Position as at August 2026. Across ten days in late July, the European Union adopted its twenty-first package of restrictive measures against Russia, the United States designated a further tranche of Iranian maritime and aviation networks, and both authorities removed parties from their lists. The measures differ in instrument and in target. They share one characteristic, and it is the characteristic that should concern anyone conducting diligence in the Middle East and Africa.

1. The measures

On 23 July 2026 the Council adopted the twenty-first package of restrictive measures against Russia, imposing export restrictions on fifty-one new entities. Twenty-seven of those entities are established in third countries, designated on the basis that they support the Russian military and industrial complex or assist in the circumvention of existing export restrictions. The following day the Council renewed, until 27 July 2027, the regime addressing Iranian military support to Russia, to armed groups in the Middle East and the Red Sea region, and to actions undermining freedom of navigation.

The United States moved on parallel lines. On 29 July the Office of Foreign Assets Control designated two entities connected to an Iranian maritime insurance arrangement imposed on commercial vessels transiting the Strait of Hormuz, together with eight vessels and eight further entities under Executive Order 13902. That action forms part of a sequence which has now reached more than two hundred persons, entities and vessels associated with the shadow petroleum trade. On 30 July, six parties situated in China, India, Russia and Iran were designated under Executive Order 13224 for their alleged support to Mahan Air.

In the United Kingdom, HMRC published its enforcement position for 2025 to 2026: fifty-eight seizures of sanctioned goods, eighteen warning letters following voluntary disclosure, three positive charging decisions, and forty-four enforcement referrals received from OFSI. The department has signalled its intention to seek powers permitting publication of the identities of companies settling by compound penalty.

2. The common feature

None of the principal designations in this cycle concerns the primary target in isolation. The EU package reaches twenty-seven undertakings incorporated outside Russia. The Iranian actions reach insurers, vessel operators, sales agents and procurement intermediaries situated in four jurisdictions. What is being designated is not the sanctioned economy but the service architecture that sustains it.

The consequence for the diligence perimeter is direct. An obliged entity may screen its counterparty against every published list with complete accuracy and remain wholly exposed, because the relevant question is not whether the counterparty is designated. It is whether the counterparty is performing a function for a designated network. That function is rarely visible in the corporate record, and in the jurisdictions where these networks prefer to establish themselves, the corporate record was never intended to make it visible.

3. The United Kingdom: a narrower obligation, tethered to an external list

The Money Laundering and Terrorist Financing (Amendment) Regulations 2026, in force since 30 June, narrowed the circumstances in which enhanced due diligence is mandatory, confining the requirement in respect of complex arrangements to those that are unusually so. Practitioners have read this as a relaxation. The second limb of the amendment complicates that reading: the definition of a high-risk third country is now aligned directly with the lists published by the Financial Action Task Force.

The practical effect is that a substantial part of the United Kingdom's enhanced due diligence perimeter now moves without domestic legislative action, at the cadence of the FATF plenary. At the June 2026 plenary, Iraq was added to the list of jurisdictions under increased monitoring, and Algeria and Namibia were removed. Firms with exposure to any of the three acquired or shed an obligation without a single line of UK statutory instrument being laid.

4. Lists that move in both directions

On 27 July, OFAC removed eighty-four persons and entities from the Specially Designated Nationals List, following the removal of seventy-six on 28 May. The stated rationale concerns deceased individuals, defunct entities, decommissioned vessels and designations no longer aligned with current priorities.

Delisting is seldom given the operational attention that designation receives, and it should be. A screening architecture calibrated to treat any historical match as disqualifying will now generate false positives against parties lawfully restored to the market, while a portfolio re-screened only annually will carry stale determinations in both directions for the better part of a year.

5. What screening was never designed to resolve

List screening answers a question of identity: is this name, or a sufficiently close variant, on a published list. It is a necessary control and it is performed well by competent systems.

It does not answer the question these measures actually pose. Whether a trading company in a free zone is the continuation of a network designated eighteen months ago under different ownership. Whether a shipping agent is transacting on instruction from a party whose name appears nowhere in its filings. Whether an insurer, a broker or a logistics intermediary is performing precisely the function for which twenty-seven third-country undertakings were designated in July. These are questions of conduct and relationship, not of nomenclature, and they are resolved by enquiry rather than by matching.

6. The operational conclusion

Three requirements follow for any function with exposure to the region.

  • The perimeter must be defined by relationship rather than by contract. Where designations attach to intermediaries and service providers, screening the immediate counterparty establishes very little about the exposure carried behind it.
  • Determinations must carry a date and a review interval. Where the underlying lists move in both directions several times a year, and where the domestic definition of a high-risk jurisdiction is tethered to an external body, an undated conclusion is not a control.
  • Where the record cannot answer the question, the enquiry has to be conducted in the jurisdiction. Beneficial ownership that is declared rather than verified, an agent whose instructions are not recorded, an address resolving to a corporate service provider: each is a point at which the documentary trail ends and a person with standing in that market has to establish what is actually taking place.

That is the demand these measures are creating, and it is the reason firms of our description exist. Roots Intelligence maintains vetted in-country sources across fifty-two jurisdictions in the Middle East and Africa, precisely because the questions that now determine sanctions exposure cannot be resolved from London by subscription. Where the perimeter has moved past the counterparty, so must the enquiry.

This note summarises the position as at August 2026 and does not constitute legal advice. Designations, listings and national implementation change frequently. Confirm the current position with counsel before relying on it.