EU Sanctions Against Sudan 2026: What Companies and Banks Must Review

Key data

If your company operates in the Horn of Africa, exports to Sudan, or maintains financial relationships with Sudanese entities, this update affects you directly from 21 April 2026. Decision (CFSP) 2026/886 modifies Decision (CFSP) 2023/2135 and may have incorporated new names to the list of designates, making any commercial or financial relationship with them illegal from that date onwards.

This is not a voluntary compliance rule: the EU sanctions regime has direct effect and its non-compliance exposes the company to criminal and administrative consequences in Spain and throughout the rest of the Member States.

What does this regulation establish?

Decision (CFSP) 2026/886 updates the EU framework of restrictive measures aimed at actors undermining stability and political transition in Sudan. This framework was originally established by Decision (CFSP) 2023/2135 and is updated periodically to reflect changes in the situation on the ground.

The restrictive measures in force include two types of restrictions:

• Asset freezing: The funds and economic resources of designated persons and entities are blocked. European companies cannot make funds or economic resources available to them, directly or indirectly.
• Travel ban: Designated natural persons are prohibited from entering or transiting through the territory of EU Member States.

The modification introduced by this Decision may involve changes to the list of natural or legal persons subject to these measures. The updated list is the binding reference for all European companies from 21 April 2026.

Economic and operational impact

The impact for affected companies is immediate and can be significant in several areas:

• Blocking of ongoing operations: If a counterparty has been added to the list of designates, any pending payment, transfer, delivery of goods, or provision of services is automatically suspended.
• Review of existing contracts: Contracts with Sudanese entities or persons must be reviewed to verify that none of the parties appear on the updated list.
• Risk of criminal and administrative sanctions: Non-compliance is not a minor infraction. Companies that maintain relationships with designates after publication of the updated list are exposed to criminal and administrative liability in Spain and throughout the EU.
• Compliance operational cost: Financial entities, exporters, and companies with operations in the region must update their counterparty screening systems to incorporate the new list.

Who does it affect?

This regulation directly affects:

• Financial entities: Banks, insurance companies, fund managers, and any entity that processes payments or maintains accounts linked to Sudan.
• Exporters: Companies that export goods or services to Sudan or to entities based or operating in that country.
• Companies with operations in the Horn of Africa: Companies with presence or activity in the region that may have indirect links with Sudanese actors.
• Companies with Sudanese suppliers or customers: Any company that maintains commercial relationships with counterparties in Sudan, regardless of sector.
• Advisors and consulting firms: Law firms, consulting firms, and advisors providing services to companies with exposure to Sudan must know the updated list to correctly guide their clients.

Practical example

A Spanish engineering company has a consulting contract with a Sudanese company for an infrastructure project. On 21 April 2026, Decision (CFSP) 2026/886 enters into force, updating the list of designates.

If the Sudanese counterparty company, or any of its partners or directors, has been added to the list of designated persons or entities, the Spanish company is prohibited from that same day onwards from continuing to execute the contract, receive or make payments, and provide any additional services. Maintaining the commercial relationship after that date constitutes a breach of EU sanctions, with the criminal and administrative consequences that this entails in Spain.

The only way to avoid this risk is to verify the updated list immediately after publication of each modification to the sanctions regime.

What should companies do now?

1. Consult the updated list of designates: Access the official list published on EUR-Lex to verify if any of your counterparties appear on it. This is the most urgent action.
2. Review all commercial and financial relationships with Sudan: Identify customers, suppliers, partners, and any other counterparty with direct or indirect links to Sudan. Check each name against the updated list.
3. Immediately suspend any operation with designates: If you detect that a counterparty appears on the list, halt payments, deliveries, and any provision of services without delay. Consult with legal advisors before taking any other decision.
4. Update counterparty screening systems: Financial entities and exporters must incorporate the new list into their compliance tools to automate the detection of sanctioned counterparties.
5. Document the verification process: Keep evidence that you have performed the check against the updated list. This documentation is essential in case of inspection or investigation by authorities.
6. Train the compliance team: Ensure that persons responsible for risk management, compliance, and international operations are aware of the update and know how to act in case of an alert.