“Assessing all the circumstances, UniCredit’s belief that payment is prohibited by the UK Regulations is clearly reasonable. Those circumstances include: 1.1. The breadth of the statutory language of the prohibitions; 1.2. The issue of a licence in May 2022 by the Bundesbank permitting payments under EU law notwithstanding Article 3c, which is materially similar to Regulation 28 of the UK Regulations. The fact that the Bundesbank considered a licence was required to enable lawful payment under EU law reinforces the reasonableness of UniCredit’s belief as to the scope of Regulation 28; 1.3. The information from the Claimants that other confirming banks had similarly taken the view that payments could not be made unless licenced; 1.4. The conduct of the UK licensing authorities in respect of the Licence Applications, including latterly, ECJU’s issue of a licence on 22.09.22 and the communication from OFSI on 23.09.22 demonstrates that UniCredit was and continues to be reasonable in its belief; 1.5. The regulatory guidance, which makes clear thatOFSI “interprets prohibitions widely”; 1.6. The use of the low test of “reasonable cause to suspect” in the relevant offence-creating provisions. In Regulation 28 this test is used in the statutory defence; in Regulations 11 and 13 it is the mental element of the offence. In both cases, suspicion is a low test, namely where one considers there is a possibility, which is more than fanciful, that the relevant facts exist. Moreover, as in these cases, an offence which may be committed where a person has “reasonable cause to suspect” is of even wider scope and includes those who objectively assessed had reasonable cause to suspect that the relevant facts exist even where they do not themselves have actual (subjective) suspicion; 1.7. The extent of the criminal and civil penalties for breaches of the prohibitions. A breach of Regulation 28 is an indictable offence punishable with a maximum sentence of 10 years’ imprisonment or a fine or both. A breach of Regulations 11 and 13 is an indictable offence punishable with up to 7 years’ imprisonment or a fine or both. In both cases, criminal liability extends to officers of corporate bodies which commit offences with the consent or connivance of such officer or where the offending is attributable to any neglect on the part of such person. The regulatory guidance makes clear that breaches of the sanctions regime may result in enforcement actions for serious offences; and 1.8. The extent of civil liability (monetary penalties) for breaches and the recent amendment to establish this as strict liability. The Standard Chartered Bank penalty, both in value and its facts, underscores the serious consequences for breaches arising from honest mistakes as to the scope of Russia sanctions prohibitions.”