Sanctions risk is a deal, banking, and criminal exposure problem. Buyers need a clear map of ownership, restricted parties, embargoed geographies, sectoral rules, and payment rails — before the SPA locks you into a franchise you cannot lawfully run.
A practical OFAC / sanctions diligence frame for PE and corporate M&A: six pillars, red flags, sequencing from screen to close, a 50-point checklist, and when a $49 first-pass screen is enough versus specialist sanctions counsel.
FCPA / anti-bribery diligence asks: did the company buy outcomes with improper payments? Sanctions diligence asks: is the company dealing with people, places, or sectors the law forbids — and will your bank still clear the wire after close?
OFAC and allied programs (EU, UK, UN, and others) care about: (1) blocked persons and 50% ownership/control, (2) comprehensively embargoed jurisdictions, (3) sectoral prohibitions (energy, finance, defense, technology), (4) export/re-export and end-use, and (5) evasion through front companies, transshipment, and crypto or cash-like rails.
Ultimate beneficial owners, intermediate holding companies, board/control rights, and the 50% rule. Opaque PE stacks and nominee directors are diligence, not paperwork.
SDN and other lists for target entities, affiliates, key officers, major customers, and critical suppliers. Name variants, transliteration, and false positives need a process, not a checkbox.
Embargoed or high-risk jurisdictions, shipping routes, free-trade zones, and sales into restricted end-markets via distributors.
Sector-specific bans and caps (energy, banking, dual-use tech, luxury, defense). Map product codes and services to program text, not just "we don’t sell to X country."
Classification, licenses, end-user certificates, banks and PSPs, correspondent rails, and any history of declined wires or account closures.
Screening tools, frequency, escalation, training, audit trail, and Day-1 hold on high-risk counterparties until re-cleared.
| Signal | Why it matters | Diligence move |
|---|---|---|
| Cross-border trade in dual-use goods | Export + sanctions stack together | Classification sample + top destination map |
| Opaque multi-layer ownership | 50% rule and blocked UBO risk | Full chain chart + public records pull |
| Revenue via high-risk corridors / free zones | Transshipment and evasion patterns | Distributor contracts + ship-to analysis |
| Prior bank de-risking or wire declines | Counterparties already priced the risk | Bank correspondence + payment-rail inventory |
| Sector under active program (energy, fin, defense tech) | Even non-embargoed counterparties can be restricted | Program-specific legal memo + product map |
| Flag | Severity | Comment |
|---|---|---|
| Blocked person owns/controls target (50%+) | Deal-Killer | Structure may be illegal to acquire without license; walk or redesign. |
| Material unlicensed dealing with embargoed jurisdictions | Deal-Killer | Successor liability + bank exclusion; counsel immediately. |
| Deliberate evasion (front cos, false docs, crypto rails) | Deal-Killer | Criminal exposure risk; SPA protection is not a strategy. |
| Key customer or supplier is list-matched without process | High | Size revenue, exit path, and license feasibility. |
| No screening program while selling globally | High | Fixable post-close if history is clean; still a control gap. |
| Banks already exiting the relationship | High | Liquidity and close feasibility risk even if legal theory is "fixable." |
| Weak export classification documentation | Watch | Upgrade in 100-day plan; sample high-risk SKUs now. |
| Screening is annual only / no ongoing monitoring | Watch | Lists move weekly; design continuous monitoring. |
| Stage | Focus | Output |
|---|---|---|
| Screening | Entity/owner names, geography, sector tags, public list hits | Risk tier + specialist budget |
| Pre-LOI | Ownership sketch, top corridor revenue, bank friction signals | LOI asks / walk criteria |
| Confirmatory | UBO chain, customer/supplier samples, export docs, payment rails | Findings memo + structure asks |
| SPA / close | Sanctions reps, disclosure schedules, conditions, licenses | Risk allocation language |
| Day 1 to 100 | Screening tool live, hold on high-risk counterparties, training | Compliance integration workstream |
Complex cross-border sanctions and export reviews with counsel and enterprise screening often run $25K–$150K+ (more when licenses or multi-agency issues appear). Before you spend that, screen ownership, public list risk, corridors, and commercial model — then decide whether the target deserves specialist budget or a hard pass.
| Workstream | Primary question | Overlap |
|---|---|---|
| FCPA / anti-bribery | Improper payments and books | High-risk corridors often co-locate; different statutes |
| Regulatory DD | Licenses and supervisors | Export licenses and financial licenses can intersect |
| Legal DD | Contracts, entities, litigation | Ownership chain, change-of-control, reps |
| Supply-chain DD | Supplier concentration and continuity | Restricted suppliers and dual-source options |
| Privacy / cyber | Data and security obligations | Usually separate unless technology export controls apply |
| Approach | Typical range | When to use |
|---|---|---|
| Public-info first-pass screen | Hours; from ~$49/target | Screening many names; set specialist budget |
| Counsel + targeted screening sample | $25K–$75K | Moderate cross-border risk, clean history |
| Full multi-program / multi-corridor review | $75K–$150K+ | Dual-use, embargoed touch, opaque ownership, or live hits |
A first-pass pack compresses public ownership signals, list risk context, geography and sector tags, and commercial-model red flags so deal teams allocate specialist spend intelligently. It is not a substitute for sanctions counsel, license strategy, or live enterprise screening when red flags fire — it is the triage layer that keeps six-figure reviews off clean targets and focuses them where the risk lives.
Get a structured public-info diligence pack on your next target — ownership opacity, corridor risk, enforcement context, and IC questions — then escalate only when the flags demand it.
Buyer testing for restricted parties, embargoed geographies, sectoral bans, export/end-use issues, and payment-rail risk that create post-close legal or banking exposure.
FCPA is improper payments and books. Sanctions is who/where/what is restricted under OFAC and allied programs — ownership, lists, corridors, and exports.
Blocked ownership/control, material unlicensed embargoed dealing, and deliberate evasion structures.
No — it sizes and prioritizes. High-risk models still need counsel, live screening, and sometimes licenses before close comfort.
Clear sanctions reps, disclosure of known hits/licenses, cooperation covenants, and economics for residual issues — coordinated with R&W diligence and legal DD.
Hold new high-risk counterparties until re-screened, stand up continuous monitoring, and freeze any corridor that lacks a documented lawful path.
Energy, shipping, dual-use/defense tech, financial services, commodities, and global software distribution.
Specialist programs often $25K–$150K+; a public-info screening pack can start around $49 per target.