Sanctions screening basics for small commercial importers

title: "Sanctions screening basics for small commercial importers" description: "The four big sanctions regimes you must screen against, how to do it without a paid service, the patterns that catch most low-information SME breaches, and what to do if a hit comes back." category: "commercial-importing" estimatedReadMinutes: 7 lastUpdated: "2026-05-16"

International sanctions are a compliance burden that scales down — a one-person Etsy seller can be liable for the same breach as a Fortune 500. This guide is the SME-level version. For higher exposures, work with a sanctions lawyer.

The four regimes that matter

1. US OFAC (Office of Foreign Assets Control). Administers US sanctions. Maintains the SDN List (Specially Designated Nationals + Blocked Persons), the Sectoral Sanctions Identifications List, the Foreign Sanctions Evaders List, and country-based programs (Cuba, Iran, North Korea, Syria, Russia / Belarus). Most relevant for non-US sellers because of secondary sanctions — non-US persons can be hit if they "knowingly facilitate significant transactions" with SDN-listed persons.
2. EU restrictive measures (CFSP). Binding on EU member states + EU-incorporated entities + EU nationals anywhere. Consolidated list at the EU Sanctions Map.
3. UK OFSI (Office of Financial Sanctions Implementation). Post-Brexit autonomous UK regime under SAMLA 2018. Maintains its own consolidated list. Penalties are civil + criminal.
4. UN Security Council. Adopted via Resolutions. Binding on all member states; transposed into national law by each country.

There are also national regimes for Australia, Canada, Japan, Switzerland, and others — usually closely aligned with the four above.

Who you screen

For every cross-border transaction, screen:

• Your buyer — name, address, any DBA / alternate names.
• Your beneficial owner — for companies, the actual humans behind the entity.
• Your payment counterparty — sometimes different from the buyer.
• Vessels / aircraft — if shipping via specific identified transport.
• Banks involved — your bank may have its own list.

What you screen against

• The OFAC SDN List.
• The EU Consolidated List.
• The UK OFSI Consolidated List.
• The UN Sanctions List.
• Where relevant, the country-specific (Australia, Canada, Switzerland) lists.

The free combined-list lookup tools include:

• The US SDN search (sanctionssearch.ofac.treas.gov).
• The EU Sanctions Map (sanctionsmap.eu).
• The UK OFSI consolidated list (gov.uk).
• The OpenSanctions aggregator (open, open-source, combines most lists).

For higher-volume sellers, paid screening services (Refinitiv World-Check, LexisNexis, Dow Jones) cost USD 1,000+ per year.

Pattern matches

Sanctions screening is rarely an exact name match — it's pattern matching against transliteration, AKAs, and aliases. A "Mohammad Hossein" hit could match dozens of SDN entries. The screening engine returns a similarity score; you investigate the higher-score hits.

Common false positives:

• Common names (Smith, Khan, Garcia).
• Companies sharing names with sanctioned entities.
• Cities or place-names sharing names with sanctioned individuals.

Common true positives:

• Buyers shipping to countries with strong informal evasion patterns (parcel forwarders in third countries to evade end-user controls).
• Crypto payments from sanctioned jurisdictions.
• Re-exports through complaint to a sanctioned target country.

When you get a hit

1. Stop the transaction. Do not ship. Do not return funds — returning funds to a sanctioned buyer is itself a sanctions breach.
2. Investigate. Is this a true positive (same person) or false positive (same name, different person)? Cross-check date of birth, place of birth, address.
3. If true positive:
   • For US persons / US-touching transactions, freeze (block) the funds. Do not release without an OFAC licence.
   • For EU / UK persons, freeze likewise.
   • File a Suspicious Activity Report / equivalent.
4. Document everything. Sanctions enforcement looks for evidence of due diligence; a documented screening with stop-action is your best defence.

Patterns that catch SMEs

• Drop-shipping into a sanctioned country. You may never see the buyer's address; the freight forwarder does. Liability is yours.
• Marketplace selling into Russia / Belarus / Iran. Many marketplaces auto-restrict, but third-party listings sometimes slip through.
• Crypto-paid orders from sanctioned addresses. Increasingly common; chain-analysis identifies these post-hoc.
• Forwarder-routed orders. Buyer enters their drop-shipper's address; the goods then move to the actual destination — sometimes a sanctioned one.
• Dual-use goods to non-sanctioned but high-risk destinations. Even if the destination isn't sanctioned, the goods may need an export licence.

Cost-effective compliance

For a small seller:

• Use OpenSanctions for screening (free, open data).
• Maintain a record of every screening, with date, query, result.
• Screen on order, not after dispatch.
• Add sanctions clauses to your terms of sale (right to refuse).
• Pause shipping to high-risk jurisdictions until manually reviewed.

This is significantly cheaper than a sanctions breach.

Useful linked pages

• Sanctions awareness for cross-border sellers.
• Dual-use goods explained. (if available)
• The sanctions regime detail pages on this site.

Not legal advice. For high-value sanctions exposure, work with a licensed sanctions lawyer.