Process Safety · Lesson 55 · 9 min read

Sand Production Can Erode a Pressure Boundary Faster Than Expected

Produced sand is not only a housekeeping problem. Entrained solids can strike pipe walls and equipment at high velocity, removing metal most aggressively where flow changes direction or accelerates. At the same time, deposited sand can plug instruments, interfere with valves and complicate draining. A production system can therefore lose both containment strength and the protective functions intended to detect or stop the event.

The hazard mechanism: solids concentrate damage

Sand carried by well fluids has momentum. Impact is concentrated at elbows, tees, restrictions, choke outlets and other locations where velocity or flow direction changes. Two-phase flow can make the local pattern less predictable. Erosion may be highly localised, so an average wall-thickness trend or inspection at a convenient straight length can miss the controlling point.

Sand also settles when velocity falls. Accumulation can obstruct drains, level bridles and instrument connections. It may prevent corrosion inhibitor from reaching the metal surface, cause valves to seize, or create an intrusive cleaning task. The hazard is therefore a connected system: reservoir behaviour, operating envelope, sand detection, erosion prediction, inspection, shutdown functions and removal methods all influence barrier health.

What official offshore guidance says

UK HSE's offshore loss-of-containment inspection guide identifies several sand hazards. It notes that sand plugging can seize valves and compromise emergency-shutdown action, deposits can interfere with corrosion control and level instrumentation, and accumulated material can require operator intervention. HSE expects a sand-management strategy, defined production limits where sand is allowed, monitoring with calibrated instruments, trend review, wall-thickness checks at critical locations and action when alarm limits are exceeded.

HSE's pipework guidance adds that erosion is promoted by solid particles and is often localised at restrictions or changes of direction. It expects operators to assess foreseeable process deviations, choose compatible materials and address phenomena such as velocity, vibration, pressure surge and two-phase flow in design and operating review. These requirements turn a sand alarm into an operating decision, not simply a data point.

Operational analysis: connect the signal to action

A sand-management system must state what each indication means and what action follows. A calibrated acoustic monitor may show a changing trend, but the relationship between its signal and actual sand rate depends on installation, flow regime and validation. One monitor cannot automatically represent every well or branch. Operators also need production information, well history, process conditions and inspection evidence.

When a limit is exceeded or evidence conflicts, the response must protect the pressure boundary. Options may include reducing rate, adjusting choke strategy, routing differently, isolating a well or shutting in under the approved plan. Continuing at the same condition while waiting for the next inspection transfers an erosion uncertainty into a containment gamble. The safe action depends on the installation's assessed limits and technical authority—not a universal rate or alarm value.

Hypothetical FPSO example: a rising sand trend

Hypothetical example—not a documented incident: An FPSO brings a mature well back online after an intervention. The sand monitor downstream of the production choke rises above its normal trend while total flow remains within the usual target. A nearby level transmitter also begins to fluctuate.

The control-room operator follows the approved response instead of dismissing the signal as instrument noise. The team reduces the well rate, checks monitor health and process conditions, reviews the well's sand history, and verifies the affected separator level through independent evidence. Integrity specialists confirm that the inspection plan covers the choke outlet, downstream bends and other predicted impact points. The well remains within the authorised restricted condition until the responsible technical authority accepts the evidence. This example does not prescribe a universal sand limit, production rate or inspection interval.

Critical controls

Defined operating envelope: set installation-specific sand limits, escalation points and approved responses using reservoir, process, materials and integrity input.

Reliable detection: calibrate monitoring devices, validate assumptions and trend results with relevant flow conditions. Treat unexpected changes or disagreement between indicators as weak signals requiring investigation.

Targeted integrity evidence: inspect credible high-erosion locations with suitable methods and frequency. Use actual findings to update models, limits and production decisions.

Functional protective systems: ensure sand cannot silently disable level measurement, drains, valves or shutdown elements. Manage cleaning and removal as planned breaking-containment work.

Leadership actions

Leaders should require clear ownership across subsurface, production, integrity and process safety. The sand-management strategy must connect well behaviour to topsides consequences and specify who may accept continued operation when evidence is uncertain. Verification should test whether monitoring, inspection and response work in practice.

Production targets must not normalise repeated sand alarms, unstable level indication or overdue thickness checks. Learning from inspected bends and removed deposits should update the strategy for similar wells and equipment.

Three practical actions

• Map the impact points: trace one sand-producing well through chokes, bends, tees, vessels, instruments and drains.
• Test the decision path: confirm who receives the alarm, what evidence is checked, and which condition requires rate reduction or shutdown.
• Compare model with metal: review recent thickness results against predicted erosion locations and change the plan when evidence disagrees.

Takeaway and team discussion

Key takeaway: sand management is a live containment barrier only when production limits, monitoring, inspection and operating action stay connected.

Discussion question: which current sand signal or inspection assumption would expose us most if it were wrong, and what independent evidence can test it?

Continue in the Process Safety hub, and connect this lesson with localised wall loss, instrument connection integrity and mechanical integrity.

Verified primary references

1. UK HSE: Inspection of Loss of Containment—sand-management guidance.
2. UK HSE: Design codes—pipework, erosion and operational demands.
3. UK HSE: Design codes—plant, localised erosion and solids.
4. IOGP Report 638: Process Safety Fundamentals—operating limits and weak signals.

Video check: no directly relevant official incident or technical video specifically addressing offshore produced-sand erosion was identified, so no unrelated video is embedded.

Published and sources checked 6 November 2026. Educational discussion only: apply the installation's approved sand-management strategy, operating limits, integrity plan, alarm response and safety case.

Discuss this article in the comments →

Register interest in future HSSE email updates