How to Do Denied Party Screening Exports: A Small Exporter's Survival Guide

Here's my verdict up front: if you're searching for how to do denied party screening exports, you're probably a small exporter without a compliance department — and this is the easiest step to skip and the most expensive one to get wrong.

In October 2025, a small optical-design software company outside Boston called Lambda Research voluntarily disclosed a problem to the Bureau of Industry and Security. The settlement order landed on October 2: 66 violations, a $2 million civil penalty, suspended for one year. They weren't selling missile parts. They were selling EAR99 software — ordinary, civilian-grade stuff. And BIS's enforcement order reads like a scolding: the company had no written export compliance procedures and no employee assigned to export compliance. Staff decided whether a deal was legal by "reading BIS news releases, news articles, and watching what competitors did."

Read that again. No process, no owner, decisions by news headline. Sound familiar? Because that describes most small exporters I've met in twenty years.

This story has two sides. The cost first, then the playbook.

The Trap: EAR99 Is Not a Shield

I've seen too many small exporters running on three comforting myths. One: my product is EAR99, plain civilian goods, so screening doesn't apply to me. Two: my freight forwarder handles compliance. Three: I didn't know the buyer was a problem, so it can't be my fault.

All three are wrong.

Lambda's 66 violations started in April 2021. The product was EAR99 optical design software. The customers: Huawei Japan and a Shenzhen company called SiCarrier — both on the Entity List. The method: a Japanese distributor mailed USB license dongles, and the license paperwork named Huawei Japan as the end user, in writing. BIS said the company acted with "knowledge or reason to know" the exports violated the EAR. Settlement terms: $2 million on the books but suspended; at least two employees designated for export compliance and trained within three months; an internal audit within nine months, with the report going straight to BIS's Boston field office.

The second case is even more instructive. A trading company shipped two orders of EAR99 goods in early 2025. The paperwork named a Turkish intermediary as the ultimate consignee and "direct consumer" — but the company knew the real end user was in Russia. The bank flagged it first. The deal structure changed mid-stream. The shipping documents got edited and re-edited. Every one of those is a textbook red flag straight out of BIS's official guidance. They shipped anyway. BIS charged eight violations, plus two counts of acting with knowledge of a violation. The company cooperated, fixed its compliance program, and that bought the penalty down — but it never filed a voluntary self-disclosure, and BIS said so out loud in the settlement announcement. Compare: Lambda disclosed and got $2 million suspended; this one didn't, and got named in the announcement. Draw your own conclusions.

Here's the counterintuitive part most small exporters miss: screening is about the people, not the product. Your goods can be utterly ordinary and still land you in violation if the buyer is listed. And "I didn't know" is not the defense people think it is — big chunks of the EAR run on strict liability. In October 2025, BIS added a 50% rule on top: a foreign company 50%-or-more owned by an Entity Listed firm is automatically treated as restricted, and tracing that ownership is your job. Can't figure it out? That's your problem, not your excuse.

OK. Costs established. Here's the playbook.

Denied Party Screening: Which Lists Actually Matter

"Denied party" isn't one list, it's a stack. The ones a US exporter can't dodge:

Four from BIS: the Denied Persons List (do business with them and you're finished), the Entity List (the famous one — selling to a listed party needs a license you'll almost never get), the Unverified List (BIS tried to vet them and couldn't — extra paperwork required before you ship), and the Military End User List. Treasury's OFAC maintains the SDN List on top of that — hit it and the transaction is frozen, full stop.

Free starting point: the US government's Consolidated Screening List search tool, which rolls the major lists into one free lookup. Zero cost. No excuse for not knowing it exists.

How Small Exporters Do Denied Party Screening: The Three-Step Screen

Break it into three steps, run them on every order. Once it's routine, ten minutes a shipment.

Step one: check the item. Confirm the Export Control Classification Number (ECCN); if nothing fits, it's EAR99. Don't shortcut this — the number decides whether you need a license, and EAR99 tells you your screening burden sits with the parties, not the product. If classification is murky, use BIS's SNAP-R system or pay a qualified attorney for an hour. Don't guess.

Step two: check the people. Screen every party to the deal: buyer, end user, intermediaries, freight forwarder, consignee. Names and addresses, all of them. And mind the 50% rule — trace ownership upward, because a company half-owned by a listed entity counts as listed. Start with the free tool; once you're doing dozens of orders a month, look at paid screening software. Vendors' own pricing pages put basic plans at "a few thousand dollars a year," which buys automated screening, audit trails, and automatic rescreening when lists update.

Step three: check the scenario. BIS publishes an official red-flag list, and these are the greatest hits for small exporters: the customer won't tell you the end user or end use; a party's name looks a little too much like a listed name; an address matches an Entity List or SDN address; payment routing changes at the last minute; the destination country doesn't match the order or payment country; free webmail address, phone country code that doesn't match the claimed country. Any single flag: stop. Either resolve it or walk away from the order. The trading company above died on this step — every flag lit up, and they shipped anyway.

Then the non-negotiable fourth step: keep records. EAR §762.6 is explicit — five years, measured from export, reexport, or termination of the transaction. Screening screenshots, email threads, end-user statements, one folder per order. If it ever goes sideways, that's the only thing standing between you and BIS.

And if you've already messed up, one piece of advice: disclose voluntarily. BIS gives voluntary self-disclosure "great weight" as a mitigating factor — historically worth roughly half the penalty. Lambda disclosed and got $2 million suspended. The other company didn't, and BIS named that fact in the announcement. Your call.

The Math: What Screening Costs vs. What a Violation Costs

Start with the big picture. One more number to keep you up at night: BIS's FY2025 annual report shows roughly $324 million in penalties, up from $16 million in 2024 — an eighteen-fold jump. Fifty-three administrative enforcement actions producing over $108 million in civil penalties. 455 warning letters, 705 detentions, 232 seizures, 29 denial orders, 65 criminal convictions. 142 entities added to the Entity List in a single year. The message isn't subtle: the "they only go after the big fish" era is over, and not having a compliance department isn't a mitigating factor — it's practically an aggravating one. Lambda's order calls out the missing written procedures in its own paragraph.

Now the per-order math:

Put plainly: denied party screening isn't a cost, it's insurance. You're not buying software — you're buying the right to have a conversation with BIS if something goes wrong. A few thousand a year to insure against a single order killing the company. Not a hard call, is it?

By Lao Mi, Supply Chain Veteran (20 yrs)