EU Sanctions against Syria 2026: what banks and exporters must verify

Key data

Banks, exporters and companies with activity in Syria have an active obligation as of 18 May 2026: to verify that none of their counterparties appear in the updated annex of Implementing Decision (CFSP) 2026/1106. This decision, published in the EU Official Journal on 19 May 2026, updates the list of persons subject to restrictive measures under the Decision 2013/255/CFSP.

This is not a new regulation: it is the periodic mandatory review required by EU law to ensure that sanctions remain proportionate and current. But each update renews the compliance obligation for all affected operators.

What does this regulation establish?

Implementing Decision (CFSP) 2026/1106 amends the annex to Decision 2013/255/CFSP, which is the EU's sanctioning framework against persons responsible for repression in Syria. The measures it applies are of two types:

• Travel ban to the EU: designated persons cannot enter or transit through the territory of the European Union.
• Freezing of financial assets: all funds and economic resources belonging to designated persons that are located in the EU are blocked. No entity or person may make funds available to them.

The periodic review of these lists is a legal obligation under EU law, aimed at ensuring the proportionality and currency of the measures. Each update means that the list of designated persons may have changed: persons added, removed or with modified data.

The full text of the updated annex, with the list of designated persons, is available in the official source on EUR-Lex.

Economic and operational impact

The direct impact of this regulation is not a fixed cost: it is a sanction risk that is activated if a company operates with a designated person or entity without knowing it, or worse, without having verified the updated list.

The concrete operational consequences are:

• Freezing of operations: any financial transaction with a designated person must be blocked immediately. If a bank executes a payment to a person included in the annex, it incurs non-compliance.
• Review of contracts and commercial relationships: exporters with customers, distributors or partners in Syria must check their counterparties against the updated annex.
• Administrative and criminal sanctions: non-compliance may result in sanctions in Spain and in any Member State where the company operates. The sanctioning regime is applied at national level, so the severity varies by country.
• Reputational risk: operating with persons subject to international sanctions can generate significant reputational damage, especially for financial entities.

Who does it affect?

This regulation affects any operator established in the EU that has or may have relationships with persons or entities linked to Syria. Specifically:

• Financial entities: banks, savings banks, payment entities, fund managers and any institution that processes international transactions or manages accounts of persons of Syrian origin.
• Exporters: Spanish companies that sell goods or services to Syria or to intermediaries with Syrian links.
• Importers: operators that receive goods or services originating in Syria or channeled through designated persons.
• Companies with activity related to Syria: any company with contracts, investments, subsidiaries or business partners in Syria or with persons of Syrian nationality who may appear in the annex.
• Advisors and consultants: law firms, consulting firms and advisors that manage international operations for clients with exposure to Syria.

Practical example

A Spanish bank manages accounts for several clients of Syrian origin and regularly processes international transfers to Syria. With the entry into force of Implementing Decision (CFSP) 2026/1106 on 18 May 2026, the bank has the obligation to check the account holders and beneficiaries of those transfers against the updated annex.

If one of those account holders appears on the list of designated persons and the bank has not frozen their assets or stopped the transfers, it incurs non-compliance with EU sanctions. This may result in an administrative sanction proceeding and, depending on the severity, in criminal liability for those responsible for compliance at the entity.

The same principle applies to a machinery exporter that has a distributor in Syria: if that distributor or their legal representative appears in the annex, any shipment or collection related to that commercial relationship is prohibited.

What should companies do now?

1. Access the updated annex of Decision 2026/1106 on EUR-Lex and download the complete list of designated persons. This is the official and binding source.
2. Check the list against the database of customers, suppliers and business partners that have any link to Syria. Include both natural and legal persons.
3. Block any financial operation immediately with persons or entities that appear in the annex, in accordance with the obligation to freeze assets.
4. Review existing contracts with Syrian counterparties or with intermediaries operating in Syria to identify possible conflicts with sanctions.
5. Document the verification process to be able to prove to the authorities that the required due diligence measures have been taken.
6. Establish a procedure for periodic updates, given that the list is reviewed regularly. One-time verification is not enough: each regulatory update renews the obligation.
7. Consult with legal advisors specialized in foreign trade or regulatory compliance if there are doubts about the company's specific exposure or about the applicable sanctions regime in Spain.