October 22, 2025 – The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has announced a new package of sanctions against Russia, targeting its two largest energy companies – Rosneft and Lukoil.
The measures aim to increase economic pressure on the Kremlin and restrict its access to revenues that finance military operations in Ukraine.

According to the official statement, the sanctions are a result of “Russia’s lack of serious commitment to a peaceful resolution” and form part of the broader U.S. strategy to achieve an immediate ceasefire and a lasting peace.

Scope of the Sanctions

The sanctions apply not only to Rosneft and Lukoil, but also to dozens of their subsidiaries operating across the oil and gas value chain — from extraction and refining to transport and fuel trading.
OFAC confirmed that any entity owned, directly or indirectly, 50% or more by Rosneft or Lukoil is considered blocked, even if not explicitly listed on the Specially Designated Nationals (SDN) List.

Among the newly designated entities are Lukoil Perm, Lukoil West Siberia, Lukoil Kaliningradmorneft, RN Purneftegaz, RN Tuapse Refinery, Bashneft Dobycha, OJSC Samotlorneftegaz, PJSC Verkhnechonskneftegaz, and others.

Implications for International Business and Financial Institutions

OFAC emphasized that all property and interests in property of the designated entities located in the United States or under the control of U.S. persons are immediately blocked.
U.S. persons – including banks, companies, citizens, and permanent residents – are prohibited from engaging in any transactions with these entities unless specifically authorized by OFAC through a general or specific license.

Practical Implications and Recommendations

Companies, particularly in the energy, transport and logistics, oil trading, banking, fintech, and crypto services (CASP) sectors, should immediately conduct a comprehensive review of their counterparties and business partners.
The new sanctions do not affect only Russian-based entities — secondary and affiliated companies in the EU, Asia, or the Middle East partially owned by Rosneft or Lukoil may also fall within the scope of restrictions.

Recommended Steps:

1. Screen all clients and suppliers against the updated SDN List

• Use automated sanctions-screening systems (e.g., Dow Jones, WorldCheck, Sumsub, ComplyAdvantage) to re-screen all active clients, suppliers, and beneficiaries.
• Conduct targeted re-screening for companies operating in the energy, raw materials transport, and oil tradingsectors.

2. Assess indirect exposure under OFAC’s 50% Ownership Rule

• Under OFAC rules, any company owned 50% or more, directly or indirectly, by one or more sanctioned persons is automatically considered blocked, even if not explicitly listed on the SDN List.

3. Update internal sanctions policies and automated screening systems

• Revise the internal definitions of “sanctioned person” and “related entity” within AML and sanctions compliance procedures.
• Ensure automated KYC/AML monitoring systems can detect indirect ownership or beneficial control links.

4. Strengthen controls for secondary sanctions exposure in USD payments

• All transactions in U.S. dollars, even if processed through European banks, may fall under OFAC jurisdiction if the funds transit through a U.S. financial institution.
• Consider temporarily limiting USD payments to energy-sector counterparties until a full sanctions risk assessment is completed.

Additional Good Practices:

• Temporarily restrict new business relationships with entities that have Russian shareholders or counterparties until ownership structures are fully verified.
• Maintain detailed documentation of all checks, risk decisions, and correspondence — regulators may request evidence of a risk-based approach during audits or inspections.
• Implement ongoing monitoring of existing clients, such as monthly sanctions re-screening and review of corporate ownership changes or risk exposures.

Managing Relationships with Affiliated but Non-Sanctioned Entities

In some cases, financial institutions, CASPs, and other obliged entities may identify clients or counterparties that are affiliated with Rosneft or Lukoil but are not themselves designated.
In such scenarios, immediate termination of relationships may not be required, provided no direct sanctions violation exists. Instead, institutions should adopt a controlled engagement approach under enhanced monitoring:

1. Exclude USD-denominated payments to avoid routing through the U.S. financial system and potential OFAC jurisdiction.
2. Implement continuous transaction monitoring — all incoming and outgoing operations should undergo pre-approval by Compliance/AML officers.
3. Obtain client declarations and documentation on ultimate recipients, source of funds, and confirmation of no links to sanctioned persons.
4. Temporarily restrict high-risk operations, such as large-value transfers or contracts involving high-risk jurisdictions.
5. Periodically review and document the decision to maintain the relationship, demonstrating informed risk assessment and mitigating measures.
6. Notify competent authorities immediately if a transaction potentially linked to a sanctioned entity is identified.

This approach enables risk management rather than automatic de-risking, ensuring the institution remains compliant with international sanctions regimes and national legislation.

Compliance Navi Analysis

The latest OFAC sanctions against Rosneft and Lukoil represent a major geopolitical and financial shift extending far beyond the energy sector. For the first time, two of Russia’s largest energy corporations are placed under a full blocking regime — a move aimed at restricting Moscow’s access to international revenue streams financing its military operations.
This action expands the scope of U.S. sanctions enforcement and sends a clear message: any company or financial institution maintaining direct or indirect business relations with these entities risks breaching U.S. law.

The sanctions have a cascading effect. Under OFAC’s 50% Ownership Rule, any company owned directly or indirectly by Rosneft or Lukoil in the amount of 50% or more is deemed blocked, even if not explicitly named on the SDN List. As a result, numerous subsidiaries, joint ventures, logistics providers, and international oil traders may automatically fall under the sanctions regime.

In practice, this places banks, financial institutions, insurers, payment processors, and CASP operators in a position where the absence of a name on the SDN List no longer guarantees a low-risk profile.
These entities must immediately reassess their client portfolios, counterparties, and ownership/control chains. Banks and fintech companies should initiate a new round of sanctions screening — covering not only direct clients but also related companies whose shareholders or ultimate beneficial owners may hold stakes in Rosneft or Lukoil. This requires deep corporate mapping and verification beyond name screening, including tracing of layered ownership, nominee structures, and trusts.

Particular attention should be paid to transactions in U.S. dollars. Any USD transaction that passes through a U.S. financial institution falls within OFAC’s jurisdiction, even if initiated abroad.
This means that European or other non-U.S. institutions processing USD payments linked, even indirectly, to sanctioned entities could face enforcement risk. Consequently, several institutions are already temporarily suspending USD transactions with energy-sector clients until full sanctions analyses are completed.

The risk of secondary sanctions is equally critical. OFAC may impose penalties on foreign financial institutions (FFIs) that conduct or facilitate “significant transactions” supporting Russia’s military-industrial base. This extends not only to payments involving Rosneft or Lukoil but also to dealings with intermediaries, insurers, or shipping companies servicing these groups. Even indirect participation — such as financing or insuring a cargo where the origin of the oil is unclear — can be treated as a violation.
This underscores the need for a comprehensive supply chain and counterpart analysis, rather than a purely formal KYC process.

In the crypto sector, the implications are particularly sensitive. CASP operators must integrate sanctions screening and blockchain analytics (on-chain analysis) as part of their AML monitoring frameworks. Recent cases have shown Russian-affiliated addresses using stablecoin transfers to circumvent restrictions.
Therefore, CASPs are expected to verify not only their direct clients but also the source of funds and counterpart wallet addresses, and to implement robust freeze and escalation procedures when links to sanctioned entities are suspected.

Beyond technology and procedures, these sanctions emphasize the governance responsibility of senior management. Boards and executives of banks, fintechs, and CASPs must be aware of the heightened risk and endorse temporary control measures — such as enhanced approval layers by the MLRO or Head of Compliance for energy, transport, and commodity-sector clients.
All decisions should be properly documented, as regulators may later require evidence that a risk-based approach was applied and that the institution took reasonable steps to mitigate exposure.

In conclusion, Compliance Navi’s analysis shows that OFAC’s latest measures have transformed sanctions risk into a multidimensional and systemic challenge, affecting not only large energy corporations but also every layer of the financial and non-financial ecosystem.
Organizations that act swiftly — by updating internal policies, re-screening clients, monitoring ownership chains, and controlling currency exposure — will not only reduce their regulatory risk but also demonstrate resilience, maturity, and effective compliance governance.

Conclusion

OFAC’s latest actions make it clear that sanctions risk is no longer confined to banks and multinational corporations. It now has a broad, cross-sectoral impact, affecting everything from commodity distributors and logistics operators to fintech firms and crypto-asset service providers (CASPs).
In this environment, compliance management evolves from a formal obligation into a strategic element of corporate resilience.

A practical approach requires not one-off actions but a dynamic sanctions control framework that includes:

• regular and automated screening of clients, counterparties, and beneficiaries;
• real-time transaction monitoring, with a focus on USD payments;
• in-depth assessment of ownership and control chains, including indirect holdings exceeding 50%;
• and application of temporary restrictions or enhanced controls instead of automatic offboarding where risk can be effectively managed.

Companies that act proactively can not only avoid breaching sanctions regimes but also preserve operational continuity through a documented, risk-based, and transparent compliance approach.

Compliance Navi continues to closely monitor developments in international sanctions regimes and their practical implications for financial and non-financial businesses.
Our team assists institutions by:

• conducting sanctions screening and counterparty risk assessments,
• developing and updating internal sanctions and AML policies, and
• implementing practical control mechanisms that enable continued operations under elevated sanctions risk.