EU Sanctions Against Russia 2026: What Companies with Links to Russia Must Verify

Key data

If your company operates with Russian counterparties, has accounts in entities with links to Russia, or exports to occupied territories of Ukraine, this update affects you from today. Council Decision (CFSP) 2026/2264, published on 8 October 2026, amends Decision 2014/145/CFSP and expands the list of natural and legal persons subject to EU restrictive measures.

This is not a rule with gradual adaptation: entry into force is the same day as publication, meaning that any transaction with a newly designated entity carried out from that date may constitute a sanctionable breach.

What does this regulation establish?

Decision 2014/145/CFSP is the European legal framework for sanctions against persons and entities responsible for actions that undermine the territorial integrity, sovereignty and independence of Ukraine. It has been in force since 2014 and is updated periodically through amending decisions such as this one.

Decision (CFSP) 2026/2264 introduces the following changes to that framework:

• Update of the designated list: New natural and/or legal persons are added to the list of subjects to restrictive measures.
• Asset freezing: The newly designated entities are subject to immobilization of all their funds and economic resources in the EU.
• Travel ban: Natural persons included in the list cannot enter or transit through EU territory.
• Prohibition on making funds available: No person or entity in the EU can make funds or economic resources, directly or indirectly, available to the designated entities.

Economic and operational impact

The direct impact for companies is not a fee or fixed cost: it is the risk of incurring criminal and administrative sanctions by maintaining relations with entities or persons newly included in the list. This risk is particularly high in three areas:

• Financial entities: Banks, fund managers and insurance companies must update their counterparty screening systems to block any transaction with the newly designated entities. A failure in this process can result in serious regulatory sanctions.
• Exporters and importers: Companies trading with Russia or occupied territories of Ukraine must verify that none of their counterparties appear on the updated list before executing any operation.
• Companies with subsidiaries or holdings in the region: The prohibition on "making funds available" includes intragroup transfers to designated entities or entities controlled by designees.

The cost of non-compliance varies by Member State, as each country applies its own sanctions regime. In Spain, breaches in international sanctions matters can result in criminal consequences under Organic Law 12/1995 and exchange control regulations, in addition to administrative sanctions and blocking of export licenses.

Who does it affect?

• Financial entities: banks, savings banks, credit cooperatives, fund managers, insurance companies and payment platforms with operations in Russia or with Russian clients.
• Exporters and importers with counterparties in Russia or in the occupied territories of Ukraine (Crimea, Donetsk, Luhansk, Zaporizhzhia, Kherson).
• Companies with subsidiaries, joint ventures or holdings in Russia or occupied territories.
• Advisors and consulting firms providing services to Russian entities or to natural persons of Russian nationality with assets in the EU.
• Law firms and notaries managing real estate, corporate or financial operations with Russian parties.
• Logistics and transport companies with routes or clients in the affected region.

Practical example

A Spanish industrial machinery company has an active supply contract with a Russian company. On 8 October 2026, the EU publishes Decision 2026/2264 and that Russian company —or its majority owner— appears on the updated list of designated entities.

From that same day, the Spanish company cannot execute any shipment, collect outstanding invoices or transfer funds to that counterparty without express authorization from the competent Spanish authority. If it does so without knowing because it has not updated its sanctions verification process, it still incurs a breach: ignorance does not exempt from responsibility in international sanctions matters.

The immediate action would be: halt the operation, consult the EU consolidated list, notify the legal department and, if appropriate, seek guidance from the State Secretariat for Trade or the Bank of Spain depending on the type of operation.

What should companies do now?

1. Consult the EU consolidated sanctions list: Access the EU Sanctions Map and the EEAS consolidated register to verify whether any of your counterparties appear on the updated list following Decision 2026/2264.
2. Review all active commercial and financial relationships with counterparties in Russia or occupied territories of Ukraine: active contracts, pending payments, scheduled transfers and open credit lines.
3. Update counterparty screening systems (especially in financial entities) to incorporate the new list of designated entities with date 8 October 2026.
4. Cautiously halt any operation with counterparties whose status has not been verified following the update, until confirming that they are not designated.
5. Document the verification process: In case of inspection or investigation, the company must be able to demonstrate that it carried out the relevant checks before executing each operation.
6. Consult a legal advisor specialized in international sanctions if there is any doubt about whether a counterparty, its owner or its corporate structure may be affected by the new designations.

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D2264