Sanctions Compliance

State of play.

• The Iran conflict has restructured the entire sanctions enforcement landscape. A U.S. naval blockade of Iranian ports, IRGC toll collection at the Strait of Hormuz, and successive rounds of maximum-pressure designations against Chinese refineries and Iran's weapons supply chain are running simultaneously, creating compliance exposure across energy, shipping, and financial sectors .
• Cuba sanctions have pivoted to a secondary-sanctions model. Executive Order 14404 extends U.S. enforcement to foreign entities operating in Cuban energy, defense, mining, and financial services—with the first designations targeting GAESA and a Canadian-Sherritt joint venture, signaling that non-U.S. firms face direct exposure .
• Venezuela sanctions are being progressively unwound through OFAC general licenses, with GL 52 and companion licenses authorizing named U.S. energy companies to engage in oil, gas, and petrochemical transactions with PdVSA—but with hard carve-outs for Russia-, Iran-, China-, and Cuba-linked entities that create layered due diligence obligations .
• FinCEN and OFAC have launched two structural enforcement upgrades simultaneously: a proposed AML/sanctions compliance framework for stablecoin issuers under the GENIUS Act, and a proposed whistleblower program offering 10–30% awards for BSA and OFAC violations—both of which will materially shift the internal compliance calculus at regulated institutions .
• For counsel advising financial institutions, energy companies, or multinationals with exposure to Iran, Cuba, Russia, or Venezuela, the practical baseline is that the Trump administration is running maximum-pressure enforcement on Iran and Cuba simultaneously with selective relief on Venezuela and Russia—requiring jurisdiction-by-jurisdiction compliance audits rather than any unified posture.

Where things stand.

• Iran maximum-pressure enforcement is at its most intensive point in years. The U.S. has imposed a naval blockade of Iranian ports, sanctioned Hengli Petrochemical (China's seventh-largest independent refinery) for Iranian crude purchases, and designated 24 additional entities across China, Hong Kong, the UAE, and Belarus for supplying Iran's drone and missile programs . The Iranian oil waiver issued in March 2026 was allowed to expire, returning the U.S. to full sanctions enforcement .
• IRGC toll payments at the Strait of Hormuz constitute independent sanctions violations. Any entity paying the IRGC's transit toll—in any currency, including yuan or cryptocurrency—faces secondary sanctions exposure and potential criminal liability under material support statutes, with penalties up to $50,000 per violation and 20 years imprisonment .
• Cuba secondary sanctions are now structurally analogous to Iran. EO 14404 authorizes Treasury to designate non-U.S. entities in Cuban energy, defense, mining, financial services, and security sectors, and permits sanctions on adult family members of designated individuals—a significant broadening of the designation perimeter .
• Venezuela sanctions relief is real but narrow and conditional. OFAC's general license series (GL 46–52) authorizes specific named companies to engage in oil, gas, and petrochemical transactions with PdVSA, but prohibits exploration, new production, and joint ventures, and excludes any Russia-, Iran-, China-, or Cuba-linked counterparties .
• The Russia shadow fleet enforcement gap is widening. The UK has sanctioned 544 Russia-linked vessels but conducted no detentions after Starmer's boarding announcement; Estonia has formally withdrawn from active enforcement citing Russian military escalation; France, Belgium, and Sweden are actively boarding vessels, creating a fractured NATO enforcement picture .
• UK sanctions enforcement has been structurally upgraded. OFSI's cross-government enforcement strategy (March 2026) coordinates civil and criminal penalties with faster investigations, penalties up to £2 million or 100% of breach value, and a demonstrated willingness to pursue settled cases—Apple Distribution International paid £390,000 for a 2022 Russia breach . New UK end-user controls effective May 13 require proactive export screening across all major regimes .
• FinCEN's proposed AML whistleblower program creates a new enforcement vector inside regulated institutions. The program offers 10–30% awards on penalties exceeding $1 million, covers BSA, OFAC, IEEPA, and Kingpin Act violations, extends to non-U.S. employees of U.S.-company subsidiaries abroad, and is backed by a $300 million revolving fund—mirroring the SEC and CFTC models that generated billions in recoveries .
• Stablecoin issuers face the first explicit federal sanctions compliance mandate. The FinCEN/OFAC NPRM under the GENIUS Act requires PPSIs to deploy transaction-blocking and token-freezing/burning technical controls, file SARs at a $5,000 threshold, and comply with the Travel Rule—with a January 2027 compliance deadline .
• AI-enabled sanctions evasion is outpacing legacy screening infrastructure. State actors including North Korea are deploying generative AI to construct synthetic shell networks at scale; OFAC, the FBI, and the CFTC have issued fragmented warnings; Amazon has faced penalties for automated screening failures .
• SOX whistleblower protections extend to employees of foreign subsidiaries of U.S. companies. The Coupang/Smith settlement follows a March 2025 ruling that the employment relationship's center was in the U.S., establishing precedent for multinational compliance exposure .

Latest developments.

• EO 14404 signed May 1, 2026, extending Cuba sanctions to foreign entities in key sectors; first designations include GAESA, its president, and Moa Nickel SA (Canadian-Sherritt JV)
• Treasury sanctions 24 entities across China, Hong Kong, UAE, and Belarus for supplying Iran's drone and missile programs
• OFAC issues GL 52 and companion licenses authorizing named U.S. energy companies to transact with PdVSA in oil, gas, and petrochemicals
• Coupang and former in-house compliance attorney Philip Smith settle Iran whistleblower retaliation suit; SOX extraterritorial precedent stands
• Treasury sanctions Kabila over eastern Congo conflict, signaling expanded DRC enforcement with critical-minerals supply chain implications
• UK end-user controls (SEUC) effective May 13 across Belarus, DPRK, Iran, Libya, Myanmar, Russia, Syria, Venezuela, and Zimbabwe regimes
• UK OFSI cross-government enforcement strategy published March 2026; Apple Distribution International settles for £390,000
• FinCEN/OFAC NPRM for stablecoin issuer AML/sanctions compliance under GENIUS Act; comment period closes June 9, 2026
• FinCEN NPRM for BSA/OFAC whistleblower program with 10–30% award structure and $300 million fund
• OFAC sanctions Hengli Petrochemical (Dalian) and approximately 40 shadow fleet vessels for Iranian crude purchases
• U.S. naval blockade of Iranian ports; sanctioned Chinese tanker Rich Starry turns back at Strait of Hormuz
• IRGC transit toll system at Strait of Hormuz creates independent sanctions violation risk for shippers
• Iranian oil waiver expires April 19; Russia oil waiver extended to manage Hormuz supply shock
• Indian refiners settle Iranian crude purchases in yuan via ICICI Bank under expiring waiver
• China sanctions seven European defense firms over Taiwan arms sales—first direct European designations over Taiwan
• Dutch International Sanctions Measures Act submitted to parliament, replacing 49-year-old framework
• Argentina designates IRGC as terrorist organization, enabling domestic sanctions
• OFAC sanctions CJNG-linked Kovay Gardens timeshare resort; sixth action in campaign against cartel timeshare fraud
• Forbes Russia data: Russian billionaire wealth reaches record $696.5 billion despite Western sanctions
• Russian sanctioned tanker delivers oil to Cuba on humanitarian grounds; Trump administration does not block

Active questions and open splits.

• Secondary sanctions scope under Cuba EO 14404. The order authorizes Treasury to designate non-U.S. entities across broad sectors and to sanction adult family members of designated individuals—but the criteria for designation and the pace of additional designations remain unpublished. Canadian and European firms with Cuban operations face immediate but unquantified exposure .
• Hormuz toll payment as independent sanctions violation. Shippers face a binary choice: pay the IRGC toll and risk secondary sanctions plus criminal liability, or refuse and lose access to the strait. No OFAC guidance has clarified whether any humanitarian or force majeure exception applies; the legal exposure is severe and unresolved .
• Venezuela GL compliance: Russia/Iran/China carve-out operationalization. The general licenses prohibit dealings with Russia-, Iran-, China-, and Cuba-linked entities, but the due diligence standard for identifying such linkages in complex supply chains and financing arrangements has not been detailed by OFAC. Energy companies operating under the licenses face unresolved screening obligations .
• FinCEN whistleblower program: internal vs. external reporting dynamics. The proposed 10–30% award structure creates financial incentives for employees to bypass internal compliance channels and report directly to FinCEN. Whether the final rule will require or credit prior internal reporting—as the SEC's program does in some circumstances—remains open and will determine how institutions should restructure their internal escalation procedures .
• Stablecoin token-freezing and burning as sanctions compliance. The GENIUS Act NPRM requires PPSIs to deploy technical controls capable of freezing, rejecting, or burning tokens pursuant to lawful orders in secondary markets—raising unresolved questions about asset custody, smart contract architecture, and whether token destruction constitutes a taking .
• UK OFSI ownership and control test reform. OFSI's call for evidence has closed; how the agency refines the "hypothetical choice" element of the test will determine enforcement proportionality for entities with complex beneficial ownership structures across all UK sanctions regimes .
• Russia shadow fleet enforcement fragmentation. Estonia has withdrawn from active enforcement; the UK has announced but not executed boardings; France, Belgium, and Sweden are actively detaining vessels. The divergence creates arbitrage opportunities for shadow fleet operators and raises the question of whether NATO can coordinate a unified enforcement posture .

What to watch.

• OFAC's pace and criteria for additional Cuba designations under EO 14404—particularly whether Canadian mining and European financial services firms are targeted, which would trigger a diplomatic escalation with allies.
• Whether the Islamabad Accord framework produces a formal U.S.-Iran agreement releasing frozen Iranian assets, which would require statutory changes to Iran sanctions and reshape the entire Iran compliance picture .
• FinCEN final rule on the BSA whistleblower program—specifically whether it incorporates a prior-internal-reporting credit and how it coordinates with OFAC's enforcement priorities.
• June 9, 2026 comment deadline on the GENIUS Act stablecoin NPRM, followed by the January 2027 compliance deadline—the window for stablecoin issuers to flag implementation concerns about token-freezing architecture is closing.
• Whether Treasury issues secondary sanctions guidance targeting ICICI Bank or Indian refiners over yuan-denominated Iranian oil settlements, which would mark a significant escalation against a major U.S. partner .
• Dutch International Sanctions Measures Act parliamentary passage—as the leading indicator for EU-wide enforcement modernization under Directive 2024/1226 .