Skip to main content

Mitigating sanctions circumvention risks and strengthening global compliance

From evolving threats to smarter controls

Authors:

  • Nicolas Marinier | Partner, Forensic & Financial Crime
  • Marie Astrid Dupuy | Director, Forensic & Financial Crime
  • Andreas Schmitt | Senior Manager, Risk, Regulatory & Forensic
  • Jeanne Barreau | Manager, Forensic & Financial Crime

This podcast episode is based on the Deloitte Luxembourg article below and includes content generated, assisted, or edited using artificial intelligence technology. It has been reviewed by a human prior to publication. The voices featured are synthetic. This podcast is provided for general information purposes only and does not constitute any kind of professional advice rendered by Deloitte Luxembourg. Deloitte Luxembourg accepts no liability for any loss or damage whatsoever sustained by any person who uses or relies on the content of this podcast. 

Economic sanctions are one of the most powerful non-military tools available to the international community. As circumvention tactics grow more sophisticated, sanctions compliance becomes a strategic and legal priority.

  • Why it matters: Sanctions are legal obligations with real consequences. New EU rules increase accountability for serious negligence, raising the question: is your framework adequate?
  • What changes: Evasion techniques are becoming more intricate, encompassing cash movements, currency swaps, ship‑to‑ship transfers, flag tricks, spoofed locations, and dual‑use fronts. This article outlines the mechanics of these practices without revealing playbooks.
  • What to build: Effective sanctions compliance rests on three core pillars: a sanctions‑specific risk assessment, tailored counterparty due diligence, and precise name screening with rapid list updates, provider verification, and swift escalation of alerts.
  • Where this is going: AI advancements, tighter rules, and cross‑border collaboration are reshaping controls. Vigilance and clear objectives will drive meaningful progress.

Curious how these elements connect in practice? The full piece links key risks to concrete steps and highlights where organizations may need to focus next.

Understanding the need for effective compliance with sanctions regimes

In today’s complex landscape of global politics and international relations, sanctions regimes have become a key instrument for countries seeking to influence the behavior of other states without initiating military actions. These measures can take various forms:

Enlarge image

The private sector, particularly the financial industry, plays a critical role in the implementation of sanctions as entities within this industry. Financial institutions have visibility over fund flows, which positions them to help prevent and detect illicit financial activities.

As sanctions regimes expand, so do the related obligations and compliance controls required to identify and prevent their violations. At the same time, cases of sanctions breach and circumvention are regularly reported in official publications.

This increased visibility of direct or indirect sanctions breaches naturally raises an important question: should these reported violations prompt us to reassess the effectiveness of sanctions regimes and the way they are implemented?

Why should organizations prioritize compliance with sanctions regimes, detection of sanctions violations, and circumvention?

Compliance with sanctions regimes is more than a legal duty; it is an obligation to achieve defined outcomes and carries significant consequences. Professionals must have a thorough understanding of sanctions imposed by bodies such as the European Union (EU), the United Nations (UN), the US, and the UK, and implement controls tailored to the scope of their business activities.

This emphasizes the importance of establishing a robust sanctions framework. Without one, organizations are exposed to financial penalties and reputational damage, as professionals remain accountable for any breaches arising from inadequacies in their controls.

The EU Directive 2024/1226 further reinforces this framework by introducing criminal accountability for sanctions breaches resulting from serious negligence. While Luxembourg has not yet transposed this directive, the draft bill proposes to broaden its scope to cover all applicable restrictive measures, regardless of their legal basis, not only those stemming from the European sanctions regime.

Sanctions regimes should be upheld not only as a legal requirement but also because of their historically proven effectiveness. Economic sanctions played a pivotal role in securing Indonesia’s independence from Dutch rule and were instrumental in the campaign that led to Nelson Mandela’s release from prison. More recently, the economic challenges faced by Russia further illustrate the power of sanctions, as reflected in the 2.1% decline in its GDP in 2022 and its comparatively weaker growth relative to other commodity‑exporting countries.

The need for individuals and entities to navigate intricate procedures and adopt convoluted schemes to evade sanctions underscores the impact of these measures. Sanctions circumvention schemes have become so complicated and risky that they could ruin the financial gains they are intended to achieve.

Adapting sanctions frameworks to address emerging sanctions circumvention practices

According to a recent report from the Financial Action Task Force (FATF), the financial system remains highly vulnerable to the financing of prohibited activities. The ability of sanctions evaders to continuously adapt their methods poses a significant threat to the effectiveness of sanctions, enabling targeted individuals and entities to access global markets and fund illicit activities. Three examples include the following:

Russia’s circumvention strategies to bypass standard financial systems’ restrictions

Russia has developed alternative strategies to support its economy and financial system:

  • Physical cash transport: Billions of dollars and euros have reportedly been transferred to Russian banks, with significant cash shipments originating from countries like the United Arab Emirates and Türkiye.
  • Currency swap arrangements: Agreements with countries including China have facilitated trade and access to foreign currencies without relying on Western payment systems.
Circumvention of oil cap by Russia and North Korea

Sophisticated tactics are also employed in evading oil cap restrictions placed on Russia and North Korea. Investigative reports reveal several advanced smuggling practices:

  • Ship-to-ship transfers: The EU-sanctioned oil tanker Unica allegedly conducts ship-to-ship oil transfers in the Taiwan Strait before passing shipments to North Korean vessels within their territorial waters, circumventing the UN’s 500,000-barrel cap imposed under Security Council Resolution 2397.
  • Flag exploitation: A UN report highlighted that North Korea uses flags from countries with comparatively limited vessel monitoring (e.g., Panama, Sierra Leone, and Tanzania) to disguise vessels. Cases of identity theft schemes involving blacklisted vessels were uncovered, deceiving commodity traders and obscuring the true destination of shipments.
  • Location faking: Russian tankers reportedly falsify their geolocation—appearing west of Japan while shipping oil to China—enabling them to circumvent the price cap and sell oil above sanctioned thresholds.
Dual-use goods smuggling to Iran

According to the FATF, intermediaries and front companies have been used to supply dual-use goods to Iranian entities linked to nuclear weapon development. Such methods involve falsified trade documents and the use of third countries to conceal the final recipient, highlighting both the global reach and the complexity of sanctions circumvention.

These examples demonstrate the need for heightened vigilance from the professionals and for substantial resource allocation, to adapt to complex sanctions circumvention schemes that undermine the effectiveness of the sanction’s regimes.

How can organizations establish robust controls to detect and prevent attempts at sanctions circumvention?

Organizations play a pivotal role in detecting and preventing circumvention. A robust sanctions framework rests on three essential pillars:

Sanctions-specific risk assessment

A strong framework begins with business-wide risk assessments tailored to applicable sanctions obligations and the professional risks associated with sanctions violations. It is tailored to the professional’s business products and services, counterparties, and geographic exposure. This dimension should be clearly distinguished from the money-laundering (ML) and terrorism financing (TF) risks which the professional is exposed to.

According to the above-mentioned FATF report, common circumvention tactics include the use of intermediariesconcealing beneficial ownership information, exploiting virtual assets, and leveraging the maritime sector. Reviewing FATF and other relevant guidance documents helps professionals stay informed on emerging threats and implement targeted risk mitigation strategies.

Counterparty due diligence

Accurate identification of counterparties is critical for identifying sanctioned individuals or entities and understanding their business models. Effective due diligence that allows the identification and evaluation of sanctions must go beyond surface-level assessments and draw on skilled analysis to identify and assess sanctions risks, including complex links between counterparties that may be obscured through complex legal jurisdictions or falsified documentation. A "one-size-fits-all" approach is insufficient. Counterparty diligence should be tailored to the risks posed by the organization’s activities.

Name screening processes

Robust name screening mechanisms serve as the cornerstone of a sanction’s framework. Unlike AML/CTF monitoring, screening for compliance with sanctions regimes is rule-based, requiring systems that can detect matches against official sanctions lists with precision and continuously. Professionals should implement:

  • Immediate updates to sanctions lists.
  • Verification procedures to ensure service providers update screening tools promptly.
  • Second level controls on sanctions alerts.
  • Immediate review and escalation of sanctions-related alerts to prevent detection delays.

Delays in updating sanctions lists or responding to alerts can result in late detection of sanctioned entities, which may trigger violations or breaches.

Conclusion

Looking ahead, several developments are paving the way for more robust and efficient compliance systems: the adoption of emerging technologies, such as AI, the progressive tightening of regulatory frameworks, enhanced cross-border information-sharing mechanisms, and public-private partnerships.

When designed with clear objectives, precise targeting, and robust frameworks, sanctions can support positive change, promote accountability, and deter unlawful practices.

Effective sanctions implementation is not an individual responsibility; it depends on the collective commitment and vigilance of governments, institutions, and professionals worldwide. By investing in robust sanctions frameworks and staying ahead of evolving circumvention tactics, we can preserve sanctions as a cornerstone of international justice, accountability, and peace, protecting our financial sectors and economies.

“Delays in updating sanctions lists or responding to alerts can result in late detection of sanctioned entities, which may trigger violations or breaches.”

“The ability of sanctions evaders to continuously adapt their methods poses a significant threat to the effectiveness of sanctions, enabling targeted individuals and entities to access global markets and fund illicit activities.”

Discover our Future of Advice Blog Homepage

Did you find this useful?

Thanks for your feedback