Key Takeaways
- • UK frozen assets surged 52% year-over-year from £24.4 billion (2023/2024) to £37 billion (2024/2025), reflecting intensified sanctions enforcement across financial institutions and reflecting broader geopolitical tensions targeting Russian shadow fleet and military supply chains.
- • The FCA and OFSI renewed their Memorandum of Understanding on 5 June 2026 (with a companion MoU between FCA and newly created OTSI on 28 May 2026), establishing dual regulatory scrutiny and seamless information sharing for suspected sanctions breaches, investigations, and enforcement actions—significantly raising compliance risk for supervised firms.
- • OFSI enforcement activity accelerated dramatically, with 57 actions in 2024/2025 versus nine in 2022/2023; 240 active cases (151 proactively identified); and 11 monetary penalties totalling £2.6 million between September 2024 and May 2026, culminating in the Sabre Global Technologies fine of over £1 million—the largest since Russia's Ukraine invasion—for sanctions evasion.
- • The FCA's multi-year review of 150+ supervised firms identified systemic control gaps: inadequate beneficial ownership screening, weak third-party oversight, outdated sanctions lists, poor frozen asset management, and failure to address sectoral sanctions beyond asset freezes—creating enforcement vulnerability across the sector.
- • OFSI doubled its statutory maximum penalty framework from £1 million or 50% of breach value to £2 million or 100% of breach value (effective February 2026), materially raising financial exposure and signalling an aggressive enforcement posture targeting sanctions evasion, screening failures, and systemic control weaknesses.
Summary
The UK's regulatory framework for sanctions compliance has entered a significantly more intensive enforcement phase, marked by the 5 June 2026 renewal of the Memorandum of Understanding between the Financial Conduct Authority (FCA) and HM Treasury's Office of Financial Sanctions Implementation (OFSI). The MoU, coupled with a companion agreement between the FCA and the newly established Office of Trade Sanctions Implementation (OTSI) dated 28 May 2026, formalizes enhanced information-sharing protocols on suspected or actual sanctions breaches, weaknesses in firms' systems and controls, and cases warranting joint investigation. Both agencies retain broad powers to deploy shared intelligence for investigations, enforcement action, and supervision—creating a coordinated enforcement apparatus that substantially elevates compliance risk for FCA-supervised institutions.
The regulatory environment reflects material escalation in sanctions activity and enforcement velocity. Frozen assets in the United Kingdom increased 52% year-over-year from £24.4 billion in 2023/2024 to £37 billion in 2024/2025. In June 2026, the UK announced 70 new sanctions at the G7 summit targeting Russian shadow fleet operations, military supply chains, and finance networks. OFSI's enforcement record demonstrates a sharp institutional pivot toward proactive investigation and prosecution: the agency conducted 57 enforcement actions in 2024/2025 compared with nine in 2022/2023, a more than sixfold increase. As of April 2025, OFSI maintained 240 active cases under investigation, of which 151 (63%) were identified proactively through intelligence rather than self-reports—signalling OFSI's reduced dependence on voluntary disclosure and willingness to initiate independent investigations. Between September 2024 and May 2026, OFSI issued 11 monetary penalties totalling £2.6 million. Most significantly, on 17 June 2026, OFSI fined Sabre Global Technologies Limited over £1 million—the largest penalty since the Russian invasion of Ukraine in 2022 and the first OFSI penalty specifically for sanctions evasion. Concurrent with this shift, OFSI introduced an updated enforcement framework in February 2026 that doubled the statutory maximum penalty from £1 million or 50% of breach value to £2 million or 100% of breach value, substantially heightening financial exposure for violations.
The FCA's comprehensive report, released 28 May 2026, examined sanctions systems and controls across more than 150 supervised firms between 2022 and 2026, identifying pervasive control deficiencies that explain the enforcement spike. The FCA documented systematic weaknesses in beneficial ownership and upstream ownership identification—particularly in multilayered corporate structures—inadequate enhanced due diligence for high-risk customers and politically exposed persons (PEPs), and failure to embed screening systems into operational workflows. Firms delegated sanctions screening to third-party providers without maintaining adequate governance, testing, or oversight arrangements. Critical gaps included outdated sanctions lists, failure to flag variant spellings or minor name similarities, and screening frameworks that did not address the full spectrum of UK sanctions measures beyond asset freezes—including sectoral sanctions, investment bans, and maritime service restrictions. The FCA Report identified poor management of frozen assets, with firms failing to maintain continuous freeze status and customers failing to satisfy licensing requirements. Group-wide sanctions policies lacked adequate information sharing between overseas branches and parent entities. The FCA's findings directly align with OFSI's enforcement trajectory: the Sabre penalty reinforced the FCA's emphasis that firms must maintain updated policies, competent senior oversight, robust testing of screening systems, and clear escalation protocols for sanctions red flags such as blocked payments or third-party notifications of concern.
For institutional market participants, the renewed MoU and intensified enforcement landscape present material compliance and operational risk. Firms cannot outsource sanctions compliance responsibility to third-party screening providers; all governance, oversight, and liability remain with the regulated entity. Customer and transaction due diligence frameworks must incorporate sanctions-specific interrogation, with enhanced review frequency for high-risk counterparties and complex corporate structures. Screening systems must employ fuzzy matching logic capable of identifying beneficial owners beyond direct name matches and must encompass the entirety of UK sanctions measures. Periodic testing and quality assurance of alert investigations, with clearly defined escalation policies, are now expected practice. Firms operating within international groups must ensure UK-specific requirements are embedded across all global entities with formal training, clear mapping of escalation and reporting processes, and explicit attention to sanctions evasion risks, including attempts to manipulate payment channels. The doubling of OFSI's penalty ceiling, combined with FCA enforcement authority to impose fines and operational restrictions even absent actual breach (as demonstrated in the £29 million Starling Bank fine in October 2024), creates a dual enforcement risk environment requiring heightened operational discipline and documented compliance governance.
The regulatory environment reflects material escalation in sanctions activity and enforcement velocity. Frozen assets in the United Kingdom increased 52% year-over-year from £24.4 billion in 2023/2024 to £37 billion in 2024/2025. In June 2026, the UK announced 70 new sanctions at the G7 summit targeting Russian shadow fleet operations, military supply chains, and finance networks. OFSI's enforcement record demonstrates a sharp institutional pivot toward proactive investigation and prosecution: the agency conducted 57 enforcement actions in 2024/2025 compared with nine in 2022/2023, a more than sixfold increase. As of April 2025, OFSI maintained 240 active cases under investigation, of which 151 (63%) were identified proactively through intelligence rather than self-reports—signalling OFSI's reduced dependence on voluntary disclosure and willingness to initiate independent investigations. Between September 2024 and May 2026, OFSI issued 11 monetary penalties totalling £2.6 million. Most significantly, on 17 June 2026, OFSI fined Sabre Global Technologies Limited over £1 million—the largest penalty since the Russian invasion of Ukraine in 2022 and the first OFSI penalty specifically for sanctions evasion. Concurrent with this shift, OFSI introduced an updated enforcement framework in February 2026 that doubled the statutory maximum penalty from £1 million or 50% of breach value to £2 million or 100% of breach value, substantially heightening financial exposure for violations.
The FCA's comprehensive report, released 28 May 2026, examined sanctions systems and controls across more than 150 supervised firms between 2022 and 2026, identifying pervasive control deficiencies that explain the enforcement spike. The FCA documented systematic weaknesses in beneficial ownership and upstream ownership identification—particularly in multilayered corporate structures—inadequate enhanced due diligence for high-risk customers and politically exposed persons (PEPs), and failure to embed screening systems into operational workflows. Firms delegated sanctions screening to third-party providers without maintaining adequate governance, testing, or oversight arrangements. Critical gaps included outdated sanctions lists, failure to flag variant spellings or minor name similarities, and screening frameworks that did not address the full spectrum of UK sanctions measures beyond asset freezes—including sectoral sanctions, investment bans, and maritime service restrictions. The FCA Report identified poor management of frozen assets, with firms failing to maintain continuous freeze status and customers failing to satisfy licensing requirements. Group-wide sanctions policies lacked adequate information sharing between overseas branches and parent entities. The FCA's findings directly align with OFSI's enforcement trajectory: the Sabre penalty reinforced the FCA's emphasis that firms must maintain updated policies, competent senior oversight, robust testing of screening systems, and clear escalation protocols for sanctions red flags such as blocked payments or third-party notifications of concern.
For institutional market participants, the renewed MoU and intensified enforcement landscape present material compliance and operational risk. Firms cannot outsource sanctions compliance responsibility to third-party screening providers; all governance, oversight, and liability remain with the regulated entity. Customer and transaction due diligence frameworks must incorporate sanctions-specific interrogation, with enhanced review frequency for high-risk counterparties and complex corporate structures. Screening systems must employ fuzzy matching logic capable of identifying beneficial owners beyond direct name matches and must encompass the entirety of UK sanctions measures. Periodic testing and quality assurance of alert investigations, with clearly defined escalation policies, are now expected practice. Firms operating within international groups must ensure UK-specific requirements are embedded across all global entities with formal training, clear mapping of escalation and reporting processes, and explicit attention to sanctions evasion risks, including attempts to manipulate payment channels. The doubling of OFSI's penalty ceiling, combined with FCA enforcement authority to impose fines and operational restrictions even absent actual breach (as demonstrated in the £29 million Starling Bank fine in October 2024), creates a dual enforcement risk environment requiring heightened operational discipline and documented compliance governance.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.