Sanctions Evasion as a Criminal Offence: What the EU’s New Rules Mean for Romania’s Prosecutors, Businesses, and Defence Counsel
Executive summary
The European Union has moved from administrative fines to criminal law to enforce sanctions. With Directive (EU) 2024/1226 in force, Member States must criminalise core forms of violations and evasion (attempts and aiding/abetting included), set minimum maximum penalties, and ensure corporate liability. Romania has already advanced legislation to transpose the Directive by amending O.U.G. nr. 202/2008, with proposals that escalate penalties (including aggravated forms) and extend jurisdiction to extraterritorial conduct by Romanian persons. These changes intersect with three other tectonic shifts: (i) the EU’s e-Evidence framework (Regulation 2023/1543 / Directive 2023/1544) enabling direct orders to service providers from 18 August 2026; (ii) the EU Anti-Money Laundering Authority (AMLA), seated in Frankfurt and now operational; and (iii) a rapidly expanding sanctions perimeter (oil price cap lowered to USD 47.6, LNG and “shadow fleet” measures, and hundreds of listed tankers). For Romanian operators, counsel, and compliance officers, the practical upshot is clear: sanctions compliance is now a criminal risk—and the evidence to prove (or refute) it will be digital, cross-border, and coordinated at EU level. (EUR-Lex)
1) From “administrative” to criminal: a new EU baseline
Directive (EU) 2024/1226 sets a common floor for what counts as a sanctions crime (e.g., making funds/economic resources available to listed persons, trading in prohibited goods/services, evasion schemes, concealment, misreporting), requires Member States to criminalise attempt for key offences, and mandates aiding/abetting liability. Legal persons face corporate liability alongside natural persons. This harmonisation is intended to cure uneven enforcement that allowed circumvention to thrive across borders. (EUR-Lex)
Romania’s transposition track. The Government announced and forwarded to Parliament a bill to amend O.U.G. nr. 202/2008 so that violations and evasion become crimes (including aggravated forms), with competency anchored at DIICOT for serious conduct. Public statements indicate active extraterritoriality over Romanian nationals/entities and higher penalty brackets. In November 2025, the Senate adopted a version featuring penalties reportedly “up to 12 years” in aggravated scenarios (the bill continues its course). For practitioners, note both the criminalisation and the policy intent: shifting sanctions from a regulatory/foreign-policy perimeter into classic penal enforcement. (AGERPRES)
Why it matters for case theory: once transposed, prosecutors can charge association, attempt, and facilitation chains (e.g., complex re-invoicing or nominee layering to disguise a controlled party). Defence must now scrutinise mens rea standards, “knowledge” via compliance red flags, and the scope of duty for directors and compliance officers. (EUR-Lex)
2) A moving target: the 2024–2025 sanctions perimeter (LNG, price cap, and the ‘shadow fleet’)
LNG & energy logistics. The EU’s 14th package (June 2024) targeted Russian LNG for the first time, banning transshipment/reloading services in EU ports and adding wider anti-circumvention tools. The 15th package (Dec 2024) tightened the screws further, and subsequent 2025 packages escalated enforcement against seaborne circumvention. (Consiliul European)
Oil price cap reduced. In July 2025, the EU lowered the seaborne Russian crude price cap from USD 60 to USD 47.6 per barrel and introduced an automatic adjustment mechanism, with application from early September 2025. This dramatically raises exposure for EU-linked shipping, broking, insurance, trade finance, and inspection services when attestation and due-diligence files are weak. (European Commission)
‘Shadow fleet’ designations. EU listings of high-risk tankers ballooned through 2025. By October 23, 2025 (the 19th package), the Commission reported 557 vessels subject to port access and services bans. Earlier in 2025, the EU had already adopted major waves (e.g., +189 vessels in May; +105 in January/July updates), reflecting a strategy to starve circumvention logistics. These numbers drive real-world consequences: rerouting, higher freight and insurance costs, and increased document scrutiny. (European Commission)
Compliance signal: each new package retrofits red-flag tests (e.g., opaque ownership, flag-hopping, AIS dark activity, ship-to-ship transfers, suspicious pricing far above cap) into expected due-diligence for EU operators. Counsel should treat that Commission guidance as the backbone of “what a reasonable company should have known.” (Finance)
3) Less-known tools you should actually be using
- EU Sanctions Whistleblower Tool. A secure channel to report violations anonymously; it is a key intelligence source for enforcement and a risk vector for companies with disgruntled insiders. (Finance)
- EU Sanctions Map & Consolidated Lists. The public gateway to check measures, competent authorities, and consolidated listings (financial and travel bans). Treat it as your first-line screening dataset. (sanctionsmap.eu)
- Commission FAQs on circumvention & “No re-export to Russia” clause. The 12g contractual clause and the Common High Priority Items (CHPI) list translate battlefield forensics into trade-compliance controls. If your supply chain touches CHPI/“economically critical” items, enhanced due diligence is not optional. (Finance)
4) The evidence will be digital: the e-Evidence regime (binding from August 2026)
From 18 August 2026, prosecutors across the EU can issue European Production Orders (EPOC) and Preservation Orders directly to service providers offering services in the Union, regardless of where data are stored. The Regulation (EU) 2023/1543 applies automatically; the Directive 2023/1544 must be transposed by 18 February 2026 to ensure providers designate a legal representative. This will substantially reshape sanctions cases (KYC files, communications, platform metadata, cloud logs). (EUR-Lex)
Practical angles for Romania:
- Speed & scope. Romanian prosecutors will be able to bypass slow mutual legal assistance for providers covered by the regime; defence should anticipate early preservation and cross-platform correlation. (EUR-Lex)
- Provider readiness. Even SME-size platforms with EU-facing services must build processes to receive and authenticate orders; ignoring this is a litigation risk and a future compliance offence. (EuroISPA)
- Fair-trial safeguards. The regime raises debate on defence access and challenges to scope/necessity; bar associations have already issued implementation guidance. (CCBE)
5) AMLA and the sanctions–AML convergence
The EU Anti-Money Laundering Authority (AMLA) is headquartered in Frankfurt. Its Regulation took effect in 2024; by mid-2025 the authority became operational and started recruiting leadership, with a 400+ staff target. Expect AMLA to coordinate supervisory action over high-risk financial institutions and crypto-asset service providers, and to interact with sanctions enforcement where financial flows indicate price-cap breaches or sanctions evasion. (Reuters)
Romanian overlay (Legea 129/2019). Romania’s AML framework already requires suspicious transaction reports (STRs) to ONPCSB (the FIU), including for sanctions-linked suspicions—an underused line of defence for companies and a key paper trail for prosecutors. Counsel should audit client STR policies, triggers, and screening against the EU consolidated lists. (Portal Legislativ)
6) Case building & asset recovery: Eurojust, Freeze & Seize, and ANABI
Eurojust’s EU Freeze & Seize Task Force has supported Member States since March 2022 in aligning criminal-law enforcement of sanctions (coordination meetings, parallel financial investigations, asset freezes). This is where multi-jurisdictional cases are stitched together; Romanian prosecutors should leverage it early, and defence should anticipate coordinated investigative steps across borders. (Eurojust)
In Romania, ANABI (Legea nr. 318/2015) is the operational pivot for managing, monetising, or re-using seized assets, including accelerated sales of perishable or depreciating goods. For sanctions cases (e.g., immobilised cargo/vehicles), knowing ANABI’s toolkit and timelines is crucial for both prosecution strategy and defence mitigation (value preservation, proportionality). (Portal Legislativ)
7) Ten red flags and pitfalls that now point to criminal exposure
- Non-existent or cosmetic price-cap attestations for maritime trades; mismatch between invoices, charterparty, and B/L timing; or freight/insurance that masks above-cap pricing. (Finance)
- Flag-hopping or shell ownership patterns in tanker chains; AIS gaps; unusual STS transfers near sanctions chokepoints. (Offshore Energy)
- Sales to third countries on the Common High Priority Items list without end-use controls or Article 12g “no re-export to Russia” clauses. (Finance)
- Crypto rails to settle commodity trades; use of mixers or exchanges previously flagged in EU listings. (Consiliul European)
- Interposition of free-zone entities with thin substance (e.g., sudden Dubai/HK/Türkiye intermediaries) and round-trip flows. (Finance)
- False certificates (origin, technical specs) or obviously under-spec’d inspection reports. (Finance)
- Use of Mir/SBP rails or Russian card/payment workarounds after EU prohibitions on EU operator engagement. (Consiliul European)
- Relabelled cargo (e.g., blends intended to disguise Russian origin). (Finance)
- Data retention gaps at platforms/carriers that conveniently erase audit trails shortly after shipments. (EUR-Lex)
- Failure to file STRs where red flags obviously triggered internal alerts (board minutes/compliance emails will exist). (Raportări)
8) Romania-specific compliance checklist (for 2025–2026)
- Sanctions governance. Update board policies to treat sanctions as criminal risk; log decisions on counterparty off-boarding and derogation applications. Map responsibilities to specific executives. (EUR-Lex)
- Contractuals. Embed Article 12g “no-re-export to Russia” and audit legacy contracts; document refusals by counterparties, and re-price risk accordingly. (Finance)
- Screening. Daily sync against the EU consolidated lists; keep a defensible audit log; escalate fuzzy hits (transliteration variants). (Finance)
- CHPI & economically critical goods. If your HS codes appear on the CHPI or “economically critical goods” lists, implement enhanced due diligence (end-use statements, site visits, serial-number tracing). (Finance)
- Price-cap files. For any oil trade touchpoints (insurance, broking, inspection, financing, shipping), maintain full attestation packs and independent pricing validation (e.g., against Urals assessments). (European Commission)
- STR readiness. Refresh triggers and workflows for ONPCSB reporting; validate 24/7 pathways and escalation to legal. (Raportări)
- Digital evidence prep. Service-provider side: designate e-Evidence reps in 2026; law-firm side: build internal playbooks for EPOC responses and defence challenges. (EUR-Lex)
- Asset exposure. If goods/means of transport can be seized, plan for ANABI scenarios (storage, accelerated sale, valuation disputes). (anabi.just.ro)
9) Litigation posture: four arguments we expect to see (and how to meet them)
- Mens rea and “should have known.” Prosecutors will cite Commission red-flag guidance and CHPI notices as evidencing knowledge or wilful blindness. Defence should challenge actual access to guidance at the time of trade, internal training records, and the reasonableness of reliance on third-party attestations. (Finance)
- Extraterritoriality. With Romania’s bill touting active-person jurisdiction, counsel will test lex mitior, legality, and foreseeability for conduct abroad—especially when local law allowed the transaction. Prosecutors will argue EU harmonisation and notice via contractual 12g clauses. (Mediafax)
- Corporate attribution. Expect debates over whether compliance staff or mid-management knowledge binds the company; the Directive’s corporate-liability baseline will be central. (EUR-Lex)
- Digital scope & privacy. Defence will probe the necessity/proportionality of e-Evidence orders; prosecutors will highlight direct-to-provider architecture and urgency to preserve volatile data. (EUR-Lex)
10) Strategic takeaways for Romanian stakeholders
- For businesses: treat sanctions compliance as you would anti-bribery or cartel risk. Build a board-approved sanctions program that cites Commission guidance, uses Article 12g systematically, and maintains price-cap files wherever relevant. (Finance)
- For prosecutors: leverage Eurojust’s Freeze & Seize Task Force and plan e-Evidence preservation early (pre-charge). Map beneficial ownership chains and mirror the Commission’s red-flag typologies in your theory of knowledge/intent. (Eurojust)
- For defence counsel: pressure-test the chronology of guidance, the scope of duties, and the foreseeability of extraterritorial application. Prepare to litigate EPOC scope and seek reciprocal disclosure where digital evidence is one-sided. (CCBE)
Appendix A — Primary texts and official resources
- Directive (EU) 2024/1226 on criminalising sanctions violations (OJ, 24 April 2024). (EUR-Lex)
- Regulation (EU) 2023/1543 and Directive 2023/1544 (e-Evidence) — application from 18 Aug 2026; transposition deadline 18 Feb 2026. (EUR-Lex)
- AMLA Regulation (EU) 2024/1620; seat in Frankfurt (EU and Reuters coverage). (EUR-Lex)
- EU sanctions packages: 14th (LNG/transshipment), 15th, 18th (price cap ↓ to USD 47.6), 19th (557 vessels listed). (Consiliul European)
- Whistleblower tool, Sanctions Map, Consolidated lists (DG FISMA). (Finance)
- Romania: O.U.G. nr. 202/2008 (framework), Government/MAE announcements and Senate developments on criminalisation. (Portal Legislativ)
- ANABI (Legea 318/2015): asset management & accelerated sales. (Portal Legislativ)
- ONPCSB: STR portal and guidance for reporting entities. (Raportări)
Appendix B — A minimalist internal audit plan (90 days)
Days 1–15:
- Map all Russia-exposed transactions since 1 July 2024. Extract counterparties, intermediaries, flags, HS codes, pricing/attestations.
- Re-screen counterparties against updated EU lists; gap-analysis of Article 12g clauses. (Finance)
Days 16–45:
- For any energy trades, compile price-cap evidence packs; run forensic reviews on AIS, STS, and billing sequences. (European Commission)
- Identify CHPI/economically critical goods; enforce enhanced due diligence and embargo routing rules. (Finance)
Days 46–90:
- Update STR triggers and train teams (procurement, logistics, finance, sales) on red flags; perform table-top exercises with legal. (Raportări)
- Draft a response playbook for e-Evidence orders (intake, authentication, preservation, challenge paths). (EUR-Lex)
Closing note
Sanctions enforcement in the EU is no longer a patchwork of administrative expectations. It is criminal law, backed by coordinated asset freezes, a specialised AML authority, direct-to-provider digital evidence, and an ever-expanding sanctions perimeter. For Romania, where transposition is advancing and institutional levers (DIICOT, ANABI, ONPCSB) are in place, preparedness is a differentiator—both to prevent violations and to litigate them effectively. (EUR-Lex)
