Executive Summary

This week was dominated by the convergence of two major sanctions risk themes:

1. The continued expansion of Russia sanctions enforcement, particularly targeting financial institutions, crypto platforms, third-country facilitators and sanctions circumvention networks.
2. The deterioration of the Iran security environment, where military escalation has occurred alongside ongoing diplomatic engagement, creating significant uncertainty for financial institutions, commodity traders and shipping companies.

For compliance teams across the GCC and CIS regions, the key message is that regulators are increasingly focused on facilitation risk rather than direct exposure risk. Authorities are no longer concentrating solely on sanctioned parties themselves but on the banks, intermediaries, logistics providers, traders and technology platforms enabling access to the international financial system.

1. Russia: EU Moves Towards 21st Sanctions Package

The European Union proposed its 21st Russia sanctions package, representing one of the most significant financial sector measures seen since 2022. The package includes:

• Asset freezes and transaction restrictions on almost 90 additional banks.
• Measures targeting crypto platforms facilitating sanctions evasion.
• Restrictions on oil traders and refining networks.
• Controls on drone-related materials and dual-use technologies.
• Additional action against Russia’s shadow fleet.

Why It Matters

The package demonstrates a clear evolution in sanctions strategy.

Rather than simply adding Russian entities to sanctions lists, regulators are increasingly targeting:

• Financial infrastructure.
• Alternative payment mechanisms.
• Third-country intermediaries.
• Evasion ecosystems.

This creates heightened risk for GCC-based financial institutions processing transactions involving:

• Central Asia.
• CIS jurisdictions.
• Crypto service providers.
• Commodity trading structures.

Compliance Takeaway

Institutions should review:

• Correspondent banking relationships.
• Crypto-related customer exposure.
• Trade finance involving CIS jurisdictions.
• Ultimate beneficial ownership structures involving intermediary companies.

2. Iran: Escalation Continues Despite Diplomatic Efforts

The Middle East security environment remains highly unstable.

This week saw:

• Continued US military strikes against Iranian-linked military infrastructure.
• Iranian threats regarding regional security.
• Ongoing diplomatic efforts aimed at preserving ceasefire discussions.
• Rising concerns regarding freedom of navigation through the Strait of Hormuz.

Meanwhile, the European Union imposed new sanctions against individuals and entities linked to actions affecting maritime traffic through the Strait of Hormuz.

Why It Matters

Many organisations continue to assume that negotiations with Iran imply sanctions relief.

Current developments suggest the opposite:

• Enforcement activity remains active.
• New sanctions continue to be imposed.
• Shipping and maritime risk is increasing.
• Energy markets remain vulnerable to disruption.

Compliance Takeaway

Financial institutions should maintain enhanced monitoring of:

• Iranian-linked shipping.
• Oil trading structures.
• Maritime logistics providers.
• Dual-use goods transactions.
• Payments involving regional intermediaries.

3. OFAC Activity Signals Continued Enforcement Focus

Recent US sanctions actions included:

• New Iran-related designations.
• Additional non-proliferation measures.
• Russia-related updates and amendments.
• Continued use of sanctions authorities alongside diplomatic engagement.

Why It Matters

The United States continues to demonstrate a pattern seen throughout 2026:

Negotiation does not equal enforcement relaxation.

Even while diplomatic channels remain open, sanctions designations and enforcement actions continue.

This remains particularly relevant for organisations assuming that geopolitical engagement automatically reduces sanctions exposure.

4. United Kingdom: Ongoing Russia Enforcement Activity

The UK introduced additional Russia-related designations and maintained its focus on financial and commercial facilitators supporting Russian interests. Recent actions continue to target individuals and networks linked to sanctions circumvention and alternative payment mechanisms.

Why It Matters

The UK is increasingly aligning enforcement efforts with the US and EU while maintaining flexibility to pursue its own autonomous designations.

For firms operating across multiple jurisdictions, divergence between UK, EU and US measures remains a key compliance challenge.

Key Risk Themes for Compliance Teams

1. Third-Country Facilitation

The most significant enforcement trend of 2026 remains the targeting of:

• Trading companies.
• Payment intermediaries.
• Logistics providers.
• Crypto platforms.
• Professional service firms.

Authorities increasingly view these entities as critical enablers of sanctions circumvention.

2. Maritime Risk

Iran-related disruptions and continued shadow fleet activity are increasing maritime sanctions exposure.

Particular attention should be paid to:

• Vessel ownership changes.
• AIS manipulation.
• Ship-to-ship transfers.
• Complex commodity trading chains.

3. Financial Sector Scrutiny

Banks should expect continued focus on:

• Correspondent banking controls.
• Transaction monitoring effectiveness.
• Escalation decision-making.
• Documentation of sanctions-related judgements.

Outlook

Looking ahead, compliance teams should monitor:

• Final approval and implementation of the EU’s 21st Russia sanctions package.
• Further OFAC action targeting Iranian oil exports and military-linked networks.
• Additional UK autonomous Russia designations.
• Potential sanctions implications arising from continued instability around the Strait of Hormuz.
• Increased scrutiny of crypto-enabled sanctions evasion.

Comply Sphere Advisory Assessment

The sanctions environment is becoming less about identifying obvious designated parties and more about identifying indirect facilitation risk.

The institutions that will manage sanctions risk most effectively over the next 12 months are those that can demonstrate:

• Strong ownership and control analysis.
• Effective transaction risk assessment.
• Enhanced third-country exposure reviews.
• Clear documentation of decision-making rationale.

In an environment where enforcement agencies increasingly focus on the ecosystem surrounding sanctioned actors, understanding why a transaction was approved may become just as important as the approval decision itself.

Follow Comply Sphere Advisory for daily sanctions intelligence:
https://t.me/complysphere