“SANCTIONED” IS NOT ENOUGH

Four Questions Every Sanctions Designation Should Immediately Raise

Say a company has been “sanctioned” and most people picture a single, decisive event. A group of government officials sit around a table, a switch is flipped, and suddenly the name of a drug trafficker or terrorist financier appears on a screen with a large red X through it. In almost every case, the picture is wrong, or at least badly incomplete. “Sanctioned” is not a status. It is a shorthand that collapses a dozen legally distinct realities into one word, and the distinctions it hides are exactly the ones that determine what a government, a bank, or a business is actually required to do.

Four questions sit underneath the word, and until they are answered it carries almost no operational meaning. By whom? Under what authority? On which list? With what legal effect? A recent, high-profile designation shows why each one matters, and why the shorthand is not just imprecise but genuinely dangerous.

One Word, One Case, Many Realities

In May 2026, the United Kingdom “sanctioned” the crypto exchange HTX, one of the largest in the world, with roughly $3.3 trillion in trading volume the year before, for its role in helping move funds to Russia. That single sentence is true and almost useless on its own. Consider what it actually contains once you start asking the four questions.

By whom. This was the UK, specifically its Foreign, Commonwealth and Development Office, acting through the Office of Financial Sanctions Implementation (OFSI), under the Russia (Sanctions) (EU Exit) Regulations 2019. Those regulations are the UK’s own legal framework for Russia-related sanctions, stood up after Brexit so the UK could designate on its own authority rather than through the EU. This matters because someone who reaches for OFAC’s list will not find HTX there. Whether an obligation exists depends entirely on your nexus to the jurisdiction that issued the designation. And not every authority carries the same weight: Russia and Iran both maintain their own retaliatory designation lists, which are largely symbolic and carry little real financial consequence. Who did the sanctioning can matter as much as the fact of it.

On which list, and against whom exactly. The designated entity is not, technically, “HTX.” It is Huobi Global S.A., a Panama-registered company. OFSI treats the HTX exchange as caught because it is owned or controlled by that company, under the ownership test in the regulations. So the sanction reaches the thing everyone actually cares about, the exchange people use every day, only by way of a holding company most users have never heard of. Working out that the name on the list and the platform in the real world are the same operation is analytical work, not a given. This is also why the authorities that maintain these lists update them almost constantly, adding name changes, aliases, and new identifiers so that firms can tell who is actually captured. The list is not a static wall. It is a living document chasing a moving target.

With what legal effect. This is where the shorthand does the most damage, because in the HTX case a single designation set off at least three different prohibitions, each with a different reach. The first is an asset freeze, the familiar rule against dealing with a target’s funds or making funds available to them. The second is a payment-processing prohibition under a provision called Regulation 17A, applied to a crypto exchange for the first time, and it is far broader than a freeze. It bars UK institutions from handling a payment that has simply passed through the designated exchange at any point in its history, even when the person sending and the person receiving are not sanctioned at all. The third, in designations of this type, can include further measures still, from director disqualification to internet-services restrictions. “Sanctioned” tells you none of this. The gap between a plain asset freeze and Regulation 17A is the difference between checking whether your customer is on a list and having to trace a payment backward through every prior step to see whether the tainted exchange is hiding somewhere in its past.

The Same Word, a Different Country, a Different Meaning

Now widen the aperture, because the same event fractures further across borders. HTX was designated in the UK. Under Jersey’s regime, which follows the UK sanctions list but licenses and enforces locally rather than through OFSI, the same prohibition bites through a separate legal channel. The European Union has been moving against the same category of target on its own track, with a broad sectoral ban on Russian crypto services already in force and a further package, proposed in June 2026, that would ban transactions with eleven crypto platforms, though the platforms have not been publicly named and that package is not yet law. And in this particular action, OFAC did not designate HTX at all. So “HTX is sanctioned” is flatly true in London, true through a different door in Jersey, potentially caught in a proposed EU measure that has not yet entered into force, and not directly true in Washington. A firm operating across those markets cannot act on the word alone. It has to know which regime binds it, because the perimeters overlap but do not match, and the gaps between them are not safe harbors. The word is identical in every headline. The legal reality changes at every border.

The same lesson runs through other recent actions once you look past the shorthand. When OFAC designated the Iranian exchange Nobitex days after the HTX action, it named not only the platform but the individuals behind it, under Iran-related authorities entirely separate from the Russia framework that captured HTX. The UK, by contrast, named HTX the entity but tied no directors to it. When the U.S. moved against Cambodia’s Huione Group, it was not an OFAC “designation” at all, but a FinCEN action under Section 311 of the USA PATRIOT Act, a different tool with a different effect. And the U.S. measures against Cuba’s GAESA carry secondary-sanctions exposure, reaching non-U.S. persons in a way many sanctions never do. Five actions, five mechanisms, one convenient word standing in for five very different legal realities.

And It Is About to Get Harder

There is a new wrinkle that makes the discipline more urgent, not less. On May 2, 2026, China’s Ministry of Commerce issued its first formal blocking order, prohibiting certain parties from complying with specified U.S. sanctions. For some firms, “sanctioned” now collides with a countervailing legal duty not to comply, depending, once again, on jurisdiction and nexus. The same counterparty can carry an obligation to freeze in one country and an obligation not to freeze in another. The word “sanctioned” flattens even that into a single syllable.

This distinction matters well beyond lawyers and sanctions specialists. Journalists routinely report that a company has been "sanctioned" without identifying the authority. Banks often operate across multiple jurisdictions with overlapping obligations. Corporate compliance teams may need to determine within hours whether a designation affects one subsidiary, an entire enterprise, or not at all. Precision is not academic. It determines whether money moves, accounts are frozen, and transactions are blocked.

The takeaway is simple to state and hard to practice. “Sanctioned” needs a preposition to mean anything.  A “by” or an “under” tells you who acted and on what authority. Anyone who uses the word as a conclusion has skipped the part of the work that actually matters. The list, the authority, the jurisdiction, and the legal effect are not footnotes to the story. They are the story.

Meridian3 works at the intersection of open-source intelligence, financial intelligence, sanctions, and cryptocurrency investigation.