EU's 20th Sanctions Package Against Russia — What Changes for Your Business (April 2026)

On 23 April 2026, the EU Council adopted the 20th sanctions package against Russia — the latest in a series that began on 23 February 2022.¹² If you run a travel agency, an online shop, an estate agency, a leasing company, an insurance business or a telecoms operator, this article tells you plainly: what the new package contains, exactly who it affects, and what you should do in the coming weeks.

Three features set the 20th package apart from its predecessors: for the first time a formal anti-circumvention mechanism has been activated, the list of entities in the energy sector has been expanded, and further vessels have been added to the growing shadow-fleet list — now totalling 632 ships.¹³ If any of your counterparties provides maritime transport, insurance or trade-brokerage services involving Russian entities, there is a strong chance the new package demands your attention right now.

Legal status as of: 2026-05-20.

TL;DR — the five key points

• Date: the EU’s 20th sanctions package against Russia was published on 23 April 2026.¹²
• Anti-circumvention: for the first time, a formal tool has been activated allowing sanctions to be imposed on third-country entities that actively help Russia circumvent EU prohibitions.¹
• Energy sector: 36 new listings of entities in the Russian energy sector — covering both upstream (extraction) and downstream (distribution).¹
• Shadow fleet: 46 additional vessels and one significant maritime insurer — bringing the total to 632 ships on the EU list.¹³
• Penalty in Poland: breaching the asset-freeze obligations under the Regulation 269/2014 list carries a financial penalty of up to PLN 20,000,000, imposed by the Head of the National Revenue Administration (KAS) (Art. 6(2) of the Act of 13 April 2022).⁴

What the 20th package is and when it entered into force

The European Union has now adopted 20 packages of sanctions against Russia since the start of the full-scale invasion in 2022.² None of them constitutes a single legislative act — each is a set of amendments to two base regulations: Council Regulation (EU) No 269/2014 of 17 March 2014 (lists of natural persons and entities subject to asset freezes)⁵ and Council Regulation (EU) No 833/2014 of 31 July 2014 (sectoral and trade prohibitions).⁶ Each package may also be accompanied by implementing regulations, Council Decisions under the Common Foreign and Security Policy, and guidance communications from DG FISMA (the Directorate-General for Financial Stability, Financial Services and Capital Markets Union).⁷

The 20th sanctions package was adopted and published in the Official Journal of the EU on 23 April 2026.¹ The Commission described it as a package with a strong anti-circumvention character and “robust energy measures”.¹ It enters into force under the standard procedure — as a rule, the day after publication, unless specific provisions contain their own dates or transitional periods. The exact number of the amending regulation can be found, after the publication date, on EUR-Lex or on the DG FISMA website.

If you want to understand what sanctions packages are and how the two base regulations work, read the overview of all 20 EU sanctions packages against Russia first — that article explains the mechanism from the ground up, together with a full chronology in a single table.

What the 20th package actually changes

1. First activation of the anti-circumvention tool

This is the most significant systemic novelty of the 20th package. The EU has had an anti-circumvention mechanism (the “No re-export to Russia” clause in Art. 12g of Regulation No 833/2014) since the 11th package in June 2023.⁸⁹ However, the tool that allows sanctions to be imposed formally and directly on third-country entities actively helping Russia circumvent EU prohibitions was activated for the very first time in the 20th package.¹

In practice, this means: previously, the EU could require exporters in Member States to insert a no-re-export-to-Russia clause in their contracts with partners in Kazakhstan, Turkey or Armenia. Now it can add those intermediaries directly to the list of sanctioned entities — including the possibility of freezing their assets in the EU and prohibiting transactions with them. For your business, this means the list of entities to check before every transaction may grow faster than before, because it will now cover not only Russian companies but also their foreign intermediaries.

2. 36 energy-sector listings

The 20th package added 36 new listings of entities in the Russian energy sector — from both the upstream segment (extraction of raw materials) and downstream (refining, distribution, sales).¹ This means companies with any point of contact with the Russian energy industry — for example through trade intermediaries, logistics services or reinsurance agreements — must re-screen their counterparty portfolios.

For sectors such as industrial-equipment leasing, insurance and wholesale trade, where a counterparty may turn out to be a subsidiary or agent of a Russian energy company, this element of the 20th package is particularly important. The verification obligation applies to everyone who enters into transactions with entities that may be linked to the newly listed parties.

3. Shadow fleet — 632 vessels in total

The 20th package added 46 further vessels belonging to the so-called shadow fleet and imposed sanctions on one significant maritime insurer.³ After this expansion, a total of 632 vessels appear on the EU list.¹³ The shadow fleet consists of tankers operating outside the Western insurance and financial infrastructure, used to circumvent the oil price cap.

The prohibition applies to everyone: these vessels cannot be insured, financed, reflagged or allowed to call at EU ports. For Polish insurance brokers, P&I agents and logistics companies, verifying every maritime vessel (by IMO number, flag, owner, operator and charterer) before issuing a policy or accepting cargo is an obligation arising directly from the cumulative effect of packages 15 to 20.^10111213141

Which Polish businesses are affected by the 20th package

Travel agencies and OTAs

The 20th package introduces no direct prohibitions on the sale of travel products as such, but it expands the list of entities in the energy sector — which may include hotel owners, airlines or transport companies linked to the Russian energy sector. Your travel agency or OTA platform is required to screen counterparties and partners against sanction lists, including the Regulation 269/2014 list and the Polish MSWiA (Ministry of Interior and Administration) list, for every new commercial agreement.⁵¹⁵¹⁶ The new entries in the 20th package mean you must re-screen active business relationships.

Estate agencies

If you run an estate agency, you are required to verify buyers, sellers and — importantly — the ultimate beneficial owners (UBOs) of companies that are parties to a transaction. The 20th package, by expanding the list of energy-related individuals and entities, may now cover new beneficial owners of holding companies active in the property sector. An agent who completes a transaction on behalf of a person appearing on the list faces administrative and potentially criminal liability — regardless of whether they were aware of that person’s identity, if they failed to carry out proper verification.

Insurance (brokers, agents, reinsurance)

The insurance sector is currently under a double pressure: the shadow-fleet list has passed 600 vessels¹³, and the 20th package has for the first time imposed sanctions on a significant maritime insurer.³ For insurers and brokers, this creates a concrete obligation: verifying every vessel (IMO number, flag, owner, operator, charterer) before insuring or reinsuring a cargo. Sanctions exclusion clauses are now market standard, but having them in place is not enough — you must document that you are actually checking every vessel.

Leasing

For leasing companies, two elements are critical: the prohibition on financing and supplying goods subject to the export ban (dual-use items, luxury goods, CN codes listed in the annexes to Regulation 833/2014¹⁷), and the new entity listings covering parties that may be lessees or guarantors linked to the Russian energy sector. The ultimate beneficial owner must be verified before every new leasing agreement.

E-commerce

Online shops and marketplaces must pay attention to two obligations: the prohibition on shipping goods subject to the export ban (search for your CN code in the annexes to Regulation 833/2014¹⁷), and the “No re-export to Russia” clause in Art. 12g of Regulation 833/2014⁹. If you sell to a counterparty in Kazakhstan, Turkey or another third country, and the goods appear on the list covered by that obligation, you must have a written clause in the contract. The absence of that clause constitutes a sanctions breach — even if your company has never shipped anything directly to Russia.

Telecoms and ISPs

Telecommunications operators and internet service providers are required, among other things, to block the transmission of certain Russian state media within the EU (Art. 2f of Regulation 833/2014)¹⁸, and to screen counterparties and equipment suppliers against sanction lists. The 20th package, by expanding the entity list, requires a fresh review of active service contracts and supply chains.

What to do after the 20th package — a 4-step checklist

You can carry out the following steps yourself. They are not complicated — they mainly require consistency and documentation.

Step 1. Download the current text of the package from the DG FISMA website

Go to the European Commission’s Russia-sanctions page (DG FISMA)² or search EUR-Lex by the date 23 April 2026. Download the text of the amending regulation. Focus on the list of new entities (the annex to Regulation 269/2014) and the new CN codes and sectoral provisions (Regulation 833/2014).

Step 2. Check the new list entries against your counterparties

Compare the list of 36 new energy-sector listings and 46 new vessels against your database of counterparties, suppliers and business partners. The minimum lists to screen against are: Regulation 269/2014⁵, and optionally Regulation 765/2006 (Belarus)¹⁹ and the Polish MSWiA list.¹⁵¹⁶ If you work with partners from the United States or the United Kingdom, check OFAC and OFSI as well.²⁰²¹

Step 3. Update your internal hits register

Record the date of the check, the package number (20th package, 23.04.2026), the list of screened counterparties and the result (CLEAR / POSSIBLE / MATCH). The hits register is a document you must be able to produce during an inspection — by the Head of KAS (National Revenue Administration), MSWiA or another authority.²² If you do not yet have a register, start with a simple spreadsheet containing these columns.

Step 4. If you find a hit — stop the transaction and seek legal advice

Do not proceed with the transaction on your own if the counterparty or a related entity appears on a sanctions list. Your options are: suspending the payment, applying for a national derogation (individual licence), executing a wind-down within any applicable transitional period, or reporting an asset freeze to MSWiA.¹⁵ Document the decision — by e-mail, minutes of meeting, or board resolution. A lack of documentation is just as risky as a lack of screening.

Penalties for ignoring the new package

The obligation to comply with EU sanctions rests with every company and individual in Poland — regardless of sector and size. It makes no difference whether you are a bank, a travel agency or a sole trader.

In Poland, breaching the obligation to freeze funds or the prohibition on making funds available to persons on the 269/2014 and 765/2006 lists carries a financial penalty of up to PLN 20,000,000. This is imposed by the Head of the National Revenue Administration (Szef Krajowej Administracji Skarbowej — KAS) by way of an administrative decision (Art. 6(2) of the Act of 13 April 2022 on special measures to counter support for aggression against Ukraine and to protect national security, Journal of Laws 2022, item 835).⁴

Separate penalties are provided for other breaches of that Act:

• up to PLN 20,000,000 — for allowing a listed person or entity to participate in a public-procurement procedure; imposed by the President of the Public Procurement Office (Prezes Urzędu Zamówień Publicznych — UZP) (Art. 7(7) of the Act).²³
• up to PLN 20,000,000 — for breaching the ban on importing Russian or Belarusian coal (CN codes 2701 and 2704); imposed by the Head of KAS (Art. 12(2) of the Act).²⁴

Beyond financial penalties — since 2024 the transposition of Directive (EU) 2024/1226 of the European Parliament and of the Council of 24 April 2024 on the definition of criminal offences and penalties for the violation of Union restrictive measures has been under way.²⁵ The Directive requires Member States to introduce criminal liability for sanctions breaches. In Poland, the implementing bill (reference UC92) is in progress.²⁵ For a detailed discussion of what the Directive changes for company management and owners, see the article Directive 2024/1226 — Criminalisation of EU Sanctions Breaches.

For more on penalties for sanctions breaches in Poland: What penalties apply for breaching sanctions in Poland and the EU.

FAQ

How does the 20th package differ from previous ones?

The 20th package stands out primarily by activating the formal anti-circumvention tool — for the first time, the EU can directly impose sanctions on third-country entities that help Russia circumvent its prohibitions.¹ Previously (since the 11th package in 2023), there was a “No re-export to Russia” clause⁸, but it did not allow a Kazakh or Turkish intermediary to be placed on the list of sanctioned entities. The EU now has that tool and has used it for the first time.

Does the 20th package affect my business if I don’t trade with Russia?

Yes — if you have counterparties or partners who may be linked to the newly listed entities. Sanctions operate through chains: if your logistics service provider operates through a company affiliated with an entity on the 269/2014 list, you may breach the sanctions even if you have no direct relationship with Russia whatsoever. The verification obligation falls on you, not on your counterparty.⁵⁴

What is anti-circumvention and why does it matter for my business?

Anti-circumvention refers to the mechanism targeting intermediaries that help Russia bypass Western prohibitions — companies registered in Kazakhstan, Turkey, the UAE or Armenia that process or re-export goods subject to the ban. Previously, the “No re-export to Russia” clause under Art. 12g of Regulation 833/2014⁹ required you to insert a re-export prohibition in your contracts; now those intermediate entities can be placed directly on the list. For your business, this means an expansion of the circle of entities you must screen.

How many vessels are currently on the shadow-fleet list?

After the 20th package (23 April 2026), the EU list contains a total of 632 shadow-fleet vessels.¹³ For comparison: the 15th package (December 2024) listed 79¹⁰, the 16th — 153¹¹, the 17th — 342¹², the 18th — 444¹³, and the 19th — 557.¹⁴ This is the fastest-growing list in the entire history of EU sanctions against Russia.

Must a travel agency respond to every new sanctions package?

Yes — and immediately upon publication, with no transitional period for the entity list. Every new entry on the 269/2014 list creates an obligation to check whether your active counterparties, tour operators or business partners are among the newly listed entities.⁵ The prohibition takes effect at the moment of publication in the Official Journal of the EU — there is no grace period for SMEs. For more on obligations in the travel sector: sanction screening for travel agencies and OTAs.

Where can I find the full text of the 20th package?

The full text of the regulations forming the 20th package is available on the DG FISMA website² (link to the Official Journal of the EU of 23 April 2026) or directly on EUR-Lex by searching by publication date. DG FISMA also maintains a page with a chronology of all 20 packages and direct links to each of them.

How Sanqto can help

Sanqto is sanction-screening software installed on-premise — within your company’s own network, so your counterparty data never leaves your infrastructure. The system returns one of three results: MATCH, POSSIBLE or CLEAR — rather than a binary green and red light, the third state (POSSIBLE) gives the compliance officer decision space for ambiguous hits. Declared response time is sub-30 ms under typical conditions, so counterparty verification does not block the sales or booking process. The system automatically fetches up-to-date lists from DG FISMA, the Polish MSWiA list and other registers — you do not need to monitor the Official Journal of the EU after every new package. The software comes with a set of implementation documents (sanctions policy, job-level procedure, hits register, risk assessment) ready for any potential inspection. Find out whether your business has an obligation to conduct sanction screening.

Legal basis

The following acts are confirmed in sources.json as verified:

• Council Regulation (EU) No 269/2014 of 17 March 2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine — EUR-Lex CELEX:32014R0269
• Council Regulation (EU) No 833/2014 of 31 July 2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine — EUR-Lex CELEX:32014R0833
• Council Decision 2014/512/CFSP — accompanying act to Regulation 833/2014; DG FISMA
• Council Regulation (EC) No 765/2006 of 18 May 2006 concerning restrictive measures directed against President Alexander Lukashenko and certain officials of Belarus — CELEX 32006R0765
• Directive (EU) 2024/1226 of the European Parliament and of the Council of 24 April 2024 on the definition of criminal offences and penalties for the violation of Union restrictive measures — EUR-Lex CELEX:32024L1226
• Act of 13 April 2022 on special measures to counter support for aggression against Ukraine and to protect national security (Journal of Laws 2022, item 835) — ISAP
• Act of 1 March 2018 on countering money laundering and terrorist financing — contextually (obliged institutions are subject to GIIF — General Inspector of Financial Information)
• 20th sanctions package — chronology and links: DG FISMA
• 20th sanctions package — DG FISMA press release of 23 April 2026: DG FISMA news
• Polish sanctions list maintained by MSWiA (Ministry of Interior and Administration): gov.pl/web/mswia
• EU Sanctions Map — interactive map of EU sanctions regimes: sanctionsmap.eu
• OFAC — Office of Foreign Assets Control, U.S. Department of the Treasury — Ukraine-/Russia-related Sanctions: ofac.treasury.gov
• OFSI — Office of Financial Sanctions Implementation (UK): gov.uk/ofsi

Footnotes

Information, not legal advice. This article is for informational and educational purposes only. It does not constitute legal advice. Legal status as of: 20 May 2026. Your company’s specific obligations depend on the nature of your business, the CN codes of your goods, your counterparties, and require individual assessment — if in doubt, consult a lawyer or compliance adviser.