EU Sanctions against Moldova 2026: what companies and banks must verify

Key data

Any Spanish company or financial entity operating with Moldovan counterparties or with natural persons linked to Moldova has an immediate legal obligation from 21 April 2026: to verify that none of its commercial or financial relationships involve persons or entities included in the updated list by Council Implementing Regulation (EU) 2026/898.

This regulation does not require transposition into Spanish law. It enters into force directly in all Member States. Ignoring it is not an option: the Spanish sanctioning framework for non-compliance with international sanctions contemplates both administrative and criminal consequences.

What does this regulation establish?

Council Implementing Regulation (EU) 2026/898 updates the list of persons and entities subject to restrictive measures under Regulation (EU) 2023/888, which is the base instrument adopted by the EU Council to respond to actions destabilizing the Republic of Moldova.

The restrictive measures that may be applied to the designated parties are two:

• Freezing of assets in European territory: any property, account or financial resource of the sanctioned parties located in the EU is blocked.
• Prohibition of entry to the EU: the designated parties cannot access the territory of any Member State.

The obligation for companies and banks is clear: not to maintain commercial or financial relationships with any person or entity included in the list. This includes payments, transfers, provision of services, supply of goods or any other transaction.

As it is an EU implementing regulation, it has direct effect in Spain. There is no need to wait for any national development rule: the obligation is enforceable from the date of entry into force.

Economic and operational impact

The impact is not only for those who regularly operate with Moldova. Any company that has suppliers, customers, partners or financial counterparties that may be linked to designated persons must act.

The concrete operational risks are:

• Blocking of transactions: banks are obliged to reject or freeze operations with sanctioned parties. If a company attempts to execute a payment to a designated party, the financial entity must block it and notify the authorities.
• Criminal and administrative exposure: non-compliance with international sanctions in Spain is not a minor infraction. Spanish regulations on the application of international sanctions provide for serious consequences, including criminal liability for the managers involved.
• Reputation and due diligence: maintaining relationships with sanctioned parties, even through ignorance, can generate reputational consequences and legal liability. Due diligence is not optional.

For financial entities, the operational burden is particularly relevant: they must update their counterparty screening systems with the new list published on 22 April 2026.

Who does it affect?

• Financial entities: banks, savings banks, payment entities, fund managers and any financial intermediary with operations in or towards Moldova or with Moldovan counterparties.
• Exporting and importing companies with commercial activity linked to Moldova or to Moldovan natural or legal persons.
• Companies with investments or shareholdings in Moldovan entities or with business partners in that country.
• Law firms and advisors providing services to clients with Moldovan links: must verify that their clients are not designated.
• Sanctioned natural persons: directly affected by the freezing of assets and prohibition of entry to the EU.

Practical example

A Spanish logistics company has a transport contract with a Moldovan company with which it has been operating for three years without incident. On 21 April 2026, Council Implementing Regulation (EU) 2026/898 enters into force, updating the list of sanctioned parties.

If the owner or majority shareholder of that Moldovan company has been included in the list of designated parties, the Spanish company has the immediate obligation to suspend any payment or provision of services to that counterparty. If its bank detects the operation before it does and blocks it, the company may find itself in a situation of breach of contract with its end customer, in addition to having to justify to the authorities why it did not carry out prior verification.

The solution is preventive: consult the updated list before executing any transaction with Moldovan counterparties, not after the bank rejects the payment.

What should companies do now?

1. Consult the updated official list: access the Council Implementing Regulation (EU) 2026/898 published on 22 April 2026 and identify whether any of its counterparties are designated.
2. Review all active commercial and financial relationships with Moldovan counterparties or with natural persons linked to Moldova: customers, suppliers, partners, payment beneficiaries.
3. Update counterparty screening systems: especially in financial entities, incorporate the new list into compliance filters immediately.
4. Suspend any pending operations with counterparties appearing on the list until receiving specialized legal advice.
5. Document the verification process: in case of inspection or investigation, the company must be able to prove that it carried out due diligence before executing the operations.
6. Consult a legal advisor specialized in international sanctions if there is any doubt about the status of a counterparty or about the specific obligations applicable to the company.