Sanctions Evasion
Sanctions evasion is any attempt to get around sanctions restrictions, usually by hiding who is really behind a customer, payment or shipment.
Definition
Sanctions evasion is conduct designed to avoid, get around or defeat sanctions measures. Its purpose is to let a sanctioned person, or someone acting for them, keep moving money, goods or services through a system that is meant to exclude them.
The term overlaps with "circumvention", which many legal texts use for the same idea. Evasion is not limited to the sanctioned party. Intermediaries who knowingly help, such as nominee shareholders, front companies, brokers, shippers or insiders at a regulated firm, can be part of the scheme and can be exposed to liability themselves.
Evasion is different from an innocent screening miss. A firm that fails to spot an obvious match has a control failure. Evasion is a deliberate effort to make sure the match never appears in the first place.
Why a regulated firm cares
Sanctions regimes generally prohibit not only direct dealings with designated parties but also acts that cause or facilitate a breach. A firm whose products are used to route funds for a sanctioned person can face enforcement even if it never dealt with that person by name.
Evasion also defeats the control most firms rely on most: name screening. Schemes are built to pass that check. If a firm's sanctions controls consist only of list screening, it is testing whether evaders are careless, not whether they are present.
How it is detected in practice
Evasion is found by looking for inconsistency between what a customer says and what their data shows. Common indicators include:
- Opaque or recently changed ownership. New shell companies, nominee directors, complex layering across jurisdictions, or ownership that shifts to just below a threshold shortly after a designation.
- Name and identity manipulation. Transliteration variants, dropped middle names, reordered names, or small spelling changes used to slip past a matching tool.
- Geographic mismatch. Payments, IP addresses, shipping routes or contact details that point to a sanctioned jurisdiction when the stated business is elsewhere.
- Transshipment and trade anomalies. Goods routed through third countries without a clear commercial reason, or trade volumes that jump in a neighbouring country after new restrictions take effect.
- Stripping and wire manipulation. Removing or altering originator or beneficiary details in payment messages, or splitting payments to avoid review.
- Vessel behaviour. For maritime exposure, ship-to-ship transfers, flag changes, name changes and gaps in location data.
These signals come from different places: customer due diligence files, payment messages, trade documents, adverse media and ongoing monitoring. Detection improves when they are reviewed together rather than in separate silos.
Regulatory basis
Anti-evasion provisions appear across the main regimes:
- United States. OFAC's regulations in 31 CFR Chapter V generally prohibit transactions that evade or avoid, or have the purpose of evading or avoiding, the prohibitions they contain, and conspiracies to do so. OFAC also publishes a Foreign Sanctions Evaders list. The International Emergency Economic Powers Act (IEEPA) provides both civil and criminal penalties for violations.
- European Union. EU sanctions regulations, including Council Regulation (EU) No 833/2014 (restrictive measures in view of Russia's actions destabilising the situation in Ukraine) and Council Regulation (EU) No 269/2014 (asset freezes relating to actions undermining Ukraine's territorial integrity), contain provisions prohibiting knowing and intentional participation in activities whose object or effect is to circumvent the measures.
- United Kingdom. Regulations made under the Sanctions and Anti-Money Laundering Act 2018 include offences for circumventing their prohibitions.
- International standards. FATF Recommendations 6 and 7 require countries to implement targeted financial sanctions for terrorism and proliferation, and FATF Recommendation 1, as amended in 2020, requires assessment of the risk of evasion of proliferation-related sanctions.
This is a general overview rather than legal advice. The precise scope of these offences differs between regimes, and firms should confirm the position in their own jurisdiction.
Worked example
A hypothetical trade finance bank has a long-standing customer, Alder Crest Trading, which exports industrial components. Shortly after a new round of designations, the customer's payment pattern changes. Invoices that used to name a buyer in the destination country now name a newly incorporated distributor in a neighbouring third country.
The bank's name screening of the distributor is clear. Its analysts, however, notice that the distributor was registered weeks earlier, shares a telephone number with the original buyer, and receives goods on routes that end in the sanctioned jurisdiction. Adverse media links one of the distributor's directors to the original buyer's parent company.
No single fact proves evasion. Together they justify enhanced due diligence, a request for end-user information, and escalation to the sanctions team. The bank holds the payments while it investigates, documents its reasoning, and considers its reporting obligations.
Related terms
Related Articles
Account Takeover (ATO)
A form of identity theft where a fraudster gains access to a user's bank accounts, email, or other services.
Adverse Media
Adverse media is published information linking a person or company to crime or serious misconduct, screened as part of customer due diligence.
Alert Rules
Configured parameters within AML software that automatically trigger an alert when suspicious activities match defined criteria.
Algorithmic Fraud
Automated and programmatic approaches to attempting financial fraud at scale utilizing bots and specialized software.