Ukraine -- Sanctions Compliance Regulatory Overview

The landscape of cryptocurrency sanctions and restrictions in Ukraine is complex, primarily driven by the ongoing full-scale invasion by Russia and the robust international response. Ukraine itself, as well as major international bodies (OFAC/US, EU, UN), impose and enforce sanctions that significantly impact Virtual Asset Service Providers (VASPs) operating within or dealing with Ukrainian entities/individuals, or dealing with sanctioned Russian/Belarusian entities/individuals.

Here’s a breakdown of the key aspects:

Overarching Sanctions Frameworks Impacting Ukraine and Crypto

VASPs operating globally, and especially those dealing with Ukraine or entities/individuals connected to the conflict, must comply with a multitude of international sanctions regimes.

1. U.S. Office of Foreign Assets Control (OFAC) Sanctions

OFAC administers and enforces economic sanctions programs primarily targeting foreign countries and regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy, or economy of the United States. In the context of Ukraine, the most relevant programs are the Russia-related Sanctions and the Ukraine-related Sanctions.

• Key Impact on Crypto: OFAC has explicitly targeted cryptocurrency transactions and entities facilitating sanctions evasion, particularly those linked to Russia. It has sanctioned crypto mixers (e.g., Tornado Cash), crypto exchanges (e.g., Garantex, SUEX), and specific individuals involved in facilitating illicit finance.
• Compliance Requirements for VASPs:
  • Sanctioned Entity Screening: Strict obligation to screen all customers (KYC), beneficial owners, and transaction counterparties against the Specially Designated Nationals and Blocked Persons (SDN) List and other OFAC sanctions lists (e.g., Non-SDN Menu-Based Sanctions List - NS-MBS).
  • Asset Freezes: Any virtual assets owned or controlled by sanctioned persons must be blocked and reported to OFAC.
  • Prohibited Transactions: Prohibition on engaging in any transactions, directly or indirectly, with sanctioned individuals, entities, or in relation to sanctioned jurisdictions/territories (e.g., Crimea, occupied territories of Ukraine).
  • Geographic Restrictions: Prohibitions on engaging in certain economic activities within Crimea, Sevastopol, and the occupied territories of Donetsk, Luhansk, Kherson, and Zaporizhzhia regions of Ukraine.
  • Reporting Obligations: Mandatory reporting of blocked assets and rejected transactions to OFAC.
• Legal References:
  • OFAC Main Website: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
  • Russia-Related Sanctions Program: https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information/russia-related-sanctions
  • OFAC Guidance on Virtual Currency: https://home.treasury.gov/policy-issues/financial-sanctions/faqs/virtual-currency (See FAQs specific to virtual currency and sanctions compliance)

2. European Union (EU) Sanctions

The EU has implemented extensive sanctions against Russia and Belarus in response to the aggression against Ukraine. These sanctions are binding on all persons and entities subject to EU law.

• Key Impact on Crypto: The EU has specifically included virtual assets in its sanctions packages, treating them as transferable securities or financial assets for the purpose of asset freezes and other restrictions. This includes bans on providing crypto-asset wallet, account, or custody services to Russian persons and residents (with some exceptions).
• Compliance Requirements for VASPs:
  • Sanctioned Entity Screening: Obligation to screen against the EU Consolidated Financial Sanctions List.
  • Asset Freezes: Freezing of all funds (including virtual assets) belonging to, or owned or controlled by, listed individuals and entities.
  • Prohibited Transactions: Broad prohibitions on making funds or economic resources available, directly or indirectly, to listed persons.
  • Restrictions on Crypto Services: Specific prohibitions on providing crypto-asset wallet, account, or custody services to Russian nationals, natural persons residing in Russia, or legal persons/entities established in Russia (with certain thresholds and exceptions for humanitarian purposes or personal use).
  • Geographic Restrictions: Restrictions on economic activities related to Crimea, Sevastopol, and the non-government controlled areas of Donetsk, Luhansk, Kherson, and Zaporizhzhia.
• Legal References:
  • EU Sanctions Map (Consolidated information): https://www.sanctionsmap.eu/
  • Council Regulation (EU) No 269/2014: Concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine (as amended): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014R0269-20240315
  • Council Regulation (EU) No 833/2014: Concerning restrictive measures in view of Russia's actions destabilising the situation in Ukraine (as amended, including crypto-specific measures): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014R0833-20240315

3. United Nations (UN) Sanctions

UN Security Council resolutions impose sanctions that are binding on all UN member states. While the UN currently does not have a specific sanctions regime directly related to the Russia-Ukraine conflict, UN resolutions are often implemented by individual member states (like the US and EU members) and serve as a baseline for international cooperation.

• Key Impact on Crypto: While the UN has not specifically sanctioned crypto, its broader resolutions on combating the financing of terrorism and proliferation (e.g., related to North Korea or Iran) implicitly require member states to ensure that virtual assets are not used to circumvent these sanctions.
• Compliance Requirements for VASPs: VASPs must be aware that UN sanctions lists (e.g., ISIL (Da'esh) & Al-Qaida Sanctions List, 1988 Taliban Sanctions List) are incorporated into national sanctions regimes (like OFAC's SDN List and EU lists).
• Legal References:
  • UN Sanctions Committees: https://www.un.org/securitycouncil/sanctions/information

Ukraine's Country-Specific Sanctions and Crypto Regulations

Ukraine itself implements national sanctions and has begun to regulate virtual assets.

1. National Security and Defense Council (NSDC) Sanctions

Ukraine's NSDC regularly imposes sanctions on individuals and legal entities, primarily those connected to the aggression against Ukraine, collaboration with the aggressor state, or other threats to national security. These sanctions include asset freezes, restrictions on economic activity, and travel bans.

• Key Impact on Crypto: While specific crypto assets may not always be explicitly mentioned, "assets" generally include all forms of property. Ukrainian VASPs and entities must comply with these national sanctions.
• Sanctioned Entity Screening: VASPs operating in Ukraine or interacting with Ukrainian entities must screen their customers and transactions against the NSDC Sanctions List.
• Legal References:
  • Decrees of the President of Ukraine on NSDC decisions (official source, mostly in Ukrainian): https://www.president.gov.ua/documents/decrees/search?search=sanctions (Use search function for "sanctions" or specific decree numbers).
  • The National Sanctions Register of Ukraine (maintained by the National Agency on Corruption Prevention - NACP, includes NSDC data): https://sanctions.nazk.gov.ua/en/

2. Legal Basis for Virtual Assets in Ukraine

Ukraine enacted the Law of Ukraine "On Virtual Assets" (Закон України "Про віртуальні активи") in September 2022. This law defines virtual assets, their legal status, and lays the groundwork for regulating the virtual asset market, including VASPs.

• Key Compliance Requirements for VASPs (under Ukrainian law):
  • AML/CTF Obligations: The law mandates VASPs to implement robust anti-money laundering and counter-terrorist financing (AML/CTF) procedures, including KYC/CDD, transaction monitoring, and reporting suspicious activities to the State Financial Monitoring Service of Ukraine. These obligations are aligned with FATF Recommendations.
  • Sanctions Compliance: While not explicitly a "sanctions law," the "On Virtual Assets" law, in conjunction with other Ukrainian legislation, requires VASPs to comply with national and international sanctions, ensuring that their services are not used for sanctioned activities or by sanctioned individuals/entities.
  • Licensing/Registration: The law provides for future licensing/registration requirements for VASPs, which will include compliance with sanctions as a prerequisite. The National Commission on Securities and Stock Market (NSSMC) is designated as the regulator.
• Legal References:
  • Law of Ukraine "On Virtual Assets" (in Ukrainian): https://zakon.rada.gov.ua/laws/show/2074-IX#Text (Official Verkhovna Rada website)

Sanctioned Entity Screening Obligations for VASPs

VASPs, regardless of their primary jurisdiction, have a critical obligation to implement comprehensive screening processes:

• Real-time & Batch Screening: All new customers and existing customer databases must be screened against relevant sanctions lists (OFAC SDN, EU Consolidated, UN, NSDC). This includes individuals, entities, and wallet addresses where possible.
• Ongoing Monitoring: Continuous monitoring of transactions for red flags associated with sanctions evasion (e.g., transactions involving known sanctioned entities, unusual transaction patterns, transactions to/from high-risk jurisdictions or mixers).
• Ultimate Beneficial Ownership (UBO) Screening: Identifying and screening the UBOs behind legal entities to ensure they are not sanctioned.
• Geographic IP Blocking: Implementing measures to restrict access to services from sanctioned geographies.

Geographic Restrictions

VASPs must adhere to geographic restrictions imposed by various sanctions regimes:

• OFAC & EU: Prohibit certain economic activities and financial services in:
  • Crimea and Sevastopol (occupied by Russia since 2014)
  • Occupied territories of Donetsk, Luhansk, Kherson, and Zaporizhzhia regions (occupied by Russia since 2022)
• General Sanctions on Russia/Belarus: Many sanctions programs prohibit various types of financial services, exports, and imports to/from Russia and Belarus, impacting any VASP interactions with entities or individuals residing or established in these countries.
• Ukraine's Perspective: Ukraine considers all temporarily occupied territories as integral parts of its sovereign territory but imposes its own restrictions on economic activity within these areas to counter the occupation.

Penalties for Violations

Violations of sanctions can lead to severe penalties, both for the VASP and individuals involved.

1. U.S. Penalties (OFAC)

• Civil Penalties: Can range from hundreds of thousands to millions of dollars per violation, depending on the specific program and severity.
• Criminal Penalties: For willful violations, individuals can face substantial fines (up to millions of dollars) and lengthy imprisonment (up to 20-30 years), while corporations can face much larger fines.
• Reputational Damage: Significant harm to a VASP's reputation and ability to operate.
• Legal Basis: Primarily the International Emergency Economic Powers Act (IEEPA).

2. EU Penalties

• Member State Discretion: Penalties for violating EU sanctions are determined by individual member states, but EU directives require them to be "effective, proportionate, and dissuasive."
• Common Penalties: Include substantial fines, imprisonment for individuals, and confiscation of assets.
• Reputational Damage: Similar to U.S. penalties, significant reputational harm is a major consequence.

3. Ukrainian Penalties

• Administrative Responsibility: For violations of AML/CTF laws or non-compliance with sanctions, individuals and legal entities can face significant fines.
• Criminal Responsibility:
  • Article 209 of the Criminal Code of Ukraine (Legalization (Laundering) of Property Obtained by Criminal Means): Imprisonment up to 12 years with confiscation of property.
  • Article 258-5 (Financing of Terrorism): Imprisonment up to 12 years with confiscation of property.
  • Other Articles: Criminal liability for actions aimed at undermining Ukraine's territorial integrity, assisting the aggressor state, or violating sanctions can lead to severe penalties, including imprisonment and asset seizure.
• Loss of Licenses/Registration: VASPs could have their licenses revoked or applications denied.
• Legal Basis: Criminal Code of Ukraine (Кримінальний кодекс України), Code of Administrative Offenses of Ukraine (Кодекс України про адміністративні правопорушення).

Conclusion

VASPs dealing with Ukraine, or engaging in any crypto-related activities that could involve Russian or Belarusian entities, face an exceptionally high-risk and complex sanctions environment. Robust sanctions compliance programs are not just a regulatory requirement but a necessity to avoid severe legal, financial, and reputational consequences. This includes comprehensive KYC, ongoing transaction monitoring, real-time sanctions screening, and a deep understanding of the evolving international and national sanctions lists and geographic restrictions.

Given the dynamic nature of sanctions, VASPs must continuously monitor updates from OFAC, the EU, and the Ukrainian government. It is strongly recommended to seek expert legal advice to ensure full compliance.