The EU's 21st sanctions package, adopted on 23 July 2026 under Council Regulation (EU) 2026/1848, introduces significant new restrictions in the energy, financial services and crypto-asset sectors targeting Russia. Companies operating across the EU – and those with EU-nexus transactions – now face tighter rules on Russian LNG, digital assets and financial flows, with several deadlines already in force. Understanding the scope of these changes and acting promptly is essential to avoiding enforcement exposure.
Background: From the 20th to the 21st Package
The 21st package did not arrive in isolation. The EU's 20th sanctions package was adopted on 23 April 2026, and introduced, among other measures, a ban on transactions involving the digital rouble and the RUBx instrument, applicable from 24 May 2026. The 21st package, adopted three months later on 23 July 2026, builds on that foundation by targeting the energy and financial architecture that has continued to sustain the Russian economy.
Together, these two packages represent a substantial escalation in the breadth and technical complexity of EU sanctions. Compliance teams that mapped their exposure in April 2026 will need to revisit that analysis in light of the new measures.
Key Changes Under Council Regulation (EU) 2026/1848
Energy: Russian LNG Import Restrictions
One of the most commercially significant measures is the restriction on Russian liquefied natural gas imports. For most contracts, the ban has been in effect since 25 April 2026. However, the regulation carves out a transitional window for long-term contracts concluded before 17 June 2025: counterparties operating under such agreements are permitted to continue performance until 1 January 2027, at which point the prohibition becomes universal.
This distinction is critical for energy traders, utilities and industrial buyers with legacy supply arrangements. The date on which a contract was concluded – and how it is classified – will determine whether an immediate cessation of performance is required or whether the company may rely on the transitional derogation. Contracts novated, extended or materially amended after 17 June 2025 may not qualify for the later deadline, and that question requires careful legal analysis. Our detailed treatment of the contractual implications of the LNG ban is available in the Russian LNG ban and contracts analysis.
Finance: Asset Freeze Extensions and Divestment Derogations
The financial services provisions of the 21st package reinforce and extend existing asset freeze measures. Of particular practical importance is the extension of the divestment derogation: companies seeking to exit Russian operations or assets may still apply for authorisation under this mechanism, which has been extended to 31 December 2026. Beyond that date, no further extension has been announced, and companies that have not completed their divestments will face a materially more constrained legal environment.
Firms that have been working through Russia exit transactions – whether involving subsidiaries, real property, financial participations or contractual rights – should treat the 31 December 2026 deadline as firm. Competent national authorities process these authorisations at varying speeds, and applications submitted late in the year carry the risk of non-completion in time. The practical interaction between the EU derogation framework and national licensing regimes in member states such as Austria is a point that requires jurisdiction-specific advice; our Austria sanctions and trade practice can assist with the specifics of that jurisdiction.
Crypto Assets: Digital Rouble and RUBx Prohibition
The prohibition on transactions involving the digital rouble and the RUBx instrument has been in force since 24 May 2026 under the 20th package. The 21st package extends and embeds the crypto-asset architecture within its broader financial services framework. EU-regulated entities – including crypto-asset service providers subject to MiCA, banks and payment institutions – are now required to screen for these instruments as part of their sanctions compliance programmes.
ESMA and EBA guidance on the interaction between the sanctions framework and MiCA obligations is expected to develop further. In the interim, firms should apply a conservative interpretation: any instrument that may constitute or represent a claim on the digital rouble or RUBx, regardless of how it is labelled or structured, should be treated as presumptively prohibited pending legal analysis.
Who Is Affected
The scope of the 21st package is broad. The following categories of entity face direct compliance obligations:
- Energy companies and traders importing or trading Russian LNG, including intermediaries and vessel operators involved in the supply chain.
- Financial institutions – banks, investment firms, payment service providers, crypto-asset service providers – that maintain correspondent relationships, custody arrangements or transactional flows involving Russian counterparties or Russian-linked instruments.
- Corporates with Russian operations seeking to use the divestment derogation before 31 December 2026.
- Intermediaries and service providers – logistics companies, law firms, consultancies, insurers – who may be caught by circumvention provisions if they facilitate prohibited transactions on behalf of others.
- Non-EU entities with EU nexus, including companies incorporated outside the EU that process EUR-denominated transactions, use EU financial infrastructure or have EU-based subsidiaries or branches.
The circumvention provisions deserve particular attention. EU sanctions law imposes a best-efforts obligation on EU operators to ensure that non-EU subsidiaries and partners do not engage in conduct that, if performed by an EU entity, would constitute a sanctions violation. Enforcement actions in recent years have demonstrated that regulators are willing to pursue EU parent companies for failures in third-country subsidiaries. Firms with operations in jurisdictions known to be used as transit points for sanctions circumvention should review those structures urgently. Our Hong Kong sanctions and trade practice advises on the compliance dimensions of operations in that jurisdiction.
Immediate Actions for International Companies
Given the overlapping effective dates and the complexity of the new measures, we recommend the following priority actions:
- Audit your LNG contracts immediately. Identify the conclusion date of each relevant contract and determine whether it falls within the transitional window for pre-17 June 2025 arrangements. Do not assume that a long-term contract automatically qualifies; the analysis is fact-specific.
- Update your sanctions screening systems. Ensure that the digital rouble, RUBx and any instruments derived from or referencing them are flagged in your transaction monitoring and sanctions screening tools. The 24 May 2026 effective date means this should already be in place; if it is not, remediation is urgent.
- Accelerate Russia exit processes. If your company is using the divestment derogation, map the steps remaining to completion against the 31 December 2026 deadline and identify any procedural bottlenecks with your competent authority. Early engagement with national regulators is advisable.
- Review third-party and correspondent relationships. Apply the best-efforts obligation actively: obtain representations from key counterparties, review due diligence files and consider whether enhanced measures are required for high-risk relationships.
- Consult EUR-Lex and competent authority guidance regularly. The regulatory text is published on EUR-Lex, but interpretive guidance from the European Commission, ESMA and EBA will continue to evolve. Compliance programmes built solely on the text of the regulation may not capture subsequent clarifications.
If your organisation has not yet conducted a structured review of its exposure under the 21st package, now is the time to act. The deadlines in this regulation are fixed, and applications for derogations or authorisations require lead time. We welcome the opportunity to discuss your specific circumstances – please contact us at info@ferrazwhitmore.com or visit our contacts page.
Enforcement Context
The adoption of successive packages at pace reflects a deliberate policy of escalating pressure. Enforcement at the national level – carried out by competent authorities in each EU member state – has intensified in parallel, with several high-profile investigations and asset freeze orders in 2025 and 2026. The Court of Justice of the European Union (CJEU) continues to receive challenges to listing decisions, and its jurisprudence on procedural rights and proportionality remains relevant for any entity considering a delisting application or an annulment action.
Non-compliant firms face not only administrative sanctions and criminal liability under national implementing legislation, but also reputational consequences that can affect access to EU financial markets. The interaction between sanctions violations and anti-money-laundering frameworks under AMLD6 means that a sanctions breach can trigger cascading obligations under a separate regulatory regime.
How Ferraz & Whitmore Can Assist
Our sanctions and trade practice advises international companies, financial institutions and investment funds on the full lifecycle of EU sanctions compliance – from initial exposure mapping and contract review through to engagement with competent authorities and, where necessary, CJEU proceedings. We work across jurisdictions and can coordinate multijurisdictional responses where the 21st package intersects with non-EU sanctions regimes.
For a confidential discussion of how these measures affect your business, please reach out to our team at info@ferrazwhitmore.com or through our contacts page. We are available to assist with urgent triage as well as longer-term compliance programme development.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.