What Are Primary And Secondary Sanctions
Secondary sanctions are penalties that one country imposes on foreign third parties for doing business with a sanctioned target, even when that business never touches the sanctioning country directly. Primary sanctions work differently. They only bind a country's own citizens and companies. For any firm operating across borders, that one distinction decides who you can transact with and where your exposure really sits.
Governments reach for sanctions when they want to influence political behaviour, limit lawless acts, or push back on a hostile regime. Two types dominate the debate. Primary and secondary sanctions sit at the centre of how global compliance and enforcement plans get built, and the gap between them is wider than it looks. Primary sanctions directly restrict the citizens and entities of the sanctioning nation from dealing with particular foreign actors. Secondary sanctions cast a far wider net, reaching the third-party people or groups who do business with sanctioned parties even when the sanctioning country is nowhere in the chain. What follows breaks down both, how each mechanism works, the compliance headaches they create, and what they mean for international law and economics.
What are Primary Sanctions?
Primary sanctions are first-level restrictions a country places on its own citizens, residents, and organisations. Directly and explicitly, those individuals and entities cannot conduct certain transactions or hold certain associations with foreign parties, individuals, or governments. They rest on domestic law and apply within the imposing country's jurisdiction. A primary U.S. sanction, for instance, stops an American firm from dealing with North Korea or offering any kind of financial service to companies in Iran. Every U.S. person falls under that reach. Think citizens, permanent residents, companies incorporated in the U.S., and the foreign branches those companies operate.
Where does the legal authority come from? Usually national legislation such as the U.S. International Emergency Economic Powers Act (IEEPA) or the Patriot Act. Primary sanctions form the cornerstone of a country's sanction regime, and they read as a direct expression of its foreign policy and security concerns.
What are Secondary Sanctions?
Secondary sanctions are an indirect way to punish foreign entities, whether persons, corporations, or countries, that keep relations with a sanctioned target. The catch is that those relations need not involve the sanctioning country at all. This is what sets them apart. They carry extraterritorial reach, pushing compliance responsibility well beyond national frontiers.
There is no requirement for a multilateral agreement here. A single nation, the United States being the obvious case, can wield them to pile extra pressure on a target across the globe. Foreign parties cannot be compelled by law. Yet the message lands plainly enough: walk away from the sanctioned party, or lose your access to the sanctioning country's financial system.
The Difference Between Primary and Secondary Sanctions
For fintechs running across multiple countries, telling primary and secondary sanctions apart is one of the things that matters most in compliance and international finance.
Primary sanctions from a government land directly on its own people and economic players. U.S. citizens, to take the clearest case, cannot deal with organisations blacklisted by U.S. sanctions, such as those based in Iran or North Korea. The law requires it. Enforcement happens at home.
Secondary sanctions point somewhere else entirely. Rather than a domestic target, they reach people or companies outside the sanctioning country for engaging with sanctioned parties, with or without a direct relationship. Picture a European bank that helps Iran ship oil to Europe. In the U.S. framework, that bank could lose access to American financial systems.
How do Secondary Sanctions Work?
Secondary sanctions can catch entities and authorities in other countries even when those entities never appeared in the original sanction regime. Direct restriction of specific acts is not the method. Instead, economic pressure does the work, nudging every country toward the same rules.
So how does it play out in practice? Take any foreign business supplying something to Iran's energy industry, or routing funds to Russian defence organisations. That business risks a penalty from the sanctioning country, and the penalty usually arrives in one of these forms:
- Blocked access to its financial system
- Restrictions on transactions in its currency, such as the U.S. dollar
- Frozen assets, or an outright denial of market entry
- A spot on the blacklist for executives or business partners
Nothing in secondary sanctions legally obliges a foreign company to comply. Compliance still happens, because non-compliance can mean losing access to markets like the United States. Some companies abroad go further and voluntarily cut ties with customers they read as high risk.
Pressure on fintechs and globally connected companies is real here. Follow the policies of the country involved, the thinking goes, and your relationships and banking access stay intact worldwide.
Who Imposes Sanctions on Countries?
National governments and supranational bodies impose sanctions through legal frameworks and executive power. The United States is the most active user of secondary sanctions. Several other major regimes shape global compliance obligations too, and compliance teams usually screen against all of them at once.
US Sanctions and OFAC
In the United States, sanctions are administered primarily by the Office of Foreign Assets Control (OFAC), part of the Treasury Department. OFAC maintains the Specially Designated Nationals (SDN) list alongside country-based programs covering jurisdictions such as Iran, North Korea, Cuba, Syria, and Russia. So much global trade settles in U.S. dollars that OFAC designations carry weight far past U.S. borders, and that weight is what gives American secondary sanctions their reach. The consequence is steep. A non-U.S. firm that transacts with an SDN-listed party can land on the list itself and be cut off from the dollar system.
EU Sanctions
The European Union imposes sanctions, often called "restrictive measures", through Council regulations and decisions that apply across every member state. EU measures span asset freezes, travel bans, and sector-specific restrictions, and they bind EU persons and entities. Historically the EU has leaned toward primary measures. At times it has even introduced blocking statutes to shield European firms from the extraterritorial effect of U.S. secondary sanctions, which explains how one transaction can be legal under a single regime yet exposed under another.
UK Sanctions
Since leaving the EU, the United Kingdom has run an autonomous sanctions regime under the Sanctions and Anti-Money Laundering Act 2018, administered by the Office of Financial Sanctions Implementation (OFSI). It keeps its own consolidated list of designated persons. Rather than copying U.S. and EU measures wholesale, the UK aligns with them selectively. Any firm with UK exposure has to screen against the UK list on its own, since it does not always match the others.
UN Sanctions
The United Nations Security Council imposes multilateral sanctions, and member states are obligated to write them into national law. UN sanctions enjoy the broadest international recognition. Even so, they tend to run narrower than unilateral programs and rarely reach into secondary measures. Think of them as the baseline that individual countries then extend with their own, often stricter, designations.
Who Needs to Comply With Primary and Secondary Sanctions?
Global businesses have to handle sanctions compliance well. Both types put legal obligations on individuals and firms, yet the rules each one applies look dramatically different.
Primary sanctions concern citizens, permanent residents, companies based in the U.S., and U.S.-registered branches of foreign companies. They block transactions with particular individuals, companies, or nations such as Iran and North Korea. Breach them and the consequences can be severe.
Secondary sanctions can strip non-U.S. parties of access to U.S. financial markets for engaging with sanctioned individuals or companies. Say a foreign firm carries out activities the U.S. objects to, certain dealings with Russia's military among them. It can lose access to the U.S. financial system with no U.S. nexus at all.
Any business with a global presence has to understand its exposure. U.S. sanctions reach a wide range of activity. Companies outside the U.S. therefore need to monitor the relevant watchlists and run proper screening to stay clear of penalties, because operating openly and cautiously matters for anyone in a connected financial environment.
Building a screening program that has to cover OFAC, EU, UK, and UN lists all at once? You can book an AML screening demo to see how a single workflow handles every one of them.
Examples of Primary and Secondary Sanctions
Primary and secondary sanctions often aim at the same groups, yet each one operates on its own logic. The Cuban embargo, for example, bars American citizens and companies from any trade or financial activity with entities in Cuba. In the same vein, services from U.S. firms to Iranian banks fall outside what OFAC sanctions allow. Secondary sanctions flip the target onto third parties. A European bank caught up in trade with Iran's Islamic Revolutionary Guard Corps could face U.S. secondary sanctions, being barred from using the U.S. dollar among them, and not only banks based in the U.S. fall into that net.
Key Countries and Sectors Targeted
More often than not, primary and secondary sanctions hit nations accused of terrorism, nuclear weapons development, human rights offences, or military aggression. The recurring names are Iran, North Korea, Russia, Syria, and Venezuela. Certain sectors draw the most scrutiny: oil and gas, banking and finance, shipping, defence, and emerging technology. For fintechs and global businesses, the takeaway is to exercise greater care with any client, partner, or transaction touching those sectors or regions.
Legal and Economic Implications
Primary sanctions carry the force of law, and anyone who disobeys may face civil or criminal penalties. Secondary sanctions cannot be enforced overseas, so countries fall back on financial pressure to make foreign entities comply. Some governments read this as a sovereignty concern, and allies have at times pushed back against the actions. Even the act of trying to comply can drive a business to drop every relationship with a given customer, no matter how low the risk. The fallout shows up as reduced access to foreign markets, weaker ties between countries, and a more fragmented set of financial institutions worldwide. Staying ahead of all this asks fintechs to keep a secure system in place and to watch continuously for sanctions updates. A sanctions list overview is a handy place to start when you want to know which designations apply to your business.
How KYC Hub Supports Sanctions Compliance
Keeping pace with primary and secondary sanctions across multiple regimes is a continuous obligation, never a one-time check. KYC Hub's AML screening and monitoring is built to carry that load. Here is what it brings to the table:
- Exhaustive AML screening. Screen customers, counterparties, and transactions against global sanctions lists, OFAC, EU, UK, and UN designations included, so secondary-sanctions exposure surfaces before it turns into a problem.
- Continuous monitoring and AML alerts: designations shift constantly, and ongoing monitoring re-screens your book as the lists update, raising an alert the moment a match appears rather than waiting on a quarterly review.
- Global adverse media intelligence to catch risk signals tied to sanctioned sectors and to entities not yet formally listed.
- Network intelligence that maps relationships between parties and exposes indirect links to sanctioned entities, which is exactly where secondary-sanctions risk likes to hide.
- Global data coverage: pull the major regimes into one screening workflow instead of running each watchlist on its own.
What you get is a screening program that mirrors the live state of global sanctions and shows your team only the alerts worth a second look.
Book an AML screening demo to see it applied to your customer and transaction flows.
Conclusion
Telling primary from secondary sanctions apart is critical work for anyone in law, compliance, or policy. Primary sanctions show a country's grip over its own people and companies. Secondary sanctions spread that influence across the world through sheer economic pressure, and the measures meant to change behaviour can end up fragmenting international financial systems and piling on legal exposure. The world keeps getting more connected. Managing sanctions, then, demands careful planning and a clear grasp of the law.

