UK Export Controls and Sanctions Enforcement: What Exporters Need to Know
UK enforcement activity across export controls and sanctions has increased significantly, with severe penalties for those who fail to meet compliance standards.
HMRC has published compound settlements, custodial sentences, and a tenfold rise in criminal investigations in one enforcement lane over three years.
The two regimes – export licensing controls and trade sanctions – operate differently, but the compliance failures that lead to enforcement are similar.
In most published cases, the businesses involved were not trying to break the rules. They were operating without a process that matched the level of scrutiny required.
In this article, we explain how the UK’s export licensing controls and trade sanctions regimes work, where compliance failures most commonly occur, and what your business should be doing to reduce exposure.
Contents:
- Two regimes, one compliance gap
- How export licensing controls work
- How trade sanctions work
- Civil or criminal exposure: understanding your risk
- The UK Sanctions List: the single source of truth
- Where compliance failures actually happen
- What the enforcement record tells us
- Why this matters for your business
- How Customs Support Group can help
Two Regimes, One Compliance Gap
UK export compliance frameworks are not uniform, and understanding the differences matters because failures can result in enforcement action.
Export licensing controls govern whether specific goods require a licence before they can be exported. The Export Control Order 2008 sets out the categories of controlled goods, including military items and dual-use goods. Exporting controlled goods without the correct licence is a criminal offence.
Trade sanctions restrict or prohibit trade with specific countries, entities, or individuals. The UK Sanctions List identifies the parties subject to financial sanctions. Separate regulations, such as The Russia (Sanctions)(EU Exit) Regulations 2019, also define what trade is prohibited and with whom.
The goods classification of a product determines whether it requires a licence, and this is always the exporter’s responsibility. The fact that a broker or freight forwarder handled the shipment does not transfer that liability. HMRC also does not pre-approve classifications unless an Advanced Tariff Ruling (ATaR) is applied for.
In practice, both regimes catch goods. A product can require a licence under the Export Control Order and simultaneously be caught by a sanctions prohibition. Therefore, it is important to consider both when exporting products.
How Export Licensing Controls Work
The Export Control Order 2008 controls the export of military goods, dual-use goods, and related technology and software.
Goods on the UK Military List require a licence for export to most destinations. Dual-use goods, which have both civilian and military applications, are controlled under retained EU export control regulation and require a licence for export to specific countries or end-users.
Criminal investigations for circumnavigation of licensing has increased in the UK in recent years, including a tenfold increase on the UK–Hong Kong lane in three years – 51 investigations in the 2024/2025 tax year compared to five in 2021/2022.
Enforcement examples
A company director was convicted of attempting to export thermal imaging rifle sights classified as ML1d under the UK Military List without the required licence.
The items were misdescribed on documentation to conceal their controlled status. Border Force seized eight scopes across two shipments. A search of the director’s home uncovered evidence of ten further unlicensed shipments.
He received a sentence of two years and one month at Leeds Crown Court in February 2026.
In this example, there was a deliberate misrepresentation of goods to avoid licensing requirements. However, mistaken noncompliance can also attract severe penalties.
In another case, a fine of £620,515.04 was paid after the exporter raised the mistake to HMRC themselves.
And in Q1 of 2024, seven companies paid a total of £2.3 million, ranging between £12,700.00 and £1,058,781.79. Although it is not confirmed in the HMRC notice, the offer of compound settlements indicates these were also voluntary disclosures.
How Trade Sanctions Work
Trade sanctions prohibit specified types of trade with designated countries, entities, or individuals. The Office of Trade Sanctions Implementation (OTSI), established in 2024, has a mandate to enforce sanction breaches and to publish its findings.
It is important to note that sanctions are not static. When new measures are introduced, trade that was previously permitted becomes prohibited.
HMRC’s published guidance is direct on this point: ignorance of sanctions is not an excuse. When new sanctions take effect, exporters are expected to review their trading relationships and seek professional advice if they are unsure whether existing or prospective trade complies.
The critical compliance question is not simply where the goods are going. It is who is receiving them and whether any party in the chain falls within the scope of a sanctions prohibition.
Enforcement examples
This distinction of who the goods are going to is at the heart of enforcement, as the core component of sanctions is to block goods from being received by certain parties.
In 2025, an exporter breached the Russian sanctions, leading to a £1,160,725.67 penalty. In 2024, another was issued a compound settlement of £58,426.45.
For both sanctions and export controls, the penalties can be severe. However, it will always be better if you disclose a noncompliance incident to HMRC instead of waiting for discovery.
Customs Support Group provides compliance health checks, which help you to identify exposure and take remedial action to reduce it. Contact us to get started.
Civil or Criminal Exposure: Understanding Your Risk
Not all enforcement follows the same path, and understanding the difference matters for how you assess your own exposure.
Civil enforcement is the default response to a breach. The Office of Financial Sanctions Implementation (OFSI), OTSI, and HMRC all assess potential violations on the balance of probabilities, the standard of proof, and on a liability basis.
This means there is no requirement for authorities to prove that your business knew it was in breach. If the breach occurred, liability can attach regardless of intent.
Criminal investigation is reserved for the most serious cases: deliberate concealment, use of false documents, organised evasion, or links to wider criminality. However, the threshold is not limited to deliberate conduct. The authorities also consider:
- Reckless behaviour, where a risk existed and was not mitigated
- Negligent behaviour, where a business should have known it was in breach
Both can be treated as aggravating factors and, in serious or high-value cases, can still lead to criminal referral.
The enforcement consequences differ depending on which route is taken:
- Civil monetary penalty: capped at £1 million or 50% of the breach value, whichever is greater*
- Compound settlement: a criminal enforcement mechanism used by HMRC, where voluntary disclosure and cooperation make a negotiated financial resolution preferable to prosecution. These are not subject to the civil cap, which is why published figures can exceed £1 million
- Criminal prosecution: the maximum sentence for trade sanctions breaches is 10 years’ imprisonment. For financial and transport sanctions, it is seven years
*OFSI has announced its intention to double the civil penalty ceiling for financial sanctions to £2 million or 100% of the breach value, pending legislative change.
The practical implication is that a process failure does not need to be deliberate to attract serious enforcement consequences. If your business lacked adequate process, had not reviewed its classifications, or could not produce a documented audit trail, the question authorities will ask is whether you should have known. That is the negligence standard, and it sits firmly within the enforcement scope.
The UK Sanctions List: The Single Source of Truth
From the 28th of January 2025, the UK Sanctions List was formally designated as the single consolidated reference for parties sanctioned in the UK.
Prior to this list, exporters were expected to cross-reference multiple lists maintained across different government departments. The consolidation removes that ambiguity.
The UK Sanctions List is a live document, meaning that entries are added, amended, and removed as designations change. A screening process that ran three months ago does not reflect the list as it stands today.
For businesses exporting regularly, infrequent or static checks are not a compliance process, but a risk. Your screening must be current, documented, and applied at the point of each transaction. That is the standard OTSI and HMRC will apply when reviewing a case.
Where Compliance Failures Actually Happen
The published enforcement record reveals consistent patterns across both frameworks.
The failures that reach compound settlement or criminal prosecution are not usually deliberate. They are the result of process gaps that accumulated across multiple shipments until enforcement made the exposure visible.
Some common failure points, drawn from published case findings and our consultants’ expertise, are:
- Export control classifications are not reviewed when product specifications, end-users, or destination markets change
- Sanctions screening is performed at customer onboarding, but not re-run at the point of each transaction
- Goods are exported to third countries without checking whether the consignee or end-user falls within the scope of a sanctions prohibition
- An assumption that the freight forwarder or customs broker is managing export compliance on the exporter’s behalf
- No documented audit trail showing what checks were run, against which list, on what date, and by whom
The audit trail point applies across both regimes. In an enforcement context, it is not enough to have conducted a check. You must be able to demonstrate it. Without documentation, a compliance defence is very difficult to construct.
What the Enforcement Record Tells Us
HMRC’s published cases provide key insights into how easily compliance exposure can grow.
Between January and March 2024, HMRC issued compound settlement offers to seven UK exporters under the Export Control Order 2008. These were seven separate businesses, seven separate process failures, in a single quarter.
In May 2025, HMRC concluded a compound settlement of £1,160,725.67 with a UK exporter that had made goods available to a Russian-connected company operating in a third country. The exporter did not ship to Russia. The breach arose because the end recipient was incorporated under Russian law, which brought it within the definition of a person connected with Russia under The Russia (Sanctions)(EU Exit) Regulations 2019. HMRC has stated this is the largest compound settlement it has concluded for a Russia sanctions offence.
In September 2025, a further compound settlement of £620,515.04 was paid in relation to unlicensed exports of military goods.
Across these cases, the goods were not always high-profile items. They included dual-use components that businesses had not recognised as controlled during their goods classification.
CSG’s goods classification specialists work with businesses across Europe to verify classifications and reduce risk. Contact us to evaluate your exposure.
Why This Matters for Your Business
If your export compliance relies on:
- Infrequent sanctions screening
- Classifications that have not been reviewed since the product was first set up
- An assumption that your logistics partners hold responsibility for controls
Then your business is carrying audit exposure that has not been quantified.
The cost of a compliance failure is not limited to the settlement figure.
It includes the internal resource consumed by an HMRC investigation, the reputational impact of a published enforcement finding, and in serious cases, the loss of the export licences or authorisations your operation depends on.
OTSI is active and publishing outcomes. The UK Sanctions List is the single designated reference. And the enforcement record shows that businesses of all sizes, across multiple sectors, are in scope for both regimes.
The question you must ask yourself is whether your compliance process would hold up if HMRC asked to review it today.
How Customs Support Group Can Help
Customs Support Group works with exporters to identify and close compliance gaps before they become enforcement issues.
We provide:
- Export control classification reviews to confirm whether your goods are controlled under the Export Control Order 2008 or the UK Military List
- Sanctions screening, covering frequency, list coverage, third-country counterparty checks, and audit trail documentation
- Third-party compliance mapping to identify where broker or freight forwarder relationships create unmanaged exposure
- Compliance frameworks that are scalable, repeatable, and audit-ready under OTSI and HMRC scrutiny
It all begins with a customs compliance scan, where our experts assess your operation and return actionable insights. Contact us to arrange yours today.
