Sanctions due diligence for a deal touching UK

A deal with a United Kingdom dimension can stall – or collapse – not because the transaction is commercially unsound, but because the payment channel is not clear. For principals based outside the United Kingdom, the question arrives late and under pressure: the term sheet is signed, the counterparty is ready, and the correspondent bank has just asked for a sanctions-compliance file. At that point, the window for orderly preparation is narrow.

Sanctions due diligence for a deal touching the United Kingdom requires a structured review of the counterparty ownership chain, the payment route, and the contractual terms under the United Kingdom's consolidated sanctions list (the single list of designated persons and entities maintained by His Majesty's Treasury's Office of Financial Sanctions Implementation) and, where the Hong Kong entity is involved, the United Nations sanctions regimes given domestic effect in Hong Kong under the United Nations Sanctions Ordinance. The review must be completed before the payment instruction is issued – not after.

This service note sets out when a foreign principal needs this review, how our desk runs it, and what the client must own at the end of the process.

Why does a deal touching the United Kingdom create a specific sanctions exposure?

The United Kingdom operates an autonomous sanctions regime. It is not the same as the European Union regime, and it is not the same as the United States Office of Foreign Assets Control regime. Since the United Kingdom left the European Union, the two lists have diverged: a person may be designated under one and not the other. For a principal structured through Hong Kong, this matters because Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states – including those of the United Kingdom. The legal exposure is different on each side of the transaction.

That difference creates a practical problem. A Hong Kong entity transacting with a United Kingdom counterparty, a United Kingdom bank, or a United Kingdom clearing mechanism is in the chain of a payment that will touch United Kingdom-regulated infrastructure. The bank on the United Kingdom side – or the correspondent bank operating through London – applies United Kingdom sanctions. If the ownership chain on the Hong Kong side includes a person or entity on the United Kingdom consolidated list, the payment stops. The transaction does not complete. In our cross-border practice, we see this pressure point arrive most often when the counterparty's bankers run their own know-your-counterparty (KYC) review and flag a name in the structure.

The trigger is almost always the banking channel. Solving the compliance problem at the contracting stage – before the payment instruction is prepared – is materially less costly than solving it under time pressure when a wire is on hold.

What is the governing regime, and how does it apply across the Hong Kong – United Kingdom interface?

Two regimes are in play for a deal structured through Hong Kong with a United Kingdom dimension, and they apply on different bases.

In Hong Kong, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance sets out the customer due diligence and sanctions-screening obligations for regulated institutions. The United Nations Sanctions Ordinance gives effect to United Nations Security Council designations. A Hong Kong entity transacting on a purely Hong Kong basis is not directly subject to United Kingdom sanctions law. However, the practical effect of United Kingdom sanctions reaches the transaction the moment a United Kingdom person, a United Kingdom-incorporated entity, a United Kingdom-regulated bank, or a sterling clearing mechanism is in the chain.

The United Kingdom's sanctions regime operates on a broad jurisdictional basis. It applies to conduct by United Kingdom persons and entities, conduct within the United Kingdom's territory, and – critically – any transaction that routes through United Kingdom-regulated financial infrastructure. A Hong Kong entity transacting through a United Kingdom correspondent bank is within that perimeter for the purposes of the payment leg.

What does this mean in practice? The ownership-chain review must be run against both lists: the United Nations consolidated list (for Hong Kong-side compliance) and the United Kingdom consolidated list (for the payment-channel leg). Where the two lists diverge, the more restrictive position governs the ability to clear the payment. Our desk maps this explicitly at the outset of every review. See also our broader practice overview at Sanctions & AML at Lockhart & Yip.

When does a foreign principal need sanctions due diligence for this specific deal?

Not every cross-border transaction requires the same depth of review. The analysis depends on four variables: the nature of the counterparty, the payment route, the sector, and the identity of the beneficial owners on both sides.

A review is urgent when one or more of the following applies. The counterparty is incorporated in or has directors resident in a jurisdiction subject to a thematic United Kingdom sanctions regime – Russia, Belarus, Iran, Myanmar, and others. A beneficial owner on either side holds a nationality or residential connection to a designated jurisdiction. The payment routes through a United Kingdom clearing bank, a United Kingdom-regulated financial institution, or a sterling mechanism. The transaction involves goods, technology, or services in a sector covered by United Kingdom trade-related financial sanctions. The target entity holds assets situated in the United Kingdom or holds intellectual property registered there.

In our experience, the last category catches principals by surprise. An acquisition of a holding entity that owns United Kingdom real property or United Kingdom-registered intellectual property brings the United Kingdom property-related sanctions provisions into the analysis, even where the acquiring group has no other United Kingdom connection. The asset, not only the person, can be the trigger point.

A principal who has already entered a term sheet and is now in the due diligence period is at the most common stage when our desk is instructed. The window between signing and closing is the practical limit. Acting earlier – at the heads-of-terms stage – produces a cleaner outcome and, in particular, allows the contractual representations and warranties to be negotiated from a position of certainty rather than risk.

How does the review run, step by step?

Our desk runs the review in four stages. Each stage produces a document the client owns and can present to its bankers, its counterparty, or a regulator if required.

Stage one: structure mapping. We begin with the complete ownership chain on both sides of the transaction – from the ultimate beneficial owner through to the transacting entity. This requires the client to provide the constitutional documents, the register of members, any nominee or bare-trust arrangements, and the Persons with Significant Control register (the United Kingdom statutory register of those who exercise substantial control over a United Kingdom-incorporated company) where a United Kingdom entity is in the chain. For BVI and Cayman entities, the equivalent beneficial-ownership record must be obtained. The structure map is the foundation for the screening step. A point we emphasise to clients: gaps in the ownership chart – a missing layer, a nominee without a disclosed principal – are the single most common reason a compliance file is rejected by a correspondent bank.

Stage two: screening. Each identified person and entity is screened against the United Nations consolidated list, the United Kingdom consolidated list, and the principal financial-crime watchlists. Where the transaction has a specific sectoral dimension – oil and gas, defence, dual-use technology – the sector-specific United Kingdom trade-sanctions regulations are reviewed in addition. We document the screening methodology and the date of the run, because sanctions lists are updated continuously and the date of the screen is part of the evidentiary record.

Stage three: payment-channel analysis. The proposed payment route is mapped: the currency, the correspondent bank, the clearing mechanism, and the account jurisdiction. Where the route touches United Kingdom infrastructure, the specific United Kingdom-regulated entity in the chain is identified. The analysis then considers whether a licence exception or a general licence applies, or whether a specific licence application to His Majesty's Treasury's Office of Financial Sanctions Implementation would be required before the payment instruction can be issued. Our desk does not issue payment instructions; we prepare the analysis and the supporting file that the client's bank requires before it will process the transaction.

Stage four: the compliance file and the contractual review. The output is a written compliance file: the structure map, the screening record, the payment-channel analysis, and a set of recommended contractual provisions. The contractual provisions typically include a sanctions representation from each party, an obligation to notify in the event of a future designation, a right of termination in defined circumstances, and – where appropriate – a carve-out from confidentiality obligations to allow disclosure to a regulator. For the contractual review, our desk works alongside locally licensed Hong Kong firms and, for the United Kingdom-law provisions, alongside allied counsel admitted in the relevant jurisdiction.

The total elapsed time from instruction to a complete file is variable. Simple structures with a clean ownership chain and a straightforward payment route can be completed quickly. Complex structures – multi-layer offshore holding companies, nominee arrangements, sanctions-adjacent jurisdictions in the chain – take longer, and the client should factor that elapsed time into the deal timetable. See a related matter note at compliance review before contracting with a United Kingdom entity.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. To discuss how the review applies to your transaction, write to us at info@lockhartyip.com.

What documents and decisions must the client own?

Sanctions due diligence is not a passive exercise. The principal – not the adviser, not the bank – owns the compliance decision. This is worth stating plainly, because it is the point that foreign principals most frequently misunderstand when transacting through intermediaries or through a multi-layer structure.

The documents the client must hold are: the complete ownership chart with source records for each layer; the dated screening output for each identified person and entity; the payment-route analysis; the legal assessment of whether any licence exception or general licence applies; and, where a licence application is required, the file supporting that application. Each document must be dated, because the sanctions position can change. A screening that was clean on the date of the term sheet may produce a different result on the date the wire is issued if a designation occurs in the interim.

The decisions the client must make are: whether to proceed in the face of any flagged risk; whether to restructure the payment route to avoid a United Kingdom-regulated leg; whether to seek a licence; and whether the contractual terms adequately protect the client's position if a counterparty becomes subject to a designation after signing. These are commercial and legal decisions. Our role is to map the position accurately so that the client makes those decisions with a complete picture.

For principals managing AML source-of-funds exposure alongside the sanctions review – a common combination in transactions with offshore holding entities in the chain – see our briefing note at AML source-of-funds file for a BVI counterparty.

What do cross-border structures add to the exposure?

Cross-border ownership chains amplify sanctions exposure in two ways: they increase the number of designatable persons and entities in the chain, and they complicate the ownership-disclosure obligation that United Kingdom-regulated banks apply to their customers' counterparties.

Consider a common transaction structure. A Mainland Chinese operating group transacts through a BVI holding entity. The BVI entity has a Hong Kong subsidiary that is the transacting party. The counterparty is a United Kingdom company. The payment routes through a Hong Kong bank with a United Kingdom correspondent. Five legal systems touch this structure: the PRC (ownership of the ultimate principal), the BVI (the holding entity), Hong Kong (the transacting entity and the bank), the United Kingdom (the counterparty, the correspondent, and the payment infrastructure), and whatever law governs the underlying contract. Each layer of the ownership chain must be mapped and screened against the relevant lists at the point of the payment.

The specific risk that our desk identifies most often in cross-border structures of this type is the aggregation problem: a person who is not themselves designated may hold an aggregate interest – across multiple layers, through nominees, or through associated entities – that brings the whole structure within a designation or a blocking provision. The United Kingdom's financial-sanctions rules apply not only to directly listed persons but also to entities owned or controlled by them. "Controlled" is defined broadly. A 50% ownership threshold is the principal rule, but control through other means – board appointment rights, contractual veto, economic entitlement – can also bring an entity within the prohibition. The ownership chart must capture all of these connections, not only the direct shareholding.

A second cross-border risk is timing. Mainland Chinese corporate registries, BVI beneficial-ownership registers, and Cayman entity records do not all update at the same pace or through the same mechanism. A compliance file built on records that are several months old carries the risk that a reorganisation at the ultimate-owner level – a transfer of shares, a new nominee arrangement, a change of director – has not yet been captured. Our desk requests contemporaneous records as a condition of the review. Where a client cannot produce them, we note the gap explicitly in the compliance file and advise on the steps to close it before the payment instruction is issued.

What mistakes do foreign principals typically make at this stage?

Three errors appear consistently in our cross-border practice.

The first is starting the sanctions review at the payment stage rather than the contracting stage. By the time a bank has queued a payment for compliance review, the deal timetable is fixed, the client is under commercial pressure to complete, and the options are constrained. A review that should have produced a clean file before signing now has to identify a solution under time pressure. The contractual protections that would have been negotiated – a right to restructure the payment route, a termination right on a future designation – are absent. The cost of the error is borne entirely by the principal.

The second error is treating the United Nations list and the United Kingdom list as equivalent. They are not. A person or entity that does not appear on the United Nations consolidated list may still be on the United Kingdom list. For a payment that touches United Kingdom infrastructure, the United Kingdom list is what the correspondent bank applies. A compliance file that screens only against United Nations designations does not satisfy the standard that a United Kingdom-regulated institution applies.

The third error is relying on the counterparty's own compliance file. A United Kingdom counterparty may have conducted its own Know Your Customer review and produced a clean result for its own regulatory purposes. That review is addressed to its regulators and its bankers; it is not addressed to the foreign principal's exposure. The beneficial-ownership chain on the foreign side of the transaction is not within the scope of the counterparty's file. The foreign principal must run its own review covering its own structure.

If an earlier review, a stalled payment, or an incomplete compliance file has produced an adverse result, a second read can identify the gap and the routes still available. To discuss a position that has stalled or is under bank scrutiny, write to us at info@lockhartyip.com.

Decision map: which route applies to your transaction?

The appropriate level and form of sanctions due diligence depends on the facts of the specific transaction. The following positions capture the most common patterns our desk encounters.

A transaction where all beneficial owners are nationals of and resident in jurisdictions that do not appear on any United Kingdom thematic sanctions regime, the payment routes through a non-United Kingdom bank, and the counterparty holds no United Kingdom assets requires a baseline screening review and a clean contractual representation. The compliance file is straightforward and the elapsed time is short.

A transaction where a beneficial owner on either side holds nationality or residence in a jurisdiction subject to a United Kingdom thematic regime, the payment routes through a United Kingdom correspondent, or the counterparty holds United Kingdom assets requires a full ownership-chain review, a dual-list screen (United Nations and United Kingdom), a payment-channel analysis, and enhanced contractual protections. Where any person in the chain appears on the United Kingdom list or is controlled by a listed person, a licence assessment is required before the payment instruction is issued and, depending on the result, a licence application may be necessary.

A transaction involving goods, technology, or services in a United Kingdom trade-sanctions-sensitive sector adds the trade-sanctions layer to the financial-sanctions analysis. The two layers interact: a financial sanction prevents payment, a trade sanction prevents the underlying transaction. Both must be assessed.

A transaction that has already been flagged by a bank requires an immediate gap analysis of the existing file, identification of the specific concern the bank has raised, and a response package. The response package is a different document from the initial compliance file: it must address the bank's specific query directly and provide the additional documentation the bank requires to release the payment or reopen the account relationship.

Self-assessment: what should a principal check before instructing?

Before instructing a sanctions review for a deal touching the United Kingdom, a principal should be able to answer the following questions. If any answer is uncertain, the compliance file cannot be completed until the gap is closed.

Can you identify, by name and nationality, every natural person who ultimately owns or controls more than the relevant threshold of the transacting entity on your side of the deal?
Do you hold the constitutional documents and register of members for each entity in the ownership chain, from the ultimate parent to the transacting entity?
Have you identified every nominee or bare-trust arrangement in the chain, and can you disclose the principal behind each nominee?
Do you know which bank or correspondent bank will process the payment, in which currency, and through which clearing mechanism?
Is any beneficial owner on either side a national of or resident in a jurisdiction subject to a United Kingdom thematic sanctions regime?
Does the transaction involve goods, technology, or services that appear on any United Kingdom controlled-goods or trade-sanctions list?
Have you reviewed the proposed contract for a sanctions representation clause and a termination right in the event of a future designation?

A principal who can answer all of these questions affirmatively and with supporting documents is in a position to proceed to the formal screening stage. A principal with gaps in any answer needs to close those gaps before the screening produces a reliable result.

Related practices

Sanctions & AML – cross-border compliance, counterparty screening, and source-of-funds reviews
Corporate Counsel – contractual structure, representations, and cross-border governance for transacting entities

Frequently asked questions

What documents are needed for sanctions due diligence for a deal touching the United Kingdom?

The core documents are the complete ownership chart from ultimate beneficial owner to transacting entity, the constitutional documents and registers of members for each entity in the chain, any nominee or bare-trust disclosure, the proposed payment route and banking instructions, and the draft contractual terms. Where a United Kingdom entity is in the chain, the Persons with Significant Control register entry is required. For BVI or Cayman entities, the equivalent beneficial-ownership record must be obtained from the relevant registry or the registered agent. The file must be dated to the date of the screening run, not the date of the term sheet.

Which jurisdiction's law applies to sanctions due diligence for a deal touching the United Kingdom?

The answer depends on where in the transaction the legal exposure sits. A Hong Kong entity is subject to Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance and to United Nations sanctions given effect under the United Nations Sanctions Ordinance. The United Kingdom's autonomous sanctions regime applies to the payment leg wherever that payment touches United Kingdom persons, United Kingdom-regulated institutions, or United Kingdom-regulated financial infrastructure. Both regimes must be assessed. Hong Kong does not give domestic effect to United Kingdom unilateral sanctions; however, the practical effect of United Kingdom sanctions reaches the transaction through the correspondent banking channel.

How does the cross-border element affect sanctions due diligence for a deal touching the United Kingdom?

A cross-border structure increases the number of persons and entities that must be screened and complicates the ownership-disclosure exercise. Multi-layer offshore structures – BVI or Cayman holding entities above a Hong Kong operating company, for example – require records from multiple registries, not all of which are updated at the same pace. The aggregation risk is also higher in cross-border structures: a person may not be directly designated but may exercise control through multiple layers that, in aggregate, bring the structure within a United Kingdom sanctions prohibition. The review must capture all control relationships, not only direct shareholding.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

Sanctions due diligence for a deal touching the United Kingdom