The EU’s 20th Sanctions Package and the Shift Towards Financial Fragmentation

The European Union’s 20th sanctions package against Russia marks a significant evolution in modern financial enforcement. While earlier sanctions rounds focused on trade restrictions, asset freezes, and designated entities, the latest package targets a broader objective: disrupting the infrastructure that enables sanctions circumvention.

Effective from May 24, 2026, following a short wind-down period, the package introduces expanded transaction bans on additional Russian banks, extends restrictions to third-country financial institutions connected to Russia’s SPFS messaging network, and strengthens controls over crypto-related activity.

However the significance of these measures extends well beyond Russia, illustrating how sanctions policy is adapting to a fragmented financial system where value transfer no longer depends solely on traditional banking infrastructure. Alternative payment systems, stablecoins, and decentralised finance are now strategic components of geopolitical and economic power.

This article examines the measures, their implications for financial institutions and crypto markets, and the broader shift as regulators attempt to close the gap between traditional sanctions enforcement and emerging digital infrastructure.

A Shift from Entity-Based Sanctions to Infrastructure-Based Enforcement

For much of the past decade, sanctions policy has operated through a relatively familiar framework. Governments identified prohibited individuals, designated companies, or restricted sectors, and financial institutions implemented controls designed to prevent direct interaction with those entities.

That model is evolving as the EU’s 20th package reflects a growing recognition that sanctions evasion now occurs through networks rather than isolated actors. Financial flows are now more decentralised, technologically distributed, and often routed through jurisdictions outside the Western financial system.

As a result, enforcement priorities are changing. Rather than focusing solely on Russian entities, the EU is targeting the broader ecosystem enabling financial continuity despite existing restrictions. This includes intermediary institutions, alternative messaging systems, crypto infrastructure, and payment channels outside conventional correspondent banking.

At the centre of the package is Russia’s System for Transfer of Financial Messages (SPFS).

SPFS was developed following the 2014 Crimea-related sanctions as a domestic alternative to SWIFT. Although its international reach remains much smaller than SWIFT, it has become an important component of Russia’s financial resilience strategy. The system allows participating institutions to exchange financial messages independently of Western-controlled infrastructure.

The latest measures extend transaction bans beyond Russian institutions to third-country banks connected to SPFS or facilitating circumvention. This is strategically important.

The focus is no longer solely on Russia’s financial sector, but on the external networks supporting trade, settlement, and liquidity flows.

This approach mirrors a broader trend visible across global sanctions policy, particularly in relation to secondary sanctions exposure and anti-circumvention enforcement.

Why the SPFS Measures Matter

The targeting of SPFS-linked institutions signals a deeper concern among Western policymakers: the gradual emergence of parallel financial architecture.

For decades, Western sanctions derived much of their power from the centrality of the dollar system and the dominance of Western controlled payment rails. Access to SWIFT, correspondent banking, and dollar clearing created powerful leverage.

However, geopolitical fragmentation has accelerated efforts by multiple states to reduce dependence on those systems.

Russia’s SPFS network, China’s CIPS framework, bilateral settlement arrangements, and the growing use of local currency trade mechanisms all reflect a broader trend towards financial multipolarity.

The challenge for regulators is that sanctions effectiveness weakens as alternative settlement ecosystems mature.

The EU’s latest package therefore appears designed not simply to penalise current activity, but to discourage the long term institutionalisation of parallel payment systems capable of reducing Western financial influence.

The inclusion of third country institutions is particularly significant because it raises the compliance stakes for financial institutions operating far beyond Russia itself.

Banks with indirect exposure to SPFS-linked transactions may now face increased scrutiny around correspondent banking, ownership structures, trade finance activity, nested payment arrangements, and transaction routing involving intermediary jurisdictions.

The operational implications are substantial as financial institutions will need to reassess not only direct sanctions exposure, but also their broader network level exposure to payment ecosystems associated with sanctioned jurisdictions – representing a shift towards more dynamic behavioural and ecosystem-based risk assessment.

Crypto and the Evolution of Sanctions Risk

Perhaps the most consequential aspect of the package is the treatment of crypto-related infrastructure.

For several years, regulators debated whether crypto assets represented a meaningful sanctions evasion threat. Early policy responses were relatively narrow and focused primarily on designated wallets, transaction tracing, and restrictions on identified exchanges.

The latest EU measures suggest that position has evolved considerably. Crypto is no longer treated as a peripheral concern within sanctions policy. It is increasingly viewed as part of the core financial infrastructure through which cross-border value transfer occurs.

This reflects a broader reality: digital asset markets have matured significantly. Stablecoins now facilitate substantial cross-border settlement, while over-the-counter liquidity networks operate globally and continuously.

For policymakers, these developments create both technological and jurisdictional challenges.

Unlike traditional banks, many crypto-related services operate across fragmented legal structures, distributed governance models, or infrastructure that lacks a clear central operator. This complicates the application of conventional enforcement mechanisms and the EU’s latest package appears to recognise that distinction.

The measures reportedly expand restrictions involving Russian crypto asset service providers, increase scrutiny around digital payment instruments linked to Russia, and strengthen anti-circumvention provisions involving crypto-enabled settlement. The package also signals a growing willingness to examine decentralised environments facilitating sanctions avoidance.

This is where the regulatory conversation becomes particularly complex.

Decentralised finance enables peer-to-peer transfers outside traditional banking channels.

If a platform, liquidity mechanism, or protocol materially enables prohibited financial activity, policymakers may be less concerned with whether the infrastructure describes itself as decentralised.

That distinction matters enormously for:

• Decentralised exchanges

• Liquidity providers

• Stablecoin issuers

• Validators

• Cross chain bridges

• Over the counter brokers

• Crypto payment intermediaries

Stablecoins and the New Sanctions Frontier

While not exclusively focused on stablecoins, the package reflects the growing strategic importance of dollar-denominated digital assets, as stablecoins increasingly function as a form of global settlement infrastructure.

In many jurisdictions, they provide faster, more accessible liquidity than local banking systems. They are heavily utilised in over the counter markets, cross-border trade, treasury management, and informal settlement networks.

For sanctioned or financially constrained actors, stablecoins present obvious advantages.

They can facilitate near-instant value transfer across-borders, reduce reliance on correspondent banking chains, and operate continuously outside traditional banking hours – creating a difficult policy dilemma.

The same characteristics that make stablecoins commercially attractive also make them highly relevant to sanctions enforcement.

Western regulators therefore face a strategic balancing exercise. Excessively restrictive approaches risk pushing liquidity further into opaque or offshore environments, while insufficient oversight risks creating parallel payment channels capable of undermining sanctions regimes.

The EU’s latest measures suggest policymakers are moving towards a more assertive posture.

Rather than treating crypto as a separate financial category, regulators increasingly appear to be integrating digital assets into mainstream financial crime supervision frameworks and that trend is likely to accelerate.

Future enforcement activity may focus less on outright prohibition and more on imposing traditional financial crime expectations across digital asset ecosystems, including:

• Enhanced transaction monitoring

• Sanctions screening expectations

• Wallet attribution controls

• Beneficial ownership analysis

• Behavioural risk indicators

• Network level exposure assessment

In practice, the distinction between traditional financial institutions and digital asset service providers is narrowing rapidly.

The Growing Importance of Secondary Exposure

One of the most important developments within the sanctions landscape is the increasing focus on secondary exposure.

Historically, sanctions risk was assessed through direct relationships with designated entities or jurisdictions. That approach is now insufficient.

Modern sanctions enforcement increasingly examines facilitation, indirect support, and ecosystem participation.

The EU’s focus on third country financial institutions connected to SPFS demonstrates this shift clearly.

Financial institutions operating in intermediary jurisdictions may now face heightened scrutiny even where their direct Russian exposure appears limited. The regulatory question is no longer simply whether a firm transacts directly with sanctioned entities.

It is increasingly whether the firm materially contributes to systems that enable sanctions circumvention.

Traditional sanctions screening models based purely on name matching are unlikely to provide sufficient visibility into complex transaction routing or indirect exposure networks.

Instead, firms will need stronger capabilities around:

• Network analysis

• Behavioural monitoring

• Counterparty intelligence

• Beneficial ownership mapping

• Cross-border payment flow analysis

Artificial intelligence will almost certainly play an expanding role in this environment.

The scale and complexity of modern financial systems make manual analysis increasingly impractical. Identifying hidden exposure patterns across layered transactions, nested entities, or decentralised payment infrastructure requires analytical capabilities capable of processing large volumes of fragmented data in near real-time.

However, technological capability alone will not solve the problem. Regulators are likely to place increasing emphasis on governance, explainability, and accountability in how firms deploy advanced monitoring systems. The quality of investigative judgement will remain as important as the sophistication of the technology itself.

The Geopolitical Fragmentation of Finance

The broader significance of the EU’s 20th sanctions package lies in what it reveals about the future structure of global finance.

For much of the post-Cold War period, financial globalisation operated on the assumption of increasing integration. Payment systems became more interconnected, capital flows accelerated, and financial infrastructure consolidated around globally dominant networks.

That environment is changing as geopolitical competition reshapes financial architecture.

States are investing in domestic payment systems, local currency settlement mechanisms, central bank digital currencies, and alternative financial messaging frameworks. At the same time, sanctions policy is becoming more expansive, technologically focused, and extraterritorial – resulting in gradual fragmentation.

Rather than a single globally integrated financial system, the world may increasingly move towards overlapping and partially competing financial ecosystems shaped by geopolitical alignment.

Digital assets are simultaneously:

• Sources of financial innovation

• Mechanisms for cross-border liquidity

• Potential sanctions evasion vectors

• Geopolitical policy concerns

This duality explains why regulators are approaching the sector with increasing intensity.

The challenge for policymakers is not simply preventing illicit finance. It is maintaining the effectiveness of state-level economic power in an era where technology increasingly enables alternative forms of value transfer.

What Firms Should Be Thinking About Now

For financial institutions, crypto firms, and payment providers, the implications are immediate.

Regulators are moving towards a model of sanctions enforcement that is more:

• Technologically sophisticated

• Focused on indirect exposure

• Concerned with infrastructure level risk

• Willing to extend liability beyond traditional banking boundaries

Firms should therefore reassess several areas urgently.

Sanctions risk assessments should move beyond direct jurisdictional exposure and incorporate network based exposure analysis.

Institutions should also review their visibility into intermediary payment flows, particularly where transactions involve higher risk corridors or nested financial relationships.

Additionally, digital asset related controls require significant maturity enhancement across many organisations. This includes transaction monitoring capability, blockchain analytics integration, wallet exposure screening, and governance frameworks around decentralised finance interaction.

Finally, boards and senior management teams should recognise that sanctions compliance is increasingly becoming a strategic resilience issue rather than a purely operational control function.

The institutions that adapt successfully will be those capable of understanding financial crime risk not simply as a legal requirement, but as part of a broader geopolitical and technological transformation.

Conclusion

The EU’s 20th sanctions package reflects more than escalation – it marks a structural shift in how financial power is exercised.

Enforcement is no longer focused solely on restricting actors or transactions, but on disrupting the infrastructure that enables them.

As financial systems fragment and digital value transfer accelerates, sanctions effectiveness will depend on understanding networks, not just entities.

In this environment, compliance is no longer a static control function. It must evolve into a dynamic capability, aligned to the complexity and speed of the threat landscape.