EU Sanctions against Iran 2026: What Companies and Exporters Must Verify

Key data

European companies that maintain commercial or financial relationships with Iran have an immediate legal obligation: to review their counterparties against the updated sanctions lists by Decision (CFSP) 2026/1226, published and in force as of 8 June 2026. This decision amends the 2023 sanctions regulation—Decision (CFSP) 2023/1532—expanding the number of natural and legal persons subject to restrictive measures.

The reason is Iran's supply of drones and weapons to Russia for use in Ukraine, as well as support for groups such as Hezbollah, Houthi and other armed actors in the Middle East and the Red Sea, including actions that undermine freedom of navigation in the region.

What does this regulation establish?

Decision (CFSP) 2026/1226 amends Decision (CFSP) 2023/1532 by updating the lists of persons and entities subject to two types of restrictive measures:

• Asset freezing: all funds and economic resources belonging to the listed persons and entities are blocked. No European company can make funds available to them.
• Prohibition of entry into the EU: natural persons included in the lists cannot enter or transit through the territory of the European Union.

The sanctions respond to three axes of Iranian action identified by the Council:

• Supply of drones and weapons to Russia for use in the war of aggression against Ukraine.
• Support for armed groups in the Middle East: Hezbollah and Houthi, among other actors in the region.
• Actions that undermine freedom of navigation in the Middle East and the Red Sea.

The 2026 regulation does not repeal the 2023 regulation, but rather amends it by expanding or updating the lists. Compliance obligations for companies are cumulative: they must verify both the original 2023 lists and the additions introduced in 2026.

Economic and operational impact

The impact is not abstract: operating with a counterparty included in the sanctions lists exposes the company to serious criminal and administrative sanctions in the Member State where it is established. In Spain, non-compliance with EU restrictive measures can constitute a serious administrative infraction or crime, with consequences including high fines, disqualification and criminal liability of directors.

The real operational costs of compliance include:

• Immediate review of the database of suppliers, customers and partners with Iranian links or in the Middle East and Red Sea region.
• Update of counterparty screening procedures to incorporate the new lists.
• Training of the compliance and commercial team on the new listings.
• In financial entities: review of accounts, transfers and operations linked to Iranian persons or entities.
• For exporters of dual-use goods: enhanced verification before any operation destined for Iran or entities with Iranian links.

Who does it affect?

• Financial entities: banks, insurance companies and asset managers with accounts, transfers or financial instruments linked to Iranian persons or entities.
• Exporters of dual-use goods: companies that export products susceptible to civil and military use to Iran or the region.
• Companies with activity in the Middle East and the Red Sea: logistics operators, shipping companies, energy or construction companies with presence in the area.
• Importers with Iranian supply chain: any company whose value chain includes suppliers or intermediaries with links to Iran.
• Legal advisors and consultants: who provide services to clients with exposure to Iran or entities on the lists.
• Compliance departments: of any company with international operations in the region.

Practical example

A Spanish company exporting industrial electronic components—potentially classifiable as dual-use goods—has a distributor in the United Arab Emirates with which it has operated since 2022. Following the publication of Decision 2026/1226 on 8 June 2026, the compliance department must verify whether that distributor, or any entity in its group, appears on the updated lists of sanctioned Iranian entities.

If the distributor appears on the new lists—for example, for acting as an intermediary in supply operations to entities linked to Iran—the Spanish company cannot continue any commercial or financial operation with it without incurring a serious breach of the EU sanctions regime. Asset freezing also means that it cannot receive pending payments from that distributor without express authorization from the competent authority.

The immediate action is to consult the consolidated EU sanctions lists available on the European Commission sanctions portal and in the official text of Decision 2026/1226.

What should companies do now?

1. Review updated sanctions lists: immediately consult the consolidated EU lists to verify whether any counterparty—customer, supplier, partner, intermediary—appears on the new listings introduced by Decision 2026/1226.
2. Update screening systems: incorporate the new lists into automated counterparty verification systems (KYC, AML, commercial compliance) so that any new operation is filtered against updated data.
3. Suspend operations with listed counterparties: if a match is detected, immediately halt any financial or commercial transaction and consult with legal advisors specializing in international sanctions.
4. Review ongoing contracts and operations: analyze existing contracts with Iranian parties or with exposure to the Middle East and Red Sea region to identify possible subsequent breaches.
5. Train the commercial and compliance team: ensure that sales, procurement and finance teams are aware of the new obligations and the risks of operating with sanctioned counterparties.
6. Document the verification process: maintain auditable records of the checks performed, especially in financial entities and exporters of dual-use goods, to demonstrate due diligence in the event of an inspection.

The risk of inaction is concrete: non-compliance with the EU sanctions regime can result in serious criminal and administrative sanctions in Member States, including fines, disqualification and criminal liability of directors.

Official source

Consult complete regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D1226