Transit and re-routing red flags under EU: a compliance guide

A European trading company ships controlled goods through a transit hub. The final buyer is not listed. The declared route looks routine. Two weeks later, the compliance team discovers that the shipment was re-routed at the hub and the goods reached a destination that would have required a licence – or triggered a prohibition outright. The deal is done. The goods are gone. The exposure is already live.

Transit and re-routing red flags are, under EU sanctions, among the most operationally consequential compliance questions a cross-border business faces. The EU anti-circumvention instrument – applied for the first time in 2026 – makes clear that a third-country route does not change the controlled status of goods, and that a sharp change in trade flows to a neighbouring or transit jurisdiction is treated as a diversion red flag. A transit-point transaction is never neutral: it triggers ownership-and-control analysis, end-user scrutiny, and, increasingly, correspondent and insurer exposure.

This guide answers the practical questions that general counsel, trade-compliance officers, and export teams ask most often: what the EU legal regime requires, where the diversion signals arise in a real shipment, how to structure a step-by-step compliance response, and when the position is serious enough to require external counsel.

What does the EU legal regime actually require for transit shipments?

EU sanctions prohibitions attach to the goods and to the conduct of EU operators – not solely to the final destination declared on the shipping document. A Council Regulation imposing an asset-freeze or a trade restriction applies to any EU person, wherever located, who makes controlled goods or funds available directly or indirectly to or for the benefit of a listed person or a restricted destination. A transit arrangement that passes through an EU port, involves an EU freight forwarder, or is financed through an EU bank brings the transaction within the territorial and personal scope of the relevant Council Regulation.

Two instruments shape the current compliance environment most sharply. First, EU dual-use export controls, governed by the recast Dual-Use Regulation, require export authorisations that follow the item through the supply chain; the fact that goods leave an EU Member State for a third country before reaching the end user does not dissolve the obligation. Second, the EU anti-circumvention instrument, which was applied for the first time in 2026, permits the Council to direct restrictions at operators in third countries where measures are being circumvented through their territory. In our experience, operators consistently underestimate how quickly a transit-point arrangement can draw in EU-connected persons who had no direct role in the original contract.

The baseline rule is straightforward: transit through a third country does not change an item's controlled status. Origin and end-use analysis follows the item, not the route. That rule has significant practical implications for how a cross-border business should structure its pre-shipment checks.

How do EU transit red flags compare with the US and UK positions?

Understanding the EU position in isolation is not enough. Most cross-border shipments that present a transit red flag also involve US-origin goods, US-connected financing, or a UK-incorporated entity somewhere in the chain – and each regime imposes its own obligations on persons within its reach.

Under US export controls administered by BIS, the Foreign Direct Product rules can bring foreign-produced items within US jurisdiction where they are the direct product of controlled US technology or software. A re-routing of such an item through a transit hub does not cure the EAR obligation. BIS also maintains the Entity List; dealings with listed parties require a licence or are prohibited, and the re-export rules mean that a change of route triggers a fresh licence analysis. The deemed-export concept extends to the release of controlled technology to a foreign person even within the exporting country, which becomes relevant when technical data accompanies a shipment or is transmitted to a transit-hub operator.

The UK position under the relevant thematic sanctions regulations shares the EU's broad jurisdictional reach for UK persons, and OFSI's enforcement approach – which is strict-liability in civil matters – means that a UK company involved in a transit arrangement that later proves to have reached a prohibited destination faces liability without the need for the regulator to prove knowledge. How does that compare with the EU? The EU anti-circumvention instrument is newer and still developing in practice, but the underlying prohibition on making goods or economic resources available, directly or indirectly, has always been broad.

The principle common to all three regimes is the one that causes the most difficulty: where two regimes both apply, the stricter prohibition governs. A shipment that satisfies the EU position may still be prohibited under the EAR or under UK sanctions. A compliance team that screens only against the EU Council Regulations and misses a US entity-list hit is not compliant – it is exposed under a different regime. Cross-border diligence must map all applicable obligations.

What are the specific red flags that indicate a transit diversion risk?

Regulators and practitioners have identified a set of operational signals that, individually or in combination, indicate that a transit or re-routing arrangement carries elevated diversion risk. These are not exhaustive, but they are the signals that appear most frequently in enforcement contexts and in the EU's published anti-circumvention guidance.

The first and most prominent is a sharp change in trade flows to a neighbouring or transit jurisdiction. If a route that previously accounted for a modest share of a supplier's exports suddenly becomes the dominant channel, that shift is a diversion red flag. This is not a novel observation: it is explicitly recognised in the EU anti-circumvention framework and in BIS guidance on supply-chain red flags. The question a compliance officer should ask is not "is this a known transit hub?" but "why has this hub's share of our shipments changed?"

The second signal is misalignment between the declared end-user and the economic logic of the transaction. If a buyer in a transit jurisdiction has no plausible use for the goods it is purchasing, or if the quantity ordered significantly exceeds the apparent capacity of the declared end-user, the transaction warrants additional scrutiny. This is the end-user-verification question, and it applies regardless of whether the buyer is on any list.

A third red flag is unusual payment terms or routing. Payment through a jurisdiction unconnected to the buyer, the seller, or the declared end-user – particularly a jurisdiction associated with elevated financial-sanctions risk – raises the question of whether the commercial structure reflects the true beneficial arrangement.

Maritime compliance generates its own signals. AIS transmission gaps during a voyage – periods when a vessel's position signal drops – are associated with ship-to-ship transfers and are a standard diversion indicator. A vessel operating without insurance cover from a recognised insurer, or whose insurance position changes after loading, is a further flag. Port-access restrictions operate independently of cargo-level prohibitions: a vessel may be restricted from a port even where its specific cargo is not itself prohibited.

Finally, the involvement of a freight forwarder, logistics company, or intermediary incorporated in a jurisdiction with a track record of transit diversion – identified by reference to changed trade-flow data – is itself a due-diligence trigger. The identity of the logistics chain is part of the end-use picture, not a background administrative detail.

How to handle transit and re-routing red flags under EU: a step-by-step approach

When a transit or re-routing red flag arises in a cross-border transaction, the compliance response should follow a structured sequence. The sequence below reflects the approach we apply in our cross-border practice; it is a framework for analysis, not a checklist that can be completed mechanically.

Step 1 – Identify the applicable regimes. Before any other step, establish which sanctions and export-control regimes attach to this shipment. Is the operator EU-incorporated or does it have EU-connected persons in the chain? Are any goods US-origin or subject to foreign direct product rules? Is the financing EU or UK bank-connected? Each positive answer adds a regulatory layer. Map the full set of obligations before screening against any one list.

Step 2 – Screen the full transaction, not only the declared parties. Screen the declared buyer, the declared end-user, the consignee, the freight forwarder, the insurer, and – where ownership-and-control analysis is required – the ultimate beneficial owners of each. The EU ownership-and-control test applies a criterion of more than 50 percent ownership for asset-freeze purposes, and separately examines whether a listed person exercises control over a non-listed entity. A non-listed intermediary in the transit hub that is controlled by a listed person is itself caught.

Step 3 – Verify the end-user and the economic logic. Obtain an end-user declaration where appropriate. Cross-reference the declared end-user's identity, capacity, and business profile against the goods ordered. If the transaction does not make economic sense for the declared end-user, that is a diversion indicator, not merely a commercial curiosity.

Step 4 – Assess trade-flow data and AIS indicators. Is this transit route one that has seen a sharp change in trade volumes associated with the goods in question? Has the vessel's AIS record shown transmission gaps on recent voyages? These are operational checks, not legal conclusions, but they inform the risk classification of the shipment.

Step 5 – Apply the stricter prohibition. Where more than one regime applies and they impose different levels of restriction, comply with the strictest. Do not net obligations across regimes.

Step 6 – Document the analysis. Sanctions records must be kept for a defined period under the applicable regimes. A contemporaneous record of the analysis, the red flags considered, the steps taken, and the conclusion reached is the primary evidence of a compliance programme functioning as designed. Documentation is also the foundation of any voluntary self-disclosure position if an issue later comes to light.

Step 7 – Involve counsel where the red flags remain unresolved. If steps 1 through 6 do not resolve the red flags to a defensible standard, the position should be reviewed by sanctions counsel before the shipment proceeds. A transaction paused for legal review is recoverable. A shipment that completes and is later found to have breached a prohibition is not.

What is the most common mistake in transit and re-routing compliance?

The most common mistake we see in our practice is the assumption that a clean screening of the declared buyer removes the compliance risk from the rest of the transaction. It does not. It addresses one element of the analysis – the list-screening check – and leaves the end-user verification, the ownership-and-control analysis, the trade-flow diversion indicators, and the cross-regime extraterritorial questions unexamined.

This matters most in transit arrangements precisely because the declared buyer is often a legitimate commercial entity with no list connection. The diversion risk does not arise because the buyer is listed. It arises because the buyer's role in the supply chain is that of an intermediate point, not an end-user, and the goods are destined for a third party who would not have passed the same screening. That distinction is invisible to a system that screens the declared buyer and stops there.

A related mistake is the belief that seller's representations and warranties in a commercial contract transfer the compliance risk. They do not. A contractual warranty that the buyer will not re-export to a restricted destination is a contractual remedy between the parties. It is not a defence to a regulatory enforcement action under the applicable Council Regulation. The EU, OFSI, and OFAC do not give credit for contractual representations made by a counterparty; they examine what the regulated person knew, or should have known, about the transaction and what steps that person took to verify it.

Is there a shortcut that makes transit diligence quick and reliable? In our experience, no. The control set that works is proportionate, documented, and applied to the full transaction chain – not to the declared parties alone.

When should a business involve external sanctions counsel?

Not every transit red flag requires external counsel. Many can be resolved by a well-resourced in-house compliance team applying a structured process. The question is when the facts have moved beyond standard screening into territory where the legal analysis is genuinely uncertain or the exposure is material.

Counsel should be involved at the outset where the transaction involves a transit jurisdiction that has been identified in EU anti-circumvention guidance, where the goods are subject to dual-use controls and the end-user cannot be independently verified, or where the AIS or insurance indicators are unresolved. These are not situations that standard operational checklists were designed to handle.

Counsel should be involved urgently where a shipment has already completed and a compliance review indicates that it may have reached a restricted destination, or where a regulator, correspondent bank, or insurer has raised a question about a specific shipment. In those circumstances, the position of the business – whether it makes a voluntary self-disclosure, how it responds to a regulatory enquiry, and what it preserves by way of documentation – can be influenced significantly by early legal advice. The window for certain options narrows quickly.

We regularly advise clients on the full spectrum: pre-shipment diligence on transit arrangements, cross-regime analysis where EU, US, and UK obligations overlap, end-user verification support, and – where a transaction has already given rise to a concern – voluntary self-disclosure and enforcement response. The position above covers the standard analysis. Your facts – the goods, the route, the counterparties, the financing chain – will change the analysis in ways that a general guide cannot anticipate.

For a confidential review of a transit compliance question, contact Calder & Vance at info@caldervance.com.

Related practices

• AIS anomaly indicators – EU – vessel-tracking checks for EU-connected shipments under sanctions
• Transit and re-routing red flags – UAE – the same diligence questions under the UAE regime

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.