Compliance with international sanctions was long seen as the preserve of correspondent banks and listed multinationals.
This assumption no longer holds. As Washington expands the extraterritorial reach of its regimes, as Brussels and the United Nations multiply sectoral designations, and as Tunisia tightens its own framework, a Tunisian SME can find itself legally and financially exposed without ever having dealt with, nor even known, a sanctioned person or entity.
Compliance crosses national borders
The year 2026 marks a clear turning point in sanctions law. The U.S. Treasury launched in August the so-called Economic Outcast operation, a broad-based economic pressure campaign against Iran and its support networks, just weeks after the expiration of a memorandum of understanding that had hinted at some relief.
In the wake of this, the Office of Foreign Assets Control revoked access for American correspondent banks to the Emirati subsidiary of a major Egyptian bank, demonstrating that sanctions no longer target only the designated entity but its entire settlement network, including in geographically proximate third-country jurisdictions to Tunisia.
This hardening is underpinned by a rapidly expanding legal arsenal: Decree 14024 on the Russian defense-industrial base, Decree 14114 on circumventing Iranian sanctions, and Decree 14404 adopted in May 2026 concerning Cuba, each widening the scope of transactions deemed significant.
Recent legal analyses indicate that more than 65% of secondary sanctions measures now target legal entities rather than individuals, shifting the epicenter of risk toward ordinary businesses, including exporting or subcontracting SMEs.
The technical mechanism remains constant: as soon as a payment denominated in dollars passes, even briefly, through an American correspondent bank, the transaction falls within OFAC’s jurisdiction, regardless of the nationalities of the initial parties.
Vectors of contamination for the Tunisian company
Risk rarely arises from a direct relationship with a blacklisted entity. It is usually built through four propagation vectors that the SME does not perceive at the moment it enters into a contract.
The diagram below maps this contamination chain, from the Tunisian company to the ultimately designated party, illustrating how a risk perceived as nil at the first tier of the business relationship becomes, two or three intermediaries later, a critical exposure.
Figure 1
| Tunisian SME | Direct supplier (tier 1) | Subcontractor (tier 2) | Screen intermediary (tier 3) | Designated party (SDN / EU / UN) |
| Starting point | Perceived risk: none | Actual risk: low | Actual risk: high | Exposure: critical |
| → | → | → | → |
Mapping of the sanction exposure chain, from the first-tier supplier to the designated party
This dilution of risk across successive tiers of the value chain explains why enforcement authorities, including OFAC, have explicitly abandoned the doctrine of direct violation.
American authorities now actively pursue facilitation, evasion, and mere causal contribution to a prohibited transaction, holding liable parent companies, banks and upstream suppliers in a supply chain, even when the disputed transaction was executed by a subsidiary or subcontractor.
The February 2026 designations provide a direct illustration, as they target entire networks of shell companies built solely to conceal the true beneficiary of an asset or a financial flow.
The matrix below details, for each of the four identified vectors, the propagation mechanism, a documented precedent from 2025-2026, and the warning signal that the Tunisian SME must learn to recognize before signing a contract.
Figure 2
| Vector | Propagation mechanism | Documented example 2025-2026 | Warning signal for the SME |
| Financial | Dollar settlements transiting through an American correspondent bank, even for a transaction with no apparent US link | OFAC alert on the Russian SPFS system: any foreign bank connected to it risks designation, even without a direct operation with a sanctioned person | Unexplained blockage or delay of an international transfer; unusual requests for documentation by the correspondent bank |
| Commercial | Tier 2 or 3 supplier linked to a designated entity, liability back through the entire supply chain | European technology company sanctioned in 2025 for 4.7 million dollars after supplying, via a UAE-based reseller, software containing American-origin components to a Russian actor | Opacity about the ultimate beneficiary of a contract, partner insisting on multiple intermediaries |
| Equity | Shareholding or beneficial owner concealed behind shell structures, trusts or straw men | OFAC February 2026 designations targeting entire networks of shell companies designed to mask actual ownership of assets | Incomplete or outdated beneficial ownership register; ownership structure difficult to trace |
| Technological | Dual-use goods, software or services, or incorporating components of American origin subject to export controls | August 2026 revocation of a regional banking subsidiary’s access to the American banking correspondence system, as part of Economic Outcast | Final client not identified for sensitive equipment; delivery via an unjustified third country |
Matrix of sanction exposure vectors and associated alert signals
The Tunisian double front
Tunisia’s vulnerability unfolds on two simultaneous but converging fronts. Internationally first, FATF mutual evaluation missions have raised serious concerns about four specific chapters: the effectiveness of the beneficial ownership registry, the supervision of designated non-financial professions such as lawyers, notaries and accountants, the slow implementation of UN targeted sanctions, and delays in accessing financial information.
In the absence of tangible corrections, the evaluation planned for 2026 could place Tunisia back on the list of jurisdictions under enhanced surveillance, a scenario already experienced between 2019 and 2020, whose consequences included a generalized rise in the cost of external financing and increased caution by foreign correspondent banks toward Tunisian operators.
Nationally, the Tunisian authorities have reacted to this pressure with unprecedented regulatory tightening.
Since October 2025, banks are required to block an increasing share of incoming foreign transfers, sometimes for amounts of only a few hundred euros, which disproportionately harms SMEs already weakened by the economic climate.
In January 2026, the Tunisian Central Bank tightened, by circular, the vigilance obligations of foreign exchange offices toward politically exposed persons and operations related to sensitive jurisdictions, under penalty of permanent withdrawal of authorization.
The Financial Market Council, for its part, adopted in January 2026 a three-year anti-money-laundering strategy built around strengthening the effective enforcement of targeted financial sanctions, verifying the effectiveness of screening systems against national and international lists, and the immediate application of asset-freezing measures, without prior notice to the client concerned.
This latter provision deserves particular attention from SMEs: an account or a transaction can be frozen before the company is informed, the only remedy being ex post recourse to the Tunisian Commission for Financial Analyses.
What SMEs must put in place
Faced with this double pressure, mere formal compliance limited to verifying the direct counterparty no longer offers real protection. The Tunisian SME that wants to secure its business relationships must now extend its due diligence beyond the first contractual tier, by requiring from its partners documented transparency about the identity of their own suppliers and the structure of their shareholding.
The integration of contractual clauses for sanctions non-exposure, coupled with systematic screening of third parties against OFAC, EU and UN lists, now constitutes a minimal standard, including for modest-size operations.
This enhanced due diligence also requires internal coordination between purchasing, export and finance functions, ongoing regulatory monitoring of the evolution of designation lists and central bank circulars, and an alert system capable of identifying, upstream of a transaction, the weak signals listed in the previous matrix.
Companies that build this framework before being compelled by an incident turn regulatory constraint into a competitive advantage, particularly in their relations with international buyers themselves subjected to heightened diligence requirements for their Tunisian suppliers.
The sanction exposure of a Tunisian SME is no longer hypothetical. It stems from an increasingly extraterritorial international legal framework, from a value chain that is increasingly opaque beyond the second tier, and from a Tunisian national framework undergoing accelerated tightening under FATF pressure. In this context, compliance ceases to be a support function and becomes a condition for access to international financial channels.
References
- Financial Market Council (CMF), press release relating to the 2026 strategy to combat money laundering and the financing of terrorism, January 2026.
- Central Bank of Tunisia, circular on strengthening the vigilance obligations of exchange offices, January 2026.
- Tunisia Commission for Financial Analyses (CTAF), activity reports and coordination with liable entities, 2025-2026.
- Financial Action Task Force (FATF), elements of the mutual evaluation mission of Tunisia and methodological reservations, 2025-2026.
- U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), announcements relating to the Economic Outcast operation and alert on the SPFS system, 2026.
