Sanctions are restrictive measures imposed by governments or international bodies against targeted individuals, entities, sectors, or countries to pursue foreign-policy, security, or law-enforcement aims. They set hard prohibitions with serious penalties, including strict-liability exposure in some regimes, so getting compliance right is not optional.
What are sanctions, in plain English?
Sanctions are rules that forbid dealing with certain people, companies, sectors, or whole countries. A government or an international body decides that engaging with a target works against its foreign-policy, national-security, or law-enforcement goals, and it makes that engagement illegal for anyone within its reach. The measures range from freezing a named person's assets to a full embargo on an entire economy.
They are not guidance or best practice; they are hard prohibitions. Breaching them carries civil and criminal penalties that can run into large fines and, in some regimes, strict liability. Strict liability means you can be penalized even without intent, so a screening gap that lets a prohibited payment through is a violation regardless of whether anyone meant to break the rules.
For a financial institution, sanctions define the outer boundary of who you can serve and what payments you can move. Compliance means screening against the applicable lists, knowing which regimes reach your business, and reconciling the differences between US, EU, UK, and UN measures rather than assuming one set of rules covers everything.
The main types of sanctions
Type | What it restricts |
Asset freezes | Block the funds and economic resources of named individuals and entities so no one can deal with them. |
Dealing bans | Prohibit making funds or resources available to a target, directly or indirectly. |
Sectoral sanctions | Bar only specific activities of a sector, such as certain debt, equity, or energy dealings, not the whole party. |
Trade restrictions | Control the export or import of specific goods, often dual-use or defense items, to a target. |
Comprehensive embargoes | Prohibit virtually all dealings with an entire country or region. |
Who imposes and enforces them?
Who | Their role |
UN Security Council | Sets a baseline of measures that member states build into their own regimes. |
OFAC (US) | Administers and enforces US sanctions, maintains the SDN list, and can impose strict-liability penalties. |
EU and UK bodies | Publish their own consolidated lists and prohibitions that can differ from US measures. |
The institution | Must screen customers and payments, decide the right action, and prove compliance under exam. |
What it looks like in practice
In practice
A payments company operating in both the US and Europe processes a transfer to a supplier that is named on the US SDN list but not yet listed by the EU. A US-based analyst assumes the EU clearance means the payment is fine and lets it through.
Because US persons and US-dollar clearing are involved, the US prohibition applies regardless of the EU status, and the payment breaches OFAC rules. The lesson the compliance team takes away is that lists diverge, and the applicable regime, not the most convenient one, decides whether a dealing is barred. They rebuild the screening logic to apply every regime that reaches a given payment.
Why they matter for operators
Sanctions carry some of the steepest penalties in financial crime, and in strict-liability regimes intent is no defense. A single prohibited payment that slips through screening can expose an institution to enforcement action, large fines, and reputational damage, even if it was an honest error. That makes sanctions compliance a control that has to work every time, not most of the time.
The harder part is that regimes do not line up. A party barred by OFAC may be clear in the EU, and a UK measure may reach dealings the UN never named. Operators have to know which regimes apply to which flows and reconcile the differences, because assuming one jurisdiction's rules cover everything you do is exactly where programs slip.
What to watch in the data
- Single-regime blind spots. Screening against only one list leaves parties barred by another regime unblocked.
- Stale lists. Sanctions lists change frequently; a copy that is days old can miss newly designated parties.
- Indirect exposure. A clean name-screen can still involve a blocked party through ownership, which the 50 Percent Rule captures.
- Sectoral confusion. Treating a sectoral target as fully blocked, or vice versa, is a frequent and consequential error.
- US-dollar nexus. Dollar-clearing or a US person can pull the US regime into a payment that otherwise looks purely foreign.
Quick questions
What does strict liability mean for sanctions?
It means you can be penalized for a violation even if you did not intend to break the rules and did not know the party was sanctioned. In these regimes, a screening failure is a violation regardless of intent, which raises the bar on your controls.
Are all sanctions the same across countries?
No. US, EU, UK, and UN measures differ in scope and in which parties they name. A party blocked in one jurisdiction may be clear in another, so you have to screen against every regime that reaches your business.
What is the difference between a sanction and an embargo?
An embargo is one type of sanction, usually the most comprehensive, prohibiting nearly all dealings with an entire country or region. Other sanctions are narrower, targeting named parties or specific sectors and activities.
How does ownership affect sanctions exposure?
Under rules like the 50 Percent Rule, an entity that is majority-owned by sanctioned parties is treated as blocked even if it is not named on any list. A name-only screen misses these, so beneficial-ownership analysis is essential.
Who enforces US sanctions?
The Office of Foreign Assets Control, part of the US Treasury, administers and enforces US sanctions and maintains the SDN list. It can impose civil penalties on a strict-liability basis for breaches.
Go deeper
- OFAC, US Treasury ↗ — Administers US sanctions programs, the SDN list, and licensing.
- European Banking Authority ↗ — EU banking regulator. Strong Customer Authentication under PSD2 and AML guidance.