A compliance shock looks the same for everyone: a letter giving thirty days' notice of account closure, a transfer stuck behind a document request, an administrator declining to renew a company. None of these events involves a sanctions listing — they happen to people and companies no regulator has ever designated. The resilience of a structure is measured by how many such events it absorbs without halting ordinary trade.
The problem belongs to non-designated persons with a Russian nexus: Russian nationals and residents, owners of businesses whose capital originated in Russia, families holding assets across several jurisdictions. The premise throughout is lawful, fully declared operations and complete disclosure of the beneficial owner to banks and regulators. How this connects to the other sanctions topics is laid out in the sanctions cluster map.
Concept
Sanctions resilience is an engineering property of a configuration: the ability to keep banking access, treaty mechanics and substance working while external conditions deteriorate. The achievable goal is keeping ordinary lawful operations bankable. The unachievable goal is removing assets from the reach of the law that applies to them.
Circumventing sanctions is a criminal offence in its own right in the EU, the US and the UK, and it has nothing to do with resilience. Concealing a beneficial owner from a bank or a regulator constitutes a separate offence, collapses the whole arrangement at the first investigation, and forecloses the licences and authorisations that could have solved the problem lawfully.
The Line That Cannot Be Crossed
Three rules mark where structuring ends and a breach begins.
Where a connected person is designated, the one route that works is a licence application to the competent authority — OFSI, OFAC or an EU member state's national authority — through qualified representation. The screening mechanics are covered in sanctions screening and the US perimeter in OFAC.
Five Principles
Jurisdictional diversification. Assets and settlement are spread across non-overlapping legal perimeters: one EU or UK jurisdiction, one Asian, one in the Gulf. Simultaneous tightening in all three is unlikely; sequential tightening is routine.
Duplicated banking access. The second account is opened while the first still works; after a refusal the window is shut. The logic of choosing venues is set out in booking centres and the standard closure scenario in bank account closure.
The file ahead of the request. Source of wealth for the period before 2022, tax returns, business sale agreements, statements — collected and translated in advance. A bank that receives the complete set within a week reaches a different decision from one that waited two months.
Management where the banking is. A company banked in Singapore and run from Moscow reads to compliance as a mismatch. Directors, board meetings, staff and records are aligned with the banking jurisdiction (see economic substance).
No toxic connections. A distant relative on the SDN List, a former partner who has been designated, a minority holder whose employer is listed — each such link is checked before an account is opened rather than after. The Russian-side perimeter of "unfriendly" jurisdictions is mapped separately (see unfriendly countries).
Typical Architectures
Three configurations recur more often than others. All three assume complete disclosure of the beneficial owner and tax paid where the owner is resident.
| Architecture | Who it suits | Weak point |
|---|---|---|
| Singapore holding, Emirati operating company, Kazakh settlement circuit | A group with trading revenue and residual links to the Russian market | Three compliance perimeters, three audits, expensive upkeep |
| A trust outside the "unfriendly" perimeter with an independent trustee | Family capital with a succession horizon | The control test: retained actual influence reduces the protection to nothing |
| Separate structures for EU and non-EU assets | Owners of European real estate and portfolios | The deposit cap and crypto restrictions of Article 5b of Regulation 833/2014 |
None of the architectures protects on its own. What works is the combination of configuration, documents and the owner's own conduct.
How It Is Assembled
- Prerequisites. Screen every connected person against the EU, OFAC, OFSI and national lists; confirm tax residence; assemble the source-of-wealth file; establish which DTTs apply (see Russia's suspended treaties).
- Choice of jurisdictions. Holding, operating company and settlement circuit are placed so that no two of them share a sanctions perimeter. The personal-regime comparison sits at UAE vs Singapore.
- Banking access. A primary bank, a backup bank in another jurisdiction, and an understanding of the correspondent chain behind each (see correspondent banking).
- Substance. A resident director with real authority, premises, staff, local board meetings and records kept in place.
- Outcome. A configuration in which one bank's refusal or one jurisdiction's tightening moves operations onto the backup circuit within weeks.
- Refusal and escalation. On a closure, request the written reason and the withdrawal deadline; on a frozen transfer, file a documented request with the bank's compliance team; on any suspected overlap with a designated person, stop work until a legal opinion and, where needed, a licence from the competent authority is in hand.
Stress Tests, 2025–2026
A configuration is tested against three scenarios, each of which has already happened.
A new EU package. The 19th package (23 October 2025) imposed transaction bans on eight banks and oil traders in Tajikistan, Kyrgyzstan, the UAE and Hong Kong and on five Russian banks, prohibited dealings with Mir and the Fast Payments System, and banned transactions in the A7A5 stablecoin. The 20th package (23 April 2026) added 20 Russian banks, four third-country financial institutions, a full sectoral ban on crypto providers established in Russia, and the first use of the anti-circumvention tool. The question for the structure: how many days to move settlement if a bank in its chain is listed tomorrow.
A bank designated, or simply withdrawing from the corridor. A bank outside any sanctions list may drop a corridor on its own commercial judgement — as happened with Chinese banks that wound down Russian payments under secondary-risk pressure (see the Zhejiang Chouzhou case). A resilient configuration survives that without stopping payments.
An EMI licence withdrawn. Balances at a payment institution are protected by safeguarding rules rather than deposit insurance, and recovery takes months. The operating balance held at an EMI is kept at a level the business can survive without.
Risks
Q/A
Does a second passport help?
It changes the onboarding conversation and removes some automatic refusals while leaving the mechanics intact. Banks assess citizenship, residence, source of wealth and transaction geography together. A passport without a real move and without an address evidenced by utility bills changes little (see relocation from Russia).
Does a trust protect against a freeze?
A trust with an independent trustee outside the "unfriendly" perimeter solves succession and separates legal title. Against the sanctions control test it protects exactly as far as the trustee is genuinely independent and the settlor retains no actual influence through a letter of wishes or a protector (see trust basics).
How much can be held at an EU bank?
Article 5b of Regulation (EU) 833/2014 prohibits deposits exceeding EUR 100,000 per credit institution from Russian nationals and persons residing in Russia. The prohibition does not apply to nationals of a member state, an EEA country or Switzerland, or to holders of a temporary or permanent residence permit in those states. Crypto-asset services are restricted by the same article with no value threshold.
What should be done once a closure notice arrives?
Request written notice with the reason and the deadline, move the funds to a backup account opened earlier, and preserve all correspondence. Switching to another bank inside the same correspondent chain usually reproduces the same refusal.