BIS Updates Red Flags Guidance: Eight New Indicators Added for Export Compliance

January 17, 2025

On the last day of 2024, the Bureau of Industry and Security ("BIS") added eight "Red Flags" to its "Know Your Customer" guidance set forth in Supplement No. 3 to Part 732 of the Export Administration Regulations (EAR). These additions aim to enhance exporters' ability to detect, prevent and address potential violations, particularly concerning advanced technologies and restricted end-users, to boost compliance and to avoid inadvertent violations of the U.S. export control laws.

Overview of the Red Flags Guidance

"Red Flags" are warning signs indicating that a transaction may involve prohibited end-uses, end-users, or destinations. The original guidance (Red Flags 1-19) highlights various scenarios that require heightened scrutiny, including:

• Customer with little or no business background providing incomplete or evasive responses about end-use or end-users, and/or ordering products with which they are unfamiliar, or that are outside of their line of business or technical capabilities. Customer paying cash even for expensive shipments normally subject to financing.
• Discrepancies in shipping routes or documentation, especially where freight forwarding firms are listed as the products' destination, and/or where the products' packaging does not match the stated method of shipment or the destination. Transactions involving destinations or parties with known export restrictions, and/or vague delivery dates.
• The ordered products are typically exclusively or predominantly used to produce advanced-node integrated circuits (IC) and/or the exporter has knowledge that a particular customer intends to develop or produce "supercomputers" or IC in the future or has advertised such plans or capabilities prior to October 7, 2022. Products are being delivered to a facility where production of advanced-node ICs occurs.

These long-standing indicators provide a foundation for ensuring compliance and preventing unauthorized diversions.

New Red Flags (20-27): Enhanced Focus on Advanced Technologies

The newly added "Red Flags" address increasingly complex risks and known diversion practices in global trade. They are particularly relevant for exporters dealing with advanced computing, semiconductor manufacturing equipment, and other sensitive technologies, as well as for exporters selling into countries known for their transshipping practices.

• Technology Mismatch in Equipment Orders (Red Flag 20): non-advanced facilities ordering equipment designed for advanced-node IC production (e.g., § 742.4(a)(4) ECCNs) suggest potential unauthorized use.
• Unclear Ultimate Owner or User (Red Flag 21): transactions with unknown or questionable end-users, particularly those lacking manufacturing capabilities, raise concerns about diversion risks especially for advanced computing, supercomputers, or semiconductor manufacturing equipment (SME).
• Licensing History Uncertainty (Red Flag 22): request for an item subject to licensing requirements to the destination country where such license application would be reviewed with a presumption of denial.
• Altered Items for Advanced End-Use (Red Flag 23): requests to service or upgrade items modified for advanced uses without proper licensing suggest possible violations.
• Overlap with Entity List Management (Red Flag 24): new customers with personnel or prior dealings linked to an Entity List entity necessitate further due diligence.
• Continuity of Prohibited Operations (Red Flag 25): new customer ordering items that were customized or modified for a prior customer, who is now designated on the Entity List. Orders resembling those of prior Entity List customers may indicate ongoing prohibited activities.
• Applicability of Foreign-Produced Direct Product Rules (FDP Rules[1]) (Red Flag 26): items containing specific IC must comply with FDP rules. Verification is essential to avoid violations.
• Connected Facilities Producing Advanced-Node ICs (Red Flag 27): end-user facilities linked to advanced-node IC production raise concerns about shared production. Exporters should confirm the technology node or consult BIS.

DCG Recommends the Following Review and Strategies:

Exporters must review both the longstanding and newly introduced "Red Flags" to ensure compliance with the EAR. Particular attention should be paid to transactions involving advanced technologies, ambiguous end-users, or destinations of concern. Failing to address these "Red Flags" could result in severe penalties and national security implications.

Each strategy depends on the specific contract terms and business conditions. For more information or assistance with these updates, and for tailored solutions please consult you DCG trade professionals.

[1] FDP stands for "Foreign Direct Product," which is a rule that applies to certain foreign-made products utilizing certain U.S. technology.