Industrial Policy & Trade Monitor· 2663 actions· ✨ 89 recent

The UK laid the Russia (Sanctions) (EU Exit) (Amendment) Regulations 2026 (SI 2026/543) before Parliament on 19 May 2026; it came into force on 20 May 2026. The instrument inserts a new Chapter 4KA (regulations 46Z23A-46Z23G) into the Russia (Sanctions) (EU Exit) Regulations 2019, prohibiting the import into the UK of uranium (HS 2844.10/2844.20/2844.30) that originates in or is consigned from Russia, the direct or indirect acquisition of Russian-origin or Russia-located uranium, and the supply or delivery of uranium from Russia to a third country — plus associated technical assistance, financial services/funds, and brokering services. Each prohibition carries a criminal offence with a reasonable-cause-to- suspect defence, subject to narrow exceptions and licensing grounds at regulations 16-19 of the amending instrument. The same instrument separately extends the existing ban on imports of relevant (2709-origin) Russian crude to cover oil products refined from that crude in a third country (new regulations 46Z9F-46Z9I).

The U.S. Treasury's Office of Foreign Assets Control (OFAC) entered into a $3,103,360 settlement with Exodus Movement, Inc., a U.S.-incorporated non-custodial / self-custody crypto wallet software company, to resolve 254 apparent violations of the Iranian Transactions and Sanctions Regulations (ITSR, 31 C.F.R. Part 560) committed between October 17, 2017 and January 4, 2019. Exodus customer-support staff provided technical and account-related support — and in 12 of the 254 instances recommended the use of virtual private networks (VPNs) to circumvent partner-exchange geoblocking controls — to users who self-identified as located in Iran, in violation of the ITSR's prohibition on the export of services to Iran (§ 560.204) and, for the 12 egregious cases, the facilitation prohibition (§ 560.203). OFAC deemed the 12 VPN-coaching cases "egregious" because Exodus personnel were generally aware of U.S. sanctions and the company's own terms of use prohibited Iran usage, yet support staff actively helped Iranian users evade controls. Exodus separately committed to invest $630,000 in additional sanctions compliance controls. The settlement is structurally novel as the first OFAC enforcement action against a Web3-infrastructure / non-custodial wallet-software vendor and establishes that OFAC will assert jurisdiction over self-custody software providers based on customer-support facilitation conduct, not just custodial flow control.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) entered into an $11,485,352 settlement with IPI Partners, LLC — a US private-equity data-center fund manager (~$10.5bn AUM) — to resolve 51 apparent violations of the Ukraine-/Russia-Related Sanctions Regulations between July 2018 and June 2022. IPI solicited and accepted two $25 million fund subscriptions in September 2017 and March 2018 from Definition Services, Inc. — a British Virgin Islands entity ultimately owned by Heritage Trust, a Delaware family trust established by sanctioned Russian oligarch Suleiman Kerimov — and continued processing 18 capital calls, 20 distributions, and 13 management-fee payments for four years after Kerimov's April 2018 SDN designation. OFAC simultaneously issued an unusually direct sectoral warning to the private-equity industry, marking the first major OFAC enforcement against a US PE-fund administrator in the data-center / AI-infrastructure segment and the second Kerimov-linked PE/VC settlement of 2025 (after the June 2025 $216M GVA Capital statutory-maximum penalty).

On 19 November 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC), in a coordinated action with Australia's Department of Foreign Affairs and Trade and the UK's Foreign, Commonwealth and Development Office, designated 5 individuals and 7 companies linked to two Russia-based "bulletproof hosting" (BPH) providers, Media Land and Aeza Group, under Executive Order 13694. Media Land and its subsidiaries (Media Land Technology, Data Center Kirishi, ML Cloud) supplied server infrastructure to ransomware groups including LockBit, BlackSuit and Play. The designations also targeted three companies Aeza Group used to evade its July 2025 OFAC designation and rebrand its infrastructure: Hypercore Ltd. (United Kingdom), Smart Digital Ideas DOO (Serbia), and Datavice MCHJ (Uzbekistan). All designated persons' U.S.-nexus assets are blocked and U.S. persons are prohibited from transacting with them.

Canada made SOR/2025-228, Regulations Amending the Special Economic Measures (Russia) Regulations, registered 2025-11-06 and announced by Minister Anand on 2025-11-12. The regulations add 13 individuals to Part 1 of Schedule 1, 11 entities to Part 2 of Schedule 1, and 100 vessels (by IMO number) to Schedule 1.1, freezing their Canadian assets and prohibiting dealings. Targets include Russian LNG-trading entities, drone-programme developers, cyber-infrastructure suppliers for hybrid operations against Ukraine, and Kyrgyzstan-based financial enablers (including Capital Bank of Central Asia and the A7 payments platform) used to evade earlier Russia sanctions. The 100-vessel designation targets Russia's "shadow fleet" used to move crude oil, LNG and arms while evading the G7 price cap and flag-state controls.

The US Treasury's Office of Foreign Assets Control designated two Iranian financial facilitators — Alireza Derakhshan and Arash Estaki Alivand — along with more than a dozen Hong Kong- and UAE-based individuals and entities for operating a shadow-banking network that laundered proceeds from Iranian oil sales through front companies and cryptocurrency. The designated addresses account for over $600 million in total inflows, including more than $100 million in cryptocurrency purchases tied to oil sales between 2023 and 2025. Proceeds are alleged to benefit the IRGC-Qods Force and Iran's Ministry of Defense and Armed Forces Logistics (MODAFL). This is the second round of OFAC sanctions targeting Iran's shadow-banking infrastructure since National Security Presidential Memorandum 2 (NSPM-2) directed a maximum-pressure campaign on Iran in February 2025.

On 14 August 2025 OFAC re-designated the cryptocurrency exchange Garantex Europe OU under its cyber authority (E.O. 13694, as amended) for processing over USD 100 million in transactions tied to ransomware and darknet-market actors since 2019, and designated its successor exchange Grinex — created by former Garantex staff to move customer deposits and continue operations after a March 2025 US Secret Service-led takedown of Garantex's infrastructure. OFAC also designated three Garantex executives, the A7A5 ruble-backed stablecoin issuer Old Vector (Kyrgyzstan), and Russian settlement-platform firm A7 and its subsidiaries A71 and A7 Agent — entities linked to sanctioned Moldovan oligarch Ilan Shor and sanctioned Promsvyazbank — for supplying the A7A5 token used to compensate Garantex customers and route funds through Grinex.

On 3 July 2025, the US Treasury's Office of Foreign Assets Control (OFAC), acting jointly with the other member states of the Terrorist Financing Targeting Center (TFTC), designated five entities and sixteen individuals forming the core of Hizballah's financial infrastructure, under Executive Order 13224 as amended. Newly designated entities include Tashilat SARL (a Lebanese lender that provided loans on behalf of Hizballah and operated as part of Al-Qard Al-Hassan (AQAH) and Bayt al-Mal), alongside senior AQAH officials Samer Hasan Fawaz and Ali Mohamad Karnib. The action reaffirms and expands sanctions on AQAH, Hizballah's shadow "benevolent loan association" bank, and Bayt al-Mal, its unofficial treasury, both previously designated by OFAC in 2007 and 2006 respectively. It is the ninth TFTC joint designation since the center's creation in May 2017 and the third under this Administration; designated persons are alleged to have moved over $500 million through the formal Lebanese banking system — including US-designated Jammal Trust Bank — via joint and shadow accounts despite existing sanctions.

On 1 July 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC) designated Aeza Group, a St. Petersburg, Russia-based "bulletproof hosting" (BPH) provider, along with two affiliated companies and four Aeza Group leaders (Arsenii Penzev, Yuri Bozoyan, Vladimir Gast, Igor Knyazev), for supplying server infrastructure that shielded ransomware operators, infostealer groups, and darknet drug marketplaces from law-enforcement takedown. In coordination with the UK's National Crime Agency, OFAC also designated Aeza International Ltd., a UK front company Aeza used to lease IP addresses to cybercriminals. The action was taken under Executive Order 13694 (as amended by E.O. 14144 and E.O. 14306) and builds on OFAC's February 2025 designation of BPH provider ZServers.

On 20 May 2025, the Council of the European Union adopted Council Implementing Regulation (EU) 2025/965 and Council Decision (CFSP) 2025/966, implementing the EU's dedicated hybrid-threats restrictive- measures regime (Regulation (EU) 2024/2642) rather than the sectoral Russia sanctions track. The package designates 21 individuals and 6 entities for enabling Russian state-sponsored destabilising activity, including information manipulation and interference and cyberattacks against the EU and its partners. Named entities include Stark Industries Solutions Ltd (UK-registered "bulletproof" web-hosting provider used as infrastructure for Russian cyberattacks) and its owner/CEO Ivan and Iurie Neculiti, Czech-based pro-Kremlin media outlet Voice of Europe, and Turkish media company AFA Medya and its founder Hüseyin Doğru. Designated parties are subject to an EU-wide asset freeze and prohibition on making funds available; designated individuals additionally face a travel ban. This is a distinct legal instrument from the same-day 17th Russia sectoral sanctions package (Regulation (EU) 2025/932/933), adopted under the separate hybrid- threats horizontal regime.

President Biden signed into law on 13 May 2024 the Prohibiting Russian Uranium Imports Act (Division H of the National Security Supplemental Appropriations Act, Public Law 118-50). The law bans imports to the United States of unirradiated low-enriched uranium (LEU) produced in Russia or by Russian state entities, effective immediately, with a waiver mechanism allowing the Department of Energy to grant case-by-case exceptions through 2027 where no alternative supply is available. The law also authorised up to $2.72B to support US uranium enrichment capacity via CENTRUS and allied enrichment partnerships.

FinCEN issued an order on 18 January 2023, published in the Federal Register on 23 January 2023 (FR Doc 2023-01189), prohibiting US covered financial institutions from transmitting funds to, from, or through Bitzlato Limited, a virtual-currency exchange incorporated in Hong Kong and identified as a primary money-laundering concern in connection with Russian illicit finance. The order invokes Section 9714(a) of the Combating Russian Money Laundering Act, as amended by Section 6106 of the National Defense Authorization Act for Fiscal Year 2022 (31 U.S.C. 5323). The action was coordinated with a DOJ criminal arrest of Bitzlato co-founder Anatoly Legkodymov and a parallel Europol/Eurojust-supported disruption of Bitzlato's infrastructure, effective 18 January 2023.

The Council of the EU adopted Council Implementing Regulation (EU) 2022/878 of 3 June 2022, implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine. The regulation adds 65 individuals and 18 legal entities to Annex I, subjecting them to an EU-wide asset freeze and a prohibition on EU persons or entities making funds or economic resources available to them. The listed entities span Russia's defense-industrial base, military-linked vehicle and tyre manufacturing, and financial-market infrastructure.

On 2 May 2022 OFAC published a comprehensive final rule in the Federal Register renaming the Ukraine Related Sanctions Regulations (31 CFR Part 589) to the Ukraine-/Russia-Related Sanctions Regulations and replacing the abbreviated regulatory text that had been in place since 2014 with a fully elaborated framework. The new Part 589 incorporates interpretive guidance, definitional provisions, and consolidated general licenses implementing Executive Orders 13660, 13661, and 13662 — the original March 2014 Ukraine/Crimea-crisis authorities. The rule does not introduce new substantive prohibitions; it formalises and makes accessible the regulatory infrastructure that underlies subsequent GL issuances (e.g., GL 13Q/13R, GL 15K/15L) and OFAC designation actions under the Ukraine-/Russia-Related Sanctions program.