Table of Contents
A catch-all control is a rule that can require an export license based on how an item will be used or who will use it. It applies even when the item itself is not listed or otherwise controlled. In plain terms, the product may be free to ship on paper, but the destination, the buyer, or the end use can still pull it back under license control.
This trips up exporters who classify an item, see it is uncontrolled, and assume the deal is clear. It is not. Catch-all rules exist to close that gap. This guide explains how they work, what triggers them, where they live in U.S. and EU law, and the steps you take to stay compliant.
What a catch-all control actually does
Most export rules work by item. You classify a product, get a control number, and check whether a license is needed for the destination. A catch-all control works from the other direction. It looks at the end use and the end user first. If the use or the buyer raises a concern, the item needs a license no matter how it was classified.
So a catch-all can reach items that carry no control status at all. In the United States that includes EAR99 items, the large group of low-tech goods that fall outside the control list. An ordinary pump, valve, or chemical can still need a license if you know it is heading to a weapons program. The rule catches what the lists miss. That is the whole point of the name.
Catch-all controls are part of the wider system of export controls. They sit alongside list-based controls, not instead of them. You still classify your items. You still screen your parties. The catch-all adds a second question on top: does the use or the user make this shipment a problem?
The two triggers: knowledge and being informed
A catch-all control does not fire at random. Two things can set it off.
Knowledge or reason to know
The first trigger is your own knowledge. If you know, or have reason to know, that an item is going to a prohibited use or party, you need a license. “Reason to know” matters here. You cannot ignore obvious warning signs and claim you did not know. That is called willful blindness, and it does not protect you. If the facts point to a problem, you are expected to act on them.
Being formally informed
The second trigger is a direct notice from the government. In the United States the Bureau of Industry and Security can inform you, by letter or public notice, that a license is required for a specific transaction. Once you are informed, the license requirement is firm. You no longer get to weigh the facts yourself. The Bureau of Industry and Security publishes guidance and notices that explain how this works.
| Trigger | What it means | Who acts |
|---|---|---|
| Knowledge / reason to know | You are aware, or should be aware, of a prohibited use or user | You, based on the facts in front of you |
| Is informed | The government tells you a license is required | The regulator, by letter or notice |
End-use versus end-user controls
Catch-all rules split into two kinds. Both can require a license for an otherwise uncontrolled item.
End-use controls
These look at what the item will be used for. The classic case is weapons of mass destruction. If an item may be used in a nuclear, missile, chemical, or biological weapons program, a license is required. Some rules also cover military end use in certain countries. The item may be a plain commercial good. The use is what triggers control.
End-user controls
These look at who receives the item. If the buyer is a party of concern, a license is required. The clearest example is the BIS Entity List. Once a party is listed, catch-all style controls attach to dealings with them, even for items that would otherwise ship freely. Screening your parties is how you catch this. It is the core of denied party screening.
| Control type | Question it asks | Common example |
|---|---|---|
| End-use control | What will the item be used for? | WMD program, restricted military use |
| End-user control | Who is receiving the item? | Listed party, sanctioned entity |
Where catch-all controls live in the rules
Different systems use catch-all controls. The names change but the idea holds.
- United States. The end-use and end-user rules sit in Part 744 of the Export Administration Regulations. They cover WMD end use, certain military end use and end users, and listed parties.
- European Union. The dual-use regulation contains a catch-all clause. It requires authorization when non-listed items may be intended for WMD development or, in some cases, for a military end use in an embargoed destination.
- Other regimes. Many national systems built on the same international framework include a similar clause. The wording differs, but the trigger is end use or end user.
Catch-all controls are export control rules, not sanctions, though the two overlap in practice. If you want the distinction, see the difference between export controls and sanctions.
Red flags that should stop you
Because knowledge is a trigger, spotting warning signs is part of the job. If a red flag appears, you have to resolve it before you ship. You cannot look away. Common red flags include the following.
- The buyer is reluctant to say how the item will be used.
- The order does not fit the customer’s normal business.
- The product is too advanced for the stated use.
- Shipping routes or freight terms look odd or indirect.
- The customer declines normal installation, training, or service.
- Payment terms are unusual, such as cash for a large order.
These overlap with the broader red flags of sanctions evasion. When one appears, ask questions and document the answers. If you cannot clear the concern, you stop the transaction or apply for a license.
How to comply with catch-all controls
A simple, repeatable process handles most catch-all risk. Here is a workable order.
- Classify the item first. Work out its control status so you know your starting point. If you need help, see how to determine an ECCN.
- Screen every party in the deal against restricted and denied party lists.
- Confirm the end use and the end user in writing. Keep an end-use statement on file.
- Run the red-flag checklist against what you know about the transaction.
- If a flag stands, investigate. Ask for more detail and record what you find.
- If the concern remains, either apply for a license or walk away.
- Keep the records. You want to show your reasoning if anyone asks later.
One more point. Catch-all controls can apply inside your own country. Releasing controlled technology to a foreign national at home can count as a deemed export. The same end-use and end-user logic follows. If you are unsure whether a license is needed at all, start with do I need an export license.
Frequently Asked Questions
Can an EAR99 item really need a license?
Yes. EAR99 means the item is not on the control list, but it does not mean the item is free of all rules. If a catch-all control applies, because of the end use or the end user, an EAR99 item can still require a license. Classification alone never closes the question.
What does “reason to know” mean?
It means you are held to what the facts show, not only what you were told. If the circumstances point to a prohibited use or party, you are treated as knowing it. Ignoring clear warning signs does not protect you. You are expected to check and to act.
Are catch-all controls the same as the Entity List?
No, but they connect. The Entity List names specific parties and triggers license requirements for dealings with them. That is an end-user control in action. Catch-all controls are the broader category, covering both end users and end uses across many rules.
Do catch-all controls exist outside the United States?
Yes. The European Union dual-use regulation has a catch-all clause, and many national systems include one too. The wording varies, but the trigger is the same. The end use or the end user can require a license for an item that is not otherwise listed.
Key Takeaways
A catch-all control can require a license based on end use or end user, even for items that are not otherwise controlled. It fires on your knowledge, including what you have reason to know, or on a formal notice from the regulator. It reaches uncontrolled goods that list-based controls miss. To manage it, classify your items, screen your parties, confirm end use in writing, check for red flags, and keep records. Build the habit and catch-all risk stays under control. If you want help setting up screening and end-use checks, contact us.