
OFSI Enforcement Process Reforms
TLT picks out the key points you shouldn’t miss...
What’s this about?
The UK’s Office of Financial Sanctions Implementation (OFSI) has finalised wide‑ranging reforms to how it investigates and penalises sanctions breaches. These reforms deliver greater transparency on how OFSI assesses severity and conduct, introduce new mechanisms for faster and more predictable case resolution, and significantly enhance penalty powers. For firms, this means sharper internal investigation processes, earlier strategic decision‑making, and heightened exposure in the most serious cases.
Our Head of Risk and Financial Crime, Ben Cooper says...
“Clients need to be prepared: OFSI is becoming faster, tougher and more structured in its approach. These reforms mean firms must sharpen internal investigations and be ready to engage early—or risk materially higher penalties.”
The points not to miss...
OFSI will publish a detailed case assessment matrix clarifying how it evaluates both severity (from lower level administrative breaches to the most serious, systemic failings) and conduct (mitigating, neutral, aggravating). This framework gives firms far greater foresight on how OFSI determines a baseline penalty, including what behaviours increase or reduce risk—such as internal controls, openness, senior management involvement and remediation.
The long standing voluntary disclosure model is replaced with a single, simplified discount capped at 30%. The change reflects OFSI’s intention to prevent overly reduced penalties in serious cases while still encouraging early engagement. OFSI has also shifted scrutiny towards the quality and timeliness of disclosure—meaning incomplete or delayed notifications may not attract the full benefit and may in some cases be treated neutrally or aggravatingly.
A new settlement mechanism allows firms to resolve cases more quickly by accepting OFSI’s findings, agreeing not to contest the penalty, and waiving Ministerial Review and appeal rights. This offers a 20% discount applied to the penalty baseline. OFSI has clarified that: (i) settlement discussions will run concurrently with the Notice of Intention process to avoid procedural delay; (ii) some circumvention related conduct may still be eligible; and (iii) settlements will not be anonymised, reinforcing deterrence and transparency.
Under the EAS, firms can provide OFSI with a comprehensive early narrative and evidence bundle explaining the breach, root causes and remedial steps. In return, OFSI may apply a standalone discount of up to 20%. Unlike the former regime, EAS, settlement and voluntary disclosure discounts can now apply concurrently — creating a possible combined reduction of up to 70%. OFSI notes that the EAS will not be appropriate in all cases, but it will materially accelerate investigations where used effectively.
OFSI’s EAS closely mirrors the structure of the Prudential Regulation Authority’s own Early Account Scheme, which offers discounts of up to 50%. This alignment reflects a broader regulatory shift towards earlier, fuller engagement and faster case resolution—likely driven by the increasing volume and complexity of enforcement activity across the UK regulatory landscape.
OFSI will introduce fixed penalties for lower level information, reporting and licensing related offences, typically where there is no underlying prohibited transaction. These will sit at £5,000 or £10,000 depending on the nature of the failure. Representation windows are shortened to 15 days to reflect lower complexity. All fixed penalties will be published, and OFSI retains discretion to apply a lower penalty or issue no penalty where appropriate, including where firms self identify and remediate process gaps.
OFSI will seek legislative approval to double statutory maximum penalties from £1m to £2m and increase the “value based” cap from 50% to 100% of the breach value. OFSI has confirmed it will not pursue turnover based penalties nor breach by breach multiplier models, citing proportionality and administrative clarity. These increases are aimed squarely at reinforcing deterrence in high severity cases—particularly repeated failings, poor governance or wilful breach.
At a glance...
This publication is intended for general guidance and represents our understanding of the relevant law and practice as at January 2026. Specific advice should be sought for specific cases. For more information see our terms & conditions.
Get in touch
Get in touch
Insights & events

Significant changes to the UK Trade Remedies System: Amends to the Taxation (Cross-border Trade) Act 2018

The Cyber Security and Resilience Bill: Understanding the UK's Legislative Response to Digital Threats

Eight enforcement cases and a hundred warnings: The CMA's new consumer enforcement era begins












%20%C3%94%C3%87%C3%B4%20790px%20X%20451px%2072ppi.avif)







































