Brief
A listing carries its own prohibition
Sanctions measures other than the asset freeze, and the systems that have to hold them
Bottom line
A screening match answers one question: this counterparty appears on a list. Each of the three Russia regimes answers a second question inside the same record, and an alert queue with two outcomes throws it away: which prohibition that listing imposes. OFAC puts full blocking on the SDN List alone and enumerates lesser sanctions record by record elsewhere. Every UK Sanctions List entry carries a “Sanctions imposed” field, and a single Russia notice adds entries whose measures run to trust services, correspondent banking, internet services, and trade in services for a named ship. Council Regulation (EU) No 833/2014 identifies restricted legal persons across fourteen separate annexes, each attached to a different article and a different prohibition, while the asset freeze sits in a different regulation. The measure decides what the firm owes. Because each measure reaches a different act, it also decides which system has to carry the control. A program that reads every match as freeze or clear refuses business the rules leave open and lets the prohibited act run in a system that holds no screen at all.
1. A match answers two questions
The first question is identity: whether the string in the record belongs to the party in front of the firm. That is a hard problem of its own, and One person, several spellings is about it. This piece begins where that one ends, at a confirmed true match, with the second question: what this listing prohibits.
Most alert workflows answer the second question with the disposition of the first. A true match becomes a freeze and a report; a false match becomes a release. Two values suit one measure, the asset freeze, and the regimes impose many more. A listing can bar holding an account for an institution while leaving a payment from it open. It can bar buying a bond while leaving a commercial contract in force. It can bar paying a fuel supplier for a named vessel while leaving the supplier itself entirely unrestricted.
| Regime | Where the measure is written down | What a record can impose besides an asset freeze |
|---|---|---|
| United States | The list the record sits on, and the directive or program the record names | Correspondent and payable-through account prohibitions; limits on new debt and new equity; bans on dealing in listed securities; menu items set out record by record |
| United Kingdom | The “Sanctions imposed” field of the UK Sanctions List entry | Trust services; director disqualification; correspondent banking and payment processing; internet services; transport; shipping and trade measures attaching to a specified ship |
| European Union | The annex the name appears in, and the article that annex serves | Transaction bans under several separate articles; restrictions on transferable securities and money-market instruments; restrictions on loans and credit; broadcasting |
Each row describes a published field or a published structure. The regimes already answer the second question. The loss happens between the list and the alert.
A passport answers one question makes the mirror of this argument on the customer side: one country field answering three separate tests about a person. The failure here runs the other way. The record arrives rich and the system stores a status, so the regimes supply the detail and the firm discards it on receipt.
2. What binds, and what advises
Read by layer, as From rule to workflow uses the word:
- Law. The prohibition lives in the instrument, and the list identifies who it reaches. In the United States, Directive 2 under Executive Order 14024, the Russia-related CAPTA Directive, bars US financial institutions from opening or maintaining a correspondent account or payable-through account for the foreign financial institutions it covers, and from processing transactions involving them. Directive 3 bars dealings in new debt of longer than 14 days maturity, or new equity, of the entities in its annex. Directive 4 bars transactions involving the Central Bank of the Russian Federation, the National Wealth Fund, and the Ministry of Finance. In the United Kingdom, the Russia (Sanctions) (EU Exit) Regulations 2019 carry the asset freeze alongside separate measures with their own regulation numbers: regulation 16 on transferable securities and money-market instruments, regulation 17 on loans and credit, regulation 17A on correspondent banking relationships and payment processing, and regulation 18C on trust services, with ships specified under regulation 57F for the shipping and trade purposes that regulation names. In the European Union, Regulation (EU) No 269/2014 holds the asset freeze and the prohibition on making funds or economic resources available, and Regulation (EU) No 833/2014 holds transaction bans and sectoral restrictions keyed to its own annexes.
- Guidance. OFAC’s FAQ 967 states that the Russia-related CAPTA Directive imposes no blocking sanctions. OFAC’s description of the Sectoral Sanctions Identifications List places the SSI List outside the Specially Designated Nationals List, and says that “Directives found within the list describe prohibitions on dealings with the persons identified.” Its description of the Non-SDN Menu-Based Sanctions List says “The specific sanctions will be enumerated on a record-by-record basis on this list.” The European Commission’s FAQs read Article 5aa to cover “the provision of any sort of economically valuable benefit (such as services or payments), even in the absence of such contractual relationship.” Guidance of this kind carries no binding force, and it remains the clearest public statement of how each regime expects its own records to be read.
- Policy. Which lists the firm loads, and at what granularity. Whether the firm applies a freeze where a narrower measure binds, which is a choice with a cost in customers and in the accuracy of its own reporting. Which function owns each measure, and what a product team has to ask before it ships an integration. Each of these belongs in the policy with an owner and a reason.
- Convention. One consolidated feed, one alert queue, two dispositions. It is the layer this piece argues against, because it answers a published question with a default.
3. The United States writes the measure on the list
OFAC’s own rule for where a sanction is recorded is explicit. Where full blocking sanctions are imposed on a person, that person “is identified solely” on the SDN List, and “Any other sanctions short of full blocking that are imposed on that person are also identified on the SDN List.” A person carrying only lesser sanctions appears on one of the other lists instead, where the specific sanctions are set out record by record.
Two consequences follow, and they run in opposite directions. A match on a non-SDN list carries a real prohibition that falls short of blocking, so freezing the funds applies the wrong measure. A match on the SDN List may carry more than the blocking the program already knows about, since the lesser sanctions imposed on a blocked person are recorded in the same place.
The effect is sharpest where the measure reaches a relationship rather than a payment. The CAPTA Directive bars opening or maintaining an account for a covered institution. The act it governs is the firm’s own choice of correspondent, which treasury makes and which a customer screen observes only by accident. OFAC’s own account of why programs fail names both halves of this. Its framework for compliance commitments lists, among the root causes drawn from past enforcement actions, failures to update screening software for “updates to the SDN List or SSI List” — two lists, kept separate in the same sentence — and, under a heading on decentralized compliance functions, apparent violations caused by “an improper interpretation and application of OFAC’s regulations” and by the absence of a formal escalation process, with decision-makers scattered across offices and business units.
4. The United Kingdom writes the measure in a field
The UK Sanctions List names individuals, entities, and ships, which it calls designated persons and specified ships. Every entry carries a field headed “Sanctions imposed,” and the format guide treats it as a field like any other, noting that some measures publish as an alternative sanction rather than as their own indicator.
The field earns its place. Take one notice: the Russia update of October 8, 2026, which records 38 additions and 2 variations. Sorting those 40 entries by the measures they carry gives this.
| Measures recorded in the entry | Entries |
|---|---|
| Asset freeze, trust services, director disqualification | 15 |
| Shipping and trade sanctions, with no asset freeze | 12 |
| The first row, plus internet services and correspondent banking | 6 |
| The first row, plus a travel ban | 3 |
| The first row, plus transport sanctions | 2 |
| The first row, plus correspondent banking | 1 |
| The first row, plus aircraft technical assistance, transport, and detained transport | 1 |
Twelve of forty entries in a single day’s update carry no asset freeze. They are vessels, specified under regulation 57F for shipping purposes under regulations 57ZA and 57A to 57E, and for trade purposes under regulations 46AA and 46AB. The notice states the effect in its own words: where those trade measures apply, it is an offence to provide, directly or indirectly, “technical assistance, crew services, operating services, chartering services, brokering services, financial services or funds in relation to a specified ship.”
Financial services or funds in relation to a ship. A payments firm is squarely inside that prohibition, and the party it reaches has an IMO number rather than a customer record. The name on the invoice may be a bunker supplier, a port agent, or a crewing agency, each of them unlisted and each of them clear on any name screen the firm runs. What the control has to read is the vessel identifier, which lives in a payment reference, a bill of lading, or an invoice line, rather than in the counterparty record. That is the same move Knowledge arrives after the payment makes about trade detail reaching a firm that sees only the money.
5. The European Union writes the measure in the annex
Regulation 833/2014 lists named legal persons across fourteen separate annexes, each introduced as “List of legal persons, entities and bodies referred to in” a particular article. The article supplies the prohibition. Several of these, by the measure each one serves:
| Annex | Article | What the listing prohibits |
|---|---|---|
| III, V, VI, XII, XIII | Article 5(1) to 5(4) | Dealing in transferable securities and money-market instruments issued by the listed entity, on the issue dates and maturities each paragraph sets |
| The same five annexes again | Article 5(6) | Making, or being part of an arrangement to make, new loans or credit to those same entities |
| XIV | Article 5h | Any transaction with the listed entity, and with entities in Russia more than 50 percent owned by it |
| XV | Article 2f | Broadcasting the listed outlet’s content |
| XIX | Article 5aa | Any transaction with the listed state-linked entity, entities outside the Union more than 50 percent owned by it, and persons acting on its behalf or at its direction |
| XLIV | Article 5ac | Any transaction with a listed entity outside Russia that uses the Central Bank of Russia’s financial messaging systems |
| XLV | Article 5ad | Any transaction with a listed credit or financial institution, crypto-asset service provider, or payment service provider established outside the Union |
The second row is the one to dwell on. One annex can serve more than one article, so even the annex a name sits in falls short of fixing the prohibition on its own: the same five lists of institutions carry a securities restriction under one set of paragraphs and a lending restriction under another, each with its own dates.
The asset freeze appears nowhere in that table. It sits in Regulation 269/2014, with its own annex and its own names. A firm that loads an asset-freeze feed and treats it as the European Union’s sanctions list has loaded one instrument out of two, and the one it skipped is the one addressed to payment firms by name.
Annex XLV deserves its own sentence, because it is where the regional exposure concentrates. Article 5ad reaches credit and financial institutions, crypto-asset service providers, and payment service providers established outside the Union, listed either for servicing restricted entities or for otherwise frustrating the purpose of the prohibitions. For a European payments firm, the counterparty a listing of that kind touches is a partner institution in a third country, and the act it prohibits is the partnership itself rather than any single payment through it.
Dates travel with these listings as well. Several of the articles carry wind-down periods, and the annexes record an entry into force beside each name, so one listing permits an act on one date and prohibits it on the next. A permission with a date on it is an evidence problem of its own, which A licence leaves the proof with the firm takes up.
6. The measure picks the system
Here is the part a screening vendor leaves to the firm. Each measure reaches an act, each act is performed by a system, and each system belongs to a function. Writing that map down is the control.
| Measure | The act it reaches | Where that act happens | Who answers for it |
|---|---|---|---|
| Asset freeze | Holding funds, moving them, making them available | Ledger, payment rails, onboarding | Sanctions operations |
| Correspondent and payable-through account prohibition | Opening or keeping an account relationship, and processing through it | Treasury, partner selection, payment routing | Treasury, with sanctions sign-off |
| Transaction ban | Any economically valuable benefit: a contract, a service, a payment | Sales contracting, procurement, billing, payments | Commercial, jointly with sanctions |
| Securities, debt, and equity restrictions | Buying, selling, or arranging a listed instrument | Treasury investment, brokerage | Treasury |
| Services in relation to a specified ship | Paying for or arranging services for a named vessel | Payment screening on references and trade documents | Sanctions operations, with trade data |
| Financial messaging restrictions | Connecting a system, or dealing with a party that uses one | Payment infrastructure, partner integrations | Product and engineering |
| Trust and corporate services | Providing those services | The corporate services line | That line’s owner |
| Internet services | Hosting, access, distribution | Infrastructure and product | Engineering |
| Director disqualification | Appointing or keeping a director | Company secretarial | Legal |
Three readings fall out of the table. A measure with no row has no owner, and a measure with no owner is a prohibition the firm has agreed to in principle and implemented nowhere. A measure whose act happens outside the alert queue needs a control at the moment of the act, which is usually a gate in a workflow rather than an alert on a name. And the third column reaches further than any one team, which is the practical argument for writing the map down rather than keeping it in one person’s head, in the way From recurring question to durable control treats any answer given more than twice.
- Match confirmed against a list record
- Measures read from the record, each stored as its own value
- Each measure routed to the system that performs the act it reaches
- The act permitted, conditioned, or refused, with the authority recorded
- Recomputation when the record's measure set changes
7. The measure set moves while the name stays
A listing’s measures change independently of the name, and so does the population each measure derives.
The same name gains a measure. The Commission’s FAQs on state-owned enterprises, as of November 21, 2025, record that Sovcomflot was subject to the transaction ban in Article 5aa of Regulation 833/2014 and became subject to the asset freeze and the prohibition on providing funds or economic resources under Regulation 269/2014 on June 24, 2024. The FAQ answers the question that sequence raises: the two regulations “apply independently,” and “Any exceptions in Council Regulation (EU) 833/2014 are irrelevant for the asset freeze measures.” The trap is a firm that keeps relying on an exemption in one instrument after a second instrument reaches the same counterparty. The event that matters there is a change of measure on a name the program already holds, which is the kind of update a list feed delivers quietly.
Each measure derives its own population. OFAC’s 50 percent rule extends blocking to entities owned in the aggregate at 50 percent or more by blocked persons, listed or unlisted. Article 5aa reaches entities outside the Union more than 50 percent owned by an Annex XIX entity, and separately those acting on its behalf or at its direction. Article 5h reaches entities established in Russia more than 50 percent owned by an Annex XIV entity. The UK correspondent banking measure extends to credit or financial institutions owned or controlled by the designated person. The thresholds look alike and the arithmetic differs, which is the argument One cap table, several answers makes at length. Read alongside this piece, it compounds: a derived population has to be computed per measure, since the same cap table yields a different set of restricted entities depending on which measure is asking.
A worked hypothetical
The following scenario is hypothetical and is included only to illustrate the framework. The firm, the counterparties, and the vessel below are invented.
A cross-border payments company runs a Union-licensed payment institution and a UK entity. It screens customers, payers, and payees at onboarding and again at payment, against one consolidated feed of asset-freeze listings from the three regimes, and its analysts close each alert as a release or as a freeze with a report. Four matters reach the firm in one week.
| Matter | What the record says | The measure it carries | What the firm did |
|---|---|---|---|
| A fuel invoice naming a vessel and its IMO number | UK entry for a specified ship | Shipping and trade measures, with no asset freeze | Froze the payment and reported frozen funds |
| A payout to a bank outside the Union | Listed in Annex XLV of Regulation 833/2014 | An EU transaction ban, with no asset freeze | Released, since no alert fired |
| A product team integrating a new payout partner in a third country | Listed in Annex XLIV of Regulation 833/2014 | An EU transaction ban, with no asset freeze | Shipped the integration, since product decisions reach no screen |
| An incoming payment from a designated individual | Asset-freeze listing in all three regimes | An asset freeze | Froze and reported |
Reading it through the framework.
- The vessel. The fuel supplier is unlisted and the payment to it is prohibited, because the trade measures on a specified ship reach financial services or funds in relation to that ship. The right ending was a refusal under the ship measure, with the funds returned to the payer. Instead the firm opened a frozen balance where no freeze applies, taking custody it holds no authority for and filing a report of holdings that belong on no return. Which of the two endings a refusal takes, and what each one commits the firm to afterward, is the whole subject of A block opens an account.
- The bank outside the Union. Article 5ad prohibits any transaction with a listed institution of this kind. The name sits in an annex to Regulation 833/2014 rather than in the asset-freeze regulation, so the feed held no copy of it and the queue stayed quiet. The clean queue was the problem, and a count of alerts would have shown the week as uneventful.
- The payout partner. Article 5ac prohibits transactions with the entities listed in Annex XLIV, and the act the prohibition reaches is the integration itself. The decision was made in a product review, and the control belonged in the gate that review passes through.
- The incoming payment. Correct, and instructive. The program handles the measure it recognizes competently, which is exactly what conceals the other three. Three failures sat behind one success, and a metric on alert quality would have scored the week well.
What would have caught it. A measure field carried from the list record into the alert, so that the disposition names the prohibition rather than a status. Each annex of Regulation 833/2014 loaded as its own list with its own measure tag, alongside the asset-freeze regulation. Vessel identifiers screened against payment references and trade documents, rather than against the counterparty record alone. A measure-to-system map that puts the messaging question in front of Product before an integration ships. And each refusal recorded under the authority that produced it, so the firm’s own record of the week says which rules it applied.
8. Failure modes, and the measures that expose them
- The flattened measure. Share of closed alerts whose disposition names the measure applied, and the authority for it. A disposition of freeze or release with nothing else recorded fails this test, however correct the outcome happened to be.
- The absent list. Count of distinct list sources loaded, against the count of instruments that identify restricted persons in the regimes the firm is subject to. Fourteen annexes of Regulation 833/2014 and one asset-freeze regulation give a concrete target for the European leg.
- The orphan measure. Count of measures in the map with a named owning system and a named owning function, against total measures in the map. The gap is the honest count of prohibitions the firm has accepted and implemented nowhere.
- The misapplied freeze. Count of frozen balances whose underlying record carries a measure other than an asset freeze. A working control holds this at zero, and a number above zero also inflates whatever the firm reports to its regulators about holdings.
- The unscreened identifier. Share of payments carrying a vessel identifier, a security identifier, or an institution identifier that is screened against the lists reaching those identifiers.
- The stale measure set. Time from a list update that changes a measure on an existing record to the firm’s recomputation of the affected relationships. Updates that add a name travel faster than updates that change what an existing name prohibits, and the second kind is the one that reaches open business.
What this changes operationally
A sanctions owner publishes a map from each measure to the act it reaches, the system that performs the act, and the function answerable for it, and treats any measure lacking all three as an open finding with a date.
A screening or financial-crime lead asks the vendor which instruments the feed covers, name by name and annex by annex, and loads the ones it leaves out as their own sources, each tagged with the measure it carries rather than merged into a single consolidated list.
A data engineer stores the measures on an alert as a set of values rather than a status, keeps the authority alongside each one, and recomputes derived populations per measure, since the ownership arithmetic differs by regime and by article.
A product lead adds a sanctions gate to the decisions that perform a restricted act outside the payment path: selecting a correspondent, integrating a payout partner, connecting to a messaging system, listing an instrument.
An operations lead reads each month’s refusals by the measure cited, and treats any refusal recorded without one as a defect in the workflow rather than in the analyst.
Limitations
This concerns how a listing’s measure is read and routed. It offers no legal view on any counterparty, instrument, or program, no thresholds, and no screening configuration, and it describes no institution’s program. Which regimes bind a firm, and whether a given entity falls inside a measure’s defined class of institution, turn on where the firm’s entities are established and how they are licensed, both questions for counsel. Annex contents, directive annexes, and UK entries change continually, and the fourteen-annex count reflects the consolidated text of Regulation 833/2014 as it stood when this was written. The tally from October 8, 2026 describes a single notice and makes no claim about the proportion of measures across the list as a whole. Belarus, Iran, and other regimes carry their own measure structures, which resemble these without matching them.
A measure field solves the routing problem and leaves the judgment problem intact. Whether an act falls inside a prohibition, especially a transaction ban written in terms of economically valuable benefit, stays a question a reviewer decides on the facts, equipped the way A human in the loop needs a job description specifies. The design records which measure the reviewer applied and under what authority, so that a later reader can see what the decision knew.
Primary sources
- US Department of the Treasury, OFAC. Additional Sanctions Lists, and the list descriptions for the Non-SDN Menu-Based Sanctions List, the Sectoral Sanctions Identifications List, the Correspondent Account or Payable-Through Account Sanctions List, and the Foreign Sanctions Evaders List.
- US Department of the Treasury, OFAC. Directives 1A, 2, 3, and 4 under Executive Order 14024, published in the Federal Register on May 31, 2022, and Frequently Asked Questions 966 and 967.
- US Department of the Treasury, OFAC. A Framework for OFAC Compliance Commitments (May 2, 2019), the internal controls section and Appendix A, root causes II, VI, and VIII.
- United Kingdom, Foreign, Commonwealth and Development Office. Sanctions Notice: 8 October 2026, Regime: Russia, and the Format guide for the UK Sanctions List.
- United Kingdom. The Russia (Sanctions) (EU Exit) Regulations 2019, regulations 16, 17, 17A, and 18C, and regulations 46AA, 46AB, 57ZA, and 57A to 57F; and Financial sanctions guidance for Russia.
- Council of the European Union. Council Regulation (EU) No 833/2014, consolidated text, Articles 2f, 5(1) to 5(6), 5aa, 5ac, 5ad, and 5h, with Annexes III, V, VI, XII, XIII, XIV, XV, XIX, XLIV, and XLV.
- Council of the European Union. Council Regulation (EU) No 269/2014, on the asset freeze and the prohibition on making funds or economic resources available.
- European Commission. State-Owned Enterprises, Related Provision: Article 5aa of Council Regulation 833/2014: Frequently Asked Questions (as of November 21, 2025), Questions 1 and 16.