EU Sanctions on Iran 2026: What Companies with Iranian Commercial Links Must Review

Key data

If your company operates with Iranian counterparties—whether in goods trade, financial services, transport or logistics—this update directly affects you. Council Decision (CFSP) 2026/1892, published on 31 July 2026 in the EU Official Journal, expands the restrictive sanctions against Iran originally established in 2023, adding new persons and entities to the list of designees.

The reason: Iranian supply of drones and weapons to Russia for use in Ukraine, and support for armed groups such as Hezbollah, the Houthis and other militias active in the Middle East and the Red Sea. The EU responds with increased economic and diplomatic pressure, and European companies are the instrument of that pressure: they are legally obliged not to operate with the sanctioned parties.

What does this regulation establish?

Council Decision (CFSP) 2026/1892 amends Decision (CFSP) 2023/1532, which already established a sanctions regime against Iran for its involvement in the Ukraine conflict and destabilization of the Middle East. The new decision expands the list of designated persons and entities, to which the following restrictive measures apply:

The sanctions respond to three axes of Iranian action identified by the EU Council:

• Supply of drones and weapons to Russia for use in the war against Ukraine.
• Military and financial support to Hezbollah and other militias in the Middle East region.
• Support for the Houthis and their actions in the Red Sea, which compromise international freedom of navigation.

This decision is part of the EU sanctions regime against Iran that has been in force since 2023 and is updated periodically to add new designees as new Iranian involvements are identified.

Economic and operational impact

The direct impact for European companies is not a fixed fine: it is the risk of breach of international sanctions, which can result in serious administrative sanctions, blocking of operations and severe reputational damage. The concrete operational consequences are:

• Blocking of payments and collections with Iranian entities listed in the updated list, even if the commercial relationship pre-existed.
• Paralysis of shipments and logistics operations if the carrier, recipient or intermediary is designated.
• Freezing of assets of Iranian counterparties that may be deposited or managed in European financial entities.
• Urgent review of existing contracts with Iranian entities to verify whether any party has been added to the list.

For financial entities (banks, insurers, asset managers), the obligation is twofold: they must freeze assets of designees that are in their custody and refrain from processing any transactions in their favor. Non-compliance can result in regulatory investigations and sanctions by the competent national authorities.

Who does it affect?

• Import and export companies with commercial activity with Iran or with Iranian intermediaries.
• Financial and banking entities that manage accounts, transfers or assets linked to Iranian persons or companies.
• Transport and logistics companies that operate routes with stops or destinations in Iran, or that work with Iranian shipping lines or airlines.
• Insurance companies that cover operations, shipments or assets related to Iranian entities.
• Technology and defense companies with supply contracts or technology transfer to Iran.
• Legal advisors, consulting firms and auditors that provide services to clients with Iranian exposure and must verify their clients' compliance.
• Compliance departments and CFOs of any company with international operations that include the region.

Practical example

Imagine a Spanish industrial machinery company that has an existing supply contract with an Iranian engineering company. Following the publication of Council Decision (CFSP) 2026/1892 on 31 July 2026, the compliance department reviews the updated list of designees and detects that the Iranian purchasing company—or one of its principal shareholders—has been added to the sanctions list.

At that moment, the Spanish company has the immediate legal obligation to:

1. Suspend any pending shipment of goods.
2. Block collection of outstanding invoices if payment comes from the designated entity.
3. Notify its banking entity so it does not process related transfers.
4. Consult with legal advisors specialized in international sanctions before taking any further action.

Failing to do so—even through ignorance of the list update—does not exempt from liability. National export control authorities and financial regulators can initiate investigations and apply administrative sanctions.

What should companies do now?

1. Immediately review the updated list of designees published in the EU Official Journal (OJ:L_202601892) and cross-reference it with your database of Iranian clients, suppliers and partners.
2. Update sanctions screening systems (AML/KYC compliance tools) to incorporate the new designees from Council Decision (CFSP) 2026/1892.
3. Preventively suspend any pending transactions with Iranian counterparties until confirming they do not appear on the updated list.
4. Notify your banking entity if you detect that any client or supplier has been designated, to coordinate the blocking of financial operations.
5. Review existing contracts with international sanctions compliance clauses and activate resolution mechanisms if appropriate.
6. Document all actions taken as evidence of due diligence in case of regulatory inspections.
7. Consult with legal advisors specialized in foreign trade and international sanctions if there is significant exposure or doubts about specific cases.

Official source

View complete regulation on official source — EUR-Lex OJ:L_202601892

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601892