EU regimes, while still maintaining distinct UK-specific requirements.

Who Must Comply with UK Sanctions?

UK sanctions apply widely, not just within the UK. They cover UK-based individuals and businesses, UK-incorporated companies, and UK nationals operating abroad. This means UK citizens overseas must still follow sanctions rules, including restrictions on dealing with designated persons. For global organisations, this creates a need for sanctions screening, ongoing monitoring, and ownership checks to ensure full compliance.

Because UK obligations may differ from other regimes, businesses must often compare UK requirements with other sanctions lists, particularly when assessing ofac vs eu sanctions exposure in cross-border transactions. This multi-jurisdictional approach is essential for managing risk across global sanctions lists effectively.

How Sanctions Screening Works Step by Step

Understanding the sanctions screening process is essential for effective AML compliance and risk management across global sanctions lists.

This step-by-step guide covers sanctions checks, KYC/KYB verification, OFAC, UN, EU and UK sanctions list screening, and the full compliance workflow used to identify and manage sanctioned entities across multiple sanctions lists.

Step 1: Determine Which Sanctions Regimes Apply

The first step in effective sanctions screening is identifying which sanctions regimes are relevant to your business. This depends on factors such as business location, incorporation, customer geography, transaction routes, currencies used, counterparties, banking relationships, and the nature of your products or services. These elements determine whether you must consider OFAC sanctions lists, the UN sanctions list, the EU consolidated sanctions list, the UK sanctions list, or a combination of all four.

It is critical not to default to a single global sanctions list simply because it is the most comprehensive. Different jurisdictions impose different legal obligations, and applying the wrong framework can lead to compliance gaps or unnecessary false positives. A risk-based approach ensures you screen against the correct sanctions regimes based on your actual exposure, including understanding key differences in ofac vs eu sanctions requirements.

Step 2: Collect Reliable Identity Data

Accurate KYC and KYB data collection is essential before any sanctions check can be effective. For individuals, this includes full legal name, aliases, date of birth, nationality, country of residence, address, and official identification such as passport or national ID. These identifiers help reduce false positives in sanctions screening software and improve match accuracy across multiple sanctions lists.

For businesses, you should collect the legal company name, registration number, jurisdiction, registered address, directors, shareholders, and ultimate beneficial owners (UBOs). This information is essential for identifying ownership and control structures, which are critical under OFAC, EU, and UK sanctions rules and often differ across global sanctions lists.

Step 3: Screen Against Relevant Lists

Once identity data is collected, customers and related parties should be screened against the relevant sanctions lists, including OFAC SDN lists, UN Security Council lists, EU consolidated sanctions lists, and the UK Sanctions List. Modern sanctions screening systems typically aggregate these datasets to ensure comprehensive coverage across global sanctions lists.

Effective screening must account for real-world data variations such as aliases, spelling differences, transliteration across languages, alternative name ordering, abbreviations, and incomplete records. OFAC’s own Sanctions List Search tool uses fuzzy matching logic to identify potential name matches, highlighting the importance of flexible matching rules in sanctions compliance screening.

Step 4: Investigate Potential Matches

Not every alert generated during sanctions screening represents a true match. Each potential hit must be carefully investigated using secondary identifiers such as date of birth, nationality, address, passport number, company registration details, sanctions programme, and known aliases. This step is essential to reduce false positives and ensure accurate compliance decisions across all sanctions lists.

After review, each case should be classified clearly as a false positive, a possible match requiring escalation, or a confirmed sanctions match. Only confirmed matches should trigger sanctions enforcement actions, while borderline cases should be escalated for further compliance or legal review.

Step 5: Check Ownership and Control

For companies, identify whether sanctioned individuals or entities may have ownership or control even if they are not directly named on a sanctions list. This includes reviewing direct and indirect shareholding, voting rights, and any influence over parent or subsidiary companies. Understanding sanctions ownership and control is essential for effective sanctions screening and sanctions compliance across global sanctions lists.

Apply the correct jurisdiction-specific test, as rules differ between OFAC sanctions, EU sanctions, UN sanctions, and UK sanctions. Some regimes apply strict ownership thresholds, while others consider broader control factors, making it important to understand differences in ofac vs eu sanctions frameworks.

Step 6: Determine What Restrictions Actually Apply

Do not stop at a simple “sanctioned or not sanctioned” result, as sanctions lists are only part of the picture. You must assess the relevant sanctions programme, including whether it involves an asset freeze, financial restrictions, or sector-specific prohibitions.

Also review exemptions, licensing conditions, and reporting obligations under the applicable sanctions regime. Effective sanctions screening requires understanding the full scope of sanctions restrictions across all sanctions lists, not just list inclusion.

Step 7: Escalate Confirmed or Material Matches

If a potential sanctions match is confirmed or considered material, appropriate escalation is required based on the jurisdiction and internal sanctions compliance policy. This may include stopping transactions, restricting account activity, or freezing funds or economic resources where legally required.

Escalation may also involve notifying compliance or legal teams, reporting to the relevant authority, and assessing whether a sanctions licence is needed. These actions depend on the applicable sanctions laws, including OFAC, EU, UN, or UK sanctions frameworks and their respective sanctions lists.

Step 8: Keep an Audit Trail

Maintain a clear audit trail for all sanctions screening decisions to support sanctions compliance and regulatory review. This should include the screening date, datasets used, search parameters, and match results.

Also record identifiers reviewed, analyst decisions, escalation steps, and final outcomes. A strong audit trail is essential for demonstrating effective sanctions screening, supporting AML compliance, and meeting regulatory expectations across all global sanctions lists.

When Should Sanctions Screening Be Performed?

Sanctions screening should not be treated as a one-time onboarding task because global sanctions lists such as the OFAC SDN List, UN Security Council Consolidated List, EU sanctions list, and UK Sanctions List are updated frequently, meaning a previously clean customer can become designated at any time. This is why modern compliance teams rely on continuous monitoring across global sanctions lists rather than static checks.

At onboarding, businesses should always screen before establishing a relationship to avoid immediate sanctions risk or prohibited dealings. Screening should also be repeated for higher-risk transactions, particularly in banking, fintech, crypto, and international trade, where exposure to sanctions lists is higher and cross-border activity increases complexity.

Re-screening is also required when customer details change, such as new shareholders, UBOs, directors, or ownership structures, due to ownership and control rules like OFAC’s 50 percent rule and UK control tests. These rules are especially important when comparing ofac vs eu sanctions, as each framework applies different thresholds for ownership and control. Customers should also be rechecked whenever sanctions lists are updated.

Finally, ongoing screening should follow a risk-based approach, with high-risk relationships monitored more frequently or in real time, and lower-risk ones reviewed at set intervals in line with regulatory expectations. This ensures coverage across all relevant global sanctions lists while maintaining operational efficiency.

Sanctions Screening Penalties and Enforcement Risk

Sanctions screening penalties and enforcement risk vary by jurisdiction but are consistently severe. In the U.S., OFAC violations can lead to major civil penalties and criminal charges, with strict liability meaning firms can be penalised even without intent. In the UK, OFSI can issue civil penalties under a strict liability standard, with fines based on the seriousness and value of the breach.

In the EU, enforcement is handled by Member States, but penalties must be effective, proportionate and dissuasive. Across all regimes, risk extends beyond direct name matches to include ownership, control and failed screening processes across sanctions lists, making robust sanctions screening and ongoing monitoring essential. Differences such as ofac vs eu sanctions further highlight why firms must tailor compliance frameworks to jurisdictional requirements rather than relying on a single global approach.

Bottom Line

OFAC, UN, EU and UK sanctions regimes are separate frameworks with different lists and authorities, but they often overlap in global business. Obligations depend on jurisdiction and the specific transaction, so name matching alone is not enough for effective sanctions compliance across sanctions lists.

A robust sanctions screening process must also account for ownership and control structures, as sanctions lists change frequently. Organisations should use ongoing monitoring and real-time screening as part of a broader KYC, KYB, CDD and AML framework supported by accurate data and continuous risk assessment. Understanding differences such as ofac vs eu sanctions is essential for avoiding compliance gaps across global sanctions lists.

Effective sanctions compliance is not about a one-time name check. It’s about knowing who you’re dealing with, who owns or controls them, which sanctions apply, and how that risk changes over time.

FAQs About Sanctions Lists