Travelling to sanctioned countries in 2026 carries serious legal risks for both employees and the organisations that send them. Sanctions regimes imposed by the UK, US, EU, and UN can expose individuals to criminal prosecution and companies to significant financial penalties, even when the travel itself appears routine. The following questions unpack the key legal, operational, and duty of care considerations any organisation must address before authorising travel to sanctioned destinations.
Which countries are under active sanctions in 2026?
In 2026, countries subject to active sanctions regimes include Russia, Belarus, Iran, North Korea, Syria, Myanmar, Cuba, Venezuela, and Sudan, among others. Sanctions vary significantly by jurisdiction: a country sanctioned by the US may face different restrictions under UK or EU law, and the specific measures in place (trade, financial, travel bans) differ from one regime to the next.
It is important to understand that sanctions are not uniform. They target specific individuals, entities, sectors, or activities rather than blocking all engagement with a country entirely. Russia, for example, remains under sweeping sanctions covering energy, finance, and defence sectors, while travel itself is not universally prohibited, but conducting certain business activities there can be. Iran faces extensive US secondary sanctions that can affect non-US companies doing business there. North Korea and Syria sit under some of the most comprehensive restrictions globally.
Organisations must consult the sanctions lists maintained by the Office of Financial Sanctions Implementation (OFSI) in the UK, the Office of Foreign Assets Control (OFAC) in the US, and the EU’s Consolidated Sanctions List, and they should do so before any travel is authorised. These lists are updated regularly, and the legal exposure from acting on outdated information can be severe.
What legal risks do employees face when travelling to sanctioned countries?
Employees who travel to sanctioned countries risk criminal prosecution, asset freezes, and personal fines if they engage in activities prohibited under applicable sanctions law. Even unintentional violations, such as paying for a hotel owned by a sanctioned entity or conducting a business meeting with a designated individual, can constitute a breach, and ignorance of the law is rarely an accepted defence.
The personal legal exposure depends on which sanctions regimes apply to the individual. UK nationals and residents are bound by UK sanctions law regardless of where they are in the world. US persons, including green card holders and US-incorporated entities, are subject to OFAC regulations globally. EU citizens fall under EU regulations. In some cases, multiple regimes apply simultaneously.
Beyond direct sanctions violations, employees may also face risks under anti-money laundering legislation, export control laws, and counter-terrorism financing rules, all of which can intersect with travel to high-risk sanctioned environments. The personal consequences of a sanctions breach can include criminal records, travel bans, and reputational damage that extends well beyond the original incident.
What legal obligations do employers have before sending staff to sanctioned regions?
Employers have a legal duty of care to assess and mitigate risks before sending employees to sanctioned regions. This obligation sits under health and safety legislation in the UK, and equivalent frameworks in other jurisdictions, and extends to legal and regulatory risks, not just physical danger. Failing to conduct proper due diligence before authorising travel can expose the organisation to liability on multiple fronts simultaneously.
At a minimum, employers should carry out the following before any travel to a sanctioned destination is approved:
- Conduct a thorough legal review of which sanctions regimes apply to the destination and the activities planned
- Identify whether any individuals or entities the employee may interact with appear on sanctions designation lists
- Assess whether a licence or exemption is required for the travel or associated activities
- Provide employees with a pre-travel briefing that covers both security risks and legal restrictions
- Document the approval process and the reasoning behind the decision to authorise travel
- Establish clear escalation procedures if the situation changes during the trip
Organisations aligned with ISO 31030 travel risk management standards are better positioned to demonstrate that travel decisions were made systematically and responsibly. This alignment matters both for regulatory compliance and for defending the organisation’s position if a legal challenge arises.
Can a company face penalties for an employee’s travel to a sanctioned country?
Yes. A company can face substantial penalties, including criminal prosecution, civil fines, and reputational damage, if an employee’s travel to a sanctioned country results in a sanctions violation, even if senior leadership was unaware of the specific activity. Regulators in the UK, US, and EU apply a strict liability standard in many sanctions contexts, meaning intent is not always required to establish a breach.
OFAC in the US has issued multi-million-dollar penalties against companies whose employees conducted transactions with sanctioned parties during overseas travel. OFSI in the UK has similarly strengthened its enforcement posture in recent years. The EU has moved toward greater harmonisation of sanctions enforcement across member states, increasing the likelihood that violations are identified and pursued.
Companies can reduce their exposure by implementing robust pre-travel approval processes, conducting sanctions screening on all counterparties before meetings are confirmed, and training employees on what activities are restricted in each destination. A well-documented compliance programme will not necessarily prevent a violation, but it can significantly reduce the penalty applied if one occurs.
What travel licences or exemptions exist for sanctioned destinations?
Travel licences and exemptions do exist for sanctioned destinations, but they are specific, time-limited, and must be applied for in advance. In the UK, OFSI issues licences for activities that would otherwise breach financial sanctions. In the US, OFAC issues general and specific licences that authorise certain categories of activity, such as humanitarian work, journalism, or legal services, in otherwise restricted environments.
Common categories of licensed or exempt activity include:
- Humanitarian assistance and NGO operations in crisis-affected sanctioned states
- Legal representation and legal services provided to sanctioned individuals or entities in certain circumstances
- Journalistic activities in countries such as Cuba, Iran, and Russia under specific OFAC general licences
- Personal remittances and family support payments in limited jurisdictions
- Activities authorised under UN Security Council exemptions for peacekeeping or diplomatic missions
Applying for a licence is not a formality. Regulators assess each application carefully, and approval is not guaranteed. Organisations should begin the process well in advance of planned travel and should seek legal counsel with sanctions expertise before submitting an application. Operating under an assumption that a licence will be granted, or that an exemption applies, without formal confirmation creates significant legal risk.
How should organisations manage ongoing risk for staff already in sanctioned territories?
For staff already operating in sanctioned territories, ongoing risk management requires continuous monitoring of both the security environment and the evolving sanctions landscape. Sanctions designations can change with little warning, and an activity that was compliant when travel began may become prohibited mid-assignment. Organisations need real-time visibility and clear escalation protocols to respond effectively.
Practical measures for managing in-country risk include:
- Maintaining 24/7 contact with a travel risk management team capable of monitoring sanctions updates and security developments simultaneously
- Establishing clear criteria for triggering an early departure or evacuation
- Ensuring employees know what activities they must avoid and who to contact if they encounter a situation that may constitute a sanctions risk
- Keeping documentation of all activities conducted in-country, including meeting records and financial transactions
- Reviewing the legal position regularly throughout the assignment, not only at the outset
The security dimension cannot be separated from the legal one. In high-risk environment operations, the conditions that create physical danger often coincide with the conditions that create legal complexity, civil unrest, shifting political control, and state collapse all affect both the safety of personnel and the compliance picture. Organisations that treat these as separate problems are likely to be caught out by the intersection between them.
How NGS supports organisations operating in sanctioned and high-risk countries
Northcott Global Solutions provides end-to-end support for organisations navigating the challenges of high-risk country travel, including destinations subject to sanctions regimes. NGS does not provide legal advice on sanctions compliance, but its travel risk management services are built to work alongside an organisation’s legal and compliance function, ensuring that the operational and security dimensions are managed with the same rigour as the regulatory ones.
Key capabilities relevant to sanctioned and high-risk destinations include:
- Pre-travel risk assessments and country briefings calibrated to the specific destination and activities planned
- 24/7 itinerary monitoring and live traveller tracking through the Aurora platform
- Mass emergency communication via SIREN and direct support from a UK-based Operations Centre
- Medical, security, and political evacuation capability in environments where standard providers cannot operate
- Hostile Environment Awareness Training (HEAT) for staff deploying to complex or dangerous locations
- Crisis management support and escalation planning aligned with ISO 31030 standards
If your organisation needs to manage staff operating in or near sanctioned territories, speak with the NGS team to understand how a structured travel risk management programme can reduce both operational and legal exposure. Contact NGS to discuss your requirements.
Related Articles
- How do you train employees to respond to travel security threats?
- How do you assess travel risk before visiting a dangerous country?
- What should you pack in a medical kit for high-risk travel?
- What are the current travel risks in Syria for foreign nationals?
- What is the difference between a travel warning and a travel alert?

