Picture a European manufacturer preparing a shipment for a familiar customer. The contract is signed and the goods are ready. Then a new sanctions listing raises questions about the payment intermediary. Sales wants to honour the agreement; finance is awaiting clearance; the carrier has scheduled collection. The product has not changed, but the company may no longer be able to deliver it lawfully or receive payment. This is an illustrative scenario, yet the decisions it raises are real.
Contracts can remain in force for years while the rules affecting them change within days. The consequences extend from payment to sourcing, insurance, transport and customer relationships.
Global trade continues. The obstacles are changing.
UN Trade and Development estimated in January 2026 that global trade exceeded $35 trillion in 2025, an increase of about 7% [1]. Trade continues even as the conditions for cross-border business become less predictable.
A September 2026 European Commission–EIB study captures the shift. Between 2023 and 2025, the share of EU firms reporting logistics obstacles fell from 28% to 12%. Yet 20% identified compliance with new regulation as a major obstacle and 18% cited customs and tariff changes [2]. Moving a product may be getting easier while establishing the conditions for a lawful transaction becomes harder.
Price and delivery still matter. So do the origin of components, ownership and control of intermediaries, intended end users and the jurisdictions through which payments travel.
A familiar partner can become a new risk
In July 2026, the EU’s 21st sanctions package against Russia added 51 entities to a list subject to tighter export restrictions on dual-use goods and technology. Some were established outside Russia, including in China, India, Kazakhstan, Kyrgyzstan, Türkiye and the United Arab Emirates [3]. These export-control listings are legally distinct from individual asset-freeze designations. Nor do they mean that business with an entire country is prohibited.
The rules changed again in October. On 12 October, the Council of the EU listed 826 Russian companies and 743 executives - 1,569 listings in total - under its asset-freeze regime targeting Russia’s military-industrial complex [4]. Three days later, it listed another three individuals and nine entities for activities the Council linked to sanctions circumvention [5]. The October 15 decision named Russian logistics and payment intermediaries, Turkish trading companies and organisations connected with oil transport and trading in other jurisdictions. These were targeted measures against identified persons and entities, not a general prohibition on commerce with the countries concerned.
The name on an invoice cannot always tell a company who controls the recipient, who handles the payment or where the goods ultimately go. The applicable rules and the facts of the transaction determine what is permitted.
A recent British enforcement case shows how this can surface at the payment stage. In March 2026, the UK Office of Financial Sanctions Implementation (OFSI) imposed a £390,000 penalty on Apple Distribution International Limited, an Irish subsidiary of Apple Inc., for making funds available to a designated person [6]. The finding concerned that subsidiary, not Apple Inc. For management, the practical issue is whether a problem can be identified and escalated before a payment is made.
When a longstanding contract meets a new restriction
Sabre Global Technologies had a business relationship with Ural Airlines dating to 2007. The relationship predated the airline’s designation under UK Russia sanctions in May 2022. Sabre nevertheless continued certain activities and examined alternative payment arrangements. OFSI imposed a penalty of £1,000,920.59 in May 2026 and published its decision the following month [7]. The regulator identified weaknesses in staffing, procedures and senior oversight. Sabre voluntarily disclosed the matter, cooperated with the investigation and took remedial action.
The commercial dilemma is immediate: who can halt work for a valuable customer, and how quickly can that concern reach the people authorised to decide? A contract approved years earlier is not permanent permission to perform every obligation under it.
A supply chain problem can begin with an origin claim
A shipment of birch plywood seems far removed from advanced technology. Yet in July 2026 the European Public Prosecutor’s Office reported a Polish investigation into suspected sanctions circumvention and customs and VAT fraud. According to the import documents, the plywood had been manufactured in Kazakhstan. Investigators alleged that its true origin was Russia, with estimated unpaid customs duties of approximately €206,000 and VAT of about €47,000 [8]. These are allegations in an investigation; those concerned retain the presumption of innocence.
The wider business question is how an importer verifies origin when a supplier, route or product description changes. That calls for evidence, not blanket suspicion of trade through third countries. Customs, procurement and compliance need to agree what is sufficient before delivery.
The legal status of a carrier matters too
In January 2026, French authorities intercepted the tanker Grinch and diverted it to the Gulf of Fos. On 16 February, the shipowning company was convicted through a French guilty-plea procedure for failing to justify the vessel’s nationality, an offence concerning its flag documentation under the Transport Code. The maritime prefecture announced the lifting of detention on 17 February [9]. This was not a court finding of EU sanctions circumvention.
The incident concerns shipping documentation, not a proven sanctions offence involving the cargo. Yet it exposes a practical weakness: a company may know its freight forwarder without understanding the documentation and legal status of the vessels used to fulfil its contract.
Risks can cross the boundaries of a corporate group
In September, UK tax and customs authorities published a £7.44 million compound settlement with Illumina Cambridge Limited. It concerned the company’s involvement in supplying sanctioned goods between two overseas companies within its corporate group for export to Russia and other destinations in 2022–2023 [10]. There was no need for goods to depart physically from the United Kingdom for UK rules to become relevant to the UK company’s involvement. The settlement was an alternative to prosecution. Illumina voluntarily disclosed the matter, cooperated and took remedial steps, including ceasing business involving Russia.
An intra-group transaction is not automatically outside the rules governing a company involved in another jurisdiction. Nor does the case make every parent responsible for every affiliate. Management needs visibility into where decisions, participation and legal obligations intersect.
The limits of internal controls appeared again in an October US enforcement action. On 13 October, the US Office of Foreign Assets Control announced an $11.66 million settlement with Bank of America for 475 apparent violations across several sanctions programmes - not only Russia-related measures [11]. According to OFAC, the failures included payments involving blocked banks, poorly prioritised alerts and delayed sanctions-watchlist updates. This bank-specific case cannot establish how other industries perform. It does show why having screening software is different from ensuring that alerts are prioritised, watchlists updated and exceptions resolved.
Investment decisions also face economic-security scrutiny
The same board may also be considering an acquisition, a joint venture or a technology partnership. In June 2026, the Council adopted a revised EU framework for screening foreign direct investment, with greater coordination and minimum coverage of sensitive sectors, technologies and infrastructure [12]. The new provisions have a deferred application period; they should not be described as obligations already fully in effect.
A commercially attractive investment may still be viable, but earlier scrutiny of ownership and sensitive assets can avoid surprises late in negotiations. The applicable national rules and implementation timetable remain important.
Prepared for geopolitical risk - or prepared to say so?
The European Commission–EIB study offers a revealing contrast: 64% of EU firms say they are prepared for geopolitical risks, including 73% of the largest companies, while fewer than half of SMEs say the same [2]. Nearly 90% expect exports to remain stable or grow. These are self-reported expectations, not an independent audit of compliance capability. Commercial confidence is valuable, but it says little about what happens when restrictions change during a contract.
A board can test that preparedness by examining one difficult transaction rather than another policy document. When did a change in ownership trigger re-screening? Who checked a shipment’s origin? Who could stop payment or delivery, and how long did escalation take? The European Commission recommends risk-based due diligence covering counterparties, transactions, goods and circumvention indicators [13].
Legal teams identify applicable restrictions; compliance examines counterparties and exceptions; procurement and operations assess alternatives; international specialists interpret emerging developments. Directors must ensure that these functions can act together. Delays can arise precisely when responsibility passes between those functions.
When geopolitical risk becomes a boardroom decision
The cases differ in law and circumstance: penalties and settlements, a continuing investigation and a separate maritime documentation offence. None should be presented as interchangeable. Yet they illustrate the same business problem: commercial relationships can outlast the rules under which they began.
A political statement is not necessarily a legal prohibition. Sanctions against identified persons do not automatically bar trade with their entire country. Companies need to establish which measures apply, when they take effect and how they affect existing commitments.
Management then faces a concrete test. Who reassesses a valuable contract? Can a concern reach senior management before payment or dispatch? If a transaction must be paused, can the organisation stop it in practice and manage the contractual consequences?
Compliance will not predict the next crisis. It can make a company less dependent on improvisation through documented due diligence, clear escalation authority, renewed checks and realistic operational alternatives. These are questions of corporate governance, not simply regulatory administration.
Before entering a market, directors must ask: “Are we allowed to do this?”
For a relationship intended to last, the further question is: “Will our business model remain viable if the geopolitical conditions change?”
References
[1] UN Trade and Development (2026, 15 January). 10 trends shaping global trade in 2026. https://unctad.org/news/10-trends-shaping-global-trade-2026
[2] European Commission, DG GROW (2026, 17 September). EU businesses redesign supply chains as geopolitical risks become new normal, report finds. https://single-market-economy.ec.europa.eu/news/eu-businesses-redesign-supply-chains-geopolitical-risks-become-new-normal-report-finds-2026-09-17_en
[3] Council of the European Union (2026, 23 July). 21st package of sanctions: EU hits Russian energy, financial services and crypto hard. https://www.consilium.europa.eu/en/press/press-releases/2026/07/23/21st-package-of-sanctions-eu-hits-russian-energy-financial-services-and-crypto-hard/
[4] Council of the European Union (2026, 12 October). Russia’s war of aggression against Ukraine: EU agrees largest-ever package of listings targeting almost 1600 individuals and entities. https://www.consilium.europa.eu/en/press/press-releases/2026/10/12/russia-s-war-of-aggression-against-ukraine-eu-agrees-largest-ever-package-of-listings-targeting-almost-1600-individuals-and-entities-in-russia-s-military-industrial-complex/
[5] Council of the European Union (2026, 15 October). Closing loopholes: Council lists individuals and entities for circumventing EU sanctions. https://www.consilium.europa.eu/en/press/press-releases/2026/10/15/closing-loopholes-council-lists-individuals-and-entities-for-circumventing-eu-sanctions/
[6] UK OFSI (2026, 30 March). Imposition of monetary penalty: Apple Distribution International Limited. https://www.gov.uk/government/publications/imposition-of-monetary-penalty-apple-distribution-international-limited
[7] UK OFSI (2026, 17 June). Imposition of Monetary Penalty – Sabre Global Technologies Limited. https://www.gov.uk/government/publications/imposition-of-monetary-penalty-sabre-global-technologies-limited-sgtl
[8] European Public Prosecutor’s Office (2026, 17 July). Poland: EPPO carries out investigative measures in customs and VAT fraud probe and suspected sanctions circumvention. https://www.eppo.europa.eu/media/news/poland-eppo-carries-out-investigative-measures-customs-and-vat-fraud-probe-and-suspected-sanctions-2026-07-17_en
[9] Préfecture maritime de la Méditerranée (2026, 17 February). Fin de l’immobilisation du pétrolier-cargo GRINCH dans le golfe de Fos. https://www.premar-mediterranee.gouv.fr/communiques-presse/fin-de-l-immobilisation-du-petrolier-cargo-grinch-dans-le-golfe-de-fos
[10] HM Revenue & Customs (2026, 8 September). Agreed compound settlements for strategic export and sanction offences: Illumina Cambridge Limited. https://www.gov.uk/government/publications/businesses-agreeing-to-a-compound-settlement-for-strategic-export-and-sanction-offences/agreed-compound-settlements-for-strategic-export-and-sanction-offences
[11] US Office of Foreign Assets Control (2026, 13 October). Settlement Agreement with Bank of America, N.A. https://ofac.treasury.gov/recent-actions/20261013_33
[12] Council of the European Union (2026, 8 June). Foreign investment screening: Council signs off on updated framework. https://www.consilium.europa.eu/en/press/press-releases/2026/06/08/foreign-investment-screening-council-signs-off-on-updated-framework/
[13] European Commission, DG FISMA (2024, 19 February). Guidance on due diligence. https://finance.ec.europa.eu/publications/guidance-due-diligence_en
