Germany's criminal enforcement of EU sanctions is undergoing a significant shift as the Sanctions Crime Directive reshapes the obligations of companies, compliance officers, and legal advisers operating across the bloc. Businesses with exposure to Russia-related trade, asset freezes, or dual-use export controls face the prospect of criminal liability not only for deliberate evasion but also for negligent circumvention and systemic compliance failures. Understanding the current legal framework, the open interpretive questions it leaves, and Germany's particular enforcement environment is essential for any organisation seeking to manage risk responsibly.
Legal Framework: From EU Regulation to Criminal Liability
EU sanctions against Russia have evolved rapidly through successive Council Regulations, most recently the 20th package adopted on 23 April 2026 and the 21st package adopted on 23 July 2026 (Council Regulation (EU) 2026/1848, covering energy, financial services, and crypto assets). These measures sit on top of a dense pre-existing architecture: Regulation (EU) 833/2014 remains the central instrument, with its annexes designating competent national authorities for Germany and other Member States.
The Sanctions Crime Directive, adopted at the EU level, introduced a harmonised minimum standard for criminalising sanctions violations across Member States. Its core contribution is to move beyond purely administrative enforcement and oblige Member States to treat certain breaches as criminal offences, including violations of asset freeze obligations, circumvention of trade restrictions, and failure to observe best-efforts obligations in the context of indirect exposures. Germany's implementation of the Directive into national law is subject to its own legislative calendar, and the precise thresholds and procedural rules remain, in certain respects, subject to finalisation under national rules.
In the German context, the existing framework under the Außenwirtschaftsgesetz (AWG) and the Außenwirtschaftsverordnung (AWV) already provided criminal and administrative sanctions for export control violations. The Directive layers additional obligations on top of that structure, particularly regarding the criminalisation of circumvention – including the use of intermediary jurisdictions and third-country entities – and the extension of criminal responsibility to legal persons under conditions that German law addresses through its administrative fines regime (Ordnungswidrigkeitengesetz). How the Directive's requirement for effective criminal liability of legal persons interfaces with Germany's traditional reliance on administrative fines remains an open question pending full national implementation.
Recent Package Measures: What Has Changed in Practice
The pace of new restrictions is itself a compliance risk. Three developments from 2026 are particularly material for German businesses.
- Digital rouble and RUBx ban: Transactions involving the digital rouble and the RUBx were prohibited from 24 May 2026 under the 20th package. Businesses with treasury or fintech exposure to Russian payment infrastructure that had not updated their sanctions screening controls by that date face retroactive risk.
- Russian LNG import ban: Most contracts are subject to the LNG import ban from 25 April 2026. Long-term contracts concluded before 17 June 2025 benefit from a transitional period running to 1 January 2027. German energy traders and their legal counsel must map each contract's inception date precisely against these thresholds to determine which regime applies.
- Divestment derogation: The derogation for companies seeking to divest Russian assets or operations has been extended to 31 December 2026. German groups – including GmbH structures with Russian subsidiaries or joint ventures – that are mid-way through a Russia exit process should ensure their transaction documentation is contemporaneous and defensible, as the burden will fall on them to demonstrate that steps taken fell within the authorised window.
The 21st package (Council Regulation (EU) 2026/1848) introduces further restrictions in energy, financial services, and crypto that will require updated due diligence workflows and, where applicable, fresh Handelsregister filings to reflect changes in beneficial ownership or corporate structure resulting from required divestments.
Interpretation Challenges and Open Questions
Several interpretive issues are generating practical uncertainty for German counsel and compliance teams.
The circumvention standard. Both the Directive and successive Council Regulations impose prohibitions on acts that "knowingly and intentionally" circumvent sanctions, but the Directive's minimum harmonisation standard also contemplates criminal liability for serious negligence in certain contexts. What constitutes sufficient due diligence to rebut a circumvention allegation – particularly where a German exporter relies on representations from a non-EU distributor – has not been definitively resolved. The Bundesgerichtshof has addressed questions of intent in AWG prosecutions, but the specific interplay with Directive-compliant standards has yet to be tested in reported jurisprudence at the highest level.
Best-efforts obligations. The concept of a best-efforts obligation, as it appears in the sanctions context, requires companies to take reasonable steps to prevent their subsidiaries and associates outside the EU from violating the restrictions. For a German GmbH with an affiliate in a third country, this raises questions about the degree of operational control required, the documentation needed to demonstrate compliance, and the point at which a parent company's failure to act crosses from administrative risk into criminal territory.
Sanctions screening and the standard of care. Automated sanctions screening tools are necessary but not sufficient. The Directive's criminalisation framework implies that a company cannot simply point to a negative result from a screening provider; it must also address the adequacy of the data inputs, the frequency of updates, and the escalation procedures in place. BaFin has indicated in the financial sector context that supervised entities are expected to maintain robust transaction monitoring aligned with evolving designations – a standard that courts may apply more broadly across non-financial businesses as criminal enforcement intensifies.
Interaction with export controls. EU export controls under the dual-use regime and the various restrictive measures regulations overlap in ways that are not always internally consistent. A German manufacturer applying for an export licence under the AWV may find that the licensing authority's assessment of end-use risk differs from the threshold analysis relevant under the criminal sanctions framework. Managing these two tracks – and documenting the reasoning behind each decision – is essential.
If your organisation is navigating the interpretation of these obligations in a German context, Ferraz & Whitmore can assist in mapping your exposure and structuring a defensible compliance position. Please contact us at info@ferrazwhitmore.com or visit our contacts page to discuss your situation.
Germany's Enforcement Environment
Germany has historically combined a rigorous administrative enforcement culture with selective but serious criminal prosecution of egregious AWG violations. Prosecutors in Frankfurt, Munich, and Hamburg have brought cases involving undisclosed beneficial ownership, false end-user declarations, and re-export through third-country intermediaries. The Directive raises the stakes by requiring Member States to ensure that these offences carry minimum custodial sentence thresholds and that legal persons face effective, proportionate, and dissuasive penalties.
The national competent authority listed in the annexes to Regulation (EU) 833/2014 for Germany plays a central role in administrative authorisations and derogations. Queries addressed to that authority regarding specific transactions or licence requests generate a paper trail that can be both protective – demonstrating good-faith engagement – and evidentially significant in subsequent enforcement proceedings. Companies that have sought guidance and acted on it are in a materially stronger position than those that proceeded without inquiry.
Corporate criminal liability in Germany remains structured differently from common-law jurisdictions. The AWG criminalises acts of natural persons, and administrative fines under the Ordnungswidrigkeitengesetz are the primary tool for imposing financial penalties on legal entities. The Directive's requirement for effective criminal liability of legal persons may prompt legislative amendment to this structure. Until that process is complete, boards and managing directors of German GmbH entities bear personal exposure in a way that must be factored into internal governance arrangements.
The Mahnverfahren – Germany's payment reminder and order-for-payment procedure – is illustrative of a broader point: German civil and administrative law operates through distinct procedural channels, and sanctions enforcement does not neatly map onto any single track. Criminal investigations, administrative licence revocations, civil asset freeze enforcement, and supervisory action by BaFin may proceed in parallel, with different evidentiary standards and different remedies available at each stage.
Cross-Border and Structural Considerations
German businesses with cross-border structures – whether as part of a multinational group or as an independent exporter using non-EU logistics and financial intermediaries – face compounded exposure. The Directive applies to EU-incorporated entities and, in certain respects, to their non-EU affiliates where the parent is subject to EU law. A German company that acquires a non-EU entity after a designation event and fails to conduct adequate sanctions due diligence may find that the acquisition itself constitutes a prohibited transaction.
For groups with Portuguese operations or financing structures, the sanctions framework applies consistently across both jurisdictions as EU law, though national implementation and enforcement priorities differ. Coordinated advice covering both geographies can be important where, for example, a Portuguese holding company has German operating subsidiaries or vice versa. Our team advises on both frameworks and the interaction between them – further information on our work in Portugal is available at ferrazwhitmore.com/services/sanctions-trade/portugal/.
Where cross-border supply chains run through Central Asia or the Caucasus, the risk of inadvertent facilitation of sanctions circumvention through third-country re-export has become a central concern for enforcement authorities. Companies with connections to Kazakhstan or similar jurisdictions should review whether their trade flows meet the standard of care required under the Directive's circumvention provisions. A detailed guide to sanctions compliance considerations in Kazakhstan is available at ferrazwhitmore.com/analytics/guides/sanctions-compliance-guide-kazakhstan/.
Strategic Recommendations
Against this background, the following steps are worth prioritising for any German business with material sanctions exposure.
- Map contractual portfolios against the new thresholds. The distinctions between LNG contracts concluded before and after 17 June 2025, the effective dates for the digital rouble ban, and the divestment derogation deadline of 31 December 2026 each require specific factual analysis. Generic compliance frameworks will not be sufficient.
- Update sanctions screening protocols. Screening must be adapted to cover crypto-asset identifiers, digital currency instruments, and the expanded designation lists introduced by the 20th and 21st packages. Frequency of screening updates should be reviewed against the pace at which the designation lists are changing.
- Document best-efforts compliance. Where a German company has non-EU affiliates, contemporaneous records of the instructions given, the monitoring conducted, and the escalation steps taken in response to red flags are the primary defence against a circumvention allegation.
- Engage the competent authority proactively. Where there is genuine uncertainty about whether a specific transaction falls within a prohibition or a derogation, a formal inquiry to the competent authority is both a legal safeguard and a demonstration of good faith.
- Reassess personal liability exposure at board level. Managing directors and board members of German GmbH entities should ensure that internal governance documents clearly assign sanctions compliance responsibilities and that those individuals have received appropriate briefing on the criminal liability framework.
- Review the divestment timeline. Groups conducting Russia exits under the extended derogation should ensure that each step of the transaction is documented with reference to the derogation conditions and that completion is targeted well in advance of 31 December 2026 to allow for regulatory review if required.
Outlook
The Directive's harmonisation effect will become more pronounced as Member States complete their implementation processes and enforcement authorities develop shared practices. For Germany, the likely trajectory involves closer coordination between the criminal prosecution authorities and BaFin, increased use of dawn raids and document preservation orders in complex export control investigations, and greater pressure on boards to demonstrate personal accountability. The speed of sanctions escalation – illustrated by the rapid succession of packages in 2026 – means that compliance programmes require ongoing maintenance rather than periodic review.
Businesses should also monitor the evolution of EU measures in the energy and financial services domains under the 21st package, where the interaction between sanctions and existing regulatory frameworks (including banking supervision and crypto-asset regulation under MiCA) will generate further interpretive questions over the coming months.
For a full overview of Ferraz & Whitmore's advisory capabilities in German sanctions and trade law, please visit ferrazwhitmore.com/services/sanctions-trade/germany/.
To discuss how the Sanctions Crime Directive affects your business or compliance programme, please write to us at info@ferrazwhitmore.com or use the form on our contacts page. We advise clients across jurisdictions and can coordinate cross-border analysis where your exposure spans more than one EU Member State.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.