Is a Company Sanctioned? How to Check

Asking whether a company is sanctioned sounds like it should have a one-word answer. In practice, checking if a company is sanctioned is a meaningfully harder problem than checking a person, because a company can fail the test in ways that never show up as a name match at all. Its registered name might be clean, its trading name might be clean, and it can still be a blocked party — because of who owns it.

TL;DR — key takeaways:

• Search the full legal name, trading names, and any prior names — not just the name on the invoice.
• Screen subsidiaries and affiliates separately; a group-level designation doesn't automatically flag related entities by name.
• Under OFAC's 50% Rule, a company is blocked if it's owned 50% or more in aggregate by one or more SDN-listed parties — even if no single owner holds a majority and the company itself is never separately listed.
• There is no published list of these indirectly blocked entities. Finding them is a due-diligence exercise, not a database lookup.
• Document ownership structure and screening results, and re-check periodically as both ownership and designations change.

Why checking a company is harder than checking a person

Screening an individual is mostly a name-matching exercise: full name, date of birth, nationality, cross-referenced against a list. A company introduces three extra layers that don't exist for a person. First, trading names — the legal entity on a contract is often not the brand name printed on the sign outside the building or on the marketing material you were sent. Second, corporate structure — the counterparty you're dealing with may be a subsidiary, joint venture, or holding company sitting several layers below the parent whose name would actually ring alarm bells. Third, and most consequential, ownership — a company can be entirely un-designated in its own right and still be a blocked party purely because of who sits behind it on the share register.

That third layer is where most gaps in company screening actually live. Sanctions programs anticipated that designated persons would try to keep operating through entities that carry their clean name in front but their sanctioned ownership behind it, which is exactly why the ownership test exists.

What is the OFAC 50% Rule?

OFAC's 50 Percent Rule states that the property and interests in property of an entity are blocked if that entity is owned, directly or indirectly, 50 percent or more in the aggregate by one or more blocked persons — even if the entity itself has never been added to the SDN list. OFAC's own guidance is explicit that this aggregation applies across multiple sanctioned owners, not only to a single majority shareholder:

"For example, if Blocked Person X owns 25 percent of Entity A, and Blocked Person Y owns another 25 percent of Entity A, Entity A is considered to be blocked because Entity A is owned 50 percent or more in the aggregate by one or more blocked persons." — OFAC FAQ 398, "Entities Owned by Blocked Persons: 50 Percent Rule"

Two details matter here. The rule counts ownership, not control — a blocked person who directs a company's operations without holding 50% of the equity does not automatically trigger the rule (though it may still raise other red flags). And the aggregation is cumulative across separate sanctions programs: a 30% stake held by someone designated under a Russia-related programme and a 25% stake held by someone designated under a narcotics-related programme still add together towards the 50% threshold, per OFAC's published FAQs on the topic.

A worked ownership example

Take a supplier with three shareholders. None of them individually owns a majority, and a quick name search on the company itself returns nothing:

Neither Shareholder A nor Shareholder B alone crosses 50%. But their stakes are aggregated: 30% + 25% = 55%. That's over the threshold, so the company is blocked by operation of law — meaning the legal effect applies automatically, without OFAC ever adding the company's name to a published list. A screening tool that only checks the company's own name against the SDN list will return a clean result here. Only tracing the ownership structure back to Shareholders A and B reveals the actual exposure.

How does the ownership rule play out in a real diligence case?

A mid-sized manufacturer we're aware of ran a routine annual re-review of its supplier base and, on a whim, decided to check beneficial ownership on a components supplier it had used for years — one that had always come back clean on straightforward name screening. The supplier itself had never been designated. But two of its shareholders had been added to the SDN list roughly eighteen months apart, under two different sanctions programmes, holding 35% and 25% of the company respectively. Neither addition had triggered any alert, because neither the supplier's name nor its trading name had changed, and nobody had re-run the ownership check since onboarding. Aggregated, those two stakes came to 60% — comfortably over the 50% threshold, and enough to make continued payment to that supplier a blocked transaction the company had been unknowingly exposed to for a year and a half.

The lesson from cases like this isn't that the company was careless at onboarding — the initial check was fine. It's that ownership and designations both change over time, so a one-off check at the start of a relationship isn't enough on its own. The supplier's own record never changed; what changed was who sat behind it on the share register, and that's precisely the kind of shift a name-only screen will never surface. Once the manufacturer traced the ownership and found the 60% aggregate, it had to unwind the relationship and self-report the exposure — a far more disruptive outcome than if the ownership check had simply been part of the annual re-screening cycle from the start.

What counts as sufficient diligence in practice?

Nobody can trace an infinite ownership chain to the last percentage point, and OFAC's guidance doesn't demand that. In practice, sufficient diligence means being able to show your working: you identified the beneficial owners you could reasonably access through incorporation filings or share registers, you screened each of them, and where sanctioned owners appeared you calculated the aggregate and documented the conclusion. For a public company or one with a widely dispersed shareholder base, that's usually straightforward — dispersed retail shareholdings rarely aggregate to anything near 50% through a handful of designated owners. For a private company with a small, concentrated ownership group — the scenario where the 50% Rule actually bites — it's worth going further than a superficial check, particularly for higher-risk counterparties, jurisdictions, or transaction sizes. An experienced sanctions counsel we've spoken with sums up the practical standard this way: "regulators aren't expecting you to be omniscient about ownership chains six layers deep — they're expecting you to have looked, and to be able to show it."

That standard also applies to indirect ownership through intermediate holding companies. OFAC's guidance treats indirect ownership the same way as direct ownership: if a blocked person owns 50% or more of a holding company, and that holding company owns shares in your counterparty, those shares count towards the aggregate as if the blocked person held them directly. A diligence process that stops at the first layer of shareholders and never asks who owns those shareholders will miss exactly this pattern.

Running the check step by step

Putting this together, checking if a company is sanctioned properly means working through the company's identity and its ownership in turn: the registered legal name, any trading names or prior names, related subsidiaries, and then the beneficial ownership structure screened owner by owner with the 50% Rule applied to the results. None of these steps is optional on its own — a clean result on the legal name alone tells you nothing about a trading name change, and a clean result across every named entity tells you nothing about who owns them. See the structured steps above for the full sequence, and our guide to the OFAC SDN list for how the underlying list itself is structured and updated. For the broader onboarding process this check typically sits inside, our denied party screening guide covers the full workflow.

A minimal checklist

• Registered legal name, trading names, and prior names all searched
• Known subsidiaries and affiliates screened as separate entities
• Beneficial owners identified from incorporation filings or a share register
• Each owner individually screened against SDN, Consolidated, and UN Security Council lists
• Aggregate ownership by any SDN-listed owners calculated against the 50% threshold
• Ownership structure, screening results, and calculation documented with a date
• Re-check scheduled rather than treated as a one-time exercise

Getting caught out here isn't a minor compliance footnote — the penalties for dealing with a blocked party, knowingly or not, can be severe; see our explainer on OFAC penalties for what's actually at stake. You can start working through the name-matching half of this process right now — screen a company name for free and see how the result is scored and sourced.