Sanctions evasion is the deliberate use of tricks to get around sanctions: front and shell companies, intermediaries, transshipment, hidden ownership, mislabeled trade, and alternative payment channels. It is engineered specifically to defeat name-only screening, so a clean name-screen result cannot be trusted on its own.
What is sanctions evasion, in plain English?
Sanctions evasion is what a sanctioned party does to keep moving money and goods after it has been listed. The goal is to make prohibited dealings look like ordinary business so they pass through banks and screening systems undetected. The toolkit is well established: front companies, shell companies, nominee owners, layered intermediaries, transshipment through third countries, mislabeled shipping documents, and payment through crypto or other alternative channels.
The defining feature is that evasion is designed to beat name screening. The whole point is that the sanctioned name never appears on the payment or the paperwork. A newly formed company in a neutral jurisdiction, owned on paper by someone with no listing, sends and receives funds that ultimately serve the sanctioned party. Screening the visible names returns nothing.
Because of that, detecting evasion depends on looking past the name: beneficial-ownership analysis, network and behavioral patterns, and geographic and trade-flow red flags. A clean name-screen result is the expected outcome of a well-built evasion scheme, not evidence that the dealing is legitimate.
How an evasion scheme is built
- Hide — Obscure ownership. The sanctioned party sets up shells and nominees so its name never appears on the entity that trades.
- Reroute — Insert intermediaries. Payments and goods move through third countries and middlemen to break the direct link to the target.
- Disguise — Mislabel the trade. Shipping documents understate value, misdescribe goods, or hide dual-use items as ordinary cargo.
- Settle — Use alternative channels. Funds clear through crypto, informal value transfer, or accounts that never surface the sanctioned name.
Who is involved?
Who | Their role |
The sanctioned party | The ultimate beneficiary whose name must stay off every visible document. |
Front and shell companies | Legal entities with no real business that transact on the target's behalf. |
Nominees and intermediaries | Unlisted individuals and firms that hold ownership or route payments to break the direct link. |
Facilitators | Brokers, freight forwarders, and professionals who structure the trade and paperwork. |
The bank or platform | Sees the flows and may be the only party positioned to detect the pattern behind the clean names. |
What it looks like in practice
In practice
A trading company incorporated six months ago in a neutral jurisdiction opens an account and starts buying industrial components. Nothing on the paperwork is listed. Over a few weeks its payments shift to route through a second intermediary, and the goods, described vaguely as machine parts, are shipped to a port that reconsigns cargo to a sanctioned region.
Name screening clears every party every time. What surfaces the scheme is the pattern: a brand-new entity, opaque ownership, a sudden routing change, dual-use goods, and a destination clustered around a sanctioned nexus. The analyst maps the ownership and trade flow, not just the names, and escalates the relationship for review.
Why it matters for operators
Sanctions evasion is the reason name screening alone is not enough. A program that leans entirely on matching names against lists will pass every well-constructed evasion scheme, because those schemes are built precisely so the names come back clean. The exposure is the same strict-liability sanctions breach, just arriving through a route your primary control is blind to.
Catching it requires a different lens: beneficial ownership, counterparty networks, geography, and trade patterns. Operators who treat a clean name-screen as the end of the analysis will miss evasion by design, which is why regulators expect programs to layer behavioral and ownership analysis on top of list matching for higher-risk flows.
What to watch in the data
- Sudden routing changes. Payments or shipments that reroute through new intermediaries or countries for no clear commercial reason.
- Opaque ownership. Newly formed entities with nominee owners and no verifiable business behind them.
- Dual-use goods to high-risk regions. Items with military or proliferation applications heading toward or near a sanctioned nexus.
- Clustered counterparties. A web of parties that all trace back, indirectly, to the same sanctioned region or network.
- Clean names, odd behavior. A perfect name-screen paired with mislabeled trade or informal settlement is a warning, not reassurance.
Quick questions
Why does name screening miss sanctions evasion?
Because evasion is built so the sanctioned name never appears. Front companies, nominees, and intermediaries stand in for the target, so matching visible names against lists returns nothing even when the dealing is prohibited.
What detects evasion if names come back clean?
Beneficial-ownership analysis, network and behavioral patterns, and geographic and trade-flow red flags. You look at who really controls an entity and how funds and goods actually move, not just the names on the paperwork.
What are the classic red flags?
Sudden routing changes, opaque or newly created ownership, dual-use goods heading to high-risk regions, and counterparties that cluster around a sanctioned nexus. Any of these on an otherwise clean payment warrants a deeper look.
Is transshipment always evasion?
No, legitimate trade transships too. It becomes a red flag when it has no commercial logic, appears alongside opaque ownership or mislabeled goods, and points toward a sanctioned region.
How does crypto factor into evasion?
Crypto and other alternative channels let value move without surfacing a sanctioned name in the traditional banking system. Wallet screening and blockchain analytics are the countermeasures, but they have to be applied deliberately.
Go deeper
- OFAC, US Treasury ↗ — Administers US sanctions programs, the SDN list, and licensing.
- European Banking Authority ↗ — EU banking regulator. Strong Customer Authentication under PSD2 and AML guidance.