Theme · Geopolitics

Sanctions Secondary Risk for European Capital

How extraterritorial U.S. sanctions, EU's 14th sanctions package, and dual-use export controls reshape European investment, supply chain, and counterparty risk.

1. The four-layer sanctions stack European capital must navigate

Layer 1: U.S. primary and secondary sanctions. The U.S. Treasury's Office of Foreign Assets Control (OFAC) administers primary sanctions that bind U.S. persons (citizens, residents, U.S.-incorporated entities, anyone in the U.S.) and secondary sanctions that threaten non-U.S. persons with consequences for engaging in specified activity with sanctioned counterparties. Secondary sanctions on Russia, Iran, North Korea, Cuba, and Venezuela have been the most aggressively used since 2022. The consequence — being designated, having U.S. correspondent banking access cut off, losing dollar clearing — is so severe that European banks treat U.S. secondary sanctions as effectively binding.

Layer 2: EU sanctions. EU regulations (commonly implementing UN Security Council resolutions or autonomous EU measures) bind EU persons and entities. The 14th sanctions package on Russia (Council Regulation 2024/1745, June 2024) introduced a no-Russia-clause requirement for EU exporters of certain goods, prohibitions on Russian LNG transshipment in EU ports, and a new compliance obligation that EU parent companies use "best efforts" to ensure non-EU subsidiaries don't undermine EU sanctions.

Layer 3: UK sanctions (post-Brexit, autonomous regime). The UK Office of Financial Sanctions Implementation (OFSI) operates a UK-specific regime largely aligned with EU on Russia, but with divergences elsewhere. UK enforcement has been more aggressive in some respects since 2023, including the first major Russian-oligarch enforcement penalty (£15M Magnitskii-list breach, 2024).

Layer 4: Dual-use export controls. Regulation (EU) 2021/821 governs export, brokering, technical assistance, transit, and transfer of dual-use items — items with civilian and military applications. The 2024 update added cyber-surveillance items, certain semiconductor manufacturing equipment, and quantum-related technology to the control list. Member State licensing authorities (BAFA in Germany, DSO in Spain, RVO in Netherlands) administer the licensing.

The four layers do not align cleanly. A trade that is permitted under EU sanctions may trigger U.S. secondary sanctions; a dual-use license granted by BAFA may not be sufficient where U.S. content rules apply. The operator's first frame: every cross-border transaction with sanctions-adjacent counterparties needs a four-corner analysis, not just the EU corner.

2. Why U.S. secondary sanctions bind European capital

The mechanism is correspondent banking and the dollar system. International trade, including European-to-European trade, frequently settles in U.S. dollars. Dollar transfers route through correspondent banks in the U.S., which are subject to U.S. primary sanctions. A European bank designated under U.S. secondary sanctions loses dollar clearing access — its ability to participate in the world's settlement currency.

~58% of cross-border transactionsSource · BIS Triennial Survey 2022Share of global cross-border bank lending denominated in U.S. dollars. The dollar's structural dominance gives U.S. secondary sanctions extraterritorial reach without explicit jurisdiction over non-U.S. persons.

The historical consequence: when the U.S. designates a non-U.S. counterparty, the European banking system, even where European law would permit the trade, withdraws because the cost of being secondary-designated dwarfs the value of the trade.

Recent enforcement that confirmed the pattern: the late-2023 Treasury action against several non-U.S. banks for clearing payments associated with Russia's military supply chain; the 2024 enforcement against UAE-based logistics intermediaries; the 2024 Hong Kong electronics broker designations. None of these counterparties had a U.S. nexus in the obvious sense. All lost dollar clearing within days.

What this means for European fund managers and acquirers: the LP base, the fund administrator, the custodian, the audit firm, the placement agent, and the underlying portfolio companies all run on dollar rails. Sanctions exposure is portfolio-wide, not deal-specific.

3. EU FDI screening — the inbound layer

Regulation (EU) 2019/452 establishes a cooperation framework for screening foreign direct investment into the EU on grounds of security and public order. Member States operate national screening regimes on top: Germany's amended Außenwirtschaftsverordnung (AWV) covers acquisitions of stakes in critical-technology and critical-infrastructure companies; France's IEF screening covers similar categories; the Netherlands, Italy, Spain, Sweden, and Belgium have all expanded their regimes since 2022.

1,649 FDI screening cases in 2023Source · European Commission FDI screening report 2024Total notifications to the EU FDI cooperation mechanism in 2023, up from 1,200 in 2022. Critical infrastructure, dual-use technology, and biotech are the most-screened sectors.

Screening grounds, broadly: critical infrastructure (energy, transport, water, health, communications, data, finance); critical technologies (AI, robotics, semiconductors, cybersecurity, aerospace, defense, dual-use); critical inputs (energy supply, food security, raw materials); access to sensitive information; freedom and pluralism of media.

Practical implication: cross-border M&A into EU targets in any of these sectors should expect FDI review. The review can extend transactions by 60–180 days; conditions and divestment requirements are real. For a fund, the FDI review timeline must be modelled into transaction documentation: long-stop dates, MAC clauses, and bid structuring (especially for non-EU bidders) need to anticipate review.

The regime is hardening. The Commission's 2024 proposal to revise the FDI Regulation would require all Member States to operate a screening mechanism, expand mandatory cooperation, and broaden the sectoral scope. The trajectory through 2025–2027 is more screening, slower transactions, and more conditional approvals — not fewer.

4. The 14th Russia sanctions package — and what it changed

Council Regulation 2024/1745 of 24 June 2024 introduced four mechanically significant changes that any operator with Russia-adjacent exposure has internalised:

(a) The "No-Russia clause." Article 12g requires EU exporters of certain goods (high-technology, dual-use, battlefield items) to contractually prohibit re-export to Russia. The clause must be in writing in the export contract and must include adequate remedies. This shifts EU regulatory risk into commercial documentation: a contract without the clause exposes the exporter to enforcement.

(b) Best-efforts obligation on EU parent companies. EU parent entities must use "best efforts" to ensure that non-EU subsidiaries (in any jurisdiction) do not engage in conduct that undermines EU sanctions. This is novel: the EU is reaching into corporate group governance to enforce its sanctions extraterritorially. National competent authorities are still working out what "best efforts" requires in practice.

(c) LNG and refined petroleum measures. Prohibitions on transshipment of Russian LNG in EU ports (with phase-in), tighter price-cap implementation on Russian-origin refined petroleum, and increased reporting on tanker activity.

(d) Designations expansion. Roughly 100 additional individuals and entities added to the asset-freeze list. The cumulative Russia asset-freeze list now exceeds 2,200 entries.

What this means for capital allocators: any portfolio company with Russia exposure (direct or indirect via subsidiaries, suppliers, or customers) needs an internal review against the new package. The best-efforts obligation in particular requires a documented compliance program at parent level, not just at the EU subsidiary level.

5. The operator's sanctions framework

Five-step framework that has held across mandates:

Step 1: Counterparty screening. Every counterparty (LP, portfolio company, vendor, advisor, customer of portfolio company) is screened against U.S. SDN, EU consolidated, UK consolidated, and UN consolidated lists. Screening runs at onboarding and on a re-screening cycle (quarterly for higher-risk, annually for lower-risk). Tooling: enterprise-grade screening providers (Refinitiv World-Check, Dow Jones Risk Center, Sayari, ComplyAdvantage) with audit trail.

Step 2: Beneficial ownership transparency. The 25% UBO threshold in EU AML rules is no longer sufficient for sanctions purposes. The 50% rule from OFAC means a designated person owning 50% or more (alone or in aggregate with other designated persons) of an entity makes that entity itself blocked. Beneficial ownership has to be mapped below the AML threshold to satisfy the 50% rule.

Step 3: Trade flow audit. Every portfolio company with cross-border supply chain runs an annual sanctions audit of its trade flows: who do we sell to, who do we buy from, where do the goods physically move, what is the dual-use classification of what we ship. Trade flow audits surface the indirect exposures (a sub-supplier sells to Russia, a customer routes shipments through a sanctions-relevant jurisdiction) that primary counterparty screening misses.

Step 4: Contract instrumentation. New contracts include sanctions clauses with specific reference to EU 2024/1745's No-Russia clause where applicable, U.S. secondary sanctions awareness, audit rights, and termination triggers. Existing contracts undergo selective remediation, prioritised by transaction volume and counterparty risk.

Step 5: Incident response. When a sanctions issue surfaces (counterparty newly designated, customs seizure, regulatory inquiry), the response runs on a documented playbook: legal review within 24 hours, voluntary disclosure decision within 72 hours, transaction freeze pending review, root-cause analysis. Voluntary self-disclosure reduces enforcement penalties materially under both OFAC and OFSI policy.

The board-level discipline: sanctions exposure is reviewed quarterly, not annually. The pace of designations and new measures (>40 sanctions-related EU and U.S. measures in 2024 alone) requires continuous attention.

6. Where the regime is heading through 2027

Three trajectories the operator tracks:

First: U.S.-EU divergence on enforcement aggressiveness. The U.S. has signalled willingness to use secondary sanctions more broadly, including against allies; the EU has signalled willingness to develop its own anti-coercion instrument and a more aggressive 15th sanctions package. The cross-Atlantic tension is now structural; transactional decisions need to model both paths.

Second: critical-input controls. The dual-use control regime is expanding into critical raw materials (rare earths, lithium, certain refined products) and into AI compute (export controls on advanced chips and chip-making equipment, US BIS rules and EU regulatory follow-on). For portfolio companies dependent on these inputs, the supply-chain risk is now sanctions risk.

Third: financial-sanctions enforcement on AI/crypto/digital assets. OFAC, OFSI, and EU competent authorities are building enforcement capacity for sanctions evasion via digital-asset rails. Tornado Cash designations and follow-on guidance signalled the direction; enforcement is broadening.

The implication for portfolio compliance: the cost of getting sanctions wrong is rising; the cost of staying current is also rising; and the only operationally credible posture is continuous compliance with documented controls, not periodic catch-up. The deals that perform best from here are the ones structured with sanctions-clean counterparties from inception, not retrofit later.

Supporting essays

Read the underlying analysis

Source books

The argument, in book length

Frequently asked

Questions, in order of how often they're asked

What are U.S. secondary sanctions and why do they bind European companies?
U.S. secondary sanctions threaten non-U.S. persons (companies, banks, individuals) with the loss of access to the U.S. financial system if they engage in specified activity with sanctioned counterparties — even when no U.S. person is involved in the transaction. Because most international trade and capital flows still settle through U.S.-dollar correspondent banks, the threat of being cut off from the dollar system makes secondary sanctions effectively binding on European banks, funds, and operating companies.
What is the 'No-Russia clause' under EU sanctions?
Article 12g of Council Regulation 2024/1745 (the EU's 14th sanctions package on Russia, June 2024) requires EU exporters of certain goods — including high-technology and dual-use items — to contractually prohibit re-export of those goods to Russia. The clause must be written into the export contract and must include adequate remedies for breach. Exporting without the clause exposes the exporter to enforcement under the regulation.
How does FDI screening affect cross-border M&A in the EU?
Regulation (EU) 2019/452 and national screening regimes (Germany's AWV, France's IEF, the Dutch and Italian regimes among others) require notification and review of foreign direct investment into critical-infrastructure, critical-technology, and dual-use targets. The EU received 1,649 FDI screening notifications in 2023. Reviews extend transactions by 60–180 days and can result in conditions, divestments, or prohibition. Cross-border M&A bidders should model the FDI timeline into transaction documentation.
What is the 50% rule under OFAC sanctions?
OFAC's 50% rule treats any entity that is owned 50% or more — directly or indirectly, alone or in aggregate — by one or more designated persons as itself blocked, even if the entity is not separately listed. This makes beneficial-ownership transparency below the EU AML 25% threshold a sanctions necessity: a counterparty that appears clean on a SDN-list match may still be blocked under the 50% rule.
What does the EU 'best efforts' obligation on parent companies require?
Article 8a of Council Regulation 2024/1745 requires EU parent entities to use best efforts to ensure that non-EU subsidiaries — wherever located — do not engage in conduct that undermines EU sanctions. The obligation is novel and Member State competent authorities are still developing guidance on what 'best efforts' practically requires. The minimum compliance posture is a documented group-wide sanctions compliance program covering subsidiary screening, training, contractual cascade, and audit.
How does dual-use export control overlap with sanctions?
Regulation (EU) 2021/821 governs export, brokering, technical assistance, transit, and transfer of items with civilian and military applications. Dual-use controls operate independently of country-specific sanctions: an export to a non-sanctioned destination may still require a license; an export licensed under EU dual-use rules may still violate U.S. export control law if the items contain controlled U.S.-origin content. The two regimes layer; the operator must address both.
What is voluntary self-disclosure and when is it the right choice?
Voluntary self-disclosure is the practice of notifying competent authorities (OFAC, OFSI, EU Member State authorities) of a known or suspected sanctions breach before the authority discovers it. Both OFAC and OFSI policies provide for materially reduced enforcement penalties when disclosure is voluntary, timely, and accompanied by remediation. The right choice depends on the breach's nature, severity, and the company's compliance posture; legal counsel review is essential before disclosure.
How are sanctions risks managed in private equity deal diligence?
Pre-acquisition diligence in 2026 includes a sanctions workstream: counterparty screening across U.S. SDN, EU consolidated, UK consolidated, and UN lists; beneficial-ownership mapping below the 25% AML threshold for the 50% rule; trade-flow audit to identify indirect sanctions exposure via suppliers and customers; contract review for sanctions clauses and audit rights; review of prior sanctions inquiries and enforcement. The output is a sanctions risk memo alongside cyber, GDPR, AI Act, and ESG memos.

Related themes