On October 8, 2026, the Council of the European Union adopted Council Implementing Regulation (EU) 2026/2257, implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia's destabilising activities. The implementing regulation is the directly applicable act, and its status is enforced. The Council press release of the same day states that the individual measures are prolonged by one year, until October 9, 2027, and that they apply to 80 individuals and 20 entities, who are subject to an asset freeze, with EU citizens and companies forbidden from making funds, financial assets or economic resources available to them. EU banks and payment institutions, EU importers and exporters with Russia or Belarus exposure, EU customs brokers and freight forwarders, EU crypto-asset service providers, and EU professional gatekeepers (lawyers, notaries, auditors and company-service providers) must immediately screen counterparties and customers against the EU Russia destabilising sanctions list and freeze the funds and economic resources of any designated person, while keeping that compliance in place for the regime prolonged until October 9, 2027, or they face criminal or administrative penalties under each Member State's national sanctions-enforcement law, supervisory action, and potential criminal liability for sanctions breaches.
October 9, 2027 is the new end of the regime, not a later date by which screening may start. The previous application date was October 9, 2026. A feed or a case file that still treats that earlier date as a lapse will drop names that remain designated. Natural persons also face a travel ban on entry into or transit through EU territories. That ban is a Member State measure under companion Council Decision (CFSP) 2026/2258, which amends Decision (CFSP) 2024/2643. The implementing regulation is what binds operators on the funds prohibition.
What does Implementing Regulation (EU) 2026/2257 change?
It gives direct effect, across the Union, to the one-year prolongation of the individual measures. The Council set the framework up on October 8, 2024 against actions and policies of the government of the Russian Federation that undermine the values, security, independence and integrity of the EU and its Member States, and against persons responsible for Russia's hybrid activities toward third countries and international organisations.
The October 8, 2026 release does not announce a new Russia sanctions package. It keeps the measures in light of continued and intensified hybrid activities, including foreign information manipulation and interference (FIMI). The European Council conclusions of June 18 and 19, 2026 named Russia and Belarus among the hostile actors.
| Point | Before October 8, 2026 | After Implementing Regulation (EU) 2026/2257 |
|---|---|---|
| Directly applicable act | Regulation (EU) 2024/2642 | Same regulation, implemented by Regulation (EU) 2026/2257 |
| Persons covered | The designated list under the regime | 80 individuals and 20 entities, as the Council states |
| Operator duty | Asset freeze and ban on making funds or economic resources available | Same duties, kept in force |
| End of the regime | October 9, 2026 | October 9, 2027 |
Who must screen and freeze under Regulation (EU) 2024/2642?
Any EU operator that could hold, move or make available funds or economic resources to a listed individual or entity is in scope: EU banks and payment institutions, EU importers and exporters with Russia or Belarus exposure, EU customs brokers and freight forwarders, EU crypto-asset service providers, and EU professional gatekeepers (lawyers, notaries, auditors and company-service providers). The consolidated text of Decision (CFSP) 2024/2643 dated July 13, 2026 records the measures as they stood before this prolongation.
What must compliance teams do immediately?
Screen counterparties, customers and transaction chains against the EU Russia destabilising sanctions list and freeze the funds and economic resources of any designated person without delay. Do not treat October 9, 2026 as an expiry. Write October 9, 2027 as the regime end date in the screening system and in any internal calendar that still shows the previous date.
- Re-run open accounts, payments, shipments and crypto-asset relationships against the 80 individuals and 20 entities.
- Confirm that list-expiry jobs do not drop these names because the old end date has passed.
- Block new funds, financial assets and economic resources from reaching a listed person or entity, including through a broker, a forwarder or a professional intermediary.
- Cite Council Implementing Regulation (EU) 2026/2257 as the directly applicable act, and Decision (CFSP) 2026/2258 for the travel ban.
Continuous, per-jurisdiction monitoring is what surfaces an implementing regulation of this kind the moment it is published in the Official Journal, before a screening feed still shows the previous end date.
What happens if a designated person's funds are not frozen?
Making funds or economic resources available to a listed person or entity breaches the asset-freeze prohibition. Each Member State enforces that prohibition under its national sanctions law. The October 8, 2026 acts do not publish a new EU-level fine amount. A travel-ban breach for the listed natural person does not excuse an operator that releases funds or economic resources.
Verify that the 80 individuals and 20 entities stay blocked. Replace any October 9, 2026 end date with October 9, 2027. Freeze any match without delay and brief the teams that clear payments, cargo and client onboarding. Obsidian tracks this regime as the Council prolongs it and as Member States enforce it.
