The week brought a concentrated wave of sanctions, export-control and border-data developments, with Iran-related measures prominent across the United States, Canada and the United Kingdom. Regulators also continued to tighten network-based enforcement against organised crime, while customs authorities accelerated the move towards electronic, risk-focused cargo reporting. Several items announced just before or during the reporting week require immediate incorporation into screening and trade-control procedures.
🇺🇸 U.S. Treasury / OFAC — Iranian military-procurement network
Date: 29 September 2026
OFAC designated 10 individuals and entities in several jurisdictions for procuring weapons and weapons components for Iran’s Ministry of Defense and Armed Forces Logistics (MODAFL). The action targeted procurement facilitators and companies in Iran, China/Hong Kong, Pakistan, Saudi Arabia and Türkiye, including networks sourcing electronics and military equipment for Iranian aircraft, UAV and missile programmes. The designations were made under Executive Order 13382.
All property and interests in property of the designated parties in the United States or in the possession or control of U.S. persons are blocked. OFAC’s 50 Percent Rule also applies. The release specifically warns that foreign financial institutions and other non-U.S. persons may face secondary-sanctions exposure for significant dealings with relevant blocked persons.
Compliance impact: Re-screen customers, suppliers, beneficial owners, distributors, freight intermediaries and payment counterparties against the updated SDN List. Do not rely only on the named entity: review ownership, control, aliases, procurement descriptions and routing through Hong Kong, China, Pakistan, Saudi Arabia and Türkiye. Exporters should also reassess whether apparently ordinary electronic components, machine tools or aerospace items could support a restricted Iranian end use or end user under the EAR and other applicable regimes.
🇺🇸 U.S. Treasury / OFAC — Sinaloa Cartel leadership and corruption networks
Date: 29 September 2026
OFAC sanctioned 46 targets—21 individuals and 25 entities—linked to the Sinaloa Cartel’s Los Mayos faction, including cartel leadership, Tijuana and Mexicali plaza operators, money launderers, businesses and allegedly corrupt officials. The action was taken under Executive Orders 14059 and 13224, as amended, and reflects a network-based approach rather than a narrow focus on cartel leadership alone.
The designations affect money exchange, hospitality, transportation, security, real estate, entertainment and fuel businesses. U.S. persons must block property and interests in property, and entities owned 50 percent or more in aggregate by blocked persons are themselves blocked.
Compliance impact: Expand screening beyond the direct customer or vendor to related companies, owners, directors, controlling parties, payment processors and logistics providers. Mexico-related trade, remittances, cash-intensive businesses and cross-border transportation deserve enhanced due diligence. A name match should trigger an ownership-and-control review, not an automatic release based on a different company name or a non-identical transliteration.
🇺🇸 U.S. Treasury / OFAC — consolidated sanctions-penalty rules
Date: 25 September 2026; related conforming rule published 30 September 2026
OFAC created new 31 CFR Part 505, the Sanctions Penalties Regulations, consolidating previously dispersed provisions governing civil and criminal penalties, enforcement procedures, pre-penalty notices, settlements, findings of violation and related information. The subsequent rule removes duplicative provisions from individual sanctions-program regulations and replaces them with cross-references to Part 505.
The codification makes a single penalty framework easier to locate and reinforces documented controls, escalation and voluntary self-disclosure decisions.
Compliance impact: Update sanctions policies, training, compliance checklists and legal references to cite Part 505. Confirm that screening alerts, blocked-property decisions, licence controls, transaction records and investigation files can demonstrate a reasonable, risk-based programme. Revisit incident-response procedures with counsel, especially the timelines and approvals for pre-penalty responses, settlement discussions and voluntary self-disclosures.
Source: OFAC, 31 CFR Part 505 — Sanctions Penalties Regulations; Federal Register, Removing Duplicative Regulatory Provisions Now Contained in 31 CFR 505
🇺🇸 U.S. BIS — Ural Airlines denial order renewed
Date: 29 September 2026
BIS published an order renewing the temporary denial of export privileges for Ural Airlines JSC for one year. The order continues to prohibit the airline and covered persons from participating in transactions involving items subject to the EAR except as authorised by the order or BIS.
Compliance impact: Screen airlines, aircraft operators, maintenance organisations, brokers, lessors and freight forwarders against the Denied Persons List before supplying, servicing, financing or arranging an EAR-controlled transaction. Review aircraft-related services and indirect routing carefully; a transaction can create exposure even where the immediate shipment is not a high-technology item. Update ERP and booking controls for the renewal date and retain evidence of the check.
Source: Federal Register, URAL Airlines JSC — Order Renewing Temporary Denial of Export Privileges (29 September 2026); BIS Denied Persons List
🇬🇧 United Kingdom — Iran sanctions amendments effective
Date: 29 September 2026
The UK’s Iran sanctions and Iran nuclear sanctions amendments entered into force. The UK notice describes new financial, trade and transport restrictions and new schedules covering controlled goods and technology, including energy-related goods and technology and gold-related controls. The changes sit alongside the UK’s wider response to Iran’s nuclear programme and the reapplication of relevant UN measures.
Compliance impact: UK businesses and non-UK businesses using UK persons, UK financial services, UK-origin goods or UK transport links should map the new restrictions to products, services, financing and logistics. Recheck Iranian counterparties and end users against the UK Sanctions List; assess whether contracts, insurance, brokering, technical assistance or transport services are restricted even where no goods are physically exported from the UK. Review licences and general-trade-licence conditions before relying on an exception.
Source: GOV.UK, Notice to Exporters 2026/18: Iran sanctions amendments effective from 29 September 2026
🇨🇦 Canada — Iranian digital-repression apparatus
Date: 22 September 2026; confirmed in the reporting week
Canada amended the Special Economic Measures (Iran) Regulations to list five individuals and five entities involved in gross and systematic human-rights violations, including Iran’s suppression of dissent through digital surveillance, censorship, unlawful violence, arbitrary detention and intimidation. Listed entities include the Iranian Audiovisual Media Regulatory Authority (SATRA), the Working Group for Determining Instances of Criminal Content, Douran Group, Yaftar Pazhohan Pishtaz Rayanesh, and the Seraj Cyberspace Organization.
Compliance impact: Canadian persons and businesses should immediately screen the new names and assess ownership and control. Technology, cloud, telecommunications, cybersecurity, content-moderation, surveillance and digital-services providers should conduct an enhanced end-use review and preserve evidence supporting any refusal or licence decision. Global groups should account for Canadian nexus risks in shared platforms, service delivery, financing and intra-group support.
Source: Global Affairs Canada, Regulations Amending the Special Economic Measures (Iran) Regulations
🇺🇸 U.S. CBP — electronic export manifest truck-cargo test
Date: 23 September 2026; participation announced during the reporting period
CBP announced a voluntary Automated Commercial Environment (ACE) Electronic Export Manifest for Truck Cargo Test. The test evaluates electronic submission of export-manifest data by truck carriers, with the aims of improving cargo security, targeting high-risk shipments and facilitating legitimate trade. CBP is seeking participants before any broader policy decision.
Compliance impact: Truck carriers, exporters, customs brokers and forwarders should evaluate participation and prepare data governance now. Confirm who owns commodity, shipper, consignee, routing, conveyance and export-control data; reconcile manifest data with AES and commercial documents; and test controls for corrections, rejected data and record retention. The pilot can expose master-data weaknesses that will matter if requirements expand.
🇦🇺 Australia — sanctions list refresh and reform consultation
Date: 3 October 2026
Australia’s Department of Foreign Affairs and Trade reported that its Australian Sanctions Consolidated List was updated on 3 October. Separately, consultation on an exposure draft for reforms to Australia’s sanctions legislation remains open until 16 October following an extension. The consolidated list is the government’s screening reference; proposed reforms may affect future licensing and enforcement.
Compliance impact: Refresh Australian sanctions data and document the list version used for each screening decision. Australian-linked groups should review the reform exposure draft, identify potential impacts on licensing and reporting, and submit operational feedback where appropriate. Reconcile it against group-wide sanctions controls.
Source: DFAT, Australian Sanctions Consolidated List; DFAT, Australian Sanctions Legislation Amendment Reforms
🌐 United Nations — consolidated list updated
Date: 28 September 2026
The UN Security Council’s Consolidated Sanctions List was updated on 28 September and supersedes previous versions. The list covers individuals and entities subject to measures under multiple Security Council sanctions regimes. The UN stresses that each listing must be implemented according to the measures applicable under its relevant committee and regime.
Compliance impact: Organisations with global trade, shipping, financial or procurement activity should refresh UN list data and preserve the update timestamp. Match against aliases, original-script names, dates of birth, nationality, addresses and permanent reference numbers where available. A UN match must be assessed against the applicable regime and domestic implementing law rather than treated as a one-size-fits-all prohibition.
Source: UN Security Council, Consolidated Sanctions List
🇺🇸 BIS — Cambodia Country Group status reminder
Effective date: 3 February 2026; implementation point reaffirmed in current EAR guidance
BIS guidance confirms that Cambodia was removed from Country Group D:5 effective 3 February 2026. Although this was not a new change in the 28 September–4 October window, it remains a material compliance clarification for teams still using legacy country-group tables. Country-group status affects licence exceptions, end-use controls and technology-transfer analysis.
Compliance impact: Replace static country tables in screening, quoting and licence-determination tools with current EAR data. Reassess open transactions involving Cambodia where a D:5 assumption may have caused an over-restriction—or where a separate Entity List, end-use, end-user or military/intelligence-related control still applies. Removal from D:5 does not create a blanket authorisation for Cambodia-related exports.
Source: BIS, Country Guidance; BIS, EAR Part 740 — License Exceptions
Key Takeaways
- Refresh OFAC, UK, Canadian, UN and Australian sanctions data immediately, including aliases and ownership information.
- Treat Iran-related trade, technology, finance, transport and digital services as a coordinated multi-jurisdictional risk requiring end-use and end-user review.
- Check all aircraft, aviation-service and logistics counterparties against BIS denial orders, not only conventional customer screening lists.
- Prepare manifest and master-data processes for electronic export reporting, and replace legacy country-group tables with current EAR guidance.
Contact Prime TMS
For automated, real-time screening against the latest sanctions and regulatory data, contact us at mcooper@primetmsglobal.com or try ACCEL — the trade compliance due diligence app: https://accel-ec.com