Mr. Sanctions

Category: Enforcement

  • June 1, 2026: OFAC Enforcement Action against a prominent compliance firm

    Claude’s summary:

    What Happened

    FTI Consulting, Inc. (“FTI”), an international consulting and advisory firm headquartered in Washington, D.C., has agreed to pay $1,050,000 to settle potential civil liability for apparent violations of OFAC sanctions targeting Russia’s financial sector.

    Between April 2019 and November 2019, FTI issued six invoices—totaling approximately $353,862—for economic consulting services it was providing in connection with a civil lawsuit in Singapore on behalf of VTB Bank OAO (“VTB”), a Russian state-owned bank. At all relevant times, VTB was listed on OFAC’s Sectoral Sanctions Identification (SSI) List and was subject to Directive 1 under Executive Order 13662 (“Directive 1”), incorporated into the Ukraine-/Russia-Related Sanctions Regulations (URSR), 31 C.F.R. part 589. Directive 1 prohibits U.S. persons from dealing in new debt of more than 14 days’ maturity with covered entities and bars any transaction structured to evade or avoid those prohibitions.

    The apparent violations arose from how the engagement was structured. FTI had been engaged by a global law firm to provide expert economic consulting services to VTB. FTI’s compliance officials recognized early on that directly invoicing VTB would create sanctions risk. To address that risk, FTI and the law firm agreed to an indirect payment arrangement: FTI would invoice the law firm, but the law firm would pay FTI only after first receiving payment from VTB. FTI had no recourse against the law firm unless VTB paid first—and no direct recourse against VTB if invoices went unpaid.

    OFAC found that this structure did not insulate FTI from liability. Because VTB was ultimately responsible for funding FTI’s invoices, FTI was—in economic substance—extending new debt to VTB on each occasion an invoice went unpaid or was paid after the permissible 14-day tenor. Payment delays were severe: individual invoices remained outstanding for 35, 90, 92, 99, and as many as 198 days.

    Multiple warning signs accumulated throughout the engagement that FTI did not adequately act on. FTI continued to perform work and issue new invoices even as prior invoices remained unpaid for months. In July 2019, FTI joined a call directly with VTB to discuss overdue payments. When FTI later demanded that the law firm pay the outstanding invoices from its own funds, the law firm declined, explicitly stating it had not assumed VTB’s credit risk—a signal that VTB’s non-payment directly affected FTI.

    FTI issued its final invoice on November 26, 2019. By March 2020, across all six invoices totaling approximately $353,862, FTI had received only one partial payment of approximately $57,000. A second partial payment of approximately $19,400 followed in June 2020, 198 days after that invoice was issued. In May 2021, the law firm informed FTI it no longer represented VTB, at which point FTI ceased collection efforts. FTI subsequently conducted an internal review and submitted a notification of potential violation to OFAC.

    OFAC found that FTI violated §§ 589.202 and 589.213 of the URSR on six occasions by indirectly dealing in new debt of longer than 14 days’ maturity with an SSI-listed entity.

    The Penalty

    OFAC classified all six violations as non-egregious and determined that FTI did not voluntarily self-disclose them—notwithstanding FTI’s eventual notification to OFAC following its internal investigation. Under OFAC’s Economic Sanctions Enforcement Guidelines (31 C.F.R. part 501, app. A), the applicable base civil monetary penalty for a non-egregious, non-voluntary-disclosure case equals the schedule amount: $525,000.

    The final settlement of $1,050,000—double the base penalty—reflects upward adjustment after weighing the aggravating and mitigating factors below, with particular emphasis on promoting future compliance among similarly situated firms.

    Aggravating Factors

    • Reckless disregard for multiple warning signs — FTI’s senior managers were aware of the Directive 1 restrictions on VTB from the outset and deliberately structured the engagement to reduce sanctions exposure. But warning signs accumulated and went unaddressed: invoices went unpaid for months; FTI participated in a direct call with VTB to discuss overdue payments; and the law firm explicitly disclaimed responsibility for VTB’s non-payment—a clear signal that FTI bore VTB’s credit risk. Despite all of this, FTI continued to work and issue new invoices throughout.
      • General Factors: Willful or Reckless Violation of Law / Awareness of Conduct at Issue — FTI had actual knowledge of the applicable prohibitions from the start and designed a payment structure specifically to address them. OFAC treats continued conduct in the face of accumulating red flags as recklessness, particularly where the firm was already sensitized to the risks involved.
    • Harm to the objectives of the sanctions program — U.S. sanctions on VTB were designed in part to limit VTB’s access to credit from U.S. sources. FTI’s indirect arrangement undercut this objective by extending prohibited credit to VTB over extended periods. The intermediary structure also obscured VTB’s role in the transaction in a way that may have prevented other parties in the payment chain from screening the activity.
      • General Factor: Harm to Sanctions Program Objectives — The conduct frustrated the practical aims of Russia’s sectoral sanctions and reduced the ability of other transaction participants to identify and screen out the sanctioned party’s involvement.
    • Size and sophistication of the firm — FTI is a large, internationally active consulting firm with extensive experience serving clients across industries and jurisdictions worldwide. OFAC applied heightened scrutiny here to promote greater awareness of indirect dealings prohibitions among other firms with the resources and expertise to implement robust sanctions compliance.
      • General Factor: Individual Characteristics — Sophisticated, globally operating entities are held to a higher standard of compliance awareness and are expected to dedicate appropriate resources to identifying and managing sanctions risk commensurate with their exposure.

    Mitigating Factors

    • Meaningful cooperation with OFAC’s investigation — FTI agreed to toll the statute of limitations and assisted OFAC’s investigation by producing comprehensive contemporaneous documentation, including by waiving attorney-client privilege.
      • General Factor: Cooperation with OFAC — FTI’s substantive cooperation reduced the burden on OFAC’s investigative process and contributed to an efficient resolution of the matter.
    • Limited scale of the transactions relative to FTI’s overall business — The six invoices, totaling approximately $353,862, represented a very small fraction of FTI’s overall payment activity.
      • General Factor: Harm to Sanctions Program Objectives — The limited economic magnitude of the violations reduced the overall severity of harm caused to the sanctions program’s objectives.
    • Meaningful remediation of its compliance program — Following the violations, FTI took concrete steps to strengthen its sanctions compliance infrastructure: (1) implemented training specifically addressing sectoral sanctions, with targeted outreach within its legal department regarding law firm engagements; (2) updated its sanctions compliance policies and restricted party screening procedures; (3) supplemented its sanctions compliance resources; and (4) strengthened risk assessments and controls in response to Russia’s full-scale invasion of Ukraine in 2022.
      • General Factors: Adequacy of Compliance Program / Remedial Response — FTI’s post-violation improvements demonstrated a genuine commitment to addressing the root causes of the violations and reducing the likelihood of recurrence.
    • No prior OFAC enforcement history — FTI had not received a Finding of Violation or a Penalty Notice from OFAC in the preceding five years.
      • General Factor: Prior OFAC Actions Against the Subject — A clean OFAC enforcement record is a recognized mitigating consideration under the Enforcement Guidelines.

    OFAC’s broader message: This settlement underscores a foundational principle running throughout OFAC’s regulatory framework—it is prohibited to do indirectly what cannot be done directly. Firms must ensure that their sanctions risk analysis reflects the full economic and practical reality of a transaction, not just its formal structure. OFAC will look past contractual arrangements to assess what is actually happening on the ground, and arrangements that merely create the appearance of compliance—without addressing the underlying prohibited conduct—do not provide a safe harbor.

    What Are the Takeaways?

    You can’t route a prohibited transaction through a third party to make it permissible. The fact that FTI billed the law firm rather than VTB directly did not change the underlying economic reality: VTB was the party ultimately responsible for funding FTI’s invoices, making FTI the effective creditor to a sanctioned entity. OFAC has long maintained that U.S. persons cannot use intermediaries to do on their behalf what they are forbidden from doing themselves. If a sanctioned party is the ultimate source of funds, the transaction is prohibited regardless of how many parties stand in between.

    Sectoral (partial) sanctions can be surprisingly expansive in scope. VTB was not fully blocked—it was subject to the more targeted restrictions of Directive 1. But those restrictions were still broad enough to reach FTI’s indirect invoicing arrangements. Companies that deal with parties subject to less-than-full-blocking sanctions measures should not assume that the narrower designation means lower risk. Each transaction must be evaluated carefully on its own merits to confirm that the underlying activity—and any related transactions—are fully permissible.

    Assess the economic reality of a transaction, not just its paperwork. When evaluating whether a proposed arrangement is compliant, firms should look at what is actually happening economically—not just what the contracts say. Structures that appear compliant on their face but fail to address the underlying prohibited economic relationship are not a defense. In the debt context specifically, a sanctioned counterparty’s repeated failure to make contracted payments is a red flag that demands a thorough reassessment of the arrangement’s compliance status, not continued performance.

    Other Resources

    OFAC Compliance and Enforcement Resources

    On May 2, 2019, OFAC published its Framework for OFAC Compliance Commitments, which outlines OFAC’s expectations for what an effective sanctions compliance program looks like and how OFAC factors compliance program quality into its evaluation of apparent violations and settlement determinations. An appendix to the Framework identifies common root causes of sanctions violations drawn from OFAC’s investigative experience.

    For additional information on the civil penalties process, see:

    • The OFAC regulations governing each applicable sanctions program
    • The Reporting, Procedures, and Penalties Regulations, 31 C.F.R. part 501
    • The Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A

    Recent civil penalties and enforcement information are available on OFAC’s website at ofac.treasury.gov/civil-penalties-and-enforcement-information.

    FinCEN Whistleblower Program

    The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) administers a whistleblower incentive program covering potential violations of OFAC-administered sanctions, the International Emergency Economic Powers Act (IEEPA), and the Bank Secrecy Act (BSA). Individuals located anywhere in the world who provide information about sanctions violations may be eligible for a financial award if their information leads to a successful enforcement action resulting in monetary penalties exceeding $1,000,000 and the statutory requirements of 31 U.S.C. § 5323 are satisfied. The program is open to whistleblowers across all industries and enterprise types, and FinCEN is currently accepting tips.

    For more information on OFAC regulations generally, visit ofac.treasury.gov.

    and the full Enforcement Information:

    20260601_ftiDownload

    —

    , , ,

  • May 19, 2026: OFSI fines Deutsche Bank AG for 2 Russian sanctions breaches

    Office of Financial Sanctions Implementation HM Treasury
    Deutsche Bank AG PenaltyOFSI has imposed a £165,000 monetary penalty on Deutsche Bank AG London Branch (DBLB) for breaches of the Russia financial sanctions regime. 

    Between June and July 2022, DBLB processed two payments totalling £635,618.75 to an entity wholly owned by a designated person. 

    This is the second OFSI monetary penalty case resolved through settlement, demonstrating how proportionate and effective enforcement outcomes can support the rapid communication of compliance lessons to industry. 

    It also underlines the importance of firms maintaining effective sanctions controls, particularly where ownership and control structures determine whether restrictions apply. 

    Key lessons for firms include the importance of: 

    – maintaining suitably robust sanctions screening systems and processes, commensurate with their level of exposure to sanctions risk  
    – having strong onboarding procedures and regular, risk‑based customer reviews especially in higher risk jurisdictions 
    – complete, detailed, and prompt voluntary disclosure of potential breaches to OFSI  

    A 45% discount was applied, reflecting voluntary disclosure and settlement. 

    I had Claude summarize the Penalty Notice:

    OFSI Penalty Notice: Deutsche Bank AG London Branch

    Plain-Language Summary

    SUMMARY

    The UK’s Office of Financial Sanctions Implementation (OFSI) fined Deutsche Bank’s London branch (DBLB) £165,000 for violating UK Russia sanctions. The core violation: DBLB processed two payments in 2022 — totalling about £635,000 — to a company called Okko, which was owned by a sanctioned Russian entity. Because DBLB voluntarily reported the problem and later agreed to settle the case, its original penalty was reduced. The final £165,000 figure reflects both a voluntary disclosure discount and a settlement discount.

    BACKGROUND

    Okko is a Russian streaming service (think a Russian Netflix). Russia’s largest bank, Sberbank, owned Okko until May 2022, when it sold the company to another Russian firm, JSC New Opportunities. The timing matters: Sberbank had just been sanctioned by the UK in April 2022, and JSC New Opportunities was then sanctioned in late June 2022. The moment JSC New Opportunities was designated, Okko automatically became off-limits under UK sanctions — even though Okko itself was never directly listed — because it was wholly owned by a sanctioned party. DBLB’s customer (an Irish-incorporated subsidiary of a multinational firm) instructed DBLB to send the payments to Okko via the SWIFT network.

    THE BREACHES

    Two payments are at the heart of the case:

    • Payment A (~£356,000): Processed on June 29, 2022 — the same day JSC New Opportunities was publicly designated as sanctioned. The funds actually left the account the following day.
    • Payment B (~£279,000): Processed about a month later, on July 27, 2022.

    DBLB did run sanctions screening on both payments, but its third-party screening vendor’s data didn’t include ownership information linking Okko to the newly sanctioned JSC New Opportunities. So no alert was triggered, and the payments went through.

    A third payment (Payment C, ~£1.1 million) was made in April 2022 but was not treated as a breach, because it pre-dated the UK’s strict liability sanctions rules taking effect in June 2022.

    CASE ASSESSMENT

    OFSI weighed factors both for and against DBLB when deciding how serious the case was.

    Factors that made things worse (aggravating):

    • The combined payment value was significant — over £635,000.
    • The money went directly to an entity owned by a sanctioned person, which effectively undermined the asset freeze the UK had put in place against Russia.
    • Russia sanctions were a top UK foreign policy priority in 2022 and remain so.
    • Although DBLB had conversations with its customer about Russia-related payment risks between March and May 2022, it never probed how the customer itself assessed sanctions ownership risks — specifically, that the customer relied on self-certification from its own customers rather than verifying ownership information independently. DBLB missed an opportunity to catch this gap.
    • The earlier Payment C — though not itself penalized — showed DBLB had a pattern of processing payments to Okko and was relevant context.

    Factors treated as neutral:

    • DBLB’s use of a third-party screening vendor is understandable and common practice, but DBLB remained ultimately responsible for its own compliance. The vendor failed to capture publicly available information about Okko’s change of ownership, highlighting a known risk of relying on such providers — made worse by Russia withdrawing information from its public corporate registries in mid-2022.
    • DBLB cooperated with OFSI’s investigation, but its responses were sometimes slow and thin on detail — below what OFSI expects from a large regulated institution.

    Factors that helped DBLB (mitigating):

    • There is no evidence DBLB knew, or had reason to suspect, that the payments were in breach of sanctions — no intent or prior knowledge.
    • Payment A happened on the very day of the designation. The window for cancelling it was extremely narrow, and OFSI acknowledged this. It was only included in the penalty because Payment B followed a month later.
    • DBLB voluntarily disclosed the breaches to OFSI in September 2022 — an important positive step.
    • Since the breaches, DBLB has significantly overhauled its sanctions compliance program: better oversight of third-party vendors, broader Russia-related list coverage, stronger due diligence procedures, and a much more cautious approach to Russia-related payments overall.

    Overall, OFSI rated the case as “serious” — but not the most serious category.

    THE PENALTY CALCULATION

    StepAmount
    Maximum statutory penalty£1,000,000
    Baseline penalty set by OFSI£300,000
    Discount applied (45% — for voluntary disclosure + settlement)–£135,000
    Final penalty imposed£165,000

    The 45% discount was slightly below the maximum 50% available, because while DBLB disclosed promptly, its initial disclosure lacked the detail OFSI expected from a firm of its size and sophistication.

    COMPLIANCE LESSONS

    OFSI used the notice to flag three takeaways for the broader financial industry:

    1. Don’t over-rely on third-party screening tools. They are valuable but have gaps — especially for ownership-and-control risks. Firms must understand those limitations and fill them with their own processes.
    2. Know your customer’s compliance practices. It’s not enough to screen transactions; firms should understand how their customers manage their own sanctions risks, especially where payments go to higher-risk jurisdictions like Russia.
    3. Voluntary disclosure pays — but only if it’s thorough. OFSI rewards early disclosure, but incomplete or vague reporting limits the discount available. Firms should take time to provide a full, detailed account when reporting suspected breaches.

    NOTES ON SETTLEMENT

    This was OFSI’s first (or among its first) cases resolved through its new formal settlement process, introduced in February 2026. Settlement allows both sides to reach a negotiated outcome more quickly than a full contested process. In exchange for a penalty discount and input into the published case summary, DBLB agreed to pay the penalty and waive its right to challenge OFSI’s decision. OFSI views early settlement as being in the public interest — it’s faster, cheaper, and gets compliance messages out sooner.

    The full Penalty Notice:

    DB_Penalty_NoticeDownload

    I do wonder about the severity of the fine, and the relatively harsh assessment of these sanctions violations. Perhaps it’s because patterns of conduct are just smaller outside the US, so the penalties need to be harsher to get people’s attention.

    I will admit, the penalty notice is much more detailed than it used to be. I will note that it took me a while to find that the 3rd party vendor did include ownership and control data, but was either slow or deficient in providing the needed info in this case.

    I also wonder what would have happened had the 2nd payment been stopped. After all, the first payment was processed on the same day as the designation of the parent company (even if value date was the best day).

    All in all, instructive – I will see if I need to tweak the fairly generic prompt for summarizing the penalty notice.

    —

    , , , ,

  • The updated enforcement action post: what changed and why

    So, I asked Claude to enhance its response from 3rd party sources if there was anything notable – and to conduct a fact check. The good part about all this?

    What was added

    The only section that warranted substantive enhancement based on third-party sources was “Discovery and Response.”The original draft characterized AEL’s reaction to the June 2025 public reports as a clean, cooperative pivot. Third-party reporting reveals a more complicated picture:

    • The trigger was specifically the Wall Street Journal‘s investigative report tracking LPG tankers between Gulf ports and Mundra Port — worth naming rather than leaving as generic “public reports.”
    • At the same moment AEL was suspending imports and retaining U.S. counsel privately, it was publicly filing a stock exchange statement calling the allegations “baseless and mischievous” and denying awareness of any investigation. This tension is directly material to understanding why the case doesn’t qualify for voluntary self-disclosure credit.

    One minor enhancement in the Mitigating Factors section: AEL’s own public statements confirmed the “less than 1.5%” revenue figure at 1.46% specifically, so that precision was added there.

    No factual corrections were required — the enforcement release is well-supported by contemporaneous reporting on the underlying facts.

    Additional sources consulted:

    • Wall Street Journal — investigative report on Adani LPG tankers (June 2, 2025); original source that triggered the public reports referenced in the enforcement release
    • Adani Enterprises stock exchange filing (June 2025) — via multiple Indian financial press outlets (Business Upturn, MENAFN, Outlook Business, Lokmattimes)
    • Bloomberg, Reuters/U.S. News, IANS, BizzBuzz News — day-of settlement reporting confirming key facts (May 18, 2026)
    • The Tribune India, DT Next, The Federal — pre-settlement reporting (May 15, 2026) on the broader Adani Group legal resolution context

    The bad part? I didn’t tell it to make a new post with the additional info – so it updated the post. Oopsie! But I like this, so I will amend my base prompt for enforcement actions to do this same thing for all future enforcement action posts.

    —

    , ,

  • May 18, 2026: Adani Enterprises Limited’s Iran sanctions violations cost it $275 Million (updated)

    What Happened

    Adani Enterprises Limited (AEL), a large Indian multinational conglomerate with operations across energy, infrastructure, and other sectors, has agreed to pay $275,000,000 to settle potential civil liability for apparent violations of U.S. sanctions on Iran.

    From November 2023 to June 2025, AEL purchased shipments of liquified petroleum gas (LPG) from a Dubai-based trading company (the “Dubai Supplier”) that claimed to be supplying gas from Oman and Iraq. Multiple red flags should have put AEL on notice that the LPG actually originated from Iran. During this period, AEL caused U.S. financial institutions to process 32 U.S. dollar (USD)-denominated payments totaling approximately $192,104,044 for the shipments.

    Background: How AEL Got Into the LPG Business

    AEL entered the LPG market in June 2023, importing gas for sale to customers in India through Mundra Port — a major port on India’s western coast operated by AEL’s affiliate, Adani Ports and Special Economic Zone Ltd. (APSEZ). Neither AEL nor any of its affiliates had previously traded LPG on its own account through Mundra Port, making this a brand-new business line.

    To compete in an established market, AEL needed a discounted supply source. In July 2023, AEL representatives — including the head of its newly formed LPG unit — met with the Dubai Supplier, which was already involved in supplying purportedly Omani-origin LPG to another Indian buyer. By September 2023, a deal was taking shape. Internal AEL documents at the time described the arrangement as “discounted LPG from Middle East” on a spot basis.

    AEL ran its standard Know Your Customer (KYC) process on the Dubai Supplier and its affiliates and found no matches on OFAC’s SDN List. It also relied on APSEZ’s existing 2020 sanctions compliance program, which prohibited Iranian-origin cargo from entering APSEZ-controlled ports. On paper, AEL appeared to have done its homework.

    What AEL apparently did not know — and did not dig deeply enough to uncover — was that the Dubai Supplier was operating as a conduit for Iranian LPG. An affiliate of the Dubai Supplier had already been designated by OFAC in March 2023 for purchasing LPG from a sanctioned Iranian petrochemical company. Iran, practically alone among Middle Eastern producers, was offering deeply discounted LPG — exactly the kind of deal AEL was looking for.

    The Purchases

    AEL completed its first purchase in November 2023: a cargo of fully refrigerated propane shipped on a 25-year-old Handysize LPG tanker, with documents listing the origin as Sohar, Oman. AEL paid approximately $5.67 million. Over the next year and a half, AEL purchased 34 additional cargos of what turned out to be Iranian-origin LPG from the Dubai Supplier and its affiliates, using similar documentation and payment structures.

    Payments were generally made in USD or UAE dirhams (AED) from accounts at UAE or Indian banks. In total, U.S. financial institutions processed $192,104,044 in USD payments across 32 of the 35 shipments. (The remaining three shipments were either paid entirely in AED or were never completed.)

    Red Flags AEL Overlooked

    From early in the relationship, there were multiple warning signs that the Dubai Supplier’s cargo wasn’t what it claimed to be. AEL failed to act meaningfully on any of them.

    • Third-party warnings: On at least four separate occasions between March 2023 and February 2024, AEL and APSEZ received inquiries from outside parties alleging that the Dubai Supplier’s cargos may have originated in Iran. AEL appears to have dismissed these as interference from competitors trying to block it from entering the LPG market. Its response was limited to reviewing shipping documentation and obtaining verbal assurances from the Dubai Supplier itself.
    • Suspicious vessel behavior: Ships carrying the Dubai Supplier’s cargos routinely engaged in conduct associated with sanctions evasion: manipulating or disabling their Automatic Identification System (AIS) transponders, making commercially illogical port calls, and frequently changing their names, ownership, and flag state. AEL and APSEZ did not monitor for these vessel-level red flags.
    • Implausible origin claims: The very first shipment claimed to be loaded in Sohar, Oman — but Sohar is not a significant source of Omani LPG exports (those primarily come from Salalah), and Sohar lacked the refrigerated storage and loading infrastructure needed to load fully refrigerated LPG at the time. The claimed origin simply didn’t make logistical sense.
    • Document irregularities: Certificates of origin provided by the Dubai Supplier showed illogical and non-sequential numbering, were repeatedly issued long after the shipments had been made, and used outdated document templates — all indicators of potential falsification.
    • Below-market pricing: Iran — virtually alone among Middle Eastern LPG sources — offered significantly discounted gas. The prices AEL received from the Dubai Supplier were sufficiently below prevailing market rates that, accounting for realistic freight costs, port fees, and profit margins, the economics of the claimed Omani or Iraqi origin simply didn’t add up. AEL should have treated this as grounds for heightened scrutiny.
    • A blocked payment: In February 2024, the Dubai Supplier’s bank stopped a payment due to “internal policy,” raising concerns about whether the cargo was actually from Iraq or Iran. The supplier directed AEL to a new bank account at a different Dubai bank. Payment was eventually released after the supplier provided additional shipping documentation that later appeared to be falsified.

    Discovery and Response

    In June 2025, the Wall Street Journal published an investigative report tracking LPG tankers traveling between Gulf ports and Adani-operated Mundra Port, alleging that Adani Group entities had been importing Iranian-origin LPG. AEL responded publicly with a stock exchange filing calling the allegations “baseless and mischievous,” categorically denying “any deliberate engagement in sanctions evasion or trade involving Iranian-origin LPG,” and stating that it was “not aware of any investigation by US authorities on this subject.”

    Privately, the picture was different. AEL simultaneously suspended all LPG imports and retained U.S.-based legal counsel to conduct a comprehensive internal investigation. Whatever the public posture, the private pivot was prompt: AEL cooperated extensively with OFAC’s subsequent investigation, proactively sharing the findings of its internal review, producing large volumes of documents, responding to all agency requests, and moving quickly toward a resolution. OFAC credited AEL for this cooperation in determining the final settlement amount — though the public denial at the moment of disclosure is precisely why the case does not qualify for voluntary self-disclosure credit.

    The Violations

    OFAC found 32 apparent violations of the Iranian Transactions and Sanctions Regulations (ITSR), 31 C.F.R. part 560, specifically § 560.203(a) — by causing U.S. financial institutions to facilitate trade-related transactions involving goods of Iranian origin, in violation of § 560.206 of the ITSR. The settlement agreement is available on OFAC’s website.

    The Penalty

    Because AEL did not voluntarily self-disclose the violations and OFAC determined the case to be egregious, the applicable starting point under OFAC’s Economic Sanctions Enforcement Guidelines was the statutory maximum base penalty: $384,208,088.

    All 32 apparent violations were treated as egregious.

    After weighing the aggravating and mitigating factors described below, OFAC agreed to settle for $275,000,000 — a reduction of approximately $109 million from the base penalty.

    Aggravating Factors

    • Reckless conduct despite clear warning signs
      • General Factor: Willfulness or Recklessness of the Conduct; Awareness of Conduct at Issue
      • AEL received multiple third-party warnings that its LPG cargos may have come from Iran, yet failed to conduct meaningful additional investigation. It also ignored commercially implausible pricing, suspicious vessel behavior, and document red flags. Moreover, AEL’s own sanctions compliance program at the time explicitly acknowledged that causing U.S. financial institutions to process Iran-related transactions could expose the company to civil or criminal penalties — meaning AEL knew the legal stakes but still did not act on the warning signs.
    • Substantial harm to the goals of Iran sanctions
      • General Factor: Harm to Sanctions Program Objectives
      • A central goal of U.S. Iran sanctions is to cut off Iran’s ability to earn revenue from its energy sector. By purchasing Iranian LPG and routing USD payments through the U.S. financial system, AEL provided Iran with significant economic benefit — money the Iranian government uses to fund its nuclear program, support terrorist proxy groups, and oppress its own population.
    • Size and sophistication of the company
      • General Factor: Individual Characteristics
      • AEL is a large, diversified international conglomerate with extensive operations in energy and infrastructure sectors. A company of that scale and global experience is expected to maintain correspondingly robust sanctions compliance capabilities.

    Mitigating Factors

    • Clean prior record
      • General Factor: History of Prior OFAC Actions
      • AEL had not received any OFAC penalty notice or Finding of Violation in the five years preceding the earliest transaction at issue.
    • LPG business was a small part of AEL’s overall operations
      • General Factor: Individual Characteristics
      • AEL’s LPG unit was newly formed and represented less than 1.5% of the company’s consolidated revenue for 2025 — a figure consistent with AEL’s own public statements, which put the LPG segment at approximately 1.46% of consolidated revenue. The violations arose from a nascent, peripheral part of a much larger enterprise.
    • Substantial cooperation with OFAC
      • General Factor: Cooperation with OFAC
      • AEL conducted a thorough, independent internal investigation on an expedited basis and at significant cost; responded promptly to all OFAC requests for information; and produced large volumes of data to support the agency’s investigation.
    • Meaningful remedial action
      • General Factor: Remedial Response
      • AEL took significant steps to address the root causes of the violations, including: (1) ceasing all LPG imports into India; (2) creating and adopting a new, robust risk-based sanctions compliance policy overseen by a dedicated Group Head of Compliance; (3) applying the enhanced policy across all of AEL’s business units for consistency and comprehensiveness; (4) incorporating maritime hydrocarbon transport risks — including those identified in OFAC’s published guidance — into its sanctions risk assessment; and (5) deploying specialized maritime intelligence technology designed to flag sanctions evasion activity in the marine transport sector.

    The $275,000,000 settlement amount reflects OFAC’s determination that while the violations were serious and egregious — and AEL did not come forward before the government became aware — the company’s prompt response, extensive cooperation, and significant compliance overhaul after the conduct came to light all warranted meaningful credit.

    What are the Takeaways?

    Non-U.S. companies using the U.S. dollar face real U.S. sanctions exposure. If your company routes payments through the U.S. financial system — even indirectly through correspondent banking — you can be held liable under U.S. sanctions law, even if your company is not based in the United States. AEL is an Indian company that never directly held a U.S. bank account, but the USD-denominated payments it initiated passed through U.S. financial institutions, giving OFAC jurisdiction. The lesson: if your payments touch the dollar, they touch U.S. sanctions law.

    Buying energy products from or near the Middle East is high-risk territory for Iran sanctions. Restricting Iran’s energy exports has been a consistent, bipartisan U.S. policy priority, and OFAC has issued multiple rounds of guidance — in 2019, 2020, 2024, and most recently in 2025 — specifically warning the energy industry about Iran’s sophisticated evasion tactics. If you’re importing petroleum products, LPG, or petrochemicals with any connection to that region, treat it as a high-risk environment requiring enhanced due diligence from the start.

    Certificates of origin and supplier warranties aren’t enough — you need to independently verify. Iran actively uses neighboring jurisdictions — particularly Oman, the UAE, and Iraq — as cover for its petroleum exports. Importers cannot rely solely on counterparty-provided documentation or supplier assurances to satisfy their sanctions due diligence obligations. Those documents need to be independently corroborated, with particular attention to whether the claimed loading ports and infrastructure are consistent with the claimed product type and origin.

    Know Iran’s shadow fleet — and actively monitor for it. Iran moves a large share of its petroleum exports using a “shadow fleet” of vessels that engage in well-documented evasion tactics: turning off or falsifying AIS transponders, conducting ship-to-ship transfers at sea, making economically illogical port calls, and frequently cycling through new names, owners, and flag states. The majority of the vessels involved in AEL’s purchases were subsequently designated by OFAC. Energy importers should build real-time maritime intelligence monitoring into their compliance programs — and stay current as evasion typologies evolve. OFAC’s 2025 Guidance for Shipping and Maritime Stakeholders on Detecting and Mitigating Iranian Oil Sanctions Evasion is required reading.

    If a deal is too good to be true, it probably involves sanctions evasion. Buyers of energy products from high-risk regions should treat prices significantly below prevailing market rates as a red flag requiring enhanced scrutiny — not an opportunity. Heightened caution is especially warranted when the below-market prices come from a counterparty with a limited public profile or trading history, or when multiple affiliated entities are used to structure similar transactions for no clear commercial reason.

    Compliance isn’t box-checking — investigate allegations promptly and seriously. When a third party alleges that your supply chain involves sanctioned goods or origins, that allegation requires a thorough, good-faith investigation — not a shrug and a request for assurances from the counterparty under scrutiny. AEL received at least four separate third-party warnings over more than a year and essentially took the Dubai Supplier’s word that everything was fine. The result was a $275 million settlement.

    Even without voluntary self-disclosure, cooperation with OFAC pays off. This case makes clear that OFAC will offer meaningful penalty reductions in exchange for prompt internal investigation, transparent sharing of findings, and genuine cooperation with the agency’s inquiry — even when a company doesn’t come forward before OFAC initiates its investigation. AEL received roughly a $109 million reduction from the statutory maximum base penalty. Voluntary self-disclosure would likely have produced a lower starting point still, but cooperation alone had real, quantifiable value here.

    Other Resources

    OFAC Compliance Framework

    In May 2019, OFAC published A Framework for OFAC Compliance Commitments, which lays out what OFAC considers to be the essential building blocks of an effective sanctions compliance program. The Framework also explains how OFAC takes compliance program quality into account when resolving enforcement cases, and includes an appendix identifying common root causes of sanctions violations that OFAC has observed in its investigations.

    Civil Penalties and Enforcement Rules

    The rules governing OFAC’s civil penalties process are set out in the regulations for each individual sanctions program, the Reporting, Procedures, and Penalties Regulations (31 C.F.R. part 501), and the Economic Sanctions Enforcement Guidelines (31 C.F.R. part 501, app. A). Recent enforcement actions and civil penalties information, including the settlement agreement in this case, are available at https://ofac.treasury.gov/civil-penalties-and-enforcement-information.

    FinCEN Whistleblower Program

    The U.S. Treasury’s Financial Crimes Enforcement Network (FinCEN) operates a whistleblower incentive program that covers OFAC sanctions violations, violations of the International Emergency Economic Powers Act (IEEPA), and Bank Secrecy Act violations. Individuals located anywhere in the world who provide information about potential sanctions violations may be eligible for a financial award if their tip leads to a successful enforcement action resulting in penalties exceeding $1,000,000. The program is open across all commercial sectors.

    —

    , , ,

  • Plain-Language Summary of GE Settlement for DDTC Settlement

    Note: The Consent Agreement and Order documents were both not machine-readable, but Claude says the Proposed Charging Letter is more detailed anyhow.

    GE Aerospace’s $36 Million Export Violation Settlement — Plain-Language Summary

    What Happened?

    On April 17, 2026, the U.S. Department of State announced that GE Aerospace (the jet-engine arm of General Electric) agreed to pay $36 million to settle 116 violations of U.S. arms export law. The violations took place over a roughly six-year window, from April 2018 through late 2024.

    The relevant law is called ITAR — the International Traffic in Arms Regulations. Think of it as the strict rulebook that governs who American defense companies can share military technology with, and how. Violating ITAR is serious: it can harm national security and, in theory, expose a company to penalties exceeding $1.27 million per violation.

    The Four Categories of Violations

    1. Sending Sensitive Military Data to China (the most serious)

    China is on America’s “do not share” list for arms and military technology. Despite this, GE had three separate incidentsof sending controlled technical data to China without authorization:

    • In 2018, an employee traveling to China carried a company laptop containing data related to F-35, F-16, F-15, and U-2 aircraft engines — and then left the laptop unattended with Chinese university officials for 90 minutes.
    • In 2021, an employee emailed a technical drawing of a component from the F118 military engine to a Chinese supplier, mistakenly thinking it was governed by a less-restrictive export rule (Commerce Department rules, rather than ITAR).
    • In 2023, GE shipped maintenance manuals for the F110 engine to Singapore on three occasions — but routed the packages through China, which itself is prohibited. Nobody had configured the shipping account to flag that as a problem.

    The U.S. government determined that at least one of these incidents — the F118 engine drawing — actually provided China with useful military information.

    2. Mismanaging Export Licenses and Agreements (the largest category — 103 charges)

    GE held many government-approved licenses and agreements covering what military technology it could share with foreign partners, and under what conditions. It repeatedly failed to follow the fine print. Examples include:

    • Shipping repaired military components to the UK Ministry of Defense when the UK MoD wasn’t listed as an authorized recipient on the relevant agreement.
    • Allowing Japanese partners to pass military engine components to 31 unauthorized sub-suppliers over five years, because GE didn’t properly verify who was in the chain.
    • Sending technical data to suppliers in Mexico that went beyond what the license actually permitted.
    • Using a license exemption to ship turbine blade castings to Canada 30 times when a specific government condition required obtaining separate licenses for each shipment — and then failing to track the quantities properly.
    • Having a Swedish partner share engine maintenance data with an unauthorized entity in South Africa.
    • Failing to notify Congress of certain defense exports to Sweden, as required by law.
    • Repeatedly failing to submit required paperwork — things like purchase orders, amendment notifications, and lists of parties to agreements — on time or at all.

    The root causes cited repeatedly: outdated internal procedures (some not updated in over 10 years), inadequate training, and insufficient oversight of foreign partners.

    3. Exporting Defense Hardware Without Authorization (4 charges)

    • A wrong engine combustion liner (for the F404-400) was accidentally shipped to Sweden because commercial paperwork got mixed up between two different items.
    • 15 machined chassis for the F-35 aircraft were temporarily exported to Israel across three shipments because an employee misclassified them under the wrong export control regime.

    4. Failing to Update Its Government Registration (3 charges)

    GE repeatedly failed to report material changes to its registration statement with the government’s defense trade regulator, as required within five days of any such change. This kind of administrative failure can obscure the government’s visibility into who a company is and what it’s doing.

    The Settlement Terms

    GE Aerospace will pay a civil penalty of $36 million. The Department of State agreed to suspend $18 million of that amount on the condition that those funds are used for remedial compliance improvements instead. For at least 24 months, GE must also engage an external Special Compliance Officer to oversee its compliance program, and must submit to at least one independent external audit. The full consent agreement runs for 36 months.

    Why Wasn’t the Penalty Larger?

    The maximum theoretical penalty for 116 violations would be enormous. The penalty was reduced significantly because:

    • GE voluntarily disclosed all 116 violations itself — it found the problems and reported them, rather than waiting to be caught.
    • GE fully cooperated with the government’s review.
    • GE had already started fixing its compliance program before the settlement.

    That said, the government also noted aggravating factors: some of the exports involved Significant Military Equipment, violations were systemic across multiple business units, and the China incidents caused real national security harm.

    Key Takeaways for Non-Expert Professionals

    1. Self-disclosure matters enormously. GE’s decision to report its own violations — all 116 of them — likely saved the company hundreds of millions of dollars in potential penalties and avoided debarment from government contracting.
    2. Compliance programs need maintenance. A recurring theme here is procedures that hadn’t been updated in a decade. Regulations change; compliance infrastructure has to keep pace.
    3. You’re responsible for your partners’ compliance. Many violations occurred not at GE directly, but through foreign partners and sublicensees. Under ITAR, the U.S. license-holder is responsible for ensuring the whole chain follows the rules.
    4. China is a red line. Any unauthorized sharing of military-related technical data with China — even routing a package through a Chinese airport — is treated as a serious aggravated violation.
    5. Paperwork isn’t optional. A surprisingly large number of the 116 charges were essentially administrative failures: late filings, missing notifications, wrong forms. These are avoidable with proper systems.

    —

    , , , , ,

  • April 17, 2026: GE gets ITARed and feathered by DDTC

    U.S. Department of State Concludes $36 Million Settlement Resolving Export Violations by General Electric Company

    MEDIA NOTE

    OFFICE OF THE SPOKESPERSON

    APRIL 17, 2026

    The U.S. Department of State has concluded an administrative settlement with General Electric Company (GE Aerospace) to resolve 116 violations of the Arms Export Control Act (AECA), 22 U.S.C. § 2751 et seq., and the International Traffic in Arms Regulations (ITAR), 22 C.F.R. parts 120-130. The Department of State and GE Aerospace reached this settlement following an extensive compliance review by the Office of Defense Trade Controls Compliance in the Department’s Bureau of Political-Military Affairs.

    The administrative settlement between the Department of State and GE Aerospace, concluded pursuant to ITAR § 128.11, addresses multiple categories of ITAR violations, including GE Aerospace’s unauthorized exports of technical data to the People’s Republic of China; violations of terms, conditions, and provisos of several Directorate of Defense Trade Controls authorizations involving various countries; unauthorized exports of defense articles to two countries; and failure to report material changes to its ITAR registration.

    GE Aerospace voluntarily disclosed all the alleged violations, a substantial portion of which predate 2023. GE Aerospace also fully cooperated with the Department’s review of this matter and has implemented numerous improvements to its ITAR compliance program since the conduct at issue.

    Under the terms of the 36-month Consent Agreement, GE Aerospace will pay a civil penalty of $36 million. The Department has agreed to suspend $18 million of this amount on the condition that the funds will be used for the Department-approved Consent Agreement’s remedial compliance measures to strengthen GE Aerospace’s compliance program. In addition, for an initial period of at least 24 months, GE Aerospace will engage an external Special Compliance Officer to oversee the Consent Agreement, which will also require at least one external audit of its ITAR compliance program and implementation of additional compliance measures.

    This settlement demonstrates the Department’s role in furthering the national security and foreign policy of the United States by controlling the export of defense articles. The settlement also highlights the importance of exporting defense articles pursuant only to appropriate authorization from the Department. 

    The Consent Agreement and related documents will be available for public inspection in the Public Reading Room of the Department of State and on the Penalties and Oversights Agreements section of the DDTC’s website. 

    For additional information, please contact the Office of the Under Secretary for Arms Control and Internal Security at T_Outreach_PM@state.gov.

    and here are the documents from the DDTC site:

    Proposed Charging Letter GE Aerospace 20260417Download
    Consent Agreement GE Aerospace 20260417Download
    Order GE Aerospace 20260417Download

    —

    , , , , ,

  • Burning Question: Why is sanctioned goods licensing being transitioned to OTSI?

    The prompt:

    How are sanctioned goods licensed today in the UK? Why is that responsibility being transferred to OTSI? Were there any specific problems with the current situation? Provide sources for your analysis.

    Gemini’s response:

    As of today, April 11, 2026, the licensing of sanctioned goods in the UK is in the final stages of a major structural transition. While the Export Control Joint Unit (ECJU) still handles most “today,” a significant transfer of power to the Office of Trade Sanctions Implementation (OTSI) is scheduled for April 27, 2026.

    Below is an analysis of the current landscape, the reasons for the transfer, and the systemic problems this change aims to solve.

    1. How Sanctioned Goods are Licensed “Today” (April 11, 2026)

    Currently, the responsibility is split between three primary bodies, often requiring businesses to apply for multiple licenses for a single transaction:

    • Export Control Joint Unit (ECJU): Historically the “heavy lifter,” the ECJU remains responsible for licensing strategic goods (military and dual-use items). For another two weeks, they also continue to process licenses for sanctioned goods (non-strategic items heading to sanctioned destinations like Russia).
    • Office of Trade Sanctions Implementation (OTSI): Launched in October 2024, OTSI currently handles the licensing of sanctioned services (e.g., professional, business, and legal services) and enforcement of trade sanctions for activities occurring outside the UK border.
    • Office of Financial Sanctions Implementation (OFSI): Handles the “financial” side (asset freezes and funds), as seen with the Maritime Mutual license discussed previously.

    2. The Transfer to OTSI (Effective April 27, 2026)

    From April 27, 2026, OTSI will take over the licensing of all sanctioned goods and associated ancillary servicesdestined for sanctioned countries.

    • What stays with ECJU: Strategic export controls (military/dual-use goods) will remain under the ECJU to ensure that national security expertise stays centralized.
    • The System: Even after the transfer, exporters will continue to use the SPIRE system for goods, while “standalone” services licenses will remain on the OTSI portal.

    3. Why the Transfer? (Solving Specific Problems)

    The UK Government’s May 2025 Cross-Government Review of Sanctions identified several “frictions” in the pre-2024 system that OTSI was created to fix:

    A. The “Services Gap”

    Before OTSI, the UK had robust enforcement for goods at the border (via HMRC), but enforcement for services (like accounting or consulting provided to sanctioned entities) was fragmented and lacked a dedicated civil enforcement body. OTSI provides a “civil” counterpart to OFSI, specifically for trade.

    B. The Enforcement “Clarity” Problem

    Historically, trade sanctions enforcement was primarily criminal, handled by HMRC. This created a high bar for prosecution. OTSI was granted the power to issue civil monetary penalties (up to £1 million or 50% of the breach value), allowing for more “proportionate and frequent” enforcement action against non-compliant businesses that didn’t meet the threshold for criminal intent.

    C. Administrative Fragmentation

    Businesses previously struggled with “license-stacking.” A single deal might require a financial license from OFSI, a goods license from ECJU, and a services license from the Department for Business and Trade (DBT). Moving sanctioned goods to OTSI concentrates trade-related expertise in one office, reducing the need for businesses to navigate multiple departments for the same sanctions regime.

    D. The “Shadow Fleet” and Circumvention

    Traditional export controls were designed for “shipment-to-destination” tracking. Modern sanctions evasion (like the Russian shadow fleet) often involves complex third-country brokering where goods never touch UK soil. HMRC’s powers are border-centric; OTSI was given broader jurisdiction over UK persons globally, allowing them to target circumvention that occurs entirely outside the UK.

    Source List

    1. OTSI Official Blog (April 9, 2026): “Expanding OTSI’s Licensing Remit” – Confirms the April 27 transition date.
    2. GOV.UK Guidance (March 2026): “UK Government’s Strategic Approach to Sanctions Enforcement” – Details the civil penalty framework and the 2025 cross-government review findings.
    3. OFSI Annual Review 2024-25: Provides data on the increase in license applications and the need for specialized “aftercare” services now being mirrored by OTSI.
    4. Business and Trade Committee Report (February 2026): Correspondence from the Chair regarding the 185 investigations opened by OTSI in its first year, highlighting the “services sector” as the primary source of breaches.
    5. Department for Business and Trade (DBT): “Trade Sanctions, Arms Embargoes, and Other Trade Restrictions”(Updated 2026).

    Analysis of Source Support

    • Fully Supported: The dates of the transfer, the new civil penalty limits, and the split between strategic and sanctioned goods.
    • Inferred/Expert Analysis: The “Administrative Fragmentation” point is a common industry critique found in legal briefings (e.g., from Clifford Chance and Linklaters) and was a central theme of the 2025 review, though the government describes it more diplomatically as “improving the user experience.”

    —

    , , , , , ,

  • April 1, 2026: OFAC penalizes all good things…

    APR FOOL 2026 EnforcementDownload

    April Fool!

    —

  • March 17, 2026: TradeStation Securities, Inc. settles with OFAC for $1,110,661

    This report summarizes the enforcement release regarding TradeStation Securities, Inc., a Florida-headquartered brokerage firm that operates online securities trading platforms.

    What Happened

    Between June 21, 2021, and June 15, 2022, TradeStation provided investment services—specifically allowing 481 securities trades—to customers who were physically located in Iran, Syria, and the Crimea region of Ukraine.

    The problem originated from a failure in the company’s “geo-blocking” systems, which are designed to identify where a customer is located and block them if they are in a sanctioned country. While TradeStation had two layers of this technology, the second layer contained a critical technical blind spot: instead of checking the customer’s location, the system mistakenly checked the location of TradeStation’s own U.S.-based servers. This error meant that customers using the company’s mobile app were not restricted from trading for nearly a year, even though those attempting to use the web platform were successfully blocked.

    The issue persisted because TradeStation’s compliance team failed to properly test and validate that these tools were working as intended. Specifically, in November 2021, the company stopped using an automated tool that was meant to test its servers for exactly these types of vulnerabilities.

    The Penalty

    TradeStation agreed to pay $1,110,661 to settle its potential civil liability for the 481 apparent violations.

    • Violation Type and Status: All 481 violations were determined by OFAC to be non-egregious and were voluntarily self-disclosed by TradeStation.
    • Base Penalty Breakdown: The total value of the illegal trades was $4,442,645. Under OFAC’s guidelines for self-disclosed, non-egregious cases, the base penalty is calculated as one-half of the transaction value.
      • Base Penalty Total: $2,221,322.
    • Final Settlement: The final penalty of $1,110,661 reflects a 50% reduction from the base penalty due to the company’s cooperation and remedial efforts.

    Aggravating Factors

    • Failure to Exercise Minimal Caution
      • General Factor involved: Degree of Care.
      • Applicability: TradeStation allowed significant compliance weaknesses to remain unaddressed for a full year. Crucially, the company had received a “Cautionary Letter” from OFAC earlier in 2021 regarding similar geo-blocking failures, meaning they were already aware of the risks but failed to ensure their systems were properly tested.
    • Discontinuing Necessary Testing Tools
      • General Factor involved: Management of Compliance Program.
      • Applicability: In November 2021, TradeStation intentionally stopped using an automated testing tool for its on-premises servers, which directly contributed to the failure to detect the system error that allowed sanctioned users to trade.

    Mitigating Factors

    • Prompt and Comprehensive Correction
      • General Factor involved: Remedial Response.
      • Applicability: After discovering the error, TradeStation quickly implemented new technical controls and solutions to ensure that future failures in its geo-blocking or alert systems would be identified immediately.
    • Limited Scope and Low Financial Benefit
      • General Factor involved: Nature and Complexity of Operations / Economic Benefit.
      • Applicability: The illegal trades represented a very small percentage of TradeStation’s total transaction volume during that year, and the company earned less than $2,000 in total revenue from these specific trades.
    • Substantial Cooperation
      • General Factor involved: Cooperation with OFAC.
      • Applicability: The company filed a detailed self-disclosure report, was highly cooperative throughout the investigation, and agreed to “toll” the statute of limitations (giving OFAC more time to complete the case).
    • Clean Five-Year History
      • General Factor involved: Prior Record.
      • Applicability: TradeStation had not received a formal Penalty Notice or Finding of Violation from OFAC in the five years leading up to these events.

    To find more details on this case, please see the full Enforcement Release provided by OFAC.

    What are the Takeaways?

    • Test and Audit Regularly: This case shows that even if you have “two tiers” of defense, they only work if they are correctly implemented. Companies must regularly test their compliance tools to ensure they are actually blocking what they are supposed to block.
    • Don’t Ignore Warning Signs: If a regulator sends a cautionary letter or points out a flaw, treat it as a high-priority alert. TradeStation’s failure to act on a previous warning was a major factor in the size of the penalty.
    • Verify After Every Update: Technical changes—such as migrating to new servers or updating software—can accidentally break your compliance filters. Testing should be a standard part of any system maintenance.
    • Use Diverse Indicators: Effective geo-blocking should look at more than just a single IP address; it should include tools like VPN detection and location-based alerts to prevent users from bypassing restrictions.

    and the full enforcement release:

    20260317_tradestationDownload

    —

    , , , , , , ,

  • March 10, 2026: UK government publishes new sanctions enforcement strategy

    Here’s a summary for non-expert practitioners of the strategy document published today under the auspices of FCDO (Foreign, Commonwealth & Development Office), the Department for Transport, HMRC (Her Majesty’s Revenue & Customs), NCA (National Crime Agency), OFSI (Office of Financial Sanctions Implementation), and OTSI (Office of Trade Sanctions Implementation):

    The “UK Government’s Strategic Approach to Sanctions Enforcement,” published in March 2026, marks a significant shift in the UK’s sanctions regime. For those with a basic grounding in the subject, the core message is that the government is moving from a phase of rapid policy creation (largely driven by the 2022 invasion of Ukraine) to a phase of aggressive, transparent, and coordinated enforcement.

    The document sets out a roadmap for how the UK will use civil and criminal powers to ensure sanctions are not just “on the books” but are actively enforced.

    1. The Strategic Shift: A “Unified Front”

    The most notable change is the emphasis on a cross-government approach. Enforcement is no longer siloed within the Treasury (OFSI). Instead, it is a coordinated effort across several key agencies:

    • OFSI (Office of Financial Sanctions Implementation): Leads civil enforcement for financial breaches and the Oil Price Cap.
    • OTSI (Office of Trade Sanctions Implementation): A newer body (launched in late 2024/early 2025) that handles civil enforcement for trade in services and goods moving outside the UK.
    • HMRC: Continues to handle trade sanctions at the border and strategic export controls.
    • National Crime Agency (NCA): Focuses on the most serious criminal evasions, particularly those involving “enablers” (lawyers, accountants) and organized crime.

    2. New Enforcement Tools and “Carrots” for Compliance

    The government has introduced a more sophisticated “toolkit” to encourage self-reporting and resolve cases faster. For a non-expert, the key takeaway is the new discount structure for penalties:

    • Early Account Scheme (EAS): Entities can get up to a 20% discount if they provide a full factual account of a breach very early in an investigation.
    • Settlement Scheme: A further 20% discount is available if a firm agrees to settle without a full formal investigation, similar to “plea deals” in other legal contexts.
    • Voluntary Disclosure: While the discount for serious cases has been adjusted to 30%, firms can combine these schemes. If a firm self-reports, provides an early account, and settles, the total penalty can be reduced by up to 70%.
    • Fixed Penalties: Minor reporting or licensing breaches now face “fast-track” fixed penalties of £5,000 or £10,000, intended to act as a “slap on the wrist” that avoids years of litigation.

    3. “The Stick”: Higher Penalties and Strict Liability

    While there are more ways to reduce a fine, the maximum “stick” has become much larger:

    • Doubled Penalties: The statutory maximum for financial sanctions breaches has doubled to the higher of £2 million or 100% of the breach value (up from £1m/50%).
    • Strict Liability: The government reiterated that for civil penalties, they do not need to prove you knew you were breaking the law (the “strict liability” standard). If a breach happened, you are liable, though “knowledge” is now considered an aggravating factor that will lead to a higher fine.

    4. Enforcement Principles

    The strategy outlines four “Guiding Principles” for how the government will act:

    1. Proportionality: Focus on the most serious and harmful breaches.
    2. Consistency: Ensuring similar breaches face similar consequences across different agencies (e.g., OFSI and OTSI).
    3. Transparency: Using “teachable moments.” The government intends to publish more details about enforcement actions so other businesses can learn from the mistakes of others.
    4. Due Process: Ensuring firms have the right to represent themselves before a final penalty is issued.

    5. Key Focus Areas for 2026

    • Ownership and Control: The government is providing more clarity on the “50% rule” and how to determine if a sanctioned person “controls” an entity even if they don’t own it.
    • Cryptoassets: There is a renewed focus on the use of crypto for sanctions evasion, treated with the same severity as traditional currency.
    • The “Enablers”: A specific warning to the professional services sector (legal, financial, and real estate) that facilitating “workarounds” will be a priority for criminal prosecution by the NCA.

    Summary for Businesses

    If you have a basic grounding in sanctions, this document tells you that “ignorance is no longer an excuse.” The government expects firms to have robust compliance systems and is signaling that while they are willing to be lenient with those who self-report and cooperate (via the new discount schemes), they will be significantly harsher on those who are caught through investigation or who display “reckless” behavior.

    —

    , ,