Sanctions are measures imposed by states or supranational organisations restricting transactions with designated individuals, companies, or countries. The EU's autonomous sanctions programmes, implemented by Council Regulations, prohibit EU persons from engaging in specified transactions with designated parties and, increasingly, from providing services (including legal, accounting, and advisory services) to certain categories of restricted counterparties.
The asset freeze and economic restrictions imposed on Russia following the February 2022 invasion of Ukraine represented the largest and most complex expansion of the EU's sanctions regime in decades, with multiple successive sanction packages adding new designations, new restrictions, and new compliance obligations for businesses operating in and through the EU.
Anti-money laundering (AML) obligations are distinct from sanctions but closely related in their operational demands. The EU's AML framework (currently being consolidated into the new AML Regulation and the AMLA Regulation creating a dedicated EU AML supervisory authority) requires designated entities to implement customer due diligence procedures, enhanced due diligence for high-risk customers, transaction monitoring, and suspicious activity reporting. Both sanctions screening and AML procedures share a common operational foundation: knowing who you are dealing with, verifying their identity, and checking them against relevant watchlists and risk indicators.
Sanctions screening is the process of checking customers, suppliers, transaction counterparties, and beneficial owners against sanctions lists maintained by relevant authorities, principally the EU's consolidated list of persons, groups, and entities subject to EU financial sanctions; the OFAC SDN list (US); the UN Security Council consolidated sanctions list; and the lists of the UK Office of Financial Sanctions Implementation (OFSI). For businesses with EU, US, and UK connections, multi-jurisdictional screening is often necessary.
Screening must cover not just the direct counterparty but also beneficial owners, the natural persons who ultimately own or control a company. A corporate counterparty that is not itself on a sanctions list may be controlled by a designated individual, making transactions with that entity a sanctions violation. Understanding beneficial ownership structures, particularly for counterparties in jurisdictions with limited corporate transparency, is one of the most operationally demanding aspects of a robust sanctions compliance programme.
The EU's AML framework applies to a defined set of obliged entities: credit institutions, financial institutions, asset management firms, notaries, lawyers (in specified transaction contexts), accountants, real estate agents, trust and company service providers, virtual asset service providers, and certain high-value goods dealers. Obliged entities must perform customer due diligence (CDD) on all customers, consisting of identifying and verifying the customer's identity, identifying and verifying beneficial owners, understanding the purpose and nature of the business relationship, and conducting ongoing monitoring of the relationship and transactions.
Enhanced due diligence (EDD) is required for customers that present a higher risk of money laundering or terrorist financing, including politically exposed persons (PEPs) and their close associates, customers from high-risk third countries designated by the Commission, and business relationships or transactions where the risk assessment indicates elevated risk. EDD requires more intensive verification, investigation of the source of wealth and funds, and enhanced ongoing monitoring.
Yes. EU sanctions regulations bind all EU persons (natural and legal) regardless of sector. A manufacturing company, a software firm, or a professional services provider that transacts with a designated party violates EU sanctions law even if it is not an obliged entity under the AML framework. The AML framework imposes specific procedural due diligence obligations only on obliged entities, but the sanctions prohibition is universal. Every EU business should have a baseline process for checking transaction counterparties against EU sanctions lists, at minimum at the point of entering into new business relationships.
EU sanctions violations are enforced at national level, and the penalties vary by member state. In Belgium, sanctions violations are criminal offences under the Law of 13 May 2003 (as amended) and can attract imprisonment and substantial fines for individuals and legal persons. Regulatory authorities may also freeze assets or restrict activities pending investigation. The trend across EU member states has been towards stronger enforcement and higher penalties, reflecting both political pressure and the CJEU's case law on the effectiveness of sanctions enforcement.
A match during screening (whether a true match or a false positive) requires immediate escalation and investigation before any transaction proceeds. The investigation should determine whether the match is a true match (same person or entity as the designated party) or a false positive (a different person with a similar name). Where a true match is confirmed, the transaction must be refused, assets must be frozen where applicable, and the relevant competent authority must be notified. Proceeding with a transaction after a confirmed sanctions match is a criminal offence. The investigation and its outcome should be documented regardless of the result.
