Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

On 29 January 2026, the Council of the European Union adopted Council Implementing Regulation (EU) 2026/267 and the accompanying Council Decision, implementing the EU's Iran human-rights restrictive-measures regime (Regulation (EU) No 359/2011, in place since 2011 and renewed annually). The package designates 15 individuals and 6 entities over the violent repression of peaceful protests, arbitrary detention, and internet/media censorship in Iran, bringing the regime's cumulative total to 24 individuals and 26 entities. The six newly listed entities are the Iranian Audio-Visual Media Regulatory Authority (SATRA), the IRGC-linked Seraj Cyberspace Organization, the Working Group for Determining Instances of Criminal Content (WGDICC), Yaftar Pazhohan Pishtaz Rayanesh Limited Company, Douran Software Technologies, and Masaf Institute. Designated parties are subject to an EU-wide asset freeze and a prohibition on making funds or economic resources available to them; listed individuals additionally face a travel ban.

The UK Foreign, Commonwealth & Development Office designated two China-based commercial cyber companies — Sichuan Anxun Information Technology Co Ltd (known as i-Soon) and Integrity Technology Group Incorporated — under the UK's Cyber sanctions regime, freezing their UK assets and imposing controls on commercial transactions and investment instruments involving them. i-Soon was designated for targeting over 80 government and private-sector IT systems worldwide, including UK public-sector and private-industry networks. Integrity Tech was designated for operating a covert botnet of more than 260,000 compromised devices globally and supplying access to it to enable unauthorised intrusion into UK public-sector systems.

On 19 November 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC), in a coordinated action with Australia's Department of Foreign Affairs and Trade and the UK's Foreign, Commonwealth and Development Office, designated 5 individuals and 7 companies linked to two Russia-based "bulletproof hosting" (BPH) providers, Media Land and Aeza Group, under Executive Order 13694. Media Land and its subsidiaries (Media Land Technology, Data Center Kirishi, ML Cloud) supplied server infrastructure to ransomware groups including LockBit, BlackSuit and Play. The designations also targeted three companies Aeza Group used to evade its July 2025 OFAC designation and rebrand its infrastructure: Hypercore Ltd. (United Kingdom), Smart Digital Ideas DOO (Serbia), and Datavice MCHJ (Uzbekistan). All designated persons' U.S.-nexus assets are blocked and U.S. persons are prohibited from transacting with them.

Canada made SOR/2025-228, Regulations Amending the Special Economic Measures (Russia) Regulations, registered 2025-11-06 and announced by Minister Anand on 2025-11-12. The regulations add 13 individuals to Part 1 of Schedule 1, 11 entities to Part 2 of Schedule 1, and 100 vessels (by IMO number) to Schedule 1.1, freezing their Canadian assets and prohibiting dealings. Targets include Russian LNG-trading entities, drone-programme developers, cyber-infrastructure suppliers for hybrid operations against Ukraine, and Kyrgyzstan-based financial enablers (including Capital Bank of Central Asia and the A7 payments platform) used to evade earlier Russia sanctions. The 100-vessel designation targets Russia's "shadow fleet" used to move crude oil, LNG and arms while evading the G7 price cap and flag-state controls.

New Zealand's 32nd sanctions round under the Russia Sanctions Act 2022 (Russia Sanctions Amendment Regulations (No 4) 2025, SL 2025/195) lowered the price cap on Russian-origin crude oil (HS 2709) from US$60/bbl to US$47.60/bbl, a roughly 21% cut, aligning New Zealand with the EU, UK and Canada's most recent price-cap reductions. The same instrument designated 19 individuals and entities plus 19 vessels, including Russia's GRU cyber unit 29155 (implicated in malware attacks on Ukrainian government networks), actors involved in chemical-weapons use and disinformation, additional "shadow fleet" tankers, alternative payment providers, and third-country facilitators based in North Korea and Iran supporting Russia's war effort.

On 8 September 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC) designated 19 targets — companies and individuals based in Burma (Myanmar) and Cambodia — for operating or supporting networks of scam compounds that defraud Americans through virtual-currency investment fraud ("pig butchering") schemes. Nine targets operate out of Shwe Kokko, Burma, a scam-compound hub under the protection of the OFAC-designated Karen National Army (KNA), and ten targets are based in Cambodia, including Heng He Bavet's casino-linked complex in Bavet. Designations were made pursuant to Executive Order 13581 (transnational criminal organizations) and, for the Burma-based Shwe Myint Thaung Yinn Industry & Manufacturing Company, also under Executive Order 14014 (Burma sanctions program) as an entity acting on behalf of designated individual Tin Win. Treasury cited a U.S. government estimate that Americans lost over $10 billion in 2024 to Southeast Asia-based scam operations, a 66% increase over the prior year. All U.S.-nexus property of designated persons is blocked and U.S. persons are prohibited from transacting with them.

On 14 August 2025 OFAC re-designated the cryptocurrency exchange Garantex Europe OU under its cyber authority (E.O. 13694, as amended) for processing over USD 100 million in transactions tied to ransomware and darknet-market actors since 2019, and designated its successor exchange Grinex — created by former Garantex staff to move customer deposits and continue operations after a March 2025 US Secret Service-led takedown of Garantex's infrastructure. OFAC also designated three Garantex executives, the A7A5 ruble-backed stablecoin issuer Old Vector (Kyrgyzstan), and Russian settlement-platform firm A7 and its subsidiaries A71 and A7 Agent — entities linked to sanctioned Moldovan oligarch Ilan Shor and sanctioned Promsvyazbank — for supplying the A7A5 token used to compensate Garantex customers and route funds through Grinex.

On 1 July 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC) designated Aeza Group, a St. Petersburg, Russia-based "bulletproof hosting" (BPH) provider, along with two affiliated companies and four Aeza Group leaders (Arsenii Penzev, Yuri Bozoyan, Vladimir Gast, Igor Knyazev), for supplying server infrastructure that shielded ransomware operators, infostealer groups, and darknet drug marketplaces from law-enforcement takedown. In coordination with the UK's National Crime Agency, OFAC also designated Aeza International Ltd., a UK front company Aeza used to lease IP addresses to cybercriminals. The action was taken under Executive Order 13694 (as amended by E.O. 14144 and E.O. 14306) and builds on OFAC's February 2025 designation of BPH provider ZServers.

On 20 May 2025, the Council of the European Union adopted Council Implementing Regulation (EU) 2025/965 and Council Decision (CFSP) 2025/966, implementing the EU's dedicated hybrid-threats restrictive- measures regime (Regulation (EU) 2024/2642) rather than the sectoral Russia sanctions track. The package designates 21 individuals and 6 entities for enabling Russian state-sponsored destabilising activity, including information manipulation and interference and cyberattacks against the EU and its partners. Named entities include Stark Industries Solutions Ltd (UK-registered "bulletproof" web-hosting provider used as infrastructure for Russian cyberattacks) and its owner/CEO Ivan and Iurie Neculiti, Czech-based pro-Kremlin media outlet Voice of Europe, and Turkish media company AFA Medya and its founder Hüseyin Doğru. Designated parties are subject to an EU-wide asset freeze and prohibition on making funds available; designated individuals additionally face a travel ban. This is a distinct legal instrument from the same-day 17th Russia sectoral sanctions package (Regulation (EU) 2025/932/933), adopted under the separate hybrid- threats horizontal regime.

China's MOFCOM Unreliable Entity List Working Mechanism designated six US firms on 9 April 2025, effective 12:01 Beijing time 10 April 2025, under MOFCOM Order No. 4 of 2020. Cited trigger: participation in arms sales to Taiwan or military-technology cooperation with Taiwan in disregard of China's stated opposition, "seriously harming China's national sovereignty, security and development interests." Measures prohibit the six entities from import/export activities related to China, new investments in China, and impose entry/work-permit restrictions on senior management.

OFAC reissued the Cyber-Related Sanctions Regulations (31 CFR Part 578) in their entirety on 6 September 2022, replacing the abbreviated placeholder framework first published on 31 December 2015. The reissuance implements Executive Order 13694 (1 April 2015, blocking property of persons engaging in significant malicious cyber-enabled activities) and Executive Order 13757 (28 December 2016, expanding that authority to include election interference). The full-form regulations add interpretive definitions, general licences, and civil-penalties provisions — providing compliance clarity for US financial institutions and technology companies without expanding the underlying sanctions perimeter.

The Sanctions and Anti-Money Laundering Act 2018 (SAMLA, Chapter 13) received Royal Assent on 23 May 2018 and established the UK's autonomous post-Brexit sanctions legal framework. Part 1 empowers Ministers (FCDO, HM Treasury) to impose financial, trade, immigration, aircraft, and shipping sanctions by statutory instrument for purposes including UN compliance, national security, foreign-policy objectives, and promotion of human rights and democracy. Part 2 grants Ministers authority to make AML and counter-terrorist-financing regulations aligned with FATF standards, previously derived from EU Anti-Money-Laundering Directives. SAMLA is the parent enabling statute for every UK sanctions regime in force post-Brexit, including 30+ thematic and geographic regulations covering Russia (SI 2019/855), Iran, DPRK, Belarus, Myanmar, Syria, Venezuela, cyber, chemical weapons, global anti-corruption, and global human rights; under SAMLA, OFSI (HM Treasury) holds civil monetary-penalty and criminal-referral enforcement powers. Structurally peer to US IEEPA, EU Council Regulation framework, CN AFSL 2021, and JP FEFTA as the G7+CN foundational sanctions-statute cluster.

The International Emergency Economic Powers Act of 1977 (IEEPA, Title II of Pub. L. 95-223, 91 Stat. 1626, codified at 50 U.S.C. §§ 1701–1708) was signed by President Carter on 28 December 1977 and grants the President sweeping authority to declare a national emergency with respect to "any unusual and extraordinary threat, which has its source in whole or substantial part outside the United States, to the national security, foreign policy, or economy of the United States" — and then to investigate, regulate, direct, compel, nullify, void, prevent, or prohibit any transaction in, or involving, foreign exchange, banking transfers, importing, exporting, or dealings in property by persons subject to US jurisdiction. IEEPA is the parent enabling statute for every OFAC-administered autonomous sanctions program (Russia, Iran, DPRK, Venezuela, Cuba, Syria, Belarus, Myanmar, cyber, Global Magnitsky, Hong Kong, ICC, and others) as well as the legal basis for the entire Trump-era IEEPA-tariff regime (EO 14193–14195 fentanyl tariffs, Canada/Mexico/China; EO 14257 reciprocal-tariff framework; EO 14323 Brazil; EO 14380 Cuba; EO 14382 Iran; and the US-India interim tariff agreement). Between 1977 and 2025 Presidents invoked IEEPA in 77 national-emergency declarations; of these, 7+ directly parent IPTM-filed implementing actions, with ~dozens of OFAC SDN designation actions tracing their legal root to this statute.