EU Sanctions against Bosnia 2026: what companies and banks must verify

Key data

Exporting companies and financial institutions with operations in Bosnia and Herzegovina have an active compliance obligation from 30 March 2026. On that date, Council Decision (EU) 2026/763 entered into force, amending Decision 2011/173/CFSP and updating the list of persons and entities subject to restrictive measures for obstructing the Dayton Agreement or threatening the country's stability.

This is not a newly created regulation: it is an update to a sanctions regime that has been in force since 2011. What changes now is the composition of the list of sanctioned individuals. Operating with any of them, even indirectly, exposes the company to criminal and administrative consequences in its Member State.

What does this regulation establish?

Decision (EU) 2026/763 amends Decision 2011/173/CFSP, the European sanctions framework targeting persons and entities that obstruct the implementation of the Dayton Peace Agreement or threaten the political and institutional stability of Bosnia and Herzegovina.

The March 2026 update introduces changes to the list of persons and entities subject to the following restrictive measures:

• Asset freeze: all funds and economic resources belonging to listed persons or entities are blocked. No company or bank may make funds available to them.
• EU entry ban: natural persons included on the list may not enter or transit through the territory of the European Union.

This type of list update is common in EU sanctions regimes: the Council periodically reviews who is included, adding new subjects or removing others whose situation has changed. The obligation for companies is to verify the updated list each time a modification is made.

The regulation does not specify in the published text the specific names of persons added or removed in this update: that detail appears in the annexes to the Decision, accessible at the official source on EUR-Lex.

Economic and operational impact

The direct impact on companies is not a fixed cost: it is a risk of serious criminal and administrative penalties if they operate with a counterparty included on the updated list. Consequences vary by Member State, but in Spain non-compliance with EU restrictive measures may result in:

• Significant administrative penalties imposed by the competent authorities.
• Criminal liability for the company's directors and managers.
• Blocking of operations and review of ongoing contracts.

The operational impact is immediate: from 30 March 2026, any payment, transfer, provision of services or supply of goods to a listed person or entity is prohibited. There is no grace period.

Financial institutions also have specific control obligations: they must freeze assets of sanctioned individuals detected in their systems and notify the authorities. For exporters, the obligation is to verify the recipient before each transaction.

Who is affected?

• Financial institutions (banks, insurers, fund managers) with clients, accounts or transactions linked to Bosnia and Herzegovina.
• Exporting companies that sell goods or services to counterparties in Bosnia and Herzegovina.
• Importing companies that purchase products or services originating from Bosnia and Herzegovina.
• Companies with subsidiaries, partners or joint ventures in Bosnia and Herzegovina.
• Advisors and consultancies that provide services to clients with operations in the country and act as intermediaries in transactions.
• Compliance and legal departments of any business group with exposure to the Western Balkans region.

Practical example

A Spanish industrial machinery company has a distributor in Sarajevo with whom it has been operating for three years. On 30 March 2026, Council Decision (EU) 2026/763 enters into force, updating the list of sanctioned individuals.

If that distributor — or its owner — has been added to the list in this update, any shipment of goods, invoice collection or transfer made from that date onwards constitutes a breach of EU restrictive measures, even if the contract predates the update and the company was unaware of the change.

The company must review the updated list before executing any pending transaction with that counterparty. If it finds that the counterparty appears on the list, it must halt the operation, make no payments or deliveries, and seek advice from legal counsel specialised in international sanctions to determine the steps to take before the competent authorities.

What should companies do now?

1. Review the updated list of sanctioned individuals by accessing Decision (EU) 2026/763 on EUR-Lex (CELEX:32026D0763) and checking the annexes containing the listed names.
2. Cross-reference the list against the company's counterparty database: clients, suppliers, partners, distributors and any natural or legal person with whom commercial or financial relations are maintained in Bosnia and Herzegovina.
3. Halt any pending transactions with counterparties appearing on the list until specific legal advice has been obtained.
4. Update due diligence procedures to include verification against EU sanctions lists for each new transaction with counterparties in Bosnia and Herzegovina, and on a periodic basis for existing relationships.
5. Train the compliance and operations team on the verification obligation and the consequences of non-compliance: serious criminal and administrative penalties in Spain and across all other Member States.
6. Document all verifications carried out as evidence of due diligence, particularly in financial institutions subject to regulatory supervision.

Official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, please consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D0763