ECCN Number: How to Look Up, Validate, and Avoid Misclassification

An ECCN number is a five-character alphanumeric code on the Commerce Control List that tells an exporter whether a product requires a BIS license before it can leave the country. Whether you got that code right determines if a shipment clears customs in 48 hours or sits in a licensing queue for weeks.

BIS added 14 new ECCNs to the CCL in September 2025 under the 900-series framework for semiconductor and quantum computing items. Every one of those additions changed the licensing math for exporters who had classified their products months earlier. Get the ECCN number wrong and you are looking at what Applied Materials faced in February 2026: $252.5 million paid to BIS for routing ion implanter equipment through South Korea to a restricted Chinese entity under an incorrect export control classification number.

What an ECCN Number Tells You About Your Product

Your ECCN number tells you two things at once: what category of item you are exporting and what level of control BIS places on it. The first digit (0 through 9) identifies the product category. Category 3 covers electronics, Category 5 handles telecommunications and information security. The second character is a letter from A through E for the product group, where A means equipment and E means technology. Most exporters we talk to memorize the categories relevant to their product line and ignore the rest. The remaining three characters pinpoint the exact entry under the relevant export controls and its technical parameters.

Here is where the detail matters. An ECCN of 3A090 flags advanced computing integrated circuits with ECCN export control restrictions for national security. BIS tightened controls on 3A090 items on May 13, 2025, effectively requiring licenses for any transaction involving chips produced in Country Group D:5 nations. Drop the performance threshold slightly and the same chip falls under 3A992, which carries far lighter restrictions. Same physical object. Different classification. Different outcome entirely.

We have seen exporters treat the ECCN like a static label they assign once and forget. BIS revised ECCN entries for firearms under the 0A500 series in a final rule published September 30, 2025, adding Crime Control (CC 2) reasons for control. One thermal imaging camera manufacturer we talked to in Q1 2026 did not catch a CCL update that shifted their product's classification. BIS caught it during an audit. The fine: $1 million for unlicensed exports to mainland China and Hong Kong.

ECCN Number Lookup Methods That Actually Work

The fastest way to get an ECCN number is to ask the manufacturer. BIS maintains a voluntary Classification Information Table where companies publish their determinations for third-party use. That sounds easy, and it is, until you realize manufacturers sometimes hand over outdated classifications. ECCNs change when BIS amends the CCL, so a number a vendor gave you six months ago needs verification against the current list. We once relied on a supplier-provided ECCN for a sensor component and discovered during our own CCL review that the classification had shifted two Federal Register updates earlier. Nobody had flagged it.

Self-classification through the Interactive Commerce Control List at bis.gov works as a free eccn classification tool. You search by keyword across ECCN headers and subparagraphs, then match your product's exact technical parameters against the entry's specifications. Not the marketing description. Not the general category. The actual measurable performance characteristics. A pressure transducer with specs meeting ECCN 2B230 thresholds requires an export license for Nuclear Nonproliferation reasons. Same sensor, slightly different specs? EAR99. That gap has cost companies $250,000 in civil penalties when BIS audited their classifications.

What does not work: relying on product-category guesswork. We have talked to export managers who searched the CCL for a broad term, did not find an obvious match, and stamped the product EAR99. That approach breaks the moment a product has dual-use technical characteristics matching a specific ECCN paragraph.

For the strongest legal protection, submit a commodity classification request through BIS's SNAP-R system under 15 CFR section 748.3. The CCATS ruling you receive functions as a legal safe harbor, meaning BIS cannot penalize you for relying on their own determination. One catch that trips up smaller exporters: you need a Company Identification Number (CIN) before accessing SNAP-R. Registration takes days, not hours.

ECCN vs. EAR99 vs. USML Classification Differences

The export classification question starts before the ECCN. It starts with jurisdiction. The U.S. Munitions List under ITAR and the Commerce Control List under EAR are mutually exclusive. An item sits on one or the other, never both. The Order of Review in 22 CFR section 121.1(b) and Supplement No. 4 to 15 CFR Part 774 requires checking the USML first.

USML-controlled items require a State Department export license for virtually every foreign destination. ECCN-controlled items follow a different calculus: cross-reference the Reason for Control against the Commerce Country Chart in Part 738. An "X" in the column means a license is required.

EAR99 sits at the bottom of this hierarchy. Most commercial products land here. But EAR99 does not mean "ship anywhere freely." An EAR99 item still requires a license when the destination is an embargoed country, the end-user appears on denied party screening lists, or the end-use involves prohibited activities. Luminultra Technologies learned this in October 2025 when BIS reached a settlement for exporting EAR99 luminometers to Iran without authorization. We see this mistake more than any other: teams assume EAR99 means "no restrictions" and stop asking questions.

The 600-series ECCNs are where things get genuinely confusing. Entries like 9A610 cover items transferred from the USML to the CCL during export control reform, carrying stricter controls than standard ECCNs but following Commerce Department procedures. We had one client discover their product sat in a 600-series ECCN only after a customer flagged it. The classification got kicked back, and three shipments had to be put on hold while counsel sorted it out. Two weeks of lost revenue on a recurring route.

Common ECCN Misclassification Patterns and Their Cost

The most expensive classification error we have encountered is not getting the wrong ECCN. It is defaulting to EAR99 without reading the CCL at all. Teams under deadline pressure type "NLR" on export documentation and move on. BIS published rules in 2025 requiring correct ECCN reporting on Electronic Export Information filings for all CCL items shipped to China, Russia, and Venezuela. A misstatement of export control classification number on an EEI filing carries a $10,000 fine per occurrence under the Foreign Trade Regulations.

Another pattern that burns exporters: ignoring the "specially designed" test. Both the USML (22 CFR section 120.41) and the EAR (15 CFR section 772.1) define "specially designed" with criteria that can pull a commercial component into a controlled ECCN. A fastener manufactured to mil-spec tolerances for a defense system may qualify even though identical fasteners sold commercially are EAR99.

Then there is treating classification as a one-time event. BIS added 900-series ECCNs in September 2025 for controls aligned with international partner nations. Worldwide license requirements apply to every 900-series entry. A semiconductor component classified under 3A001 six months ago might now fall under 3A901.

$140 million. That is what Cadence Design Systems paid in July 2025 for 56 EAR violations involving EDA products under ECCNs 3B991b.2.c, 3D991, and 3E991 sold to entities tied to China's National University of Defense Technology. Applied Materials followed in February 2026 with $252.5 million for 56 ion implanter shipments under ECCN 3B991. Both cases rooted in classification failures paired with end-user screening gaps.

Building an ECCN Classification Workflow for Repeat Accuracy

The classification record is where everything starts. For every SKU, document the ECCN determination, the technical parameters that drove the decision, the CCL entry reviewed, and the date of last verification. We have seen companies store this in a spreadsheet. That works until the catalog hits 200 items and the CCL changes quarterly. There is probably a better way to manage this at scale, but we have not found a single tool that handles both the technical matching and the version-tracking reliably. Most teams end up stitching together a spreadsheet, a calendar reminder, and someone's memory.

The CCL changes more often than most exporters realize. BIS published interim final rules in September 2025 affecting Categories 3 through 5 for semiconductor and quantum computing items. Exporters who waited for their next annual audit shipped under stale classifications for months. You have to watch the Federal Register like a hawk, or build an alert that flags relevant amendments automatically.

Jurisdiction screening belongs before classification, not after. The Order of Review demands a USML check first. Skip it and you may classify a defense article under an ECCN when it belongs on the USML. We have seen this happen with components that look commercial but have mil-spec characteristics buried in the technical data sheet. The consequences flow to ITAR, where penalties and registration requirements follow entirely different rules.

Here is the piece that ties it together: classification records need to connect to watchlist screening systems. An ECCN alone does not tell you whether a license is required. The destination, end-user as well as declared end-use all feed into that decision. BIS guidance on advanced computing ICs from May 13, 2025 warned that General Prohibition 10 applies whenever the exporter has "knowledge" of an EAR violation, and "knowledge" includes awareness of a high probability under Part 772. Lenzo connects ECCN records to real-time screening against consolidated control lists, flagging destination-ECCN combinations that trigger licensing requirements without manual cross-referencing.

Frequently Asked Questions

What happens if I assign the wrong ECCN number to a product?

No penalties attach to an incorrect ECCN classification by itself. The penalties hit when that wrong ECCN leads to shipping without a required license, exporting to a restricted end-user, or filing incorrect Electronic Export Information. The maximum civil penalty per EAR violation is $374,474 as of January 15, 2025 as well as each shipment counts as a separate violation. Applied Materials faced 56 charges in February 2026 totaling $252.5 million.

How long does a BIS commodity classification request take?

Honestly, it varies. BIS does not publish a guaranteed timeline, though 15 CFR section 750.4 requires the agency to process or refer most license applications within 90 calendar days. In practice, plan for 4 to 8 weeks on a straightforward request. If BIS sends follow-up questions about your technical specs, add a few more weeks. Incomplete submissions get returned without action, which resets the clock entirely.

Can I rely on my supplier's ECCN classification?

A supplier-provided ECCN is a starting point, not a defense. Under the EAR, the exporter, not the supplier, owns the classification. Supplier classifications become outdated when BIS amends the CCL, and plenty of suppliers lack the technical depth to distinguish between adjacent ECCN entries with different control thresholds. We have had situations where a supplier's ECCN was off by one subparagraph, which changed the Reason for Control entirely. Self-verification against the current CCL or a CCATS ruling through SNAP-R gives you stronger legal footing.

What is the difference between an ECCN and a Schedule B number?

An ECCN identifies items for export control licensing under the EAR. A Schedule B number is a U.S. Census Bureau statistical code tracking export volumes. The two systems are entirely unrelated, and confusing them on export documentation has led to enforcement actions.

The pattern across every major BIS enforcement action in the past year is the same: a classification decision made years ago, never re-verified, colliding with a CCL that moved on without the exporter. A single CCATS ruling costs zero dollars and gives you documented protection. The alternative, discovered during a BIS audit or a DOJ referral, tends to run six or seven figures. We talk to export teams who spend 20 hours a week on screening but have not touched their ECCN records since the original product launch. The screening matters, obviously. But the classification underneath it is what BIS actually looks at first.