Sanctioning Themselves: How the Iran War Broke Western Sanctions Policy

In February 2022, the US, the UK and the European Union imposed the most comprehensive sanctions regime in modern history on the Russian Federation. The ambition was sweeping: sever the financial arteries funding military aggression, freeze the assets of those who enabled it and impose a cost so severe that the war economy could not sustain itself. Hundreds of individuals were designated. Russian banks were cut from SWIFT. Sectoral restrictions targeted energy, technology and luxury goods with coordinated speed. Yet four years on, the sanctions landscape has not merely been reshaped by evasion. It has been detonated by a war that the enforcing governments themselves chose to start.

The US-Israeli military strikes on Iran that began on 28 February 2026, Iran's effective closure of the Strait of Hormuz and the energy crisis that followed have done more to alter the calculus of sanctions compliance in five weeks than four years of incremental circumvention. This is not an evolution of the existing framework. It is a collision. Competing strategic imperatives have exposed the structural contradictions at the heart of Western sanctions policy, and firms are left to navigate the wreckage.

The Hormuz closure has rewritten the economics of evasion

The Strait of Hormuz is the conduit for approximately 20 per cent of global oil consumption. Since late February 2026, Iranian attacks on merchant vessels, the laying of naval mines and direct threats from the Islamic Revolutionary Guard Corps (IRGC) have reduced daily transits from an average of 138 to fewer than 20. The International Energy Agency (IEA) has described the disruption as the largest in the history of the global oil market. Over 400 tankers remain stranded in the Persian Gulf. Oil prices have surged by more than 70 per cent since the start of the year, with Brent crude trading above $110 per barrel and analysts warning of $200 if the closure persists. As of 6 April, Iran has rejected a ceasefire proposal, the IRGC has declared the strait will never return to its previous status and the US has threatened to escalate further.

For sanctions compliance, the implications are immediate. Russian crude, which traded at a significant discount to Brent throughout 2023 and 2024 under the pressure of the G7 price cap, now trades above $80 per barrel. The discount that was supposed to constrain Moscow's revenues has effectively vanished. Russia's daily fossil fuel revenue in the first two weeks of March was on average 14 per cent higher than in February 2026, according to the Centre for Research on Energy and Clean Air (CREA), with Moscow earning approximately €513 million per day from oil, gas and coal exports combined. The Carnegie Endowment for International Peace has warned that the conflict could provide Russia with tens of billions of dollars in additional oil revenues per annum for the next several years. The price cap is no longer being evaded. It is irrelevant.

The US is dismantling the regime it built

The most disorienting development for compliance professionals is not the evasion. It is the deliberate relaxation of sanctions by the enforcing authorities themselves. In real time. Under the pressure of a crisis they initiated.

In mid-March, the US Treasury issued a general licence authorising the sale and delivery of Russian crude oil and petroleum products already loaded onto vessels as of 12 March 2026. Days later, the administration went further, temporarily lifting sanctions on approximately 140 million barrels of Iranian crude stranded at sea; a move Treasury Secretary Scott Bessent framed as "using the Iranian barrels against Tehran to keep the price down". At current prices, that oil is worth more than $14 billion to Iran: the country the US is simultaneously at war with.

The EU has not followed suit. The European Commissioner for Economy stated that easing sanctions on Russian oil "would be self-defeating". EU sanctions on Russian energy exports remain in place, and the bloc's proposed 20th sanctions package, tabled in February 2026, includes a full maritime services ban on Russian crude oil, the first activation of the EU's anti-circumvention tool and new measures targeting cryptocurrency-enabled evasion. The divergence between US and EU positions is not a nuance. It is a regulatory fracture. Firms operating across both jurisdictions must now navigate sanctions regimes that are moving in opposite directions.

The practical consequences are acute. The US general licence applies only to Russian oil loaded before a specific date. It does not override EU sanctions. It does not shield US entities from civil liability under the Anti-Terrorism Act, particularly where vessels have ties to the IRGC or are among the 126 tankers designated under counter-terrorism sanctions. The compliance question is no longer simply whether a transaction involves a sanctioned party. It is whether the same barrel of oil is sanctioned in one jurisdiction, licensed in another and financing a war effort in a third.

The shadow fleet has become the only fleet

The shadow fleet, the network of aging, opaquely owned tankers that emerged to circumvent the Russian oil price cap, was already the dominant vehicle for Russian energy exports before the Iran war began. By the end of 2025, it had grown to an estimated 1,300 vessels, carrying between 65 and 70 per cent of Russia's seaborne oil exports and generating annual revenue estimated at $87–100 billion. That was the baseline. The Hormuz crisis has made it worse.

The closure has collapsed the distinction between the shadow fleet and the mainstream maritime economy. With legitimate shipping through the strait reduced to near zero, shadow fleet vessels, Russian, Iranian and Venezuelan, are virtually the only tankers still moving through the Gulf. Lloyd's List reported that 80 per cent of tracked transits through Hormuz in early March were 'dark'. The shadow fleet is no longer in the margins. It is the market.

Simultaneously, enforcement has escalated from regulatory action to military confrontation. In January 2026, the US Navy seized the Russian-flagged tanker Marinera in the North Atlantic after a weeks-long pursuit. Russia dispatched a naval vessel in response. France seized the tanker Grinch near Marseille in the first execution of the EU-UK interdiction plan. Belgium seized the MT Ethera in late February. Russia has responded by openly registering shadow vessels under the Russian flag, with over 40 reflagged since June 2025, and deploying naval escorts through the English Channel. The compliance problem is no longer abstract. It is kinetic.

The compliance exposure extends well beyond the operators of these vessels. Any firm involved in shipping, commodities trading, maritime insurance, trade finance or port services faces the risk that its counterparties, supply chains or correspondent relationships intersect with a fleet that is simultaneously evading sanctions, transiting a war zone and, in the case of Russian-flagged vessels, operating under naval protection.

Cryptocurrency has opened a new evasion front

A vector has emerged that sits outside both the financial intelligence framework and the trade monitoring system entirely. It is deliberate, state-backed and industrial in scale.

Russia has developed a cryptocurrency infrastructure specifically designed for sanctions evasion. The fintech company A7, founded by fugitive Moldovan oligarch Ilan Shor and 49 per cent owned by the sanctioned state bank Promsvyazbank, operates a ruble-linked cryptocurrency called A7A5. Regulated in Kyrgyzstan, A7A5 can be instantly swapped for mainstream stablecoins without identity verification. TRM Labs, in its 2026 Crypto Crime Report, linked the A7 wallet cluster to at least $39 billion in sanctions evasion transactions in 2025, with associated addresses tied to procurement networks in China, Southeast Asia and South Africa, as well as to US- and EU-designated terrorist groups including the IRGC and Hamas. This is not a loophole. It is architecture.

The EU's 20th sanctions package includes measures targeting crypto entities and platforms as circumvention routes. It is not enough. The pace of regulatory response remains structurally behind the pace of innovation. Cryptocurrency enables the conversion of sanctioned currency into fungible, borderless value, outside the reach of correspondent banking controls. The financial intelligence framework was not designed for it. The trade monitoring system cannot see it.

Procurement networks have professionalised beneath the screening threshold

The early phases of the Russia sanctions regime focused on individuals: oligarchs, politically exposed persons and senior officials whose assets could be frozen and whose commercial networks could be disrupted. That focus was necessary. It was also insufficient. The evasion architecture that has since emerged operates not through private wealth but through state-linked commercial entities, joint ventures and procurement networks that sit below the threshold of conventional screening.

Research by the Royal United Services Institute (RUSI) into Russian procurement networks identified dispersed acquisition channels running through Central Asia, the South Caucasus and the Gulf states, where newly incorporated trading companies, many with minimal operating history, procure dual-use goods, advanced technology components and industrial equipment subject to export controls. These entities are not always linked to designated persons. They do not need to be. They function as nodes in a supply chain designed to create distance between the sanctioned end-user and the point of purchase. The designated name never appears. The goods still arrive.

In February 2026, German police arrested five individuals who had used shell companies to export at least €30 million of restricted goods to 24 Russian arms manufacturers, a smuggling operation linked to Russian intelligence involving over 16,000 shipments since 2022. In July 2025, HM Revenue and Customs (HMRC) imposed a penalty of more than £1.16 million on a UK exporter for making goods available to Russia, its largest compound settlement to date for a Russia-related sanctions offence. The Financial Action Task Force (FATF), in its updated guidance on proliferation financing, recognised this shift explicitly: traditional name-screening is inadequate where circumvention relies on layered corporate structures and jurisdictions with limited beneficial ownership transparency.

OFSI has sharpened its teeth

The UK's Office of Financial Sanctions Implementation (OFSI) published a fundamentally revised enforcement framework in January and February 2026, representing the most significant overhaul since its creation. The changes include a new case assessment matrix mapping severity against conduct, a settlement scheme, fixed monetary penalties for information and licensing offences, and a proposal to double the maximum civil monetary penalty from the greater of £1 million or 50 per cent of the breach value to £2 million or 100 per cent.

In January 2026, OFSI fined the Bank of Scotland £160,000 for processing 24 payments to and from a designated individual, a breach caused by failures in the bank's screening systems, including an inability to detect transliteration name variations and the inadequate escalation of an automatically generated PEP review. The amount is modest. The signal is not. As of April 2025, OFSI had 240 active enforcement cases under investigation, up from 172 in April 2023. The UK's Office of Trade Sanctions Implementation (OTSI) updated its guidance on countering Russian sanctions evasion in March 2026, adding new goods to the high-risk list and, notably, adding Israel to the list of countries where businesses should consider carrying out enhanced due diligence. The direction is unambiguous: what matters is not whether a process exists on paper but whether it would have caught the breach in practice.

The accountability question extends beyond the compliance function. Boards and senior management bear responsibility for ensuring that sanctions risk is understood at an institutional level, not delegated to a screening tool and revisited only after an enforcement action. A control framework that cannot account for re-documentation, transhipment, crypto-enabled settlement or dispersed procurement is not proportionate to the threat. It is a liability.

The map is no longer being redrawn; it is being torn up

The world that existed when the Russia sanctions regime was designed, a world in which the US and its allies could assume a broadly unified approach to enforcement, in which commodity markets operated within predictable parameters and in which the principal challenge was identifying evasion within a stable framework, no longer exists.

The cartography of sanctions evasion once ran through the shipping lanes of the Indian Ocean, the trading houses of Dubai and Istanbul, the corporate registries of Astana and Tbilisi and the oil terminals of Gujarat and Fujairah. Now it runs through a war zone, a closed strait, cryptocurrency exchanges regulated in Kyrgyzstan and general licences issued by a government at war with its own sanctions policy. The enforcing governments are no longer simply failing to prevent evasion. They are sanctioning themselves: undermining, in the name of crisis management, the very regime they built in the name of security. Until that contradiction is resolved, the compliance obligation falls on firms to build frameworks that are more coherent than the policy environment in which they operate. That is a high bar. It is also, at present, the only defensible one.

Does your sanctions framework account for regulatory divergence, commodity market disruption and evasion that moves through war zones?

At OpusDatum, we work with firms to build sanctions compliance frameworks that go beyond list-based screening. Our approach integrates trade flow analysis, geographic risk modelling and counterparty due diligence into a control architecture designed to detect and disrupt evasion, not merely to document its absence.

Contact us to discuss how your controls measure up against a threat landscape that has fundamentally changed.