On 2 September 2026, the United Kingdom's Office of Financial Sanctions Implementation (OFSI) imposed a GBP 4,732,830.58 monetary penalty on Citibank, N.A., London Branch (CBNA London) for making funds available for the benefit of a designated person. The notice, published in HM Treasury's financial sanctions enforcement collection, is the largest penalty OFSI has imposed under the Russia (Sanctions) (EU Exit) Regulations 2019 and the first to cite the Global Anti-Corruption Sanctions (GAC) Regulations 2021.
The breach engaged two regimes at once: regulations 11 and 12 of the Russia (Sanctions) (EU Exit) Regulations 2019 and regulation 13 of the Global Anti-Corruption Sanctions Regulations 2021. For sanctions and financial-crime teams at UK banks and UK branches of global banks, the notice is a signal to test whether screening, licensing and transaction-monitoring controls catch the broader "for the benefit of" limb across every UK sanctions list, not only the Russia list.
How much is the penalty, and what does the amount reveal?
OFSI set the penalty at GBP 4,732,830.58. Under section 146 of the Policing and Crime Act 2017, as amended by the Economic Crime (Transparency and Enforcement) Act 2022, OFSI's statutory maximum civil penalty is the higher of GBP 1 million or 50 percent of the value of the funds or resources involved. Because the penalty exceeds GBP 1 million, the 50 percent limb must be the binding cap, which implies the underlying funds made available totalled at least GBP 9.47 million and that OFSI applied the higher maximum rather than the flat GBP 1 million ceiling.
That magnitude matters. The next-largest 2026 OFSI penalty is Sabre Global Technologies at GBP 1.00 million (June 2026); CBNA alone is more than four times that, and it dwarfs the year's other banking-sector penalties, Deutsche Bank AG London Branch (GBP 165,000, May) and Bank of Scotland (GBP 160,000, January). It is the largest penalty OFSI has imposed under the post-Brexit Russia (Sanctions) (EU Exit) Regulations 2019 to date.
| Date (2026) | Entity | Sector | Penalty | Regulations breached |
|---|---|---|---|---|
| 2 September | Citibank, N.A., London Branch | Banking | GBP 4,732,830.58 | Russia Regs 11, 12; GAC Reg 13 |
| 17 June | Sabre Global Technologies | Technology | GBP 1,000,920.59 | Russia Regs 13, 14, 19 |
| 19 May | Deutsche Bank AG London Branch | Banking | GBP 165,000 | Russia Reg 12 |
| 30 March | Apple Distribution International | Technology | GBP 390,000 | Russia Reg 12 |
| 26 January | Bank of Scotland | Banking | GBP 160,000 | Russia Regs 11, 12 |
Why is the Global Anti-Corruption Sanctions angle unprecedented?
Every previous entry in OFSI's published enforcement table cites the Russia, Ukraine, counter-terrorism, Syria or Egypt regimes. CBNA London is the first published OFSI monetary penalty to cite the Global Anti-Corruption Sanctions Regulations 2021 (regulation 13), the UK's autonomous anti-corruption asset-freeze regime. The dual citation means a single course of conduct breached two separate UK sanctions regimes, so the same funds flow triggered liability under both the Russia and the GAC prohibitions.
The practical consequence is that a screening programme which filters only Russia and Ukraine designated persons is incomplete. A designated person can be listed under multiple UK regimes simultaneously, and the GAC list is a distinct screening obligation. Compliance teams should confirm their OFSI list subscriptions and real-time screening include the GAC designations, not just the country-specific lists.
What should compliance teams check now?
The stated reason, "making funds available for the benefit of a designated person", is the broader limb of the financial-sanctions prohibition. It catches indirect provision of funds, where money reaches a third party but ultimately benefits a designated person, not only direct transfers to a listed individual. Detecting it requires deeper analysis than name-based payment screening: beneficial-ownership linkage, payments to family members or associates of designated persons, and patterns that suggest funds are being channelled for a designee's benefit.
- Confirm OFSI list coverage includes the GAC regime alongside Russia and all other UK lists.
- Test "for the benefit of" detection logic, not just "to" a designated person.
- Review licensing controls: every release of frozen funds or transaction touching a designated person requires an OFSI licence, and the penalty underscores that the absence of a licence is the breach.
- Retrospectively screen payments processed through CBNA London or correspondent channels against the current consolidated list.
- Brief sanctions, financial-crime and relationship-management teams on the enforcement trend and OFSI's willingness to impose eight-figure penalties on global banks.
Continuous, per-jurisdiction monitoring surfaces a notice like this the day it publishes, before trade press catches up.
Subscribe to the free newsletter
Verify whether your institution processed payments touching the CBNA London matter, re-confirm that OFSI screening covers the Global Anti-Corruption list and the full Russia list, test "for the benefit of" detection in transaction monitoring, and check the status of any relevant OFSI licences. Obsidian tracks this UK enforcement stream as each notice drops.
