OFSI at Ten: Strategy Update

On 15 April 2026, the Office of Financial Sanctions Implementation (OFSI) published a strategy document for 2026–2029 (available here) (the ‘Strategy’), marking its tenth anniversary. The Strategy sets out a three-year plan to ensure UK financial sanctions remain effective, resilient and impactful. The Strategy presents a four-pillar operating model:

• Promote: Set clear expectations by explaining rules and risks through publishing accessible guidance, co-operating with domestic and international regulators, and conducting targeted outreach across sectors.

• Enable: Remove friction for legitimate activity through clear, practical guidance, transparent licensing standards, and user‑focused digital services. 

• Respond: Prioritise and investigate suspected breaches using data and intelligence, and apply the full range of enforcement tools.

• Change: Build sustainable compliance by learning from outcomes, improving processes with partners, and modernising through better data and technology.

Further, OFSI has published measurable, forward‑looking KPIs for 2026–29 to track performance against its four pillars. These quantifiable prospective commitments in a public strategy published by OFSI mark a step toward greater institutional accountability.

The most notable KPIs include OFSI’s commitments to:

• Close 50% of licensing cases within six months of submission; 

• Submit at least 90% of enforcement investigations for decision within 18 months of commencement of investigation;

• Drive proactive civil and criminal enforcement by using actionable intelligence provided by OFSI’s intelligence function;

• Increasingly pursue intelligence-originated case outcomes in coming financial years; and 

• Deliver joint or co-branded public output with international partners every quarter aimed at tackling sanctions circumvention. 

Focus on Intelligence-led Enforcement

Further, the Strategy reveals OFSI’s intentions to become increasingly proactive as a regulator, both in its engagement with industry and in enforcement.

Industry Engagement

The Strategy reframes OFSI's relationship with the private sector as a structured feedback loop rather than a one-directional compliance relationship. In return, OFSI commits to feeding back to industry through blogs, FAQs, updated guidance and enforcement case studies to clarify its approach and expectations. 

Enforcement

Historically, the majority of enforcement activity has been driven by firm self-disclosures and suspected breach reports. The Strategy makes clear that OFSI intends to originate an increasing proportion of enforcement cases through its own intelligence and analytics capabilities, using data and technology to identify networks, typologies, and repeat behaviours. The practical implication is significant – regulatory exposure will become increasingly driven by risk patterns identified by OFSI.

An Expanded Enforcement Toolkit

Additionally, the Strategy treats settlements, a recently introduced part of the OFSI enforcement toolkit, as a standard type of enforcement outcome alongside fixed monetary penalties and referrals. This breadth of options gives OFSI greater flexibility to calibrate its response to the severity and nature of non-compliance, and is likely going to enable OFSI to resolve a higher volume of cases at pace, without the procedural weight of contested penalty proceedings. Public enforcement outcomes are described as needing to be "fast, frequent and as impactful as possible," targeting both non-compliance and wilful circumvention.

Cultural Shift

Under the “Change” pillar, the Strategy frames sanctions failures not merely as breakdowns in control design or resourcing, but as issues of a lacking compliance culture. This approach may result in OFSI viewing instances of sanctions violations as a reflection of lack of sound controls within an organisation generally, and penalising firms for having insufficiently sound compliance frameworks in place. 

Practical Takeaway

The overarching directionality of the Strategy is clear: OFSI is moving from a posture of reactive case management towards a more proactive, intelligence-driven and publicly accountable enforcement model, underpinned by AI-enabled workflows, deeper international coordination and structured private sector engagement. 

For firms operating in the UK sanctions landscape, the practical takeaway is that existing frameworks will face closer and more structured scrutiny. Firms that can articulate their exposure, evidence proportionate controls and demonstrate sound governance are likely to find engagement with OFSI more predictable.

Subscribe to Ropes & Gray Viewpoints by topic here.