AI generated reportEUEnglish

How do EU sanctions reach controlled entities, indirect dealings and non-EU affiliates?

How EU asset freezes and Russia sectoral sanctions apply to ownership, control, circumvention, services and transactions through non-EU affiliates.

Created on
Created on 2026-07-31
Reading time
8 minute read
Topic
Tax Customs Trade Controls And Sanctions

Short answer

EU sanctions screening cannot stop at the contracting party's name. Asset-freeze rules prohibit making funds or economic resources available, directly or indirectly, to listed persons and require freezing assets they own, hold or control. A non-listed company may therefore be affected because a listed person owns or controls it, or because the transaction benefits that person.

Sectoral sanctions can separately prohibit particular goods, finance, software or professional services even when nobody is listed. Routing through a distributor, agent or non-EU affiliate does not solve the problem: deliberate circumvention is prohibited, and accepting the known possibility of a circumvention result can suffice under the Russia regulation. EU parents must use best efforts to prevent owned or controlled non-EU entities from undermining those measures.

The exact regulation, current consolidation, annex, derogation and national licence must be checked on the transaction date. Russia sanctions changed as recently as 24 July 2026, making documented group controls essential.

Begin with the applicable regime and EU nexus

EU restrictive measures are adopted regime by regime. Regulation 269/2014 principally contains Russia-related individual asset freezes, while Regulation 833/2014 contains sectoral trade, finance, software and services restrictions. Other regimes have their own wording.

The regulations generally bind:

  • persons within EU territory;
  • EU nationals wherever located;
  • EU-incorporated or constituted legal persons, inside or outside the EU;
  • business done wholly or partly within the EU; and
  • persons aboard aircraft or vessels under Member State jurisdiction.

A third-country subsidiary is not automatically an EU person merely because it has an EU parent. But EU directors, employees and parents remain bound by their own conduct, and Russia Regulation 833/2014 now adds a best-efforts duty concerning controlled non-EU entities.

Ownership and control extend asset-freeze risk

Article 2 of Regulation 269/2014 freezes funds and economic resources belonging to, owned, held or controlled by listed persons and prohibits making funds or economic resources available to or for their benefit, directly or indirectly.

EU guidance treats ownership and control as related but separate tests. Ownership commonly exists where a listed person holds more than 50% of proprietary rights or a majority interest. Holdings can be indirect, and interests of several listed persons may need aggregation. Control can exist below 50% where facts show decisive influence—for example, power to appoint management, exercise a dominant influence, control voting rights, use assets, or conduct the entity's business on a unified basis.

If a listed person owns or controls a non-listed entity, authorities normally presume that making resources available to that entity makes them indirectly available to the listed person. The presumption may be rebuttable on reliable facts, but a contractual statement of independence is not enough where governance, financing or benefit flows point the other way.

The analysis should document the full chain:

  • direct and indirect shareholdings, including nominees and trusts;
  • voting arrangements and shareholder agreements;
  • board appointment and removal powers;
  • veto, financing and operational dependence;
  • beneficial ownership and recent transfers; and
  • who can use or benefit from the supplied asset.

A minority holding is therefore not an automatic clearance, and a majority holding is not the only path to control.

“Indirectly” follows the economic path

The prohibition covers more than a payment into a listed person's bank account. Funds include cash, credit, securities and financial benefits. Economic resources include tangible or intangible assets that can be used to obtain funds, goods or services.

A payment to an unlisted intermediary, delivery to a warehouse, licence to a controlled company, release of security or provision of services can be prohibited if it makes value available to or for the benefit of the target.

Exemptions and licensing derogations can cover matters such as basic needs, legal fees, humanitarian purposes and wind-down. Conditions are narrow; obtain any required national-authority licence before performance.

Circumvention is broader than using a shell company

Article 12 of Regulation 833/2014 prohibits knowing and intentional participation in activities whose object or effect is circumvention. Since the 2024 amendment, that expressly includes participation without deliberately seeking the prohibited result where the person knows the activity may have that object or effect and accepts the possibility.

Participation is prohibited where a person is aware it “may have that object or effect and [accepts] that possibility”. —

Red flags include a new reseller in a diversion hub, altered product descriptions, unexplained end-user changes, fragmented payments, a Russian-origin instruction hidden behind a third-country affiliate, or refusal to provide ownership and destination evidence.

Contractual controls remain important. Article 12g requires a “no-Russia clause” for specified sensitive exports to many third countries, with adequate remedies and reporting of known breaches. Article 12gb requires proportionate risk assessment, policies and controls for common high-priority items. These targeted duties sit alongside the general anti-circumvention rule.

Non-EU affiliates require best efforts, not passive distance

Article 8a of Regulation 833/2014 requires EU operators to undertake their best efforts to ensure that an owned or controlled non-EU entity does not participate in activities undermining the regulation.

Natural and legal persons, entities and bodies shall undertake their best efforts to ensure that any legal person, entity or body established outside the Union that they own or control does not participate in activities that undermine the restrictive measures provided for in this Regulation. —

It is not strict liability for everything a foreign subsidiary does. Feasibility and actual control matter, including third-country law that prevents action for reasons the EU operator did not cause. But a parent should be able to show governance instructions, product and counterparty controls, escalation, training, audit rights, data access and remediation proportionate to risk.

“Undermining” is wider than proven circumvention. It covers affiliate activity producing an effect the sanctions seek to prevent, such as Russia receiving prohibited goods, finance or services. Deliberately using the affiliate as a clean contracting face creates both circumvention and best-efforts risk.

Professional services have their own prohibitions

Article 5n of Regulation 833/2014 prohibits direct or indirect provision of specified services to the Russian Government or Russian-established entities. Current categories include legal advice; accounting, audit, bookkeeping and tax consulting; business and management consulting and public relations; construction, architecture, engineering and technical testing; advertising and market research; IT consultancy; specified space-based, AI, high-performance and quantum computing services; managed security services; and listed enterprise, design, manufacturing, banking or finance software. Tourism-related services in Russia are separately restricted.

The current text contains exclusions, grandfathering and authorisation routes. Some legal services necessary to secure effective access to judicial, administrative or arbitral proceedings are treated differently from transactional advice. A 24 July 2026 amendment also excludes a computerised reservation system, as defined by Regulation 80/2009, from the tourism-services prohibition and extends a licensed divestment or wind-down route to 31 December 2027. Exact scope and licence conditions must be checked, rather than treating “professional services” as one blanket category.

Indirect provision matters. An EU consultancy cannot avoid Article 5n by invoicing a Dubai affiliate if the service is actually supplied onward to a Russian entity. Conversely, a genuine service to an independent non-Russian business is not prohibited solely because the group has Russian operations; end use, recipient, benefit and knowledge must be established.

Third-country routing does not remove territorial reach

In Neves 77 Solutions, the Court held that a brokering prohibition for military equipment applied even though the equipment never entered an EU Member State. The EU-connected broker and prohibited service supplied the jurisdictional link.

The brokering ban applied “even where the military equipment ... was never imported into the territory of a Member State”. —

The Court also accepted that confiscation of the entire proceeds could be proportionate, subject to effective judicial safeguards. Rosneft confirms that EU courts can review relevant restrictive measures and that affected operators retain routes to challenge legality and interpretation. Sanctions are stringent, but not beyond judicial control.

Enforcement now carries harmonised criminal-law risk

Directive 2024/1226 requires Member States to criminalise intentional violations of EU restrictive measures and specified seriously negligent conduct. It covers asset-freeze breaches, prohibited trade and services, circumvention, failure to report where required, and breach of licence conditions. It also requires liability and substantial sanctions for legal persons, alongside confiscation tools.

“providing false or misleading information, including incomplete relevant information, in order to conceal that a designated person, entity or body is the ultimate owner or beneficiary” —

This identifies one form of concealment that Member States had to criminalise. National transposition determines investigation, procedure and the available penalty. A transaction can also be frozen, rejected, reported or administratively penalised without a final criminal conviction.

Conclusion

EU sanctions apply through legal nexus, ownership, control, indirect benefit, product or service scope and anti-circumvention rules. A non-listed name, minority shareholding or non-EU routing step is not a safe harbour.

The practical question is whether an EU-bound person is directly or indirectly providing prohibited value, accepting a diversion risk, or failing to use feasible control over an affiliate. Current-law verification and evidence-led due diligence are indispensable because the regulations, annexes and licensing routes change frequently.

Sources

This article provides general legal information, not advice for a specific matter. Laws, facts and procedural deadlines may change the result. Follow the linked primary sources and obtain local advice before acting.