Russian sanctions compliance guide 2024–2026: banking restrictions, jurisdictional arbitrage & financial institution requirements

The global financial architecture has entered a state of structural fragmentation as the regime of international sanctions against Russia reaches unprecedented complexity and extraterritorial reach.

The strategy employed by the G7, the EU, and allied partners has evolved from initial broad-brush sectoral exclusions into a granular infrastructure blockade designed to isolate the Russian state and its military-industrial complex while managing peripheral risks to the global economy. This has created a multi-tiered reality where state-level sanctions, individual asset freezes, and systemic restrictions on ordinary citizens intersect with the survival strategies of global financial institutions navigating the "corridor-risk" of middle-power nodes like the UAE, Turkey, and Central Asia.

The architecture of state-level sanctions and infrastructure blockades

The current regime is no longer merely a list of prohibited goods but a comprehensive assault on the logistical and financial infrastructure enabling the Russian state to operationalise its economy. As of late 2025 and early 2026, the focus has shifted toward the "shadow fleet" and the secondary mechanisms of energy-revenue generation. The UK, EU, and US have collectively targeted over 500 shadow-fleet vessels designed to circumvent the G7 oil price cap. By mid-2025, the US Treasury and partners began imposing direct sanctions on Russia's two largest oil companies, supported by a phased EU roadmap aiming to cease oil and gas imports by 2027 and phase out Russian nuclear energy.

Financial isolation is further anchored by the immobilisation of roughly $285 billion in foreign-currency reserves of the Russian Central Bank held within G7 jurisdictions. The 2025 discourse transitioned from mere immobilisation to active deployment of the proceeds — and potentially the principal — to fund reparations and military equipment for Ukraine, exemplified by a proposed €140 billion reparations loan.

The systemic reach is reinforced by Executive Order 14024 and its amendments, which empower the US Treasury to sanction any foreign financial institution (FFI) that conducts or facilitates "significant transactions" involving Russia's military-industrial base. In 2024, the definition of that base was expanded to include all persons blocked under E.O. 14024 — effectively making any interaction with a designated Russian entity a point of potential secondary-sanctions risk for banks anywhere in the world.

Differentiating the sanctions burden: SDNs vs. ordinary citizens

A critical feature of the current regime is the legal differentiation between individuals on the SDN and Consolidated lists and the millions of non-sanctioned Russian citizens — creating a tiered system of financial accessibility and legal risk for global banks.

For SDNs, the restrictions are absolute and "blocking" in nature. In the US, UK, and EU, an asset freeze requires all persons within the jurisdiction to freeze the designated party's assets and prohibits making funds or economic resources available, directly or indirectly. This extends to entities owned 50% or more by a designated person — a primary focus of due diligence, with authorities increasingly "looking behind" complex trust and offshore arrangements to identify the true beneficial owner.

By contrast, ordinary citizens face systemic hurdles designed to prevent capital flight and the obfuscation of state-linked funds. The most significant is the €100,000 deposit cap applied in the EU, UK, and Switzerland, alongside a total ban on exporting USD and EUR banknotes to Russia. Under the Article 5r reporting mandate (Council Regulation (EU) 833/2014), as of July 2024 EU institutions must report semi-annually on all transfers exceeding €100,000 originating from EU entities more than 40% owned by Russian nationals or residents.

Jurisdictional arbitrage: how institutions onboard Russian clients

The persistence of Russian capital in the global system is not a failure of sanctions but a result of "jurisdictional arbitrage" — using legal and infrastructural differences between jurisdictions to facilitate trade and finance. Institutions in "neutral" hubs have built frameworks to onboard Russian clients while maintaining a technical firewall against Western sanctions.

The UAE and Turkey have emerged as primary intermediaries. A UAE Court of Appeal ruling clarified that foreign sanctions such as OFAC's do not automatically carry the force of law within the UAE unless formally adopted domestically — allowing UAE banks to honour contractual obligations to Russian clients not on the domestic UAE list, though many have begun to "de-risk" under Western pressure. In Turkey, the strategy has been "recalibration": following private warnings from Washington, Turkish banks tightened policies and closed business accounts, though Turkey remains a vital transit hub for dual-use goods. Central Asian states (Kazakhstan, Kyrgyzstan, Tajikistan) act as "last-mile" logistics and remittance hubs, maintaining correspondent relationships that move funds through nested accounts before integration into the global system.

The logic of "non-nexus" financial structures

Institutions legally circumvent sanctions by ensuring transactions for Russian clients have no "nexus" to the sanctioning jurisdiction — a nexus being created by the involvement of US/EU citizens, currencies, territory, or infrastructure.

• Currency diversification. Settling in AED, CNY, or INR removes the USD clearing system as a node of US oversight. As of 2025, over 20% of Russia's foreign trade is settled in CNY.
• Personnel isolation. Protocols in non-Western banks often mandate that no US persons or EU residents participate in decision-making or processing of Russian-related transactions, to avoid "facilitation" charges.
• Alternative messaging rails. Exclusion from SWIFT has accelerated adoption of Russia's SPFS and China's CIPS, enabling interbank communication without data passing through Western-controlled servers.
• mBridge and CBDCs. The mBridge project (China, the UAE, Hong Kong, Thailand) enables real-time gross settlement of central-bank digital currencies, bypassing the traditional correspondent banking system entirely.

Regulatory carve-outs: the use of General Licenses

Many institutions maintain legitimate, compliant relationships with Russian entities using "General Licenses" — broad authorisations issued by bodies like OFAC permitting specific transaction types. General License 8L and predecessors provide a critical exemption for transactions involving major Russian banks when "ordinarily incident and necessary" to the energy sector, allowing global FIs to process oil and gas payments while adhering to the price cap and reporting requirements.

Authorisations for agricultural trade, medicine, and telecommunications ensure sanctions do not entirely disrupt civil society or trigger a food crisis; banks categorise transactions under "Humanitarian" or "Energy" codes with audit-proof evidence of purpose. As Western firms exit Russia, GLs also manage wind-down — for example, authorising negotiations and contingent contracts for the sale of international assets to non-blocked parties, while ensuring proceeds do not provide a windfall to a sanctioned entity until sanctions lift.

Citizenship-by-investment and the scrutiny of second passports

For high-net-worth Russian individuals, a second citizenship via CBI programmes has traditionally preserved mobility and banking access. By 2026, the banking sector has fundamentally reclassified these clients: institutions in Switzerland, the UAE, and Singapore now treat CBI and dual-passport holders as high-risk by default. The acquisition of a second passport often triggers Enhanced Due Diligence focused on wealth provenance (tracing funds back through original Russian entities regardless of the passport used) and jurisdictional risk (heightened after the EU court's decision declaring Malta's scheme unlawful). The 11th EU sanctions package allows counsel-certified "firewalls" that remove a listed person's control over assets, letting a non-listed entity continue functioning without falling under blocking sanctions.

The legal battlefield: retaliatory jurisdictions and the Lugovoy Law

The conflict has moved into the courtroom. Russian amendments to the Arbitrazh Procedural Code (the "Lugovoy Law," Articles 248.1 and 248.2) allow Russian courts to claim exclusive jurisdiction over any dispute involving a sanctioned Russian entity, overriding pre-existing arbitration agreements seated in "unfriendly" states like London, New York, or Paris. Russian courts have interpreted this broadly, establishing a rebuttable presumption that sanctions prejudice the Russian party — triggering anti-suit injunctions and the attachment of Western banks' assets within Russia.

Western courts, particularly in the UK, have responded with their own anti-suit injunctions, describing the law as disregarding corporate personality and contractual privity. This places institutions in a "Catch-22": obeying the Russian court risks violating sanctions, while obeying Western courts risks seizure of Russian assets. To manage it, many banks have opted for total de-risking — exiting all contracts with any Russian nexus.

Technological and structural evolution of compliance

As the regime enters its fourth year, the "best efforts" requirement under Article 8a of EU Regulation 833/2014 has evolved into a demand for advanced RegTech and AI integration. Mapping over 49,000 Russian-owned entities in Europe requires more than list-based screening; Tier-1 banks now use predictive risk modelling ("corridor-risk" thinking to identify circumvention routes before execution), natural-language processing for real-time interpretation of policy shifts across 50+ jurisdictions, and blockchain to track the provenance of commodities like gold and oil from extraction to final buyer.

The permanent bifurcation of global finance

The system is no longer moving toward a unified global standard of compliance but toward a permanent bifurcation. On one side is the G7-centred "Core," defined by transparency, the €100,000 cap, and total exclusion of designated persons. On the other is the emerging "Periphery" — a network of hubs in Dubai, Istanbul, and Hong Kong using non-USD rails, CBDC bridges like mBridge, and non-Western legal logic to facilitate Russian trade and finance.

For institutions, "legal circumvention" is not a matter of breaking the law but of operating within the gaps of jurisdictional nexus. Yet the rise of secondary sanctions and the aggressive expansion of US and EU reporting mandates suggest that the space for such arbitrage is shrinking. The future of global banking in this context will be defined by corridor-risk management and the ability to navigate a world where a single transaction can be simultaneously lawful in one jurisdiction and a criminal offence in another. ComplyFactor's AML advisory and compliance programme services help institutions build the sanctions-screening, ownership-mapping, and EDD controls this environment demands.