Hello, this is Ryuta Hamamoto from TIMEWELL. The question I heard most this spring was simple: “What does OTSI actually do, and what should Japanese companies prepare now?” From October 2024 the UK rebuilt its trade-sanctions enforcement architecture. From January through May 2026 it stacked three moves: list consolidation, licensing transfer, and Sanctions End-Use Controls (SEUC). I am writing for operators and counsel who are not full-time sanctions lawyers, but still have to answer for UK exposure.
Rewrite your sources and check cadence for the move to the UKSL: OFSI Consolidated List updates stopped on 28 January 2026 and UK designations now sit in the UK Sanctions List, so existing screening procedures need revising. This fill-in procedure covers the five systems (US OFAC, US BIS, the EU, the UK, the UN) plus Japan's Foreign End User List — which official source to check, how often, and against what — with ownership-control tests and Red Flags as fields, so the SOP revision can be worked through on the sheet itself. → Download the Five Sanctions-List Systems Screening Procedure (2026) (Free. Registration with your company name and work email address is required.)
What you will learn
- OTSI’s creation under DBT on 10 October 2024 and the October 2025 one-year review
- Early-2026 power expansion (export sanctions licensing from ECJU) and SEUC (13 May 2026)
- Why OFSI Consolidated List updates stopped on 28 January 2026 and designations moved to UKSL
- Civil penalties up to £1M / 50% of breach value on strict liability
- Four impact paths and five practical steps for Japanese companies
Three terms first
| Term | Meaning |
|---|---|
| OTSI | Office of Trade Sanctions Implementation — DBT unit for civil enforcement of trade sanctions. Roughly a civil-enforcement counterpart to METI security export control, but run on strict liability. |
| SEUC | Sanctions End-Use Controls — even non-strategic goods and tech can require a license after HMG “informs” an exporter of diversion risk. Conceptually close to U.S. EAR “Is Informed” letters. Effective 13 May 2026. |
| UKSL | UK Sanctions List — FCDO-managed single designations list. From 28 January 2026, OFSI Consolidated List stopped updating; UK designations concentrate in UKSL. |
Other acronyms (HMRC, OFSI, ECJU, TASSCER) appear with short notes below.
Important correction: OTSI was founded in October 2024 under DBT — not HMRC in 2025
| Item | Correct fact |
|---|---|
| Founded | 10 October 2024 (not 2025) |
| Parent | DBT (Department for Business and Trade) (not HMRC) |
| Enabling instrument | Trade, Aircraft and Shipping Sanctions (Civil Enforcement) Regulations 2024 (TASSCER 2024) |
| October 2025 | One-year update publication |
HMRC runs criminal and customs enforcement. OTSI (civil) and HMRC (criminal) sit side by side on trade sanctions. If older training decks still say OTSI is under HMRC or was founded in 2025, fix them now.
Replace siloed classification work with AI.
METI's FY2024 data shows 52% of foreign exchange law violations stem from classification errors. Download the TRAFEED product catalog covering features and rollout.
Three-layer UK architecture
| Domain | Body | Parent |
|---|---|---|
| Strategic goods (military / dual-use) licensing | ECJU | DBT |
| Criminal investigation / customs | HMRC | HM Treasury |
| Trade sanctions civil enforcement (finance services, transport, goods, etc.) | OTSI | DBT |
| Financial sanctions (asset freezes) | OFSI | HM Treasury |
| Designations / list management (UKSL) | FCDO | FCDO |
Mnemonic I use with clients: asset freezes are OFSI; goods and services trade is OTSI; serious criminal matters escalate to HMRC.
Civil tools let the UK run warning, then monetary penalty, then publication, without always needing criminal proof. That is closer to U.S. and EU “effective enforcement” models than to a pure criminal-only system.
October 2025 One Year Update: 146 breach reports / 60 license applications
Licensing
| Item | Count |
|---|---|
| Applications received | 60 |
| Main content | Professional and business services under Russia (Sanctions) (EU Exit) Regulations 2019 |
| Completed | 28 |
| Full/partial grants | 12 |
| Refuse / withdraw / misfile / not required | 16 |
Potential breaches
| Item | Content |
|---|---|
| Reports received | 146 |
| Sources | 84% from sectors with mandatory reporting (finance-heavy) |
| Civil monetary penalties issued by Oct 2025 | 0 (multiple investigations open) |
Year one was build-and-guide. OTSI published blogs on breach detection (13 Oct 2025) and good reporting (16 Dec 2025). Major firms (Baker McKenzie, Travers Smith, Steptoe) flag first civil penalties as likely from 2026. Read “zero penalties” as “year of infrastructure,” not “safe forever.”
Early 2026: licensing transfer from ECJU
- OTSI took over most export sanctions licensing from ECJU.
- Exception: strategic export control (military and dual-use list items) stays with ECJU.
- Russia-related professional and business services licenses (legal, accounting, consulting, IT, advertising, and the like) largely move to OTSI.
UK branches of Japanese banks, trading companies, and service providers need updated application channels. SPIRE-only assumptions will not hold.
13 May 2026: SEUC — “Is Informed” style diversion controls
- Instrument: Sanctions (EU Exit) (Miscellaneous Amendments) Regulations 2026 (laid 22 Apr 2026)
- Effective: 13 May 2026
- Even non-strategic goods and tech become criminal to export without a license once HMG informs the exporter of high diversion risk to sanctioned places or persons
- Notification via HMRC national clearance hub or OTSI directly
- No pre-emptive SEUC license applications — apply only after being informed
The design parallels U.S. EAR “Is Informed” letters. Classification by ECCN alone no longer captures every risk. Diversion routes via Central Asia, the Middle East, ASEAN, and the Caucasus are often discussed in the context of Russia components and Iran UAV parts (Skadden, Foot Anstey analyses).
28 January 2026: UKSL consolidation
| Item | Old (through 28 Jan 2026) | New (from 28 Jan 2026) |
|---|---|---|
| Main list | OFSI Consolidated List | UK Sanctions List (UKSL) |
| Manager | HM Treasury (OFSI) | FCDO |
| Identifiers | OFSI Group ID / Unique ID | Unique ID only (Group ID retired) |
| Updates | Stopped 28 Jan 2026 09:00 UK time | All new designations in UKSL |
Exception: the Russia financial/investment restrictions named list remains outside UKSL and still needs its own GOV.UK page.
Screening stacks (internal tools or Refinitiv, Dow Jones, LSEG, Moody’s) must rebuild against UKSL. Systems still pointing only at the old OFSI URL after February 2026 are reading a dead feed.
Civil penalties: up to £1M / 50% — strict liability
| Item | Content |
|---|---|
| Cap | £1 million (~¥200M) or 50% of the breach value, whichever higher |
| Liability | Strict liability |
| Proof of intent/negligence | Not required |
| “We didn’t know” | Does not work |
Unlike EU dual-use knowledge requirements, OTSI civil enforcement runs without a knowledge element. That is the part Japanese HQ teams still underweight.
OTSI tools:
- Naming and shaming
- Detailed public reports
- Monetary penalties (£1M / 50%)
- Criminal referral to HMRC for egregious cases
Reputation risk from the first two often drives listed firms and banks toward mandatory reporting and early external counsel.
Four impacts on Japanese companies
① UK subsidiaries and sites
UK subsidiaries involved in trade-sanctions breaches face OTSI civil penalties. Strict liability means headquarters “didn’t know” is not a defense. Honestly, the gap between Japan HQ policy and UK site practice is where most of the risk sits.
② Mandatory reporting in finance and law
UK sites of Japanese banks, brokers, insurers, law firms, and money service businesses face mandatory reporting. Failure to report suspected breaches can itself be an offense. UK counsel newsletters describe weekly “report or not” reviews through 2026.
③ SEUC (from May 2026)
Non-strategic goods become license-required after an inform notice. Japan–UK–third country routes (Central Asia, Middle East, ASEAN) can be notified.
Codify who owns the mailbox, escalation SLAs, and 24-hour response standards. The worst case is a notice landing with the wrong person and going unread for a week.
④ Screening rebuild for UKSL
From 28 January 2026, UK-facing screening must use UKSL. OFSI Consolidated List-only setups miss new designations. Russia financial and investment restriction lists remain separate, so UKSL alone is incomplete.
Five practical steps
| Impact | Primary step | Supporting step |
|---|---|---|
| ① UK site strict liability | Step 1 SOP refresh | Step 5 knowledge base |
| ② Mandatory reporting | Step 3 reporting design | Step 1 SOP |
| ③ SEUC notice receipt | Step 4 notice flow | Step 2 logging |
| ④ UKSL switch | Step 2 screening sources | Step 5 knowledge base |
Step 1 — Refresh UK site SOPs
Confirm TASSCER 2024 and post-SEUC operations: (a) mandatory reporting to OTSI, (b) civil-penalty escalation criteria, (c) “reasonable suspicion” standards under strict liability. A Japan-policy translation is not enough. Get UK counsel review once.
Step 2 — Switch screening to UKSL
Update Unique IDs; keep Russia financial/investment lists as a separate source. Make “when was the screening source last updated?” an internal-audit question.
Step 3 — Build mandatory reporting for finance/law/MSB
Who decides “reasonable cause to suspect,” how fast external counsel is called, and how many business days to report to OTSI: write it down. Unwritten reporting is an inspection liability.
Step 4 — Build SEUC “inform” receipt flows
Mailboxes, owners, escalation paths for HMRC hub and OTSI notices. SEUC is “no pre-application; act after notice.” If I had to pick one checklist item, it would be this: missed notices are the top risk. Log every decision.
Step 5 — Institutionalize knowledge updates
| Cadence | Action | Owner |
|---|---|---|
| Weekly | UKSL delta vs counterparty master | Export control |
| Weekly | OTSI blog / GOV.UK guidance | Export control |
| Monthly | Russia sanctions / SEUC inform share + UK counsel standup | Legal |
| Quarterly | Major UK site SOP review | Export-control lead |
| Quarterly | Mandatory reporting internal audit | Audit / compliance |
| Semi-annual | UK e-learning / strict liability training | HR / legal |
TIMEWELL’s TRAFEED (formerly ZEROCK ExCHECK) automates counterparty screening, UKSL and Entity List matching, and decision history. That is useful when you need inspection-ready logs, not just a one-time check.
See TRAFEED · Resources · Book a 30-minute consultation
FAQ
Q1. Is OTSI under HMRC?
No. It is under DBT, founded 10 October 2024. Correct internal materials now.
Q2. Does OTSI reach Japan HQ outside the UK?
Direct jurisdiction needs a UK nexus (UK acts, UK persons, UK goods, etc.). UK subsidiaries, UK payments, and UK banks can create that nexus.
Q3. Can we pre-apply for SEUC licenses?
No. Inform-first design. Prepare response capacity, not speculative licenses.
Q4. If “I didn’t know” fails, what is the defense?
Pre-built systems: (a) current UKSL screening history, (b) decision logs, (c) documented SOPs and training records. You may still err, but history can keep outcomes at warning rather than maximum penalty.
Q5. Is zero penalties by October 2025 reassuring?
No. 146 investigations were open; firms expect first monetary cases from 2026. Year two is the enforcement year.
Q6. Who has mandatory reporting?
Financial services, legal services, money service businesses. Trading houses/manufacturers may still be pulled in via group finance or counsel.
Q7. Can AI tools help?
Yes for UKSL screening, end-user checks, diversion risk scoring, and license tracking. Under strict liability, daily decision logs are themselves a defense line. They are hard to keep by hand at volume.
Latest developments as of July 2026
While the UK rebuilt sanctions enforcement, Japan strengthened economic-security institutions: JFIC launched 29 June 2026 and the amended FEFTA was promulgated 5 June 2026 (MOF inbound FDI). The domains differ (investment screening versus trade-sanctions civil enforcement), but both move toward real operational capacity. Cross-check Japan and UK frameworks together. See also Japan–India Summit 2026 and economic security.
If you want to tighten export-control operations or classification efficiency, review the TRAFEED service catalog (PDF) or contact us.
Key takeaways
Monday-morning priorities, not a restatement of every heading:
- OTSI was founded on 10 October 2024 under DBT (not HMRC; not an October 2025 founding)
- Year one: 146 breach reports and 60 license applications, with 0 civil monetary penalties (build phase)
- Early 2026: most export sanctions licensing moved from ECJU to OTSI
- SEUC effective 13 May 2026: non-strategic goods can need licenses after inform notices
- UKSL consolidation on 28 January 2026: OFSI Consolidated List stopped updating
- Civil penalties up to £1M or 50% of breach value, on strict liability
- Japanese impact runs through UK-site liability, mandatory reporting, SEUC notices, and the UKSL switch
- Five steps: SOP, screening, reporting, notice flow, knowledge base
Related articles
- BIS budget +23% (FY2026) and four impacts for Japanese companies
- What is the BIS Affiliates Rule (50% rule)?
- EAR extraterritoriality and affiliate-rule risk
- Deemed export risk guide
- Sanctions lists complete guide
If you are reviewing your compliance stack
TRAFEED is a METI-aligned AI export-control agent with UKSL and Entity List screening, knowledge management, and automatic decision history for OTSI, BIS, and METI inspections.
Common consultation themes:
- UKSL switch health check across group UK-facing trade
- SEUC notice-receipt design (owners, SOPs, escalation)
- Strict-liability history design for screening and approvals
TRAFEED details · White papers · Book 30 minutes
References
- One Year of OTSI (GOV.UK, Oct 2025) and One Year Update PDF
- Mandatory reporting for suspected breaches of trade sanctions (GOV.UK)
- OTSI blog (otsi.blog.gov.uk): Compliance Clarity (13 Oct 2025); good breach reporting (16 Dec 2025)
- UK Sanctions List Search (GOV.UK)
- TASSCER 2024; Sanctions (EU Exit) (Miscellaneous Amendments) Regulations 2026 (SEUC)
- Russia (Sanctions) (EU Exit) Regulations 2019; SAMLA 2018
- Firm alerts: Baker McKenzie, Travers Smith, Steptoe, King & Spalding, K&L Gates, Skadden, Foot Anstey, Osborne Clarke, Akin, Ashurst, Pinsent Masons, Burness Paull, VinciWorks
![ECCN Number List and Cheat Sheet [2026 Edition]: Categories 0-9 x Groups A-E, Frequent Numbers, and How They Map to Japan's Export Control Items](/images/columns/eccn-number-list-cheatsheet-2026/cover.png)
