A practical guide to sanctions due diligence UK

A transaction involving a United Kingdom counterparty, a UK-registered entity, or a payment routed through a UK correspondent bank carries a distinct sanctions exposure that most cross-border deal teams underestimate. The United Kingdom maintains its own autonomous sanctions regime – independent of both the European Union and the United States – and that regime bites on conduct with a UK nexus regardless of where the deal is structured or signed.

Sanctions due diligence for a deal touching the United Kingdom requires a structured sequence: screen all principals and entities against the UK Consolidated List under the Sanctions and Anti-Money Laundering Act 2018 and the relevant country or thematic regulations made under it, map every UK-nexus point in the transaction, obtain and verify source-of-funds and ownership documentation, and record the analysis before any payment instruction moves through a UK-connected channel. The governing instrument is the Sanctions and Anti-Money Laundering Act 2018 and the statutory instruments enacted under it.

This guide sets out the decision the deal team faces, the sequence of steps in order, the single mistake that most commonly derails the process, and a closing checklist for use before contracting.

Why does a UK nexus change the sanctions picture?

A UK nexus triggers UK sanctions obligations independently of any other regime. The United Kingdom left the European Union's sanctions architecture and now operates an autonomous regime under the Sanctions and Anti-Money Laundering Act 2018. Since that departure, the UK has designated individuals and entities that do not appear on the EU consolidated list, and vice versa. The lists have diverged meaningfully in certain regions.

A Hong Kong-based party executing a deal with no direct UK involvement can still have a UK nexus if any of the following apply: the transaction uses a UK clearing bank or a UK correspondent; the target entity is incorporated in England and Wales or Scotland; a UK-incorporated holding entity sits in the ownership chain; the contract is governed by English law; or a UK-resident individual is a beneficial owner or director. In our cross-border practice, the payment-channel nexus is the one most frequently overlooked. Wire transfers in sterling or US dollars routed through a London correspondent create a UK nexus as a matter of UK financial-sanctions law, and the bank at that node will screen against the UK Consolidated List.

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That means the UK autonomous measures are not independently enforceable in Hong Kong. However, any party using a UK-connected payment channel, or dealing with a UK-incorporated entity, will face UK rules at that nexus point. The practical exposure for the deal team is therefore real, even if the governing law of the main contract is Hong Kong law.

Step 1: Map every UK nexus in the transaction before screening begins

The first step is a nexus audit – a structured identification of every point in the transaction where a UK connection arises – because screening without a complete nexus map produces a false sense of comfort. An incomplete map is the most common upstream error we see.

The nexus audit covers four layers. First, the legal-entity layer: identify every counterparty, guarantor, holding entity, and subsidiary with UK incorporation, UK registration, or a UK branch. Second, the individual layer: identify every ultimate beneficial owner, director, and authorised signatory who holds UK citizenship, UK residency, or a UK passport. Third, the payment-channel layer: trace the intended payment route and identify every bank in the correspondent chain that is UK-incorporated or UK-regulated. Fourth, the contractual layer: note whether the contract is governed by English law or provides for dispute resolution in English courts, since those facts alone can be persuasive evidence of a UK nexus in a sanctions-enforcement context.

This audit should be documented in writing. A memo or a structured checklist with Yes/No conclusions for each layer is sufficient. The point is that the analysis is defensible to a compliance officer, a bank, or a regulator who later asks why a particular nexus was or was not treated as engaged.

Step 2: Screen all principals against the UK Consolidated List and the relevant statutory instruments

Once the nexus map is complete, every natural person and legal entity identified in it must be screened against the UK Consolidated List, which is published and maintained by His Majesty's Treasury's Office of Financial Sanctions Implementation (OFSI). Screening at a single point in time is not sufficient. The list is updated without notice, and a clean result at signing may not hold at closing or at the point of payment. The deal team should build a refresh screen into the pre-closing checklist and, for longer transactions, at regular intervals throughout the hold period.

Beyond the consolidated list, the deal team must identify the correct statutory instrument for the relevant geography or thematic exposure. UK sanctions regulations exist for specific country regimes and for thematic regimes covering matters such as cyber, human rights, and anti-corruption. Each instrument has its own prohibitions and licensing provisions, and they do not all operate identically. A transaction involving a counterparty with connections to a jurisdiction under a UK thematic designation requires analysis under the thematic instrument, not only the country instrument. In our experience, teams working primarily with one country-specific list often miss the thematic overlay.

The output of Step 2 is a written screening record: who was screened, which list or instrument was checked, the date and time of the check, and the result. Where a name generates a potential match, a further-review note is required before the transaction proceeds.

Step 3: Obtain and verify ownership and source-of-funds documentation

Screening a legal entity against a designations list is a necessary step, but it does not displace the obligation to understand who controls the entity. A designated individual can hold an interest in an undesignated entity, and the UK financial-sanctions regime extends to assets owned or controlled by designated persons, not only to the designated person directly. The concept of ownership and control is therefore central to the analysis, and it requires documentation.

For each legal entity in the transaction, the deal team should obtain the current corporate registry extract, the shareholder register, a beneficial-ownership declaration, and – where the entity sits in a multi-layer structure – a group chart showing every intermediate holding entity down to the ultimate beneficial owner. BVI and Cayman holding structures are common above Hong Kong operating entities, and the registered agent in those jurisdictions holds the relevant ownership records. Requesting and reviewing those records is a standard step; it is not optional because the documents are held offshore.

Source-of-funds documentation sits alongside the ownership record. Where the transaction involves a substantial capital inflow from a counterparty with connections to a higher-risk jurisdiction, the deal team needs a documented account of the economic origin of the funds – not a narrative, but supporting documents: bank statements, audited accounts, a sale-proceeds record, or a loan agreement. The quality of source-of-funds documentation is one of the first things a UK correspondent bank will ask for if it puts the payment on hold for further review.

We regularly advise on cross-border transactions where the ownership chain is clear on paper but the source-of-funds position is thin. Completing Step 3 before the payment instruction is issued, rather than reactively when a bank queries it, saves weeks of delay and protects the deal timeline.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. For a structured assessment of your transaction's UK sanctions exposure across the relevant jurisdictions, write to us at info@lockhartyip.com.

Step 4: Analyse the results and determine whether a licence or a legal opinion is needed

If the screening and ownership review produce a clean result, the deal team documents that outcome and proceeds to Step 5. If the review produces a potential match, an ownership overlap with a designated person, or a structural complexity that cannot be resolved by the documentary record alone, the team must stop before proceeding.

Where a genuine sanctions issue is identified, the UK licensing mechanism is available. OFSI administers a licensing regime that allows specific activities to proceed notwithstanding a prohibition, where a recognised ground applies. Grounds include certain humanitarian purposes, prior obligations, and legal-services costs. Applying for a licence is a formal step and carries its own timing considerations; it is not a fast-track clearance. Any party that proceeds without a licence where one is required will not be protected by the fact that it did not intend to deal with a designated person.

Where the issue is not a designation but an ambiguity – for example, whether a particular holding structure crosses the ownership-and-control threshold – a legal opinion may be appropriate. The opinion should address the specific instrument, the specific ownership facts, and the specific transaction step. A generic opinion that does not engage with the precise structure offers limited protection. In our cross-border practice, we have acted on situations where a preliminary opinion changed the sequencing of a deal and avoided a compliance failure at closing.

Step 5: Document the analysis and maintain the compliance file

A compliance analysis that exists only in the heads of the deal team provides no protection. Documentation is the step that converts a completed diligence process into a defensible compliance record.

The compliance file should contain: the nexus audit memo; the screening records with dates, lists checked, and results; the ownership and source-of-funds documents obtained; any legal opinions commissioned; the name of the person who approved the transaction from a compliance standpoint; and the date of approval. If the transaction has a long closing timeline or a phased payment structure, the file should record the date of any refresh screen and its result.

The file should be retained for a period consistent with the record-keeping obligations under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance in Hong Kong and the relevant UK AML requirements. Both regimes impose minimum retention periods for customer and transaction records. Verify the current requirements before setting the retention policy.

If an earlier filing, structure or enforcement attempt produced an adverse or stalled result – for example, a payment held by a correspondent bank – a second read of the compliance file can identify the gap and the steps still open. To discuss a stalled transaction or a re-sequencing of the diligence process, contact info@lockhartyip.com.

The common mistake: treating UK screening as a single-point event

The most consistent error we see in cross-border deals with a UK nexus is treating sanctions screening as a one-time exercise completed at the outset and not revisited. That approach fails for two reasons.

First, the UK Consolidated List changes without advance notice. Designations can take effect immediately upon publication. A screen carried out at the term-sheet stage may be overtaken by a designation published before signing, before closing, or before a deferred payment is instructed. Second, ownership structures are not static. Beneficial owners change, shares are transferred, and new holding entities are inserted. A clean ownership picture at the time of initial diligence may not reflect the position at closing.

The practical solution is a tiered refresh: a full re-screen at each material step in the transaction timeline (signing, closing, payment), and a lower-cost monitoring check at defined intervals for longer-hold transactions. This structure is proportionate and defensible. It does not require a new full diligence exercise at every point; it requires a documented check against the current list state and a confirmation that no new material ownership fact has emerged.

A related error is assuming that because the deal documents are governed by Hong Kong law, UK rules have no purchase. As set out above, they do – at every UK-connected payment node and in respect of every UK-incorporated entity in the chain. The governing-law clause of the main contract does not displace the sanctions rules applicable at the nexus point. Counsel on our desk regularly see this misconception lead to payment delays of weeks, sometimes longer.

Decision checklist before contracting

The following checklist is a practical tool, not an exhaustive legal analysis. It reflects the sequence set out in this guide and identifies the gate at each step. A "No" answer at any step should pause the transaction until the issue is resolved.

Has a nexus audit been completed identifying all UK-incorporated entities, UK-resident individuals, UK-connected payment channels, and English-law or English-court provisions in the transaction documents?
Have all principals and entities identified in the nexus audit been screened against the current UK Consolidated List, with results documented including the date and time of each check?
Have all relevant country-specific and thematic UK statutory instruments been identified and reviewed against the transaction?
Has beneficial-ownership documentation been obtained down to the ultimate beneficial owner for every legal entity in the chain?
Has source-of-funds documentation been obtained and reviewed for the principal capital flows in the transaction?
Has the screening and ownership review produced a clean result, or – if not – has a licence been obtained or a legal opinion been prepared addressing the specific issue?
Has the compliance analysis been documented in a file with a named approver and an approval date?
Is a refresh-screen protocol in place for the signing-to-closing gap and, where relevant, for any deferred payment steps?

For deals where the ownership chain involves BVI or Cayman holding entities, the compliance review before contracting with the relevant offshore vehicle is a related step addressed in our analysis on compliance review before contracting with a BVI entity. Sanctions considerations sit alongside the broader Sanctions & AML work our desk handles across Greater China and the offshore centres. For updates on specific developments affecting UK sanctions and the cross-border payment channel, see our briefing on sanctions due diligence for deals touching the United Kingdom.

Related practices

Sanctions & AML – sanctions screening, AML compliance, and source-of-funds file preparation across cross-border deals
M&A & Transactions – cross-border acquisition structuring, due diligence, and transaction documentation
Holding Structures – BVI, Cayman and Hong Kong holding entity review and structuring for international groups

Frequently asked questions

What is the first step in sanctions due diligence for a deal touching the United Kingdom?

The first step is a nexus audit: a structured identification of every point in the transaction where a UK connection arises, covering legal entities, individuals, payment channels, and contractual provisions, before any screening of principals begins. Screening without a complete nexus map produces an incomplete analysis. The audit should be documented in writing so that the scope of the review is clear to a compliance officer or a bank conducting its own checks later in the transaction.

What documents are needed for sanctions due diligence for a deal touching the United Kingdom?

The core documents are: corporate registry extracts and shareholder registers for each entity in the chain, beneficial-ownership declarations, a group structure chart showing every intermediate holding entity to the ultimate beneficial owner, and source-of-funds documentation for the principal capital flows. For entities held through BVI or Cayman structures, the registered agent holds the relevant ownership records and those should be obtained directly. The completed documentary file also needs to include screening records – list checked, date, and result – and, where applicable, any legal opinion or OFSI licence.

Which jurisdiction's law applies to sanctions due diligence for a deal touching the United Kingdom?

Multiple regimes apply simultaneously and they do not displace each other. The UK Sanctions and Anti-Money Laundering Act 2018 and the statutory instruments under it apply at every UK nexus point: a UK-incorporated entity in the chain, a UK-connected payment channel, or a UK-resident beneficial owner. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states, so UK autonomous measures are not independently enforceable in Hong Kong – but any party using a UK-connected correspondent bank or dealing with a UK-incorporated entity will face UK rules at that node, regardless of the governing law of the main contract.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

A practical guide to sanctions due diligence for a deal touching the United Kingdom