Sanctions Evasion Typologies

Sanctions evasion risk arises when ownership, control, parties, goods, services, geography or value flows may be concealed or misrepresented to avoid applicable restrictive measures.

Sanctions regimes differ. The analyst should never infer legal scope from a generic typology page. The applicable jurisdiction, list, ownership/control test, prohibition, licence, exemption and effective date must be verified.

1. Start with the legal and factual perimeter#

A sanctions review should define:

• which jurisdiction or contractual sanctions policy applies;
• which persons, entities, vessels, goods, services or activities may be restricted;
• whether ownership, control or acting-on-behalf rules apply;
• the date on which the relevant measure took effect;
• whether a licence, authorisation or exemption may be relevant;
• which facts are confirmed and which remain assumptions.

A name-screening result alone is not a legal conclusion. Evasion risk often appears through relationships and behaviour rather than a direct exact-name match.

2. Core review dimensions#

3. Observable indicator groups#

Ownership and identity opacity#

• recent transfers of shares, voting rights or management without a clear commercial explanation;
• fragmented holdings or control rights that appear designed to avoid transparency;
• nominee, trust or intermediary layers that obscure the ultimate decision-maker;
• identifiers, addresses or contact details linked to a restricted party despite a different legal name;
• customer reluctance to explain recent ownership or control changes.

Trade and service inconsistency#

• goods, quantities, values, end users or destinations do not align across documents;
• intermediaries have no clear function in the supply chain;
• routing is unusually complex for the goods or service;
• the customer cannot explain the final user, use or delivery location;
• commodity, vessel, logistics or insurance information is incomplete or changes late in the process.

Payment and relationship anomalies#

• an unrelated third party pays or receives funds;
• payment instructions change after screening or compliance questions;
• transaction narrative is generic or inconsistent with the contract;
• value is split across multiple intermediaries without a clear business need;
• new financial institutions, VASPs or jurisdictions appear shortly after a designation or restriction.

Behavioural and timing changes#

• established counterparties are replaced without credible reason;
• transactions accelerate, pause or reroute around a legal event;
• the customer seeks unusual confidentiality or insists that certain parties not be named;
• supporting records are recreated after questions are raised;
• the customer provides technically true fragments that omit the overall relationship.

These indicators require context. International trade, group treasury, restructuring and urgent supply needs can create complexity without evasion.

4. Innocent explanations to test#

Potential legitimate explanations include:

• ordinary corporate restructuring or lender requirements;
• supply-chain disruption, port closure or carrier availability;
• lawful use of distributors, freight forwarders or group payment centres;
• data-quality differences between registries;
• authorised activity under a licence or exemption;
• payment rejection unrelated to sanctions;
• commercial confidentiality supported by full disclosure to the regulated firm.

The test is whether the explanation is documented, coherent and compatible with the applicable legal framework.

5. Evidence map#

A defensible review may use:

• official sanctions lists and legal instruments;
• corporate registries and ownership records;
• director, shareholder and control documentation;
• contracts, invoices, purchase orders and end-user statements;
• transport, customs, vessel, logistics and insurance records;
• bank and payment records;
• communications relevant to authority and purpose;
• reliable adverse information and official enforcement notices;
• internal case links showing recurring parties, addresses or intermediaries.

Source limitations and retrieval time should be recorded. Aggregators assist matching but do not replace official legal sources.

6. Proliferation-financing connection#

PF-related sanctions evasion may involve procurement networks, dual-use goods, intermediaries, opaque end users and cross-border payment arrangements. A reviewer should consider:

• whether the goods or services have a sensitive or dual-use context;
• whether the stated end user and end use are credible;
• whether procurement, shipping and payment parties are consistent;
• whether the transaction involves jurisdictions, entities or networks linked to PF concern;
• whether mandatory targeted-financial-sanctions controls apply.

The analyst should not determine technical export classification without the necessary expertise. Refer goods-control questions to the authorised trade-control or legal function.

7. Decision and escalation matrix#

8. Sanctions-evasion review note#

Applicable jurisdiction / policy:
Legal instrument or list checked:
Subject and identifiers:
Ownership / control findings:
Acting-on-behalf findings:
Goods / services:
Route and geography:
Payment and value path:
Material changes and timing:
Documents reviewed:
Innocent explanation considered:
Unresolved indicators:
Licence / exemption status:
Required legal, sanctions or MLRO decision:

9. Relationship to other pages#

• Sanctions / TFS / CPF explains the core legal-control concepts.
• Sanctions Data Sources explains source selection.
• Beneficial Ownership supports ownership/control review.
• TBML supports trade-document consistency review.
• Crypto / VASP AML covers virtual-asset evidence limits.

Source basis#

• FATF Recommendations relating to targeted financial sanctions and proliferation financing.
• FATF, Complex Proliferation Financing and Sanctions Evasion Schemes (2025).
• Applicable official sanctions authorities and jurisdiction overlays.