A sanctions problem often begins as an ordinary payment. Imagine a Kenyan NGO, Lakeview Relief Initiative, preparing to send USD 85,000 from its Nairobi bank account to a local implementing partner in a conflict-affected country. The money will fund emergency medicines, food transport and temporary clinic costs. The partner has worked with the NGO before and the donor has approved the programme. Yet one question remains before the finance officer presses send: which sanctions rules must be cleared?

The answer is not simply ‘check the country.’ A cross-border payment has several moving parts: the NGO, donor, sending bank, correspondent bank, currency, receiving bank, implementing partner, downstream vendors and sometimes public authorities that receive unavoidable fees. Different sanctions regimes may reach different parts of that chain. A humanitarian exception under one regime may solve one prohibition while leaving another untouched.

For NGOs, the safer approach is to treat sanctions compliance as a payment-file exercise. Before a higher-risk transfer is released, the organisation should be able to explain who is involved, how the money will travel, what restrictions were checked, whether an exception or licence is relied on, what the donor requires and why the final decision is defensible.

Start with the payment, not the map

A conflict-affected country is not automatically a prohibited country, and the absence of a broad country embargo does not make every transaction lawful. Sanctions can target named persons, sectors, financial services, government bodies, armed groups, controlled goods or particular payments. The first task is therefore to describe the proposed transfer closely enough to identify the relevant law.

Lakeview’s file should begin with the amount, currency, purpose, sender, recipient, project, donor and expected route. It should identify the local partner’s legal name and account, the destination bank and any known intermediary bank. It should also state what the partner will do with the funds. If a substantial amount will immediately be paid to a fuel company, transporter or landlord, those relationships belong in the analysis because economic value remains relevant when it moves downstream.

The point is especially practical in East Africa. Kenya’s Financial Reporting Centre states in its current public guidance that targeted financial sanctions apply not only to reporting institutions but to natural and legal persons generally. Its 2025 guidance and 2026 notices also show UN-related designations being implemented through a domestic framework. A Kenyan NGO should not assume that sanctions are only the bank’s problem.

Identify every legal system that can touch the transfer

The next question is jurisdiction. The NGO’s home law matters, but it may not be the only law in play. The UK Office of Financial Sanctions Implementation, in guidance updated on 28 January 2026, warns that other countries’ sanctions may affect an NGO where operations fall within their jurisdiction, goods originate there or a transaction uses their currency. It specifically tells organisations using US dollars to consider US sanctions.

That does not mean the currency alone answers every US legal question. It means the route must be understood. Dollar payments may involve US correspondent banks, while UK or EU persons and institutions can create other connections. A multinational donor or bank may also operate internal controls designed around several sanctions systems.

The file should therefore record the facts that create legal connections: where the NGO is incorporated, who authorises the payment, the currency, the banks involved, the recipient’s location, donor conditions and any goods or services being supplied. Those facts determine which sanctions regimes need a closer legal review.

Map the banks before assuming the transfer route

NGOs often know their own bank and the beneficiary bank but not the institutions between them. That gap matters. OFSI’s current NGO guidance recommends assessing the proposed payment route and, where relevant, checking partners, contractors and financial institutions before a transaction. An intermediary bank can stop, reject or freeze a payment even where the NGO and local partner are not listed.

Before sending the USD 85,000, Lakeview should ask its bank what it can confirm about the expected correspondent route and what information compliance staff need. The NGO should be ready to explain the source of funds, programme purpose, partner identity, location, relevant due diligence and any authorization relied on. A bank may still decline because of its risk appetite. Legal permission and bank willingness are related, but they are not the same thing.

If a bank refuses or delays the payment, the answer is not to hide the purpose, remove names, split the transfer or use an opaque intermediary. OFAC’s March 2026 advisory on sham transactions and sanctions evasion stresses that legal form does not defeat sanctions where a blocked interest remains in substance. A different route may be legitimate, but it should be transparent and chosen because it is lawful, not because it conceals a restricted interest.

Screen names, then look behind the names

A list search is necessary in many higher-risk payments, but it is only the beginning. Relevant parties can include the implementing partner, destination bank and material vendors or intermediaries receiving programme funds. The NGO should use the official lists for the regimes identified in its jurisdictional review and keep enough identifying information to resolve possible false matches.

Ownership can be as important as the name on the account. Under OFAC’s 50 Percent Rule, an entity can be blocked where one or more blocked persons directly or indirectly own 50 percent or more of it in the aggregate, even if the entity is not separately named. UK rules also require attention to ownership and control, although the test is not identical. ‘The supplier is not listed’ is therefore not always the end of the inquiry.

Suppose Lakeview’s partner plans to spend USD 18,000 with a fuel distributor that is not listed, but reliable corporate records show that 60 percent is owned by a blocked person under an applicable US programme. That is a legal red flag. The NGO must examine whether the payment is prohibited, whether an authorization covers it, or whether another lawful supplier should be used.

Ask what is prohibited, not only who is listed

Screening can create false comfort if the review ends with names. OFSI notes that financial sanctions are not limited to asset freezes and that some regimes restrict other transfers or activities. Country-specific rules may also cover services, investment, trade, payments to public bodies or controlled goods. The regulation in force on the payment date matters.

For the proposed transfer, the reviewer should identify the prohibition that could actually be engaged. Is the concern making funds available to a designated person, dealing with blocked property, providing a restricted service, paying a sanctioned authority or supplying a controlled item? Once the prohibition is stated precisely, the NGO can ask whether the activity falls outside it, is covered by an exception or general licence, or needs a specific licence.

A charitable purpose does not itself answer that question. OFSI’s 2026 guidance expressly says activity is not necessarily permitted merely because it is charitable or humanitarian. The purpose matters, but the NGO still needs the legal route that permits the transaction.

Treat a humanitarian exception as a legal route, not a magic pass

United Nations Security Council Resolution 2664 of 2022 is central to current humanitarian sanctions practice. For specified humanitarian providers, it allows resources caught by UN asset-freeze measures to be used when that is needed to deliver humanitarian relief or meet basic human needs. The protection is not a licence to ignore diversion risk: the resolution expects reasonable efforts, including risk management and due diligence, to limit prohibited benefits reaching designated persons. Resolution 2761 of 2024 continued that arrangement for the ISIL and Al-Qaida regime.

That protection is significant, but it is not universal permission. Resolution 2664 operates within the UN sanctions framework. States implement UN measures through domestic law, while states and regional organisations may impose additional sanctions. The UK has domestic regulations reflecting the UN humanitarian exception, but OFSI separately tells NGOs to consider other countries’ sanctions where a transaction has the relevant connection. The United States uses programme-specific exemptions, general licences and specific licences. The European Union has its own humanitarian exceptions and derogations.

‘The UN exemption applies’ should therefore never be the last line in a payment memo. The file should identify the relevant UN regime, explain why the organisation and activity fall within the exception, and then check the domestic or regional rules that also reach the payment. If another prohibition remains, another legal authorization may still be needed.

Know the difference between an exception and a licence

An exception is part of the law and removes specified conduct from a prohibition when its conditions are met. A general licence is a standing authorization for a defined class of transactions, usually subject to conditions. A specific licence is granted to an applicant for particular activity that would otherwise be prohibited. These are not interchangeable labels.

The distinction affects timing. OFSI warns that a licence application cannot be made retrospectively. OFAC also maintains programme-specific general licences and considers specific humanitarian requests where activity falls outside existing authorizations. A pending application is not permission to send the money. Lakeview’s file should contain the official basis relied on, its conditions, validity period and any reporting or notification requirement.

Conditions require close reading. An authorization may cover necessary humanitarian payments without covering every tax, fee, service or transaction with every designated person. A short legal note should explain why this payment fits the authorization instead of merely attaching the document and writing ‘humanitarian licence’ on the cover.

Donor approval is a separate gate

Even if sanctions law permits the payment, the grant agreement may impose another decision point. FCDO’s Programme Operating Framework, updated in April 2026, requires current, proportionate and documented assessment of direct funding partners and includes official sanctions-list screening among mandatory grant checks. Its current accountable-grant terms also expect a risk-based approach to UK sanctions and recognise relevant exceptions and general licences. The broader lesson is that donor compliance sits beside sanctions law rather than replacing it.

Lakeview should read the grant, budget and special country conditions before transferring funds. A cost can be lawful under sanctions law but outside the approved budget, subject to prior donor consent or reportable as a material change. A donor may also impose screening or recordkeeping standards beyond the minimum domestic rule. The organisation should know whether it is acting because the law requires it, the contract requires it, or its own risk policy reasonably does so.

Any donor approval, waiver, clarification or notification connected to the payment should remain in the file, especially where there is an unusual bank route, sanctioned environment, unavoidable fee, new partner or reliance on a humanitarian authorization.

Build a record that another person can reconstruct

A sanctions file is useful only if a colleague, auditor, bank or regulator can understand the decision later. The cover note should identify the payment and conclusion in plain language. Behind it should sit the route map, legal regimes checked, dated screening results, evidence used to resolve matches, ownership or control information, the exception or licence analysis, donor correspondence, bank queries, underlying grant and payment documents, and the internal approval to proceed or pause.

Retention periods vary. Where OFAC rules apply, the United States extended the general recordkeeping requirement in 31 CFR 501.601 from five years to ten years, effective in 2025. UK licences may carry reporting requirements, while donor and domestic rules can impose different periods. The sensible approach is to identify the longest applicable requirement instead of assuming one number fits every payment.

Good records also help when a transfer is delayed. The NGO can answer a bank with a focused explanation instead of sending its entire compliance archive. If a sanctions list changes before completion, it can see when screening was last performed and refresh it where necessary. If a donor or regulator asks later, the decision can be reconstructed without relying on one employee’s memory.

Return to the USD 85,000 payment

Lakeview can now decide in sequence. It confirms its Kenyan obligations and current targeted-financial-sanctions notices. It maps the USD route with its bank and identifies any US or other foreign-law connection. It screens the implementing partner, relevant financial institutions and material downstream counterparties, then checks ownership where the applicable regime requires it. It identifies the exact prohibition that could affect the transfer rather than relying on a general label that the destination is ‘high risk.’

If a UN humanitarian exception is relevant, the NGO records why and separately checks whether the domestic rules reaching the payment have implemented it or provide another authorization. It reviews US, UK or EU measures only where the facts create the relevant connection. It checks the donor agreement, resolves the fuel-supplier ownership problem and obtains any licence or approval actually required before sending the money.

The final decision may be to proceed, pause, change a vendor, use another transparent banking route, seek a licence or restructure part of the programme. What it should not be is an improvised attempt to ‘get the money through.’ Sanctions compliance is strongest when the organisation can explain the transaction from beginning to end.

The deeper lesson is that humanitarian exceptions and sanctions controls are not opposites. Both seek to distinguish legitimate assistance from prohibited support. For an NGO, the practical sequence is simple: map the payment, identify the law, check the parties and ownership, find the correct authorization, read the donor terms and keep the evidence. Only then should the payment leave the account.

Source note. Principal materials consulted for this article include the FCDO Programme Operating Framework, updated April 2026, and current accountable-grant terms; the UK Office of Financial Sanctions Implementation guidance for charities and non-governmental organisations, updated 28 January 2026; current US Office of Foreign Assets Control humanitarian guidance and FAQs, the 50 Percent Rule, the March 2026 Guidance on Sham Transactions and Sanctions Evasion, and 31 CFR Part 501; United Nations Security Council Resolutions 2664 (2022) and 2761 (2024); European Commission humanitarian sanctions guidance; and Kenya Financial Reporting Centre materials on targeted financial sanctions. Foreign rules are discussed comparatively and apply only where the necessary legal connection exists. This article provides general legal information rather than advice on a particular transfer.

Suggested citation:

Ronald Serwanga, “Aid Payments to Conflict Zones: NGO Sanctions Guide” East Africa Legal Insight (4 September 2026).