The EU's 20th sanctions package, adopted on 23 April 2026, introduced a range of new measures targeting Russia's financial system, digital currency infrastructure and energy trade, with key obligations taking effect from late April and late May 2026. International businesses operating within the EU – or maintaining counterparty relationships with EU-based entities – face tightened restrictions on transactions, expanded export controls and strengthened obligations to prevent circumvention. Understanding what changed, and acting promptly on compliance gaps, is essential to avoiding enforcement exposure.
What Changed and When: Key Measures at a Glance
The 20th package was formally adopted by the Council of the EU on 23 April 2026. It builds on the architecture of prior packages but introduces several operationally significant additions. Two measures have hard dates that businesses should treat as immediate compliance triggers:
- Digital rouble and RUBx transaction ban: As of 24 May 2026, EU operators are prohibited from engaging in transactions involving the digital rouble and the RUBx instrument. This affects payment service providers, banks, crypto-asset service providers and any corporate treasury function with exposure to Russian settlement infrastructure.
- Russian LNG import ban: Imports of Russian liquefied natural gas are prohibited for most contracts from 25 April 2026. A specific carve-out applies to long-term contracts concluded before 17 June 2025: those contracts benefit from a transitional period until 1 January 2027.
- Divestment derogation extension: Companies seeking to exit Russian operations may continue to rely on the divestment derogation, which has been extended to 31 December 2026. Businesses that have not yet initiated or completed a Russia exit should assess whether this window still applies to their transaction structure.
Separately, the 21st package was adopted on 23 July 2026 under Council Regulation (EU) 2026/1848, covering energy, financial services and crypto-asset sectors. While a full alert on the 21st package is forthcoming, businesses reviewing their 20th-package compliance should factor in the cumulative obligations now in force.
If your business has contracts, financing arrangements or supply chains with Russian-linked exposure, our sanctions and trade team can help you map the impact. Contact us at info@ferrazwhitmore.com or visit our contacts page.
Who Is Affected in the EU
The 20th package applies to any EU operator – a concept that encompasses EU-incorporated entities, EU-resident individuals, and non-EU entities conducting business within EU jurisdiction. The following categories face the most direct operational exposure:
- Financial institutions – banks, payment institutions and e-money providers subject to EBA guidance must update their sanctions screening protocols to include digital rouble and RUBx instruments and review correspondent banking and settlement arrangements.
- Crypto-asset service providers (CASPs) – ESMA-supervised and nationally registered CASPs should assess whether any product or service could facilitate access to the digital rouble network or RUBx, including through indirect exposure via third-country intermediaries.
- Energy importers and traders – companies party to Russian LNG import contracts must determine whether their contracts fall within the post-25 April 2026 ban or qualify for the transitional treatment available to pre-17 June 2025 long-term contracts.
- Multinationals with Russian subsidiaries – the divestment derogation extension to 31 December 2026 is relevant, but eligibility is not automatic; specific conditions under the applicable Council regulation apply, and competent national authorities must generally be notified or consulted.
- Export-oriented businesses – tightened export controls and anti-circumvention provisions mean that companies supplying goods or technology to third-country entities risk liability if those goods are subsequently transferred to Russia. The best-efforts obligation requires that exporters take reasonable steps to prevent this.
The European Commission continues to update its FAQ guidance on EUR-Lex. Competent authorities at the member-state level retain primary enforcement responsibility, so the practical application of certain measures remains subject to national rules where harmonised guidance has not yet been issued.
The Circumvention Risk: A Growing Enforcement Priority
Circumvention has become one of the most active areas of EU sanctions enforcement. The 20th package reinforces existing provisions that prohibit EU operators from structuring transactions in a manner designed to achieve outcomes that would otherwise be prohibited. This includes routing payments through third-country intermediaries, using non-EU affiliates to hold assets on behalf of EU-sanctioned persons, or transferring controlled goods via non-EU transit jurisdictions.
The best-efforts obligation – which requires exporters and service providers to take reasonable contractual and due-diligence steps to prevent downstream circumvention – now carries greater weight in the context of enforcement proceedings. Businesses should document their screening processes carefully, as this documentation forms the basis of any compliance defence. The Court of Justice of the EU (CJEU) has continued to develop the interpretation of sanctions obligations, and competent authorities are increasingly referencing case law in enforcement decisions.
For businesses operating across multiple EU member states, including those with significant trade flows through the Netherlands or Italy, coordinating sanctions screening and internal controls across jurisdictions is especially important. Our dedicated country teams can assist with jurisdiction-specific compliance assessments – see our Netherlands sanctions and trade practice and our Italy sanctions and trade practice for further information.
Asset Freeze Obligations: What Remains Unchanged and What Evolved
The asset freeze framework applicable to designated persons and entities remains in force and has been extended to additional listings introduced with the 20th package. EU operators holding funds or economic resources owned or controlled by newly designated parties are required to freeze those assets without delay and report the freeze to their competent national authority in accordance with applicable domestic rules.
Importantly, the definition of economic resources continues to be interpreted broadly by member-state authorities and, in relevant cases, by the CJEU. Intangible assets, contractual rights and digital instruments may fall within scope depending on the circumstances. Businesses should not assume that an asset escapes the freeze obligation simply because it does not take a traditional financial form.
Five Immediate Actions for International Companies
Given the compliance timelines already in effect, the following steps should be prioritised:
- Screen transaction flows for digital rouble and RUBx exposure. The ban has applied since 24 May 2026. Any outstanding exposure should be escalated to compliance and legal immediately, with documented remediation steps.
- Audit LNG import contracts. Determine whether existing contracts fall within the general ban (in effect from 25 April 2026) or qualify for the transitional long-term contract carve-out (deadline: 1 January 2027). Legal certainty on this point is essential before the transitional window closes.
- Review the divestment derogation if a Russia exit is pending. The extension to 31 December 2026 provides a window, but the procedural conditions attached to the derogation must be satisfied. Engage competent national authorities early.
- Update sanctions screening lists and procedures. Incorporate new designations from the 20th package and, where the 21st package (Council Regulation (EU) 2026/1848) is now in effect for your sector, update for those as well. Cross-reference EUR-Lex consolidated lists regularly.
- Strengthen third-party and supply-chain due diligence. Review contractual no-re-export clauses and best-efforts representations in supplier and distributor agreements, particularly for goods and technology with dual-use potential.
For a more detailed walkthrough of compliance architecture across the EU sanctions framework, our EU Sanctions Compliance Guide sets out the core obligations, procedural steps and documentation standards relevant to in-house and external compliance teams.
Next Steps
The pace of EU sanctions legislation has accelerated significantly since early 2026, and the interplay between successive packages creates a complex compliance environment that requires continuous monitoring. Businesses that have not conducted a structured gap analysis against the 20th package – and now the 21st – should treat this as a matter of urgency, particularly given the active enforcement posture of national competent authorities across EU member states.
Ferraz & Whitmore advises on EU sanctions compliance, trade controls and regulatory risk across multiple jurisdictions. If you have questions about how the 20th or 21st package affects your operations, your contracts or your compliance programme, please reach out to our team at info@ferrazwhitmore.com or through our contacts page.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.