Count the EU’s Russia packages by designations added and you learn almost nothing. Package 21 alone carried 218 listings, the largest single batch in four years, and not one of them changed how a screening program works. What changes your program is a new kind of restriction: a category of counterparty you now have to test for, a contract term you now have to insert, a service you can no longer provide.

By that measure the twenty-one packages contain roughly two dozen genuinely distinct restriction types, and they did not arrive evenly.

One note on where this starts. The EU has had Russia sanctions since 2014, and the post-Crimea framework already limited Russian bank and corporate access to European capital markets. Package 1 extended that framework rather than inventing it, and the same is arguably true of parts of the early export controls. The 2022 measures are different enough in scale and in kind to be worth treating on their own terms, which is what this article does, but the baseline was not zero.

Note: this is a long article. A PDF version is available for download at the end, and it adds an appendix listing the amending regulation behind each of the twenty-one packages.

Packages 1-4: the emergency architecture

February to March 2022

Four packages in three weeks.

Package 1 restricted Russian access to EU capital and financial markets (Regulation 2022/262). Package 2 opened the export control front, covering goods and technology for defence, aviation and space, and oil refining (Regulation 2022/328).

Package 3 is the consequential one. It banned transactions with the Central Bank of Russia, cut seven banks off the SWIFT financial messaging network, and closed EU airspace to Russian aircraft (Regulation 2022/334, extended by 2022/345, 2022/350 and 2022/394).

Package 4 added three measures (Regulation 2022/428). The first banned new investment in Russia’s energy sector. The second barred imports of Russian iron and steel. The last prohibited exports of luxury goods.

Timing matters here in a way it rarely does later. The Central Bank measure landed on 28 February, four days into the invasion, alongside parallel US and UK action. That simultaneity was the point. A reserve freeze telegraphed in advance is a reserve freeze that gets moved.

Why it mattered

The immediate effect was severe and short-lived. The ruble fell from roughly 80 to 120 per dollar within two weeks. Russia’s central bank raised its key rate from 9.5 percent to 20 percent on 28 February.

Within about two months the currency had recovered to pre-invasion levels. Capital controls, a requirement that exporters convert 80 percent of their foreign currency earnings, and a demand that energy buyers pay in rubles did most of that work. Analysts have generally read this as the financial shock being absorbed rather than proving decisive. Roughly €300 billion in Russian central bank reserves sat frozen across the EU, other G7 states and Australia, about two-thirds of it in the EU, but Russia’s current account surplus kept climbing on continued energy sales.

The EU’s approach already differed from Washington’s in one visible way. It deliberately left Sberbank and Gazprombank off the SWIFT cutoff, because those were the payment channels for European gas. The United States had no equivalent reason to carve anyone out.

Switzerland aligned almost immediately, a real departure from its historical posture. It did so by mirroring EU measures through its own Ukraine Ordinance rather than adopting them directly, and that mechanism would later produce timing gaps that still cause trouble. Belarus was pulled in from package 3 onward, establishing the mirroring pattern that has held since.

Packages 5-9: building the sectoral toolkit

April to December 2022

This is where the sectoral measures were built.

Package 5 carried four distinct measures (Regulation 2022/576). It closed EU ports to Russian vessels and barred Russian road hauliers from EU territory. Coal imports were banned outright. And this package introduced the first restriction on crypto assets, capping what Russian persons could hold.

Package 6 delivered the crude oil and refined products import ban, the measure that took longest to negotiate (Regulation 2022/879). The ban reached oil arriving by sea but excluded oil delivered to the EU through pipelines, an exemption Hungary, Slovakia and Czechia still operate under. The same package brought the first professional services ban, covering accounting, audit, bookkeeping and consulting.

Package 7 banned gold imports and extended the port access ban to locks (Regulation 2022/1269).

Package 8, in October 2022, did two things that would define the following four years (Regulation 2022/1904). It created a listing criterion aimed specifically at people facilitating circumvention, which meant the EU could now designate someone for helping others evade sanctions rather than for any underlying conduct. The same package established the oil price cap. Less prominently, it also widened the services bans to architectural, engineering, IT consultancy and legal advisory work (Article 5n).

Package 9 closed the year with a ban on new investment in Russian mining and a prohibition on advertising and market research services (Regulation 2022/2474).

Why it mattered

The revenue effect was real and measurable. The Council reported Russian revenues down 26.9 percent in January 2023 against January 2022, and down 41.7 percent in February. The Council’s explanation of these figures is somewhat vague, but they most likely refer to oil and gas revenues. The February number is the one most plausibly connected to package 6, since the refined products ban and the price cap only took effect on 5 February 2023.

The price cap is the more interesting story, because it is the clearest case of a sanctions measure generating its own countermeasure. The cap was designed to keep Russian oil flowing to global markets while limiting what Russia earned from it, and it worked through leverage over Western shipping and insurance. Russia’s answer was to assemble a fleet of older tankers under opaque ownership and arrange insurance outside the coalition, so the shipping and insurance leverage the cap depended on no longer reached the trade. The shadow fleet went from essentially nothing to carrying most Russian crude within about two years. Elisabeth Braw has argued publicly that Western governments would not have imposed the cap had they anticipated that outcome, which is a strong claim but not an unreasonable one.

The cap is also the most genuinely coalition-built instrument of the entire effort, agreed across the G7, the EU and Australia. That agreement did not extend to enforcement. The United States leaned on the threat of secondary sanctions against foreign financial institutions that handled capped oil. The EU leaned instead on its jurisdiction over the shipping and insurance companies themselves. Same cap, different levers, and third-country intermediaries learned quickly which one bit harder.

Packages 10-13: the circumvention turn

February 2023 to February 2024

Four packages over a full year, and almost everything in them is aimed at closing the routes goods were taking around the restrictions already in place, rather than at adding new targets. These packages also refined measures already on the books in three places.

Package 10 banned transit of dual-use goods and arms through Russian territory (Regulation 2023/427). Package 11 extended that transit ban and formalised cooperation with third countries (Regulation 2023/1214).

Package 12 introduced three measures worth singling out (Regulation 2023/2878). The first is the “no-Russia clause”, which requires EU exporters to write a contractual prohibition on re-export to Russia into their sales agreements (Article 12g). The second is a ban on providing enterprise management and industrial design software. The third is a reporting requirement for outbound transfers above €100,000 by EU companies owned or controlled by Russian persons. Package 12 also banned imports of Russian diamonds, along with LPG and several metals, which is a story in itself and taken up below.

Package 13, at the two-year mark, was mostly additional sanctions designations (Regulation 2024/745). It added 194 individuals and entities and took the total past 2,000. But two things in it pointed forward.

The first was a widening of export controls. Aluminium electrolytic capacitors went onto the list of goods that could strengthen Russia’s military and technological base (Annex VII Part B). Electrical transformers, static converters and inductors went onto the separate list of goods that could build up Russian industry generally (Annex XXIII, Article 3k). That second list had previously covered three specific tariff codes. Package 13 replaced them with the entire tariff heading that sits above those codes, so every transformer, converter and inductor became controlled rather than three named types. For an exporter, that is the difference between checking a code list and re-screening a product line. Existing contracts had until 25 May 2024 to complete.

The second was the addition of 27 entities to the list carrying stricter dual-use and advanced technology export restrictions (Annex IV). Those designations reached into mainland China, India, Sri Lanka, Serbia, Kazakhstan, Thailand and Turkey.

The no-Russia clause, and why it has no US twin

The no-Russia clause deserves attention because it is an EU original. Washington’s route to the same problem runs through the BIS Entity List and the foreign direct product rules. The Entity List is the Bureau of Industry and Security’s roster of foreign parties that US exporters need a licence to ship to, with those licences generally presumed denied. The foreign direct product rules extend US licensing authority to goods manufactured outside the United States when they were made using US technology or equipment, which is how Washington reaches transactions with no American party in them at all.

Brussels went the other way. It pushed the obligation into private contracts, making the exporter responsible for a term in a sales agreement. Neither approach has obviously won. The EU version is cheaper to administer and harder to enforce. The US version is the reverse.

Diamonds, and the limits of provenance

The diamond ban deserves its own treatment, because it shows what happens when a restriction depends on where something came from rather than who paid for it.

Russia is the world’s largest diamond producer by volume, at roughly a third of global supply. Alrosa accounts for over 90 percent of Russian production, and the Russian state holds a majority stake in it, split between the federal government and the Republic of Sakha (Yakutia), the region of eastern Siberia where the mines sit, together with that republic’s districts. Diamond revenue therefore reaches the Russian state rather than private shareholders. In absolute terms the target is small. Alrosa’s 2023 results put the business at around $3.5 billion, a rounding error against hydrocarbons.

The cost to Antwerp was more visible. Belgium imported roughly €1.8 billion of Russian rough diamonds in 2021, about a quarter of its total rough imports. That fell to around €1.4 billion in 2022 and to €288 million in the first half of 2023, most of the decline arriving before the ban did. The Antwerp World Diamond Centre argued throughout that an EU-only ban would be dramatic for Antwerp and produce no impact on Russia, because trade would simply reroute through Dubai and Mumbai.

Belgium’s position is the interesting part. Rather than resisting, it ended up leading the coordination, on the reasoning that serving as the world’s Russian-diamond laundromat was doing more damage to Antwerp’s standing than a ban would do to its trade.

India is where enforcement actually lives. Over 90 percent of the world’s diamonds are cut and polished there, and Alrosa supplied around 40 percent of India’s rough imports. A ban on Russian-origin stones only means something if Indian polishers segregate Russian goods from everything else, which is why G7 delegations went to India in September 2023 to make the case. The EU’s answer was to require that rough diamonds of half a carat or more be certified through Antwerp from September 2024, with the record kept on a blockchain ledger. Smaller stones fell outside the requirement.

Then the coalition came apart. The United States disengaged from the G7 traceability working groups after pushback from African producers, Indian polishers and New York jewellers. A Biden administration official’s position was that the September 2024 commitment bound the EU rather than the United States. The polished-diamond traceability deadline slipped from 1 March 2025 by ten months, and Botswana was added as a second verification hub alongside Antwerp.

That is a sharper illustration of the pattern than anything in the financial measures. Everyone agreed on the target. Only the EU built the verification regime.

Russian countermeasures become a compliance problem

This is also when Russian countermeasures stopped being defensive and became something screening and legal teams had to account for.

Presidential Decree 302 of April 2023 created a mechanism for placing assets of companies from “unfriendly states” under external management. It was used. Carlsberg and Danone are the well-known examples.

In parallel, Russian claimants began using Article 248 of the Arbitrazh Procedure Code to pull disputes into Russian courts in breach of arbitration agreements. The results included the seizure of roughly $155.8 million of JPMorgan funds on VTB’s application, and a freeze of around $1.15 billion of assets held by a UK subsidiary of Linde.

For EU companies still holding Russian assets, this is when exit became materially more expensive than staying.

Switzerland was still keeping close pace, completing its package 10 alignment on 29 March 2023, about a month behind.

Packages 14-17: shadow fleet and the third-country pivot

June 2024 to May 2025

Package 14 is the densest single package in the entire set of measures (Regulation 2024/1745). It banned LNG re-exports and new investment in Russian LNG projects. Use of the Central Bank’s SPFS financial messaging system, Russia’s domestic alternative to SWIFT, was outlawed. The same package created a port access and services ban aimed at vessels supporting the war, which is the first version of what became the shadow fleet regime. Least noticed at the time, it also built a litigation and expropriation shield, letting EU companies claim damages in member state courts from Russian parties that benefited from expropriation (Articles 11a and 11b).

Package 15 completed that last thought by making Russian court judgments obtained under Article 248 unrecognisable and unenforceable in the EU (Regulation 2024/3192).

Packages 16 and 17 were mostly additional sanctions designations, but with a telling shift. Of the 53 entities added to export restrictions in package 16, roughly two-thirds were located in third countries (Regulation 2025/395). Package 17 added chemical precursors and 189 more vessels, taking the listed total to 342 (Regulation 2025/932).

Why it mattered

This is where the EU stopped writing rules about Russia and started writing rules about everyone else who deals with Russia. The third-country listing shift matters operationally more than the vessel counts. A screening hit on a Kyrgyz, Emirati or Hong Kong trading company is now a routine outcome rather than an anomaly.

The shadow fleet data is the most useful evidence available on whether any of this works, and it points somewhere specific. Alignment beats aggression. Robin Brooks’ analysis of tanker departures found activity in vessels sanctioned jointly by the United States, EU and UK down about 90 percent year over year, against 86 percent for US-only designations. The gap is small, but the direction matches what practitioners see. A vessel designated in one jurisdiction shops for ports. A vessel designated in three runs out of them.

The litigation shield is worth flagging as a genuine novelty. Sanctions regimes normally regulate what their own persons may do. Articles 11a and 11b instead create a private right of recovery against Russian beneficiaries of expropriation, which is closer to a tort remedy than a restrictive measure. No other major regime has copied it.

Switzerland’s lag started lengthening here. Package 16 was adopted on 24 February 2025 and implemented on 14 May 2025.

Packages 18-21: the energy endgame and the crypto build-out

July 2025 to July 2026

Energy tightened on every remaining front.

Package 18 lowered the oil price cap and, more significantly, set it to adjust periodically under the terms of the relevant Council Decision rather than sitting at a fixed number (Regulation 2025/1494). It also banned imports of refined products made from Russian crude, regardless of where the refining took place.

Package 19 banned LNG imports outright (Regulation 2025/2033). It also prohibited transactions involving Mir and the Faster Payments System, known as SBP. Mir is Russia’s domestic card scheme, built after 2014 precisely so that being cut off from Visa and Mastercard would not stop domestic payments. SBP is the central bank’s instant payments system. Prohibiting them closes the retail payment channels that survived the SWIFT measures.

Package 20 banned the provision of services to Russian LNG terminals and imposed due diligence obligations on tanker sales (Regulation 2026/506). Package 21 extended the terminal services ban to third-country operators controlled by Russian companies (Regulation 2026/1848).

The second development is crypto becoming a separate target category in its own right, rather than an incidental restriction attached to other measures.

Package 5 capped the value of crypto assets Russian persons could hold. Package 8 banned providing crypto wallets to them outright. Package 20 went considerably further, prohibiting transactions with crypto-asset service providers and platforms established in Russia, and naming RUBx, a ruble-pegged stablecoin, as a specific target (Article 5bb). Package 21 added a prohibition on Russian citizens and residents owning, controlling or holding positions in EU crypto-asset service providers, effective 25 August 2026.

The price cap is the clearest case in the whole set of a restriction that kept being re-tuned after it was imposed. Package 18 set it to adjust on a periodic basis. Package 21 then suspended that adjustment for a full year, to July 2027, loosening a measure the EU had built specifically so that it would keep tightening without further decisions.

That is the kind of regulatory detail that disappears when a package is summarised by its number of sanctioned designations.

October 2025: same targets, three different rules

Three jurisdictions moved on Russia’s two largest oil companies inside nine days, using three different legal instruments.

Same companies, same week, three different legal hooks. A screening team covering all three regimes got three different answers about the same corporate family in the same month.

Does any of it work

The evidence is genuinely contested, and the research organizations disagree with each other.

The evidence that oil is still moving despite the designations is substantial. As of mid-June 2026, the United States, UK, EU, Australia, Canada and New Zealand had collectively designated 653 unique tankers. Analysis from earlier in the year found 111 of the 623 then-designated vessels still loading Russian cargo, and G7-plus sanctioned tankers carrying roughly 68 percent of Russian crude exports. KSE put Russian oil export revenues at $20.8 billion in April 2026, down slightly month over month but $8.2 billion above the prior year.

The evidence pointing the other way is thinner but real. Russian reliance on Western maritime services climbed back to around 42 percent by May 2026, and new shadow fleet entrants slowed to a trickle across 2026. Both suggest vessel designations have made the shadow route expensive enough to push cargo back under the price cap’s reach.

Both can be true. Designating vessels one at a time degrades the alternative faster than it stops the trade. CREA has argued the entity-based approach is too easily defeated by intermediaries and special purpose vehicles, and has pushed for a full maritime services ban instead. Package 20’s groundwork for exactly that suggests the argument landed.

Two other developments

In December 2025 the EU moved to freeze Russian central bank assets in Europe indefinitely rather than on a renewable basis. That is a change in the character of the measure, not just its duration, and it has drawn commentary about longer-term effects on how other states think about holding reserves in European institutions.

Switzerland’s lag became a live compliance problem. Package 19 was adopted on 23 October 2025. Swiss implementation was partly done on 12 December 2025 and only completed on 25 February 2026. Baker McKenzie noted plainly that the delay created legal uncertainty for firms operating across both jurisdictions, and that the pattern is likely to repeat.

All twenty-one, grouped

Twenty-one packages, and the pattern is hard to miss once it is laid out. Everything the EU uses today was invented in the first ten months. The four years since have been spent extending those measures to new counterparties, new routes and new intermediaries.

There is a useful corollary for anyone tracking alignment with other regimes. Gaps between the EU, United States and UK appear when someone invents a mechanism, not when someone extends one. The moment a new tool is created is the moment the other jurisdictions either copy it or decline to, and the diamond traceability regime is the clearest example. Packages that extend existing measures rarely change the alignment picture, because whatever alignment there was got settled when the measure was first built.

The practical implication is that a new package is not by itself news. The question is what kind of change it contains. If all that changed is more names on the list, your existing screening already absorbs it. If there is a new kind of restriction, meaning a contract term you have to insert, a class of counterparty you now have to test for, or a service you can no longer provide, that is the one where somebody has to read the annex.

Sourcing and self-check

Documented, traceable to primary or official sources. Every package’s contents, adoption date and amending regulation number come from the Council of the EU’s package timeline, the Official Journal, and the Council’s own press releases. The Council’s timeline page was last reviewed on 23 April 2026 and therefore stops at package 20. Package 21 content comes from the Council’s 23 July 2026 press release and from law firm and P&I club analyses published since. Central bank reserve figures and the January and February 2023 revenue decline percentages are the Council’s own published numbers. The 28 February 2022 rate move from 9.5 to 20 percent and the ruble’s move from roughly 80 to 120 per dollar are contemporaneous reporting. Swiss implementation dates are from SECO decrees as reported by Lenz & Staehelin and Baker McKenzie. The October 2025 Rosneft and Lukoil actions and their differing legal bases are from Covington, Sullivan & Cromwell, Arnold & Porter and McDermott alerts. Diamond trade figures are from IPIS and Reuters reporting.

Secondary analysis, flagged as such. The shadow fleet effectiveness figures of 90 percent against 86 percent are Robin Brooks’ calculation from his own vessel database. Vessel counts, revenue figures and the share of exports carried by sanctioned tankers come from KSE Institute, CREA and GSSC, which use different methodologies over different reporting periods and do not fully agree with each other. The claim that the price cap caused the shadow fleet is widely held but not formally established, and the Braw remark is an argument rather than a finding. CREA’s call for a full maritime services ban is advocacy, though package 20’s language suggests the EU is moving that way.

Editorial judgment, not anyone’s official framing. The six-category taxonomy and the decision about what counts as a distinct restriction type rather than an extension of an existing one are mine. Reasonable practitioners would draw some of these lines differently.

Known gaps. Belarus is treated here as a mirroring jurisdiction rather than as an actor in its own right, and the Belarus packages are not traced individually. The parallel EU regimes covering hybrid threats, human rights and riot control agents are outside scope except where they intersect, and the boundary between “the Russia package” and “the other measures adopted the same day” has been getting blurrier since package 17.