UAE oil and fuel traders face four overlapping sanctions regimes. UN sanctions apply directly through Cabinet Decision 74 of 2020. US OFAC sanctions reach UAE traders through USD correspondent banking and through secondary sanctions on Iran-related and Russia-related petroleum trade. UK and EU sanctions reach UAE traders that touch GBP, EUR, or G7-jurisdiction service providers. The CBUAE has tightened its enforcement of the targeted financial sanctions regime in step with FATF expectations. The risk on most desks is no longer whether to comply. The risk is whether the screening, ownership analysis, and notice machinery is fast enough to catch the next OFAC update before a tanker has loaded.
- UAE traders must screen against the UN Consolidated List and the UAE Local Terrorist List under Cabinet Decision 74 of 2020, with FIU reporting within 24 hours.
- OFAC's 50 percent rule treats any entity owned 50 percent or more by SDN persons as itself blocked, even when the entity is not on any list.
- OFAC, EU, and UK sanctions have hit UAE-based entities directly in 2024 and 2025, including DMCC and free-zone traders linked to Russian, Iranian, and Houthi petroleum flows.
- US secondary sanctions can cut a UAE trader off from USD correspondent banking, even with no US nexus, which ends most physical desks.
Who this applies to
The article is for the legal and compliance teams of UAE-based oil and product traders, bunker suppliers, storage and terminal operators, shipping desks, ship managers, freight forwarders, and the banks that finance them. It applies to mainland and free-zone entities, including DMCC, JAFZA, Fujairah Free Zone, and ADGM-licensed traders, and to DIFC-licensed financial institutions providing trade finance.
The article does not cover UAE upstream concessions, where sanctions issues run on a different concession-side framework. For that, see our Abu Dhabi upstream concessions guide. It also does not cover the asset freezing of locally-domiciled funds under UAE AML law, which is set out in our UAE asset freezing piece.
The four regimes UAE traders have to manage at once
UAE traders are typically subject to four distinct sanctions regimes that operate in parallel.
The first is the UAE domestic regime under Cabinet Decision 74 of 2020. This implements the UN Consolidated List and the UAE Local Terrorist List inside the UAE. It binds every natural and legal person in the UAE, including free zones. Penalties run from AED 50,000 to AED 5 million and can include imprisonment. The supervisory authorities are the CBUAE for licensed financial institutions, the Ministry of Economy for DNFBPs, the DFSA for DIFC firms, and the FSRA for ADGM firms.
The second is US OFAC sanctions. These reach UAE traders in three ways. Primary sanctions apply where the transaction has a US nexus, including USD clearing through US correspondent banks, US-origin goods, US persons in the chain, or US territory. Secondary sanctions apply to non-US persons who engage in significant transactions with sanctioned Iranian, Russian, or other targeted sectors. The 50 percent rule blocks any entity owned 50 percent or more by SDN persons, even when not listed by name.
The third is UK and EU sanctions. These reach UAE traders that touch GBP or EUR clearing, that use UK or EU service providers (including P&I insurance, brokers, and lawyers), or that meet other jurisdictional triggers. The UK oil price cap regime is the most active enforcement focus and has produced direct UAE designations.
The fourth is the commercial sanctions framework built into trader counterparty contracts. Sanctions clauses, KYC reps, screening covenants, and termination triggers in master agreements operate on a contract law basis. Failure here produces termination, set-off, and security claim risk.
A UAE trader cannot pick one regime and ignore the others. A bunker supply at Fujairah to a non-listed vessel can still trigger OFAC secondary sanctions exposure if the vessel is owned 50 percent or more by an SDN, can trigger UK price cap exposure if the cargo is Russian-origin and priced above the cap, and can trigger UAE TFS exposure if the customer's beneficial owner appears on the Local Terrorist List or UNSC list.
Cabinet Decision 74 of 2020 in operational terms
Cabinet Decision 74 of 2020 sets the UAE TFS framework. The operational obligations on a UAE trader are:
- Register on the Executive Office (EOCN) website to receive sanctions list updates without delay.
- Screen all customers, suppliers, vessels, and counterparties against the UN Consolidated List and the UAE Local Terrorist List on onboarding and at every transaction.
- Freeze any matched funds or assets without delay and refuse to provide services to listed persons.
- Report any positive or partial hit to the relevant supervisory authority within 24 hours, and report to the UAE FIU through the goAML portal within five days.
- Maintain documented internal policies and procedures, including resourcing and training, that the supervisory authority can audit.
"Without delay" in the Cabinet Decision means within 24 hours of the listing decision being issued. The supervisory authority will check the trader's compliance during AML examinations. Non-compliance can result in administrative penalties, criminal sanctions, and licence consequences. For DNFBP-classified traders, supervision sits with the Ministry of Economy. For financial institutions involved in trade finance, supervision sits with the CBUAE under its TFS guidance.
For more on the parallel goAML and FIU reporting framework, see our AML compliance guide.
The 50 percent rule in practice for a UAE oil trader
The OFAC 50 percent rule is the single most underestimated sanctions risk for UAE traders. The rule treats any entity owned 50 percent or more by SDN persons as itself blocked. The entity does not appear on any list. Standard name-based screening returns clean. The trader still violates US sanctions by transacting with the entity if any US nexus exists.
Three features of the rule create exposure that surprises trading desks:
- Aggregation across multiple SDNs. If two SDNs each hold 25 percent, the entity is blocked. The blocking arises from the combined holding, not from any one shareholder.
- Indirect ownership through holding companies. If an SDN owns 60 percent of a Cyprus holding company, and that holding company owns 60 percent of a UAE trader's customer, the customer is blocked. The chain runs through every intermediate entity.
- Designation cadence. OFAC adds to the SDN list multiple times per month. A clean counterparty in week one can become blocked in week two. The trade chain at Fujairah is fast enough that screening run on a monthly cycle will miss designations that hit mid-month.
The March 2026 OFAC Guidance on Sham Transactions and Sanctions Evasion went further. OFAC now expects counterparty diligence to look beyond formal ownership for indications that an SDN retains a property interest through control, proxies, or other arrangements. A UAE trader who looks only at the share register is now behind the standard.
The practical compliance position for a UAE trading desk is:
- Screen on every transaction, not on customer onboarding only.
- Subscribe to a real-time SDN data feed, not monthly batch updates.
- Maintain UBO data on counterparties that is current enough to cross-reference against new designations.
- Treat any customer whose ownership chain runs through Russia, Iran, Venezuela, Yemen, or sanctioned PRC entities as enhanced-due-diligence.
- Document the diligence on every transaction, including screenshots and timestamps.
Iranian, Houthi, and Russian petroleum trade through UAE entities
UAE entities have been directly targeted in three recent enforcement waves.
In July 2025, OFAC designated Arkan Mars Petroleum DMCC and Arkan Mars Petroleum FZE, both UAE-based, for involvement in Iranian petroleum exports to Houthi-controlled territory in Yemen. The designation cited approximately USD 12 million of Iranian petroleum products coordinated with Persian Gulf Petrochemical Industry Commercial Company, an Iranian SDN. The Treasury press release describes the Houthi petroleum funding network and names the UAE entities directly.
In December 2025, the EU sanctioned UAE-based Nova Shipmanagement and Citrine Marine for shadow fleet operations in Russian oil trade. The same enforcement targeted 2Rivers Group, a UAE-based oil trader (formerly Coral Energy), and individuals linked to Rosneft and Lukoil. The UK has sanctioned VALEGRO LLC-FZ and REDWOOD GLOBAL SUPPLY FZ-LLC, both UAE-licensed, for activity in the Russian energy sector.
In December 2023, OFAC designated Voliton DMCC, a UAE-based trader, for trading Russian crude oil at prices above the G7 price cap. This was one of the first secondary sanctions actions against a UAE entity for price cap circumvention. Multiple further UAE-licensed entities have been added to OFAC, OFSI, and EU lists since.
The pattern across these enforcement actions is consistent. The targeted UAE entities had legitimate operating presence, valid trade licences, real bank accounts, and apparently clean ownership at the time of incorporation. The exposure built up gradually through counterparty selection, deceptive shipping practices, and price cap breaches. The UAE jurisdiction did not protect them. The free-zone licence did not protect them. The lesson for UAE traders that have not yet been designated is that the operational practices being sanctioned are widespread and the line between sanctioned and not sanctioned can be quite thin.
The dark fleet and ship-to-ship transfer exposure
Many UAE bunker suppliers, terminal operators, and storage operators encounter sanctioned cargo through dark fleet practices without choosing to do so. The dark fleet uses several techniques that make detection hard:
- AIS spoofing and AIS-off behaviour. Vessels broadcast false positions or stop broadcasting altogether. The ship arriving in Fujairah may not be the ship its AIS history shows.
- Ship-to-ship (STS) transfers in international waters. Sanctioned cargo is offloaded from a dark fleet tanker onto a "clean" vessel before delivery, which obscures origin.
- Flag hopping and identity laundering. Vessels change registration repeatedly. Some recycle IMO numbers from scrapped ships.
- Layered single-vessel ownership. Each vessel sits in its own one-ship company in Hong Kong, the Marshall Islands, or another opaque jurisdiction.
- Insurance gaps. Western P&I cover is not available. Many dark fleet vessels carry no verifiable insurance at all, which is itself a regulatory and environmental risk for UAE port authorities.
Windward identified more than 1,900 dark fleet vessels operating as of Q3 2025. Approximately 10 percent of global tanker tonnage is now estimated to be involved in sanctioned or illicit trade. The Strait of Hormuz is one of the chokepoints where these vessels concentrate, which puts every Fujairah-related transaction inside an enhanced risk perimeter.
For a UAE bunker supplier or terminal operator, the practical compliance steps are:
- Screen the vessel's IMO number against the OFAC SDN list and the EU consolidated list before each call.
- Check AIS history for unexplained gaps or position spoofing in the previous 90 days.
- Verify P&I cover is in place with a recognised IG club.
- Verify that the master and operator are not subject to sanctions.
- Document the vessel's last port of call, charterer, and consignee.
- Refuse the call if the vessel cannot satisfy these checks within the contractual decision window.
The Fujairah Oil Industry Zone and the wider Fujairah trading hub have already started imposing enhanced screening on cargo origin and vessel ownership in response to OFAC pressure. The supply vacuum left by the disruption to Iranian and Iraqi HSFO flows since February 2026 has forced operators to shift sourcing rapidly, which has further raised the screening burden.
How a UAE trader without US assets can lose USD banking
A UAE trader can have no US office, no US employees, and no US-origin goods, and still face US sanctions exposure. This is because of two related mechanisms.
The first is USD correspondent banking. The vast majority of physical oil and fuel trades clear through USD. USD payments route through US correspondent banks. US correspondent banks are required to comply with OFAC sanctions on every transaction they clear. A UAE trader engaging in a sanctioned transaction will see the payment frozen, returned, or reported by the US correspondent. After several such events, the UAE bank holding the trader's account will close the account because it cannot maintain its US correspondent relationship while servicing the trader.
The second is secondary sanctions designations. Where a UAE trader engages in significant transactions with sanctioned Iranian, Russian, Houthi, or other sectoral targets, OFAC can designate the trader directly under E.O. 13902 (Iran), E.O. 13662 (Russia), or other authorities. Designation cuts the trader off from the US financial system entirely. It also cuts the trader's UAE bank off from the trader, because the UAE bank cannot maintain a US correspondent if it services an SDN.
The practical effect is that secondary sanctions function as a death sentence for a physical trading desk. By the time a designation issues, the desk has typically lost the bank, the lines of credit, and the ability to settle live trades. There is no UAE court remedy that restores access to the USD system.
The CBUAE's enhanced AML monitoring of energy trading transactions, in coordination with FATF expectations, means UAE banks now actively de-risk traders that show secondary sanctions risk indicators. A trader whose customer base shifts toward Russian or Iranian counterparties may find its UAE bank exits the relationship before any OFAC designation issues.
Sanctions clauses in trader counterparty contracts
The contract layer matters because it is where pre-trade protection sits. A well-drafted sanctions clause does several jobs:
- It allocates sanctions risk between buyer and seller across the trade life.
- It gives the non-breaching party termination rights if a counterparty becomes sanctioned.
- It allows the non-breaching party to stop performance without breaching itself.
- It provides for set-off, retention of payments, and security calls if a counterparty is designated mid-trade.
- It protects against being required to deliver into a frozen account or take delivery from a sanctioned vessel.
The structure most UAE traders should be using on master agreements covers four scenarios:
For the underlying commodity contract structure that sits behind these clauses, see our gas and LNG offtake piece. The same structural logic applies to physical oil and product trades, with sanctions risk being one of the largest force majeure and termination triggers in the contract.
Voluntary self-disclosure to OFAC and other regulators
Where a UAE trader discovers a potential sanctions breach, the response in the first 72 hours determines the outcome. The options are:
- Voluntary self-disclosure to OFAC. OFAC's Economic Sanctions Enforcement Guidelines provide significant mitigation credit for voluntary self-disclosure made before OFAC discovers the breach. Mitigation can reduce the penalty by up to 50 percent in non-egregious cases. Disclosure must be complete, must include all relevant facts, and must be made through counsel.
- Self-report to the supervisory authority under Cabinet Decision 74 of 2020. The 24-hour reporting window for UAE TFS hits is independent of any OFAC reporting and runs from the date of identification.
- Stop performing the transaction. Continuing performance after discovery materially worsens the position. The trader should freeze the relevant funds, halt deliveries, and document the freeze.
- Preserve all records. Counterparty contracts, KYC files, screening logs, payment records, and email correspondence will all be material in any enforcement proceeding.
- Engage external counsel before contacting OFAC. The disclosure cover note and the contents of the disclosure shape the eventual penalty. The first letter to OFAC cannot be unsent.
For UAE-licensed financial institutions, the parallel obligation to report to the supervisor is not optional. The CBUAE expects LFIs to report potential sanctions hits within 24 hours through the goAML portal and through direct supervisor notification. DFSA-regulated firms in the DIFC have separate notification obligations under the DFSA AML rules.
The trader should not assume that a disclosure to one regulator satisfies the others. OFAC, OFSI, the EU, the UAE FIU, the supervisor, and any UAE bank in the chain may each require separate notice on different timelines.
What an effective UAE trader sanctions programme looks like
The programmes that hold up under OFAC scrutiny share five features:
- Live screening, not batch screening. Real-time SDN feed. Re-screening on every transaction. UBO data refreshed against designation cadence.
- Vessel-level diligence integrated into the booking process. IMO screening, AIS history check, P&I verification, last-port-of-call documentation, and master/operator screening before any cargo nomination is accepted.
- Documented sanctions clauses on every master agreement. Termination triggers, set-off rights, and bank rejection force majeure all drafted explicitly. No reliance on general force majeure language.
- A defined escalation path. Compliance officer, legal, board, and supervisor notice in defined order, with defined timelines.
- Regular training and tabletop exercises. Trade desk staff are the first line of defence. They have to recognise red flags in real time, not in retrospect.
The cost of running this programme is modest compared with the cost of a single OFAC designation. A designation closes the desk. A penalty notice can run into millions of dollars. A correspondent bank exit ends the trading business. None of these outcomes are recoverable through litigation in the UAE courts.
How should UAE oil traders approach sanctions compliance in 2026?
Sanctions compliance for UAE oil and fuel traders has moved from a back-office function to a front-office one. The pace of OFAC, EU, and UK enforcement, the broadening of the dark fleet, the expansion of the OFAC 50 percent rule into control-based analysis, and the CBUAE's tighter supervisory expectations all push the same way. The trader that treats sanctions screening as an annual review will be on a list within 18 months. The trader that builds screening into every booking will not.
For UAE oil traders, terminal operators, bunker suppliers, and shipping desks that want to assess current exposure, our energy disputes and compliance team advises on sanctions screening, contract drafting, OFAC voluntary disclosure, and supervisor engagement. The work is most useful before an OFAC subpoena arrives, not after.
Your success starts with the right guidance.
Whether it’s business or personal, our team provides the insight and guidance you need to succeed.

