EU Sanctions Against North Korea 2026: What Exporters and Financial Entities Must Verify

Key data

Operating with a counterparty included on the EU's list of sanctioned entities is not a minor error: it can result in criminal liability for directors and complete blocking of the transaction. Commission Implementing Regulation (EU) 2026/2278, published and in force on 12 October 2026, amends the annex to Regulation (EU) 2017/1509, updating precisely that list. There is no adaptation period: obligations are enforceable from the same day of publication.

The sanctions regime against the Democratic People's Republic of Korea (DPRK) is one of the strictest in the European legal order. It combines asset freezing with an absolute prohibition on making funds or economic resources available to those listed, whether directly or indirectly.

What does this regulation establish?

Commission Implementing Regulation (EU) 2026/2278 introduces an update to the annex of Regulation (EU) 2017/1509, which is the EU's framework instrument for sanctions against North Korea. Specifically, it modifies the list of natural and legal persons subject to the following restrictive measures:

• Asset freezing: all funds and economic resources belonging to those listed, or in their possession or under their control, are immediately blocked.
• Prohibition on making funds available: no company or person may transfer, directly or indirectly, funds or economic resources to those listed or for their benefit.

The update to the list is the usual mechanism by which the EU adapts the sanctions regime to decisions of the UN Security Council and to the Union's own intelligence. Each amendment to the annex takes immediate effect and obliges all companies domiciled or operating in the EU to update their internal controls.

Economic and operational impact

The direct impact of this regulation is not a fixed cost: it is a compliance risk that can materialize in administrative and criminal sanctions if the company does not act. The actual operational costs are those associated with the controls that must be implemented or updated:

• Review of counterparties: cost of time and tools to screen the customer, supplier and partner base against the updated list.
• Blocking of ongoing operations: if an active counterparty appears on the list, the transaction must stop immediately, with the financial and contractual impact that entails.
• Sanctions for non-compliance: the national regulations implementing international sanctions provide for administrative and criminal consequences. Reputational risk is additional.

For financial entities, the cost of not updating screening systems can be particularly high, given that they are subject to specific supervision in the area of compliance with international sanctions.

Who does it affect?

• Export companies with international activity, especially those operating in Asia or with intermediaries in third countries.
• Financial entities (banks, savings banks, payment entities, insurers) that must screen payments and customers against sanctions lists.
• Transport and logistics operators with routes or customers in risk areas.
• Companies with complex supply chains where there may be indirect exposure to listed entities.
• Advisors and consultants providing services to companies with international activity and who must verify their clients' compliance.

Practical example

A Spanish industrial machinery company has a distributor in Singapore with which it has been operating for three years. That distributor, in turn, works with an entity that has just been included in the updated annex of Regulation (EU) 2017/1509 by Regulation 2026/2278.

If the Spanish company transfers funds to its Singapore distributor after 12 October 2026 without having carried out the appropriate verification, it may be committing a breach of EU restrictive measures, even though the direct relationship is with the distributor and not with the listed entity. The prohibition covers direct and indirect transfers.

The correct action: before any payment or shipment after 12 October, verify that no entity in the chain appears on the updated list. If in doubt, halt the transaction and consult with a legal advisor specializing in international sanctions.

What should companies do now?

1. Immediately update screening systems: incorporate the revised list from the annex of Regulation (EU) 2017/1509 into counterparty verification processes. Entry into force is 12 October 2026, with no transition period.
2. Review ongoing operations: identify whether any active transaction—pending payments, contracts in execution, open credits—involves persons or entities that may have been added to the updated list.
3. Halt any suspicious transaction: if a possible match is detected, stop the transaction before proceeding and consult with a legal advisor specializing in international sanctions.
4. Document the verification process: maintain evidence that appropriate checks have been carried out. In the event of inspection or investigation, documentation is the main defense against liability.
5. Train the compliance and commercial teams: ensure that persons managing payments, contracts and relationships with international clients understand the obligation to verify counterparties against sanctions lists.
6. Review the indirect supply chain: the prohibition covers indirect transfers. Identify whether any supplier or intermediary partner has links with listed entities.

Official source

Consult full regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R2278