What this risk is, and why it matters
Sanctions enforcement has become aggressively extraterritorial and unpredictable. Overlapping US, UK, EU and UN regimes can criminalise the same transaction differently depending on which side of an opaque political situation it sits on. The Russia-Ukraine sanctions wave doubled the addressable surface overnight; export-controls enforcement has tightened; secondary-sanctions reach has extended. Programs designed pre-2022 will routinely fail current audits without remediation.
Legal and regulatory framework
OFAC, OFSI, EU Council Regulations, BIS Export Administration Regulations and equivalents prescribe sanctions screening, blocked-property reporting and licensing obligations. Secondary-sanctions reach catches non-US firms transacting with sanctioned parties. Recent enforcement has hit non-bank firms (technology, shipping, professional services) for transactions that flowed through correspondent banking. Voluntary self-disclosure incentives have widened.
Typical scenarios and impact
Documented outcomes include OFAC penalties reaching nine-and-ten-figure range against banks and oil-trading firms, non-bank-firm penalties in the eight-and-nine-figure range, criminal prosecutions of senior officers, consent-decree programme rebuilds, and correspondent-banking termination. Recent Russia-related enforcement has produced settlements in the hundreds of millions per company. Reputational damage has correlated with material customer attrition.
Mitigation framework and when to engage an expert
Run sanctions-screening at customer-onboarding and at every transaction. Maintain a high-risk-jurisdiction register with clear engagement rules. Document the licensing position for any borderline transaction. Train customer-facing teams on red flags. Engage sanctions counsel for programme design and for any borderline-transaction decision; engage specialist screening providers for population-level audits; engage voluntary-self-disclosure counsel as soon as credible violation surfaces.