The Price of Certainty: What OFSI Settlement Demands

When the UK introduced civil monetary penalties for financial sanctions breaches in 2017, penalties were rare and investigations stretched across years. The dominant compliance question was whether the Office of Financial Sanctions Implementation (OFSI) would act at all. That question has been answered. OFSI now resolves cases through negotiation, and on 19 March 2026 it concluded its first settlement. Yet the most revealing feature of that case is not the penalty imposed. It is what the firm agreed to give up to obtain it.

Settlement changes what enforcement costs

OFSI published its consultation response on 29 January 2026 and brought its revised Financial Sanctions Enforcement and Monetary Penalties Guidance into effect on 9 February 2026. The reforms followed a cross-government review and were prompted, in OFSI's own framing, by the sharp rise in the volume and complexity of cases since Russia's full-scale invasion of Ukraine in 2022. The Settlement Scheme sits at the centre. It allows a subject under investigation to resolve a case through a time-limited negotiation, securing a discount of up to 20 per cent on the baseline penalty and an expedited conclusion.

The discount is not the whole story. To settle, a subject must agree to pay the penalty as imposed and to waive its rights to ministerial review and to appeal OFSI's decision to the Upper Tribunal on the matters within the settlement's scope. The penalty notice in the first settled case sets out both conditions in terms. The firm signs away the internal review and the route to the tribunal in exchange for speed and a measure of input into the published case summary. The bargain is not simply financial. It is a trade of legal recourse for legal certainty.

That trade is sharpened by a further design choice. Stephenson Harwood notes that OFSI has confirmed it will not anonymise a subject's identity as part of any settlement. A firm that settles accepts both the penalty and the publicity. There is no quiet resolution on offer, no version of the outcome in which the conduct is acknowledged but the name withheld. The reputational consequence is fixed at the point of signature.

The discounts promise more than they deliver

The headline figures are striking. OFSI's revised framework offers a Voluntary Disclosure and Co-operation discount of up to 30 per cent, an Early Account Scheme discount of up to 20 per cent, and a settlement discount of 20 per cent. Stephenson Harwood reports that these can be additive, so that a fully cooperative subject might in aggregate reduce a baseline penalty by as much as 70 per cent. On paper, the incentive to engage early and completely is overwhelming.

The figures reward a closer reading. The new Voluntary Disclosure and Co-operation discount is capped at 30 per cent, where the previous voluntary disclosure discount for a serious case reached up to 50 per cent, a ceiling the penalty notice in the first settled case confirms still applied under the old guidance. The reforms add new routes to mitigation with one hand and trim the oldest route with the other. A firm comparing the new regime to the old may find that its single largest discount has fallen, not risen, even as the number of discount categories has grown.

The conditions are also less forgiving than the percentages suggest. Stephenson Harwood observes that OFSI is strict on what counts as cooperation. Disclosure will not be treated as voluntary if it is prompted by an OFSI request for information or if the firm acts only because OFSI has already become aware of the matter. OFSI also expects an initial disclosure ahead of a fuller account. The largest discounts are reserved for firms that move first, move fast and move comprehensively. A firm that hesitates, or that discloses only once the regulator is at the door, forfeits the very leverage the scheme appears to extend.

The first settlement illustrates the gap between headline and outcome, though not in the way it first appears. OFSI decided the Apple case under its November 2024 guidance, which allowed up to 50 per cent off a serious case for prompt and complete voluntary disclosure, and applied a 35 per cent reduction for disclosure and settlement under transitional arrangements. The case therefore tested the old ceiling, not the new one. No firm has yet reached the 70 per cent the reformed framework advertises, and the conditions attached to each discount suggest few will. The reforms do not lower the cost of a breach so much as redistribute it. Firms with mature controls and rapid escalation capture the discounts; firms with weaker frameworks discover that the headline reductions were never truly available to them. K&L Gates makes the consequence explicit: those with weaker compliance frameworks may face reduced access to penalty discounts. The scheme rewards readiness, not contrition.

The Early Account Scheme shifts the burden onto firms

Settlement resolves a case. The Early Account Scheme reshapes how that case is built. Under the scheme, a subject may provide a comprehensive, evidence-supported factual account of a suspected breach at an early stage, in exchange for a penalty reduction of up to 20 per cent. The GOV.UK guidance states that its purpose is to expedite an investigation in appropriate cases, with the subject supplying that account within an agreed timeframe once OFSI agrees to its use. Baker McKenzie notes that the scheme is open to entities rather than individuals, and that access must be requested and is not guaranteed.

The mechanism is more demanding than the discount suggests. Baker McKenzie reports that OFSI may make access conditional on the appointment of a third party to conduct the investigation and prepare the account, particularly where a firm cannot demonstrate sufficient internal expertise in investigations or financial crime. The effect is to shift the investigative burden, and its cost, from regulator to regulated. A firm that elects into the scheme is, in substance, agreeing to build OFSI's case file for it, to a standard OFSI will accept, and sometimes through an external party it must fund.

The two schemes are distinct, and a subject may benefit from both. They operate at different stages: the account expedites the investigation, the settlement resolves its outcome. Used together, they compress what was once a multi-year process into something far shorter. They also compound the central tension. The firm that engages most fully gives OFSI the most complete record of its own conduct, then waives the right to contest the conclusions drawn from it. Cooperation and exposure advance in lockstep.

Apple is the template, not the exception

The theory acquired its shape on 19 March 2026. OFSI imposed a penalty of £390,000 on Apple Distribution International Limited (ADI), an Irish subsidiary of Apple Inc, for two payments made in 2022 to Okko LLC, a Russian entity wholly owned at the relevant time by the designated person JSC New Opportunities. The payments, totalling £635,618.75, represented App Store revenue and were instructed through a UK bank account ADI controlled. The penalty notice records that OFSI set a baseline penalty of £600,000 against a statutory maximum of £1 million, assessed the breach as serious rather than most serious, and applied the 35 per cent reduction for voluntary disclosure and settlement.

Two features carry significance well beyond the modest financial scale. The first is jurisdictional. ADI did not make the payments from the UK; it instructed a UK bank and then failed to cancel those instructions, and OFSI treated that omission as conduct in the UK. The penalty notice states that UK financial sanctions reach any conduct in the UK, including a non-UK firm's use of a UK financial institution managed from abroad. A foreign subsidiary processing payments through a London account now sits squarely within OFSI's enforcement frame.

The second feature is the conduct finding. The penalty notice records that OFSI accepted ADI had neither intent nor knowledge, yet still found a breach under the strict liability regime that took effect in June 2022. OFSI's criticism fell on the screening: ADI's assessment of sanctioned-party ownership relied primarily on self-certification and third-party due diligence vendors, and OFSI considered that framework insufficiently calibrated to the heightened Russia risk after February 2022. The breach was not a failure to have controls. It was a failure of those controls to work against the specific risk the invasion had created. This is the distinction between control existence and control effectiveness, and it is precisely the distinction OFSI has chosen to enforce.

The OFSI ceiling is rising

The reforms also lift the maximum exposure. OFSI announced on 29 January 2026 that it would double the statutory maximum penalty to the greater of £2 million or the total value of the breach. Akin notes that the increase requires legislative change and that OFSI has committed only to bringing it forward when parliamentary time allows, so the higher ceiling is not yet in force. Its direction of travel, however, is unambiguous.

The significance lies not in the headline figure but in what it does to the calculus of settlement. A discount is worth more when the underlying penalty is larger. Once the increase takes effect, doubling the maximum will raise the absolute value of every percentage point a firm can secure through early disclosure, an early account or settlement, and with it the cost of failing to qualify. As the ceiling rises, the gap between the prepared firm and the unprepared one widens in cash terms even where the conduct is identical. The reforms tighten the same screw from two directions: larger penalties above, more conditional discounts below.

Speed has a price: contestability

The reforms are coherent, and their logic is sound. A regulator facing 240 active investigations, as OFSI reported in April 2025, cannot resolve each through prolonged adversarial process. Negotiated settlement clears the backlog. Public outcomes deter. Fixed penalties of £5,000 and £10,000 for information, reporting and licensing offences, introduced under the same guidance, bring proportionality to minor breaches. The framework is faster, clearer and more predictable than what preceded it.

Predictability is not the same as fairness. The scheme's efficiency rests on a concession that deserves scrutiny. A firm that settles surrenders its right to test OFSI's findings before an independent tribunal. Where the facts are clear and the conduct indefensible, that surrender costs little. Where the facts are contested, or OFSI's characterisation of seriousness is arguable, the calculus is harder. The discount is real and immediate; the right being waived is contingent and slow. A rational firm will often take the certain reduction over the uncertain vindication, even where it believes the finding to be wrong.

The risk is subtle. A settlement regime that is too attractive can suppress the very challenges that would refine the law. Each contested case that reaches the Upper Tribunal clarifies the boundaries of liability. A scheme that routes firms away from that forum buys administrative speed at the price of jurisprudential development. The Apple case asserted a significant expansion of jurisdiction. Because it settled, that assertion has not been tested. The principle now stands as practice without ever having been adjudicated.

Readiness is now the decisive control

The decisive variable in any future enforcement outcome is no longer whether a firm cooperates after the fact. It is whether the firm is structurally capable of cooperating fast enough to qualify for the discounts. That capability is built before any breach occurs. Firms should reassess their escalation pathways, their ability to assemble an initial disclosure within days rather than weeks, and the calibration of their screening against current geopolitical risk rather than historic baselines.

The Apple finding offers a specific warning to any business that relies on self-certification or third-party vendors for ownership due diligence. OFSI treated that reliance as a conduct failing and noted that open-source reporting of the ownership change was available but unflagged. Firms processing payments on behalf of others, particularly in app marketplaces, payment processing and platform economies, should assume that intermediated transactions through UK accounts bring them within OFSI's jurisdiction and within its expectations. The question is no longer whether a control exists. It is whether the control would have caught this.

A settlement runs one way

OFSI's reforms mark the maturing of UK sanctions enforcement from a tentative, reactive function into a confident, intelligence-led regime. That maturity is welcome. But maturity in a regulator imposes a corresponding demand on the regulated, and the demand is not merely to comply. It is to be ready to prove compliance at speed, and to weigh, in the moment a breach surfaces, whether the certainty of settlement is worth the surrender of the right to be heard. The discount is the regulator's offer. The waiver is its price. Firms that understand the scheme will treat the decision to settle not as relief but as a contract whose terms, once signed, run only one way.

Is your screening calibrated to the risk you actually face, or to the risk you faced last year?

If you are not certain of the answer, contact us.

At OpusDatum, we help firms build the escalation discipline, screening calibration and governance evidence that determine whether the settlement scheme works for them or against them. We translate enforcement signals into operational readiness before a breach forces the question.