How to approach sanctions due diligence for a deal UK

A cross-border deal involving the United Kingdom introduces one of the more demanding sanctions due-diligence environments an in-house team will encounter. The UK operates its own autonomous sanctions regime – separate from the European Union and from United Nations measures – and that regime continues to expand. For a transaction with a Hong Kong nexus, the question is not simply which list applies. It is which law governs which party, which payment channel, and which counterparty risk carries real exposure.

Sanctions due diligence for a deal touching the United Kingdom requires a structured, sequenced review of three overlapping layers: the UK's autonomous sanctions regime under the Sanctions and Anti-Money Laundering Act 2018, the UN measures that Hong Kong implements under the United Nations Sanctions Ordinance, and the bank-channel exposure that connects both. The sequence matters because the gate at each step determines what you can contract for, how you can pay, and which regulatory authority you are answering to.

This guide sets out the practical steps in order, identifies the common structural mistake that stalls deals, and provides a decision checklist for in-house counsel and compliance teams working across the Hong Kong–UK interface.

What is the legal environment you are entering?

The United Kingdom maintains a standalone, post-Brexit autonomous sanctions regime. It is grounded in the Sanctions and Anti-Money Laundering Act 2018, which gives UK ministers the power to designate individuals and entities and to impose financial and trade restrictions without reference to European Union law. Since the UK left the EU's common foreign and security policy architecture, HM Treasury's Office of Financial Sanctions Implementation – known as OFSI – administers financial sanctions enforcement. Designation lists are maintained separately from EU and US lists, and the three do not mirror each other precisely.

Hong Kong sits in a different position. Hong Kong implements United Nations sanctions under the United Nations Sanctions Ordinance and does not give domestic effect to the unilateral measures of other states. That means a counterparty or asset that is subject to UK autonomous sanctions is not necessarily caught by Hong Kong law as a matter of domestic obligation. It may still be caught – if the person or entity is also on a UN-designated list. But the UK-only designation is a different legal instrument engaging a different legal system.

Why does that distinction matter for your deal? Because the transaction likely touches both systems simultaneously. A Hong Kong entity paying a UK entity through a correspondent bank whose home regulator is UK-supervised will face UK financial-sanctions exposure through the bank's own compliance requirements, even if Hong Kong's own statutory obligations are met. The payment channel is the bridge. Understanding which rules govern which node in the transaction is the first analytical step.

Step one: map the parties, the assets, and the payment channel

Before running any name against any list, you need a clear map of every legal entity in the transaction, the jurisdictions in which those entities are incorporated or registered, the location of assets being acquired or transferred, and the payment routes the deal will use. This is not a formality. It is the analytical foundation on which every subsequent step rests.

In our cross-border practice, the most common gap at this stage is an incomplete picture of ultimate beneficial ownership. A UK-registered target may be held through a BVI or Cayman intermediate entity controlled by a natural person whose nationality, residence, or business connections trigger screening concerns. The corporate chain matters as much as the immediate counterparty.

Document the map formally. A deal memo listing the entities, the ownership chain to the natural-person level, the asset locations, and the proposed payment route will serve as the working document for every subsequent screening and review step. It will also serve as the compliance record if a question arises later.

Payment-channel analysis deserves its own line. Identify which banks will touch the transaction. Correspondent banking relationships often route through London, New York, or Frankfurt. A bank whose principal regulator is the UK's Prudential Regulation Authority or Financial Conduct Authority will apply OFSI's financial-sanctions rules to every payment it processes. That bank's compliance requirements are, for practical purposes, the operative constraint on your payment, regardless of where the payer and payee are incorporated.

Step two: run the screening – and know which lists you are running against

Screening against a single list is insufficient for a deal touching the United Kingdom. The correct approach requires simultaneous screening against at least three bodies of restrictions.

The first is the UN consolidated sanctions list, which Hong Kong implements directly under the United Nations Sanctions Ordinance. Any person or entity designated by the relevant UN Security Council committee is subject to Hong Kong's own legal obligations.

The second is the UK's own financial-sanctions list maintained by HM Treasury and implemented through OFSI. This list includes designations under the Russia (Sanctions) (EU Exit) Regulations, the Global Anti-Corruption Sanctions Regulations, the Global Human Rights Sanctions Regulations, and a range of country-specific instruments. The list changes frequently. A real-time check at the point of transaction is required; a check performed several weeks earlier may already be stale.

The third layer is bank-channel exposure. If the correspondent bank is US-supervised, the Office of Foreign Assets Control's Specially Designated Nationals list becomes operationally relevant to the payment even though it carries no direct legal force in Hong Kong or the United Kingdom. Counsel should identify the bank's home jurisdiction and understand which lists that institution's own compliance programme requires it to screen against.

For structures involving trade finance, letters of credit, or asset-backed financing, add a trade-controls check. The UK Export Control Joint Unit administers strategic trade controls that may affect the movement of goods or technology independent of financial-sanctions status.

Document every screening run: the date, the list version queried, the query terms used, and the result. A screening record that cannot demonstrate currency at the time of each material step provides little protection if an enforcement question arises.

Step three: assess beneficial ownership and the control test

Both UK financial-sanctions law and the banking compliance programmes of the institutions most likely to process your payment apply a control test to beneficial ownership. An entity is treated as owned or controlled by a designated person if that person holds, directly or indirectly, more than fifty percent of the shares or voting rights, or otherwise exercises control over the management of the entity. That threshold is applied cumulatively across the ownership chain.

This is the step where deals most often stall. A party that clears at the entity level may not clear when the full ownership chain is traced. Consider a mid-market acquisition: the UK target is clean; the Hong Kong acquirer's funding vehicle has a minority investor whose identity has not been traced to the natural-person level. If that investor, once identified, appears on a relevant list, the deal – and the payment – is affected. The time to identify that investor is before signing, not during a funding draw.

Practical guidance: require certified disclosure of ultimate beneficial owners to the natural-person level as a condition of proceeding to due diligence. In Hong Kong, the Significant Controllers Register maintained under the Companies Ordinance records beneficial-ownership information for Hong Kong-incorporated companies; the requirement has been in force since 1 March 2018. For offshore entities in BVI or Cayman structures, the relevant beneficial-ownership registers or the register of members may need to be obtained directly from the registered agent. Do not rely on published corporate records alone.

Step four: assess the transaction structure for UK nexus points

Not every transaction involving a UK party creates full OFSI exposure. But the nexus analysis must be done deliberately, not assumed. UK financial-sanctions law applies to actions taken in the United Kingdom and to actions taken by persons operating under UK jurisdiction anywhere in the world. It also applies, through the banking and correspondent-bank channel, to transactions processed through the UK financial system.

Map the nexus points explicitly. Is the target a UK-registered company? Is any counterparty a UK national or a UK-resident individual? Does the transaction use a bank with a UK correspondent? Are any assets located in the United Kingdom? Is the governing law of any transaction document English law? Each positive answer creates a point of engagement with the UK regime. Multiple positive answers accumulate. The structure should be reviewed with each nexus point in mind.

Where a UK-law governed contract is used, the contractual representations and warranties should be reviewed for sanctions-related provisions. Standard English-law transaction documents in banking and M&A typically include representations that the parties are not designated, not owned or controlled by a designated person, and are not in breach of any applicable sanctions law. The counterparty representations are only as good as the diligence that supports them.

Step five: identify the licensing position and what a licence covers

If screening reveals a match – or a potential match – the next question is whether a licence is available. OFSI has the power to grant licences permitting specific transactions or payments that would otherwise be prohibited. Licensing grounds include humanitarian purposes, legal expenses, prior contractual obligations, and certain wind-down transactions. The licensing process is formal; applications must demonstrate the grounds and provide supporting documentation.

In our cross-border practice, we regularly advise on the interaction between the licensing question and the structuring of the transaction. Where a licence is required, the deal timeline must accommodate the application process, which is measured in weeks rather than days for routine applications and substantially longer for complex or novel cases. Counsel should advise the client on this reality at the structuring stage, not at execution.

A licence does not remove all risk. It covers the specific transaction or category of transactions described in its terms. Variations in the transaction structure, additional parties, or payments through a different channel may fall outside the licence's scope. Read the licence terms carefully and document the basis on which you are relying on them.

Where there is genuine uncertainty about designation status – for instance, a name match that may or may not be the same person as the designated individual – OFSI provides a reporting mechanism and a process for seeking clarity. Do not proceed on an uncertain match without resolving the uncertainty formally.

Step six: document the compliance file before execution

A complete sanctions due-diligence file for a UK-touching deal includes, at minimum: the entity and ownership-chain map; the screening records with dates and list versions; the beneficial-ownership certificates or extracts; the nexus analysis; any licence obtained or applied for; and a written assessment of residual risk signed off at the appropriate level of seniority within the compliance or legal function.

Documentation serves two purposes. It demonstrates to the bank processing the payment that a credible compliance process has been completed – this is often the practical gate to execution. It also creates the record that protects the institution and its officers if an enforcement question arises after the fact. An honest, well-documented process that reached a reasonable conclusion provides a substantially better position than a conclusion reached without documentation, even if both led to the same commercial decision.

For recurring transactions or a series of payments under a framework agreement, the file should be updated at appropriate intervals. Designation lists change. Ownership structures change. A file that was complete at the time of a first payment may not be adequate for a payment made six months later under the same agreement. Build a review cadence into the compliance programme rather than treating the initial file as a one-time exercise.

If an earlier filing, structure, or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. The sequence described above applies equally to remedial situations – the map, the screening, the ownership assessment, the nexus analysis, and the licensing question are all live at the point of review.

For a structured assessment of your transaction's sanctions position across the Hong Kong and UK legal environments, write to us at info@lockhartyip.com.

The common mistake: treating the compliance step as a gateway, not a process

The most frequent structural error in cross-border deals touching the United Kingdom is treating sanctions due diligence as a binary gate – either a party is on a list or it is not – rather than as an ongoing process that runs from first engagement through to post-completion. The gate framing leads to a single list-check at the outset and no further engagement until a problem arises.

The correct framing is process-based. Designations change. Ownership structures change. Payment routes change. A mid-deal restructuring that adds a new party, changes the payment currency, or shifts the correspondent bank may reopen questions that were resolved at the outset. Counsel should build this understanding into the transaction timeline, the conditions precedent, and the contractual representations from the start.

A second common error is treating Hong Kong law and UK law as equivalent for these purposes. They are not. Hong Kong implements UN measures only; the UK operates its own autonomous regime. A transaction that is compliant under Hong Kong's domestic obligations may still be prohibited by the UK autonomous sanctions regime because the relevant designation is a UK-only measure. The analysis must address both systems independently.

A third error is focusing exclusively on the named parties and ignoring the payment channel. A transaction between two clean parties can still be blocked at the payment stage if the correspondent bank's own compliance programme catches a connection the parties did not identify. Advising on the counterparties without advising on the bank is an incomplete analysis.

Decision checklist for in-house counsel

The following checklist is an orientation tool, not a substitute for legal assessment. It identifies the questions that should be answered before a deal touching the United Kingdom proceeds to execution.

Have all legal entities in the transaction been identified, including intermediate holding entities and the ultimate beneficial owners at the natural-person level?
Has screening been run against the UN consolidated list, the UK financial-sanctions list maintained by OFSI, and any additional list required by the correspondent bank's compliance programme?
Has the screening been conducted against current list versions, with dates and list versions documented?
Has the ownership-chain analysis applied the control test – majority ownership or effective control – at each level of the structure?
Have the UK nexus points been mapped: UK-incorporated entities, UK nationals or residents, UK-law governing documents, UK-located assets, and UK-supervised correspondent banks?
Is any party, directly or through the ownership chain, on a relevant list? If so, has the licensing position been assessed and, where applicable, a licence applied for?
Has the contractual documentation been reviewed for sanctions representations and warranties, and are those representations supported by the diligence file?
Is there a review cadence built into the compliance programme for ongoing or recurring payments under the arrangement?
Is the compliance file complete and signed off at the appropriate level of seniority before execution?

For matters where the ownership chain or the payment structure is complex, or where a potential match has been identified, seek advice before proceeding. The cost of a stalled payment or a blocked transaction substantially exceeds the cost of early legal input.

Our desk regularly advises on the sanctions interface between Hong Kong and the UK across M&A, financing, and trading arrangements. For a preliminary read on your transaction's compliance position, email info@lockhartyip.com.

Related practices

Sanctions & AML – cross-border compliance, counterparty screening, and AML file preparation
M&A & Transactions – cross-border acquisition structuring and transaction due diligence through Hong Kong

Frequently asked questions

Do I need a Hong Kong adviser for sanctions due diligence for a deal touching the United Kingdom?

Where a deal involves a Hong Kong entity or a payment routed through the Hong Kong financial system, a Hong Kong-based adviser with cross-border sanctions experience adds material value. Hong Kong implements UN sanctions under the United Nations Sanctions Ordinance, and the interaction between Hong Kong's domestic obligations and the UK's autonomous sanctions regime under the Sanctions and Anti-Money Laundering Act 2018 requires analysis of both systems independently. Treating either system as covering the other produces an incomplete analysis and leaves exposure unaddressed. Counsel familiar with both the Hong Kong position and the UK regime can map the nexus points and advise on the payment-channel risk that connects them.

What documents are needed for sanctions due diligence for a deal touching the United Kingdom?

The core documentation set includes: certified beneficial-ownership disclosure to the natural-person level for each party; corporate registry extracts and constitutional documents confirming the entity structure and ownership chain; the screening records showing the date, the list versions queried, and the results; the nexus analysis identifying UK connection points; any licence obtained from OFSI or applied for; and a compliance sign-off at the appropriate seniority level. For Hong Kong-incorporated entities, the Significant Controllers Register provides beneficial-ownership information. For BVI or Cayman vehicles in the structure, beneficial-ownership registers or member registers from the registered agent are required. Banks will typically require a summary of the completed file before processing the payment.

How does the cross-border element affect sanctions due diligence for a deal touching the United Kingdom?

The cross-border element multiplies the number of legal systems whose requirements must be satisfied simultaneously. A transaction between a Hong Kong entity and a UK entity potentially engages Hong Kong's UN-based sanctions obligations, the UK's autonomous financial-sanctions regime, and the compliance requirements of any correspondent bank whose home regulator sits in a third jurisdiction. Each system applies its own designation list, its own control test, and its own nexus rules. A party that is clean under one system may be restricted under another. The payment channel is the practical point where these obligations converge: the bank processing the payment will apply its own home-jurisdiction requirements regardless of what the transacting parties believe their own legal obligations to be. Identifying and addressing all three layers before execution is the essential cross-border task.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach sanctions due diligence for a deal touching the United Kingdom