UK OFSI imposes £390k penalty on Apple Distribution International for Russia sanctions breach — first use of new settlement mechanism

Mechanism

The penalty enforces regulation 12 of the Russia (Sanctions) (EU Exit) Regulations 2019 — the prohibition on making funds available to a designated person or a person owned/controlled by a designated person. ADI's conduct: two payments to Okko LLC, an entity that was a designated person under the Russia Regulations at the time the payments cleared.

Jurisdictionally, OFSI's reach over an Ireland-incorporated entity rested on the UK nexus — the funds were held in a UK-based bank account and the payment instructions cleared through a UK bank. OFSI's view: the failure to cancel those payment instructions amounted to conduct in the UK by ADI.

The penalty calculation:

1. Baseline penalty: £600,000 — derived from a starting point reflecting the breach value (~£635,000) and OFSI's case-categorisation framework. 2. 35% discount applied for ADI's voluntary self-disclosure (4 October 2022) and cooperation throughout the investigation. 3. Final penalty: £390,000.

The matter was resolved under the new OFSI settlement mechanism introduced February 2026, which enables the agency and the subject of an enforcement action to negotiate a resolution within a fixed window. ADI is the first published case under that mechanism.

Why severity 2

• Small absolute penalty. £390,000 is tiny relative to

Apple's revenue and even ADI's narrow App-Store-revenue flows. Not a signal of corporate-level reorganisation pressure.

• Russia regime unchanged. The action enforces the

existing 2019 Russia Regulations against a single counterparty's payment chain. Doesn't extend the designated-persons list, restrict additional sectors, or introduce new prohibitions.

• Precedent value is the real story. First use of the

new settlement mechanism gives compliance counsel a template for negotiated resolutions in subsequent UK sanctions cases. Severity 3 would understate the regime impact; severity 1 would understate the precedent significance. Severity 2 is the right rating.

Downstream implications

• Multinational subsidiary structures with UK payment rails

now have a clearer enforcement template — UK nexus extends to non-UK incorporated entities whose funds clear through UK banks. App-Store-style revenue-flow models with payments to designated persons are a clean compliance failure mode.

• Voluntary self-disclosure pathway is reinforced — the

35% discount is consistent with prior OFSI cases and signals continued upside for early disclosure.

• Trade-law practice has a new fact pattern to use in

client briefings; expect this case to feature prominently in 2026 sanctions-compliance training and CLE materials (Crowell, Steptoe, LexisNexis, Comsure, VinciWorks all published client alerts within days of the announcement).

Cross-references

This is the second Russia-related filing in the IPTM register (after 2025-01-13-uk-ofsi-russia-shadow-fleet-sanctions). With two filings, the conditions in docs/iptm/THEME_AUDIT.md for spawning a western-russia-sanctions theme are now met — update the THEME_AUDIT register on the next pass.

Open questions

• Subsequent settlement-mechanism cases. Watch for the

second and third uses of the new mechanism — pattern in discount range and case-resolution timeline determines whether settlement becomes the dominant enforcement pathway or remains exceptional.

• **Other tech multinationals with similar payment-rail

exposure.** Any peer-reviewed case (Google Play, Microsoft Store, Steam) following the ADI pattern would extend the precedent.