OFSI — the UK guide for accountants and law firms
The Office of Financial Sanctions Implementation in depth — what it does, the UK Consolidated List, your obligations, and the four-track penalty regime under SAMLA.
By Mehmood Rajoka · Last updated 2026-06-08
TL;DR — Quick Summary
- •The Office of Financial Sanctions Implementation (OFSI) is part of HM Treasury and the UK's lead authority for administering and enforcing financial sanctions.
- •OFSI maintains the UK Consolidated List of asset-freeze targets, processes licence applications to permit dealings in defined circumstances, investigates suspected breaches, and imposes civil monetary penalties.
- •OFSI civil penalties reach £1 million or 50% of the breach value, whichever is higher. Serious cases face criminal prosecution under SAMLA — up to 7 years' imprisonment.
- •OFSI strict-liability framework means the firm does not need to have intended to breach. Failure of reasonable systems to detect a sanctioned party is enough.
- •OFSI publishes every penalty — naming the firm or individual. Reputational exposure compounds the financial penalty.
Answer-first summary
What is OFSI?
The Office of Financial Sanctions Implementation (OFSI) is part of HM Treasury and is the UK's lead authority for administering and enforcing financial sanctions. OFSI maintains the UK Consolidated List of all sanctioned individuals and entities; processes licence applications to permit specified dealings with sanctioned parties; investigates suspected breaches; and imposes civil monetary penalties or refers cases for criminal prosecution under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA).
- Lead UK authority for financial sanctions
- Maintains the UK Consolidated List
- Civil penalties up to £1m or 50% of breach value
- Strict liability — intent not required
The four functions of OFSI
From list maintenance to international cooperation — the spread of OFSI's mandate:
Maintaining the UK Consolidated List
OFSI publishes and updates the Consolidated List of all individuals and entities subject to UK financial sanctions. Updates are published as designations change — sometimes daily. Available for free download in CSV and PDF format.
Licensing
OFSI grants licences to permit specific dealings with sanctioned parties — humanitarian purposes, basic needs, legal services, frozen-asset management. Applications are made through a structured process and decisions are typically issued within statutory timeframes.
Enforcement
OFSI investigates suspected breaches, imposes civil monetary penalties, and refers serious cases for criminal prosecution. Enforcement actions are published — naming firm and breach details — creating reputational exposure beyond the penalty itself.
International cooperation
Coordinates with the UN Security Council, EU institutions, and partner jurisdictions (US OFAC, EU sanctions authorities) on cross-border investigations, asset tracing, and sanctions enforcement.
Your obligations under the OFSI regime
Seven core obligations for regulated firms — screening, freezing, reporting, and licensing:
- 1Screen clients, beneficial owners, directors, signatories, and associated parties against the UK Consolidated List at onboarding
- 2Re-screen the existing client base on an ongoing basis — minimum monthly, more frequently for higher-risk portfolios
- 3Apply event-driven re-screens when major designation events occur (new sanctions regime, large-scale designations) or when the client's own circumstances change
- 4Freeze any assets held for a confirmed designated person — no further dealings, no further transactions
- 5Report the match to OFSI typically within the same working day using their compliance reporting form
- 6Apply for an OFSI licence if there is a legitimate humanitarian, legal-services, or basic-needs reason to continue any dealing
- 7Document every screen, every match, every disposition, every report — the audit trail must reconstruct the firm's reasoning under inspection
OFSI enforcement — four tracks
Four parallel enforcement tracks. They can run simultaneously alongside FCA supervisory action on the same facts:
Civil monetary penalty
Up to £1 million or 50% of the breach value, whichever is higher. Strict liability — OFSI does not need to prove intent. Published, naming the firm. The most common enforcement track for systemic-failure breaches.
Criminal prosecution
For serious or deliberate breaches under SAMLA — up to 7 years' imprisonment for indictable cases. Prosecution is reserved for serious cases but remains the most significant exposure for individuals who knowingly facilitate breach.
Compliance Order
For lower-severity systemic issues, OFSI may issue a Compliance Order requiring specific remediation actions within a fixed period. Not a formal penalty but recorded and creates an enforcement history.
Warning Letter
Lower-severity formal notice without monetary penalty. Often issued where the breach was self-reported and remediated quickly. Still recorded for the firm's enforcement history.
Recent OFSI activity trends
What the UK sanctions landscape looks like in 2026:
- Russia sanctions expansion since 2022 — substantial growth in designations targeting Russian persons and entities, with cascading effects across global financial systems
- Magnitsky-style human rights designations — UK has issued sanctions against individuals connected to human-rights abuses in Belarus, Myanmar, and elsewhere
- Cyber sanctions — designations targeting state-linked cyber operators, with ongoing list growth as attribution evolves
- Anti-corruption sanctions — applied to foreign officials and their facilitators implicated in serious corruption
- Increased OFSI enforcement activity — published penalties have grown both in frequency and average value since 2022
FAQ
Answer-first summary
What is OFSI?
The Office of Financial Sanctions Implementation (OFSI) is part of HM Treasury and is the UK's lead authority for administering and enforcing financial sanctions. OFSI maintains the UK Consolidated List of all sanctioned individuals and entities; processes licence applications to permit specified dealings with sanctioned parties; investigates suspected breaches; and imposes civil monetary penalties or refers cases for criminal prosecution under SAMLA.
Answer-first summary
What does OFSI do?
Four primary functions. First, maintaining the UK Consolidated List — published and updated as designations change. Second, licensing — granting permission for specified dealings with sanctioned parties (humanitarian, basic needs, legal services, frozen-asset management). Third, enforcement — investigating breaches, imposing civil penalties, and referring serious cases for criminal prosecution. Fourth, international cooperation — coordinating with UN, EU, US OFAC, and partner jurisdictions on cross-border investigations.
Answer-first summary
What are OFSI penalties?
Civil monetary penalties up to £1 million or 50% of the breach value, whichever is higher. Strict liability applies — OFSI does not need to prove the firm intended to breach. All penalties are published, naming the firm or individual. Beyond the financial penalty, the firm's enforcement history is permanent and influences future supervisory treatment. Criminal prosecution under SAMLA remains available for serious cases, with up to 7 years' imprisonment.
Answer-first summary
What's the difference between OFSI and the FCA on sanctions?
OFSI is the lead UK authority for the sanctions regime itself — designations, lists, licensing, breach enforcement. The FCA supervises financial-services firms for the adequacy of their sanctions-screening systems and controls. The two regulators cooperate but operate distinct enforcement tracks. A firm can face OFSI penalties for a specific breach AND FCA supervisory action for systemic control failures on the same underlying facts.
Answer-first summary
What if my firm finds a sanctions match?
Six immediate steps. Stop further dealings — no transactions, no further work. Freeze any assets held for the designated person. Notify OFSI typically within the same working day using their compliance reporting form. Do not warn the client. Consider whether a parallel SAR is required under POCA. Apply for an OFSI licence if there is a legitimate humanitarian, legal-services, or basic-needs reason to continue any dealing. Document every step — the audit trail must reconstruct the firm's reasoning under inspection.
Answer-first summary
Where can I find the UK sanctions list?
OFSI publishes the UK Consolidated List on the gov.uk website at gov.uk/government/publications/the-uk-sanctions-list. Available as CSV (for screening tool ingestion) and PDF (for human review). The list is updated as designations change — sometimes daily during active sanctions regimes. Modern screening tools (including Certivus) ingest the list automatically so the firm doesn't have to track updates manually.