EU Sanctions against Russia 2026: What Companies with Russian Links Must Review

Key data

Any Spanish or European company operating with Russian counterparties — whether in payments, exports, investments or services — has an active compliance obligation as of 21 April 2026. The Council Decision (CFSP) 2026/884 modifies the sanctions regime established by Council Decision (CFSP) 2024/2643 and may have incorporated new natural or legal persons into the designated lists, or adjusted the restrictions applicable to already-listed entities.

This is not a regulation that affects only large corporations. Any exporting company, bank, fund manager or service provider with direct or indirect relationship with Russia must take action.

What does this regulation establish?

Council Decision (CFSP) 2026/884 modifies the EU's framework of restrictive measures against Russia's destabilizing activities. Specifically, it may involve:

• The addition of new natural or legal persons to the EU sanctions lists.
• The removal of previously designated persons or entities.
• Adjustments to the restrictions applicable to entities already included in the lists.

The regulation being modified is Council Decision (CFSP) 2024/2643, which constitutes the base framework of restrictive measures for Russian destabilizing activities. This new 2026 decision updates that framework with immediate effect from its publication.

EU restrictive measures in this area typically include the freezing of assets of designated persons and entities, as well as the prohibition of making funds or economic resources available to them. European and Spanish companies have the obligation to verify that their counterparties are not included in these lists before conducting any transaction.

Economic and operational impact

The impact is not only legal: it is operational and financial. Operating with a sanctioned entity — even unknowingly — can block payments, freeze contracts and expose the company to sanctioning procedures.

The cost of non-compliance far exceeds the cost of preventive review. The national authorities of each Member State are responsible for implementing and sanctioning non-compliance with these restrictive measures.

Who does it affect?

This regulation directly affects:

• Financial sector entities: banks, fund managers, insurance companies and any entity that processes payments or maintains financial relationships with Russian counterparties.
• Exporters of dual-use goods: companies that export products that can have both civil and military applications to Russia or through intermediaries.
• Companies with direct operations in Russia: subsidiaries, joint ventures, representations or active service contracts in Russian territory.
• Companies with Russian partners or suppliers: any company whose supply chain or commercial network includes entities with Russian headquarters or control.
• Advisors and consultants providing services to companies with Russia exposure: they have an obligation to alert their clients about compliance.

Practical example

A Spanish industrial components company has an active supply contract with a Russian distributor it has been working with since 2021. Council Decision (CFSP) 2026/884, published on 21 April 2026, may have added that distributor — or its parent company — to the list of sanctioned entities.

If the Spanish company does not review the updated list and executes a payment or sends goods to that counterparty after 21 April 2026, it will be in breach of EU restrictive measures. This can result in an administrative or criminal sanctioning procedure before the competent Spanish authorities, in addition to the blocking of the operation by the intermediary banking entity.

Reviewing the updated sanctions list on EUR-Lex and in the EU Financial Sanctions Register is the first mandatory step before executing any transaction with Russian counterparties.

What should companies do now?

1. Review the updated sanctions list: Consult Council Decision (CFSP) 2026/884 on EUR-Lex and the EU Sanctions Register to identify whether any Russian counterparty has been added or modified compared to Council Decision (CFSP) 2024/2643.
2. Audit active contracts and commercial relationships with Russia: Identify all contracts, pending payments and financial relationships with Russian entities or Russian-controlled entities.
3. Preventively suspend operations in doubt: If there is uncertainty about the status of a counterparty, halt the transaction until confirming that it is not sanctioned.
4. Update internal compliance procedures: Incorporate sanctions list verification as a mandatory step before any transaction with Russian counterparties.
5. Inform the legal and compliance department: Escalate the review to compliance officers and, if necessary, to external advisors specialized in international sanctions.
6. Document all verifications performed: In case of inspection or sanctioning procedure, documentation of the checks performed is the company's main defense.