Sanctions Circumvention Has Become a Growing Focus of Sanctions Compliance in 2026.
In April 2026, the EU adopted its 20th sanctions package against Russia and activated its anti-circumvention tool for the first time. The move banned specific exports to Kyrgyzstan over what the European Commission called a “systematic and persistent failure” to stop re-exports to Russia. In the United States, OFAC has increasingly focused enforcement on gatekeepers: the accountants, attorneys, and corporate service providers who enable circumvention without executing it directly.
These regulatory changes mean compliance teams now need more than sanctions screening alone to investigate indirect sanctions exposure. Here, we use the term sanctions circumvention intelligence to describe the data and analysis that supports those investigations.
At a glance, what’s new in 2026:
- EU anti-circumvention tool used against a named country for the first time
- Russian crypto-asset providers and the digital ruble banned outright by the EU
- Gatekeeper enforcement expanded as an OFAC focus
- Joint OFAC-OFSI guidance published for the first time, covering both the US and UK regimes
Together, these changes make indirect exposure and third-country intermediary relationships more important to check during a sanctions investigation than they were a year ago.
Also Read: How Sanctions Screening Works? Sanctions Data, PEP Lists, and Criminal Entity Checks Explained
What Is Sanctions Circumvention Intelligence?
For the purpose of this article, sanctions circumvention intelligence is defined as intelligence derived from compliance data and analysis of indirect sanctions exposure, which includes associations with sanctioned individuals, entities, and jurisdictions that can’t be discovered with a simple name-matching technique using sanctions lists, PEPs data, criminal entities, and regulatory changes.
So, why is traditional screening not enough? Traditionally, sanctions screening answers one specific question: does this particular party appear on a sanctions watchlist or other risk data? Such an approach is necessary, but it is not sufficient anymore since sanctioned parties try to stay away from direct presence in transactions when sanctions measures are implemented. This is done using third-country proxies, shell companies, front companies, cryptocurrency wallets, and false trade documents.
How does circumvention intelligence complete traditional screening? If the organisation already uses sanctions screening software, circumvention intelligence serves as a solution for a completely different need. With sanctions screening, it is confirmed whether a counterparty appears on a sanctions watchlist or other risk data.
Circumvention intelligence adds related entity information and recent regulatory changes that help identify whether a counterparty is connected to a sanctioned party through a structure designed to hide that relationship.
Recent EU and OFAC actions show that regulators increasingly expect firms to investigate indirect exposure, not simply screen names against sanctions lists.
Also Read: How to Find Global Sanctions Data, PEP Lists, and Criminal Entity Records in 2026?
EU Sanctions Package 20: What’s Changed for Compliance Teams?
The 20th sanctions package introduced more than additional designations. It also changed the enforcement mechanism the EU uses against circumvention itself.
The anti-circumvention tool, activated for the first time: For the first time since the tool was introduced in 2023, the EU used it against a named third country. The measure followed a sharp rise in re-export activity: according to the Council of the European Union, exports of certain high-risk goods to countries that then re-export them to Russia have risen 800% since the war began. Kyrgyzstan became the first country subject to destination-specific export bans as a result.
Restrictions on financing: In addition, there were new restrictions on the means of payment and financial services used by sanctioned persons to circumvent limitations. After late May 2026, EU operators are not allowed to conduct any transactions involving the crypto-asset service providers or exchanges located in Russia, and this prohibition includes the digital ruble – an official central bank digital currency of Russia viewed as a means of safeguarding Russian individuals from sanctions.
Restrictions on banks: There is a restriction on the transactions made with 70 additional banks which are operating in Kyrgyzstan, Laos, and Azerbaijan, according to the data provided by the EU. They are considered to be the ones supporting sanction evasion. In addition, providing managed security services to Russian authorities and state-owned enterprises becomes prohibited.
21st package, already proposed: The EU has already presented its 21st package, issued in June 2026, where new rules for bunker vessels are added. It means ships that are fueling others in the open water to support the shadow fleet of oil tankers of Russia that does not need to use monitored ports anymore.
How Is the US Responding to Circumvention in 2026?
The US government has adopted a policy of sanctions enforcement and not the creation of fresh legislation to counter sanctions evasion.
Shadow fleet of Iran: OFAC sanctioned more than 30 people, businesses, and vessels in February 2026 for being members of Iran’s shadow fleet; OFAC targeted the oil-producing shipping network and the procurement network, which transformed the produced revenues to weapons capability.
Economic Fury: The US Treasury followed up with this strategy in its further sanctions moves. As part of its Economic Fury campaign, mentioned in press releases of the Treasury, OFAC sanctioned 19 vessels by May 2026; these were all at once vessels of the three categories mentioned above.
Gatekeeper attention: Further, the Treasury Department has also indicated that gatekeepers will come under intense attention in 2026: these are investment advisors, accountants, lawyers, and corporate services whose activity may inadvertently protect sanctioned money.
Joint OFAC-OFSI guidance: In June 2026, OFAC and the UK Office of Financial Sanctions Implementation issued a joint guide comparing sanctions regimes of the two jurisdictions. This guide gives the clearest indication to date about the expectation that these regimes should be known together.
How Is Crypto Being Used to Evade Sanctions?
Crypto has also become a popular method of sanctions evasion. Recent regulatory activities reveal the same trend.
By prohibiting crypto asset services and the digital ruble instead of providing guidance on the use of these instruments, the EU recognises crypto and digital currencies as crucial for avoiding sanctions that currently apply.
Regulators have discovered the use of digital currencies by Iranian and Venezuelan networks as a method of circumventing sanctions and keeping the trade flowing even in the absence of banking institutions.
Monitoring of crypto transactions requires additional measures compared with monitoring of banking transactions due to pseudonymous wallets and lack of exchange-level screening making crypto channels difficult to monitor through mechanisms established for correspondent banking. Regulatory agencies are more concerned about limiting certain types of activities in the field of cryptocurrencies in general.
What Data Supports Sanctions Circumvention Intelligence?
Compliance functions typically combine several sources rather than relying on one sanctions database:
- Global sanctions lists covering designations across jurisdictions, not just one regulator’s list
- Politically exposed persons data, since circumvention networks frequently route through individuals connected to sanctioned entities before those individuals are designated themselves
- Warrants and criminal entity records, which often surface a facilitator before any sanctions authority does
- Regulatory updates, since packages like the EU’s 20th and 21st introduced material changes within weeks of each other
No single dataset catches every circumvention risk on its own, which is why these sources work best combined rather than checked separately.
How Can Compliance Teams Build This Into Their Programs?
There are three key developments which will affect the remainder of 2026:
Avoid the name match trap: Conduct cross-referencing of counterparties on all sanctions, PEP and criminal entity lists simultaneously instead of conducting each check in isolation.
Apply risk assessments beyond the financial sector: The logistics, insurance, shipping and managed security services sectors now form part of sanctions circumvention risk assessments through the latest EU package, even for companies who do not consider themselves sanctions-related.
Consider the risk of digital asset exposure ongoing: The 2026 crypto bans from the EU demonstrate that regulators consider this risk anything but marginal.
Sanctions circumvention is no longer a narrow concern for financial institutions alone. As the EU’s 20th and proposed 21st packages and OFAC’s 2026 enforcement activity show, regulators are expanding the scope of sanctions compliance expectations. What compliance teams need is connected data across sanctions, PEP, and criminal entity records: reliable compliance data that gives them context beyond a single name on a single list.