A sanctions policy is only as useful as the processes that carry it out. A recent UK enforcement decision shows how routine weaknesses can allow payments to continue after restrictions should have been applied.
For Cyprus firms, the useful response to this case is a focused review of their own payment and account processes.
On 2 September 2026, the UK Office of Financial Sanctions Implementation, or OFSI, published a £4,732,830.58 penalty against Citibank N.A., London Branch. The notice identifies 970 payments worth about £19.72 million that OFSI considered breaches of UK Russia and Global Anti-Corruption sanctions. The bank received a 20% discount for voluntary disclosure and cooperation. 1