Trade Restrictions 2026: Sanctions, Embargoes, and Controls Most Exporters Misread

On March 31, 2026, OFAC published a sanctions advisory on sham transactions and evasion tactics. The third guidance document in 90 days targeting the same structural gap. Trade restrictions in 2026 no longer track to a single list or a single agency. They span OFAC sanctions programs, BIS export controls, EU restrictive measures, and destination-level embargoes, all updating on separate schedules, under separate legal authorities, with ownership thresholds that don't match each other. Most mid-market exporters screen against one or two of these regimes and treat the result as a complete picture. That's not a compliance program. That's a coin flip.

Trade Restrictions Cover More Ground Than Most Screening Processes Catch

A trade restriction is not just a name on a list. Sanctions target entities. Export controls target products. Embargoes target destinations. Activity-based restrictions and end-use prohibitions cut across all three. These regimes overlap across jurisdictions simultaneously, and the operational problem for most exporters sits right here: their sanctions screening catches counterparty names, but the product-destination-end-use matrix gets zero attention.

We've seen this play out repeatedly in 2025 enforcement actions. Unicat Catalysts Technologies, a Texas catalyst seller, settled with OFAC for $3,882,797 for apparent violations of Iranian and Venezuelan sanctions. The settlement ran concurrent with separate actions from the Department of Justice and BIS. Three agencies, one company, one set of transactions. That overlap between trade sanction enforcement and export control enforcement hits mid-market manufacturers hardest because they typically split sanctions screening and export classification across separate teams, sometimes separate vendors, with no cross-referencing.

Global trade compliance programs that treat these regimes as separate silos produce exactly the gaps enforcement agencies go after. OFAC's 2025 enforcement trend was explicit: the agency rejected "form over substance" compliance structures where companies relied on corporate formalities to create distance from sanctioned parties. An unnamed individual settled for $1,092,000 in December 2025 after providing fiduciary services to a trust affiliated with a sanctioned Russian oligarch. The individual had received outside legal counsel advising the trust was not blocked property. OFAC disagreed.

One approach that consistently fails: running a denied party screening check on the counterparty name and calling it done. The name might be clean. But the product could require a license under 15 CFR 744.11, the destination could sit in Country Group D:1, and the end-use could trigger red flags under EAR Section 744.6. Those are separate legal questions answered by separate data sources, and a clean name check doesn't touch any of them.

Sanctions, Embargoes, and Export Controls Operate on Different Legal Tracks

Exporters routinely conflate these three categories, and that blind spot costs money. A trade sanction under IEEPA prohibits transactions with designated persons. An embargo prohibits most or all transactions with an entire country or regime. An export control under the EAR restricts specific items to specific destinations or end-users based on product classification. The penalty structures don't match. The enforcement agencies don't coordinate timing. The ownership rules follow separate arithmetic.

OFAC's maximum civil penalty stands at $377,700 per violation as of January 15, 2025. BIS penalties can reach $374,474 per violation under 15 CFR 764.3(a)(1). Criminal penalties under both regimes go higher. The real cost shows up in concurrent enforcement, though. When GVA Capital Ltd. settled with OFAC for $215,988,868 in June 2025 for managing assets of sanctioned Russian oligarch Suleiman Kerimov, OFAC imposed the statutory maximum. That's 430 times the per-violation floor. GVA knew about the SDN designation, ignored counsel's warnings, never self-disclosed. Every aggravating factor stacked.

The designated countries list under U.S. export control regulations does not align perfectly with OFAC's sanctions programs. Country Group E:1 (Cuba, Iran, North Korea, Syria — though Syria sanctions were largely lifted in June 2025) maps to broad sanctions, but Country Group D destinations carry export control restrictions without corresponding OFAC programs. An exporter shipping microcontrollers to a buyer in a Country Group D:1 nation faces EAR license requirements that have nothing to do with sanctions. Conflating "sanctions" with "export controls" leads teams to screen against the wrong list entirely.

Here's where it gets messy. Syria's broad sanctions regime was terminated effective July 1, 2025. Nobody predicted that 12 months earlier. Targeted sanctions remained on Bashar al-Assad, human rights abusers, Captagon traffickers, and Iran-backed actors operating in Syrian territory. We talked to a compliance manager at a chemical distributor who had Syria flagged as a blanket prohibition in their internal matrix. After the lift, their team spent two weeks figuring out which sub-restrictions survived. Two weeks of operational freeze on Syrian-corridor shipments worth $340,000 in backlogged orders. By the time they untangled it, one buyer had already moved to a Turkish supplier.

The Designated Countries List Changes Faster Than Internal Matrices

OFAC designated over 1,300 individuals and entities in 2025 alone, and no internal spreadsheet keeps pace with that volume. The administration's priorities shifted quarter by quarter: cartels and counternarcotics early on, then scam networks in Southeast Asia, then Iran's shadow fleet, then Russian oil companies Rosneft and Lukoil in October. By March 2026, some of that Russian oil sector pressure was already easing. Sanctions relief was offered to address rising oil prices after U.S.-Israeli military action in Iran.

For a compliance officer maintaining an internal spreadsheet of designated countries and restricted parties, that velocity creates a structural problem. Restricted party screening runs against a snapshot. The snapshot goes stale fast. We talked to a logistics coordinator at a 200-person electronics distributor in Q3 2025 who discovered their screening vendor hadn't ingested the September 12, 2025 BIS Entity List additions (32 entities across China, Turkey, the UAE) for 11 days after publication. Three shipments cleared screening against an outdated list during that window. Nobody caught it until a customer's bank flagged one of the buyers.

The consolidated screening list maintained by the U.S. government aggregates entries from multiple agencies, but vendors pull from it at varying intervals. Some update daily. Some weekly. A party designated on Monday can return a clean restricted party screening result on Thursday if your vendor hasn't refreshed.

Multi-jurisdictional screening makes the problem worse. A UK-based exporter shipping through the U.S. or using U.S.-origin components faces OFAC, UK OFSI, and EU restrictive measures all at once. In 2025, EU sanctions packages kept adding Russian entity designations at a clip the U.S. administration did not match. An entity sanctioned by the EU but not by OFAC creates a jurisdiction-specific trade restriction that a single-source screening tool will miss.

Venezuelan sanctions are the clearest example of designated countries list instability right now. Following the apprehension of President Maduro in January 2026, OFAC issued several general licenses permitting U.S. companies to engage with Venezuela's state oil company under specific conditions. General licenses are revocable. An exporter who set up Venezuelan transactions under those licenses faces the possibility of a revocation that flips a permitted activity into a sanctioned one, with no change to the underlying designated countries list itself.

The BIS Affiliates Rule Expanded Export Controls to Unnamed Entities

On September 29, 2025, BIS published an interim final rule that nobody in mid-market compliance was ready for. The Affiliates Rule extended Entity List and Military End-User List restrictions to any entity 50% or more owned, directly or indirectly, by a listed party. Previously, only specifically named entities faced those restrictions.

Overnight, thousands of subsidiaries, joint ventures, and shell entities that were never listed by name became subject to export control licensing requirements. BIS stated explicitly that the rule created "an affirmative duty to determine the ownership of other parties to the transaction" and that exporters "can be held liable for unauthorized exports, reexports, or transfers (in-country) on a strict liability basis."

Strict liability. Not negligence. Not recklessness.

Industry pushback was immediate. On November 10, 2025, BIS issued a final rule suspending the Affiliates Rule for one year while reviewing comments. The suspension doesn't eliminate the compliance logic, though. BIS signaled clearly that ownership-based controls are coming. Companies that waited for the suspension to stop building ownership-analysis capabilities will scramble when the rule returns in modified form sometime in 2026.

For SMB exporters, the Affiliates Rule exposed a hole in standard sanctions compliance workflows that you could drive a truck through. Denied party screening software checks names against lists. The Affiliates Rule required checking ownership structures, a fundamentally separate data source. Picture this: an entity not on any list, headquartered in a non-embargoed country, manufacturing items that don't require a license, and it still triggers restrictions because a listed parent owns 51% through a holding company in Cyprus. None of that shows up in a standard trade restriction screening run.

The rule also created confusion around BIS and OFAC ownership thresholds. OFAC's 50 Percent Rule has operated since the 1990s, blocking property of entities 50% or more owned by SDN-listed persons. The BIS version applied the same percentage to a completely separate legal framework. OFAC blocking means you cannot transact at all. BIS listing means you need a license, which might be approved or denied depending on the item and the destination. Exporters who assumed "50% rule" meant the same thing under both agencies discovered the distinction the hard way during the 60-day window before the suspension.

Screening Against the International Sanctions List Alone Leaves Gaps

Running names against the international sanctions list catches entity designations. Product classification requirements, end-use restrictions, destination controls, activity-based prohibitions: those fall outside any sanctions list. An exporter who screens a buyer against OFAC's SDN list and gets a clean result has answered one question out of five.

Product classification determines whether an item requires a license for a specific destination. ECCN-controlled items face restrictions that EAR99 items don't, and the determination depends on technical specifications that change with product versions and regulatory updates. A March 2025 BIS rule added 12 entities to the Entity List under China, including companies involved in AI and quantum technology. The items those entities sought were already controlled. The Entity List addition addressed the end-user, but the product-level control existed before any name went on any list.

The February 2026 OFAC action against IMG Academy opened up a completely new front. IMG Academy, a Florida-based school, received tuition payments routed through third parties connected to Mexican cartel-linked sanctioned persons. OFAC used this case to warn that companies considering themselves "predominantly domestic" still carry sanctions exposure when their payments touch sanctioned networks. Trade restrictions in the US now reach entities that never export a single product.

We keep seeing the same pattern with mid-market exporters: sanctions screening runs as a transaction-level check, catches the obvious problems (a buyer on the SDN list, a destination under embargo), and stops there. Indirect ownership by a sanctioned person below the 50% threshold? Missed. End-use concerns that require product-level analysis? Missed. Payment flows that create the sanctions nexus instead of goods flows? Nobody is even looking.

FAQ

What counts as a trade restriction under U.S. law?

Trade restrictions under U.S. law span four regimes. OFAC sanctions block the property of designated persons and prohibit transactions with them. BIS export controls require licenses for controlled items under the EAR. Embargoes prohibit most transactions with entire countries. Activity-based controls restrict specific end-uses and end-users regardless of the product or destination. Each regime operates under separate legal authority: IEEPA for most OFAC programs, ECRA for BIS. Treating them as a single category causes more enforcement problems than it prevents.

How often does the designated countries list change?

There is no single "designated countries list." OFAC administers over 30 sanctions programs, each with its own country scope. BIS maintains Country Groups A through E with distinct export control implications. Changes occur at irregular intervals. In 2025, OFAC lifted broad Syria sanctions in June, sanctioned Rosneft and Lukoil in October, and issued general licenses for Venezuelan energy transactions in January 2026. Monitoring requires tracking multiple sources across multiple agencies, not a single list.

What is the difference between sanctions screening and denied party screening?

Sanctions screening typically checks counterparties against OFAC's SDN list and other sanctions lists. Denied party screening covers a broader set of lists including the BIS Entity List, Denied Persons List, Unverified List, and Military End-User List. Neither one captures product-level controls, destination restrictions, or end-use prohibitions. A clean result on both still leaves the question of whether specific items require licenses for specific destinations under the EAR.

Can a company with no exports face OFAC penalties?

Yes. The February 2026 IMG Academy enforcement action confirmed that purely domestic entities face sanctions exposure when their transactions involve designated persons, even indirectly. OFAC's jurisdiction covers all U.S. persons and all transactions touching the U.S. financial system, regardless of whether physical goods cross a border.

OFAC recorded 14 enforcement actions in 2025 and has already added at least 4 more by March 2026. The pace itself is not accelerating: 14 falls between the 12 actions in 2024 and 17 in 2023. What changed is who gets targeted. Professional service providers, fund managers, real estate investors, and a Florida school now sit alongside traditional exporters in the enforcement docket.

Platforms like Lenzo unify these data sources into a single informational surface: counterparty screening, product classification, destination evaluation, and end-use indicators cross-referenced against each shipment. Running each check through a separate vendor with no cross-referencing produces exactly the gaps that enforcement agencies now target.