INTERNATIONAL TRADE LAW
Catch-All Controls: End-Use & End-User Rules
Catch-all controls require an export license based on who will receive your item and what they will do with it — regardless of how the item is classified, even if it is EAR99. They are the reason “my product is not on the Commerce Control List” is never a complete compliance answer. In the U.S. Export Administration Regulations (EAR), these are the end-use and end-user controls in Part 744, and they catch exactly the transactions that classification-based controls miss.
What “catch-all” means
Most export controls are item-based: an item’s Export Control Classification Number (ECCN) and the destination decide whether a license is needed. Catch-all controls work the other way. They impose a license requirement based on the end use (what the item will be used for) or the end user (who will get it), even when the item itself would otherwise ship freely. The classic trap is the EAR99 item — uncontrolled on the list — going to a party or purpose that triggers a license requirement anyway.
The policy rationale is to close the gap that item lists inevitably leave: technology evolves faster than control lists, and an ordinary part can still contribute to a weapons program or go to a sanctioned actor. Catch-all controls are the safety net.
The two triggers: knowledge and “is informed”
A catch-all license requirement can attach in two ways:
- Knowledge. If you know — which under the EAR includes “reason to know” from the facts and circumstances, not just positive certainty — that your item is destined for a prohibited end use or end user, you need a license. Willful blindness does not excuse you.
- “Is informed.” BIS can specifically inform you, by letter or by public notice (such as adding a party to the Entity List), that a license is required for a transaction. Once informed, the requirement is absolute.
Because the standard includes “reason to know,” due diligence is not optional. You are expected to act on warning signs rather than look past them.
Where the prohibited parties and uses are listed
| Control | What it targets | Where it lives |
|---|---|---|
| Entity List | Named parties subject to specific license requirements | Supplement No. 4 to Part 744 |
| WMD end-use controls (EPCI) | Items that may aid nuclear, missile, chemical, or biological weapons programs | 15 CFR 744.2–744.6 |
| Military end-use / end-user | Certain items for military uses or military end users in specified countries | 15 CFR 744.21 and related sections |
| “Is informed” letters | Transaction-specific notices from BIS | Part 744 generally |
Screening parties against the Entity List and the other restricted-party lists is the front line of catch-all compliance, but it is not the whole job: the WMD and military end-use rules can apply even to a customer who appears on no list, based on what they intend to do.
Red flags: the Know Your Customer step
BIS publishes a set of “Know Your Customer” guidance and red flags (Supplement No. 3 to Part 732 of the EAR). These are the warning signs that put you on “reason to know” footing — for example, a customer who is reluctant to give end-use information, orders products inconsistent with their business, asks for unusual shipping routes, or declines normal installation and training. When a red flag appears, you must inquire, resolve it, and document the resolution before proceeding. You cannot self-blind by simply not asking.
A workable due-diligence sequence:
- Screen every party — buyer, end user, intermediaries, freight forwarders — against the restricted-party lists.
- Confirm the end use and end user in writing, especially for items with any proliferation or military sensitivity.
- Run the red-flag checklist from Supplement No. 3 and resolve anything that surfaces.
- Stop and seek a license or guidance if a flag cannot be cleared. Document either way.
Why catch-all compliance matters
Catch-all violations are among the most serious because they often involve weapons proliferation or sanctioned end users, and the “reason to know” standard means intent is not a shield. The penalties are the standard EAR penalties: criminal violations under the Export Control Reform Act can reach up to 20 years in prison and $1 million per violation, and the maximum civil penalty, adjusted annually for inflation, exceeded $370,000 per violation or twice the transaction value as of early 2025. An EAR99 classification — see our ECCN classification checklist — protects you only on the item question; the end-use and end-user analysis is separate and always applies.
Frequently asked questions
Do catch-all controls apply to EAR99 items? Yes. That is their whole point. An EAR99 item that is otherwise license-free still needs a license if a prohibited end use or end user is involved.
What does it mean to “know” under the EAR? “Knowledge” includes not just certainty but awareness of a high probability and “reason to know” from the facts. You cannot avoid the requirement by deliberately not asking obvious questions.
What is the Entity List? A BIS list (Supplement No. 4 to Part 744) of parties subject to specific license requirements. Being informed that a party is on it triggers an absolute license requirement for covered transactions.
What are “red flags”? Warning signs in a transaction, set out in BIS’s Know Your Customer guidance (Supplement No. 3 to Part 732), that you are required to investigate and resolve before exporting.
Worried a customer or end use could trip a license requirement? Reidel Law Firm delivers a flat-fee Import/Export Compliance Memo covering classification, restricted-party screening, and end-use diligence — with direct attorney access. Get a flat-fee compliance memo →
