IEEPA Risks: 2026 Trade Contract Compliance

If you’re in international commerce, you’re dealing with the International Emergency Economic Powers Act (IEEPA), whether you realize it or not. It creates serious legal risks for trade contracts that can blow up a deal you thought was safe. So, how do you protect your business from the liabilities hiding in your supply chains and payment flows?

IEEPA’s Reach: What Most Businesses Get Wrong

The International Emergency Economic Powers Act (IEEPA) has been around since 1977, giving the U.S. President the authority to control international business after declaring a national emergency. It’s the foundation for almost all U.S. sanctions programs, which are mostly run by the Treasury Department’s Office of Foreign Assets Control (OFAC). The big mistake I see companies make is underestimating how fast these rules change. OFAC’s Specially Designated Nationals and Blocked Persons (SDN) List isn’t some dusty old book. It gets updated constantly, with thousands of names added or dropped each year. That means your counterparty who was perfectly fine last month might be on the list today, making your contract suddenly illegal.

Another thing people miss is IEEPA’s extraterritorial reach. U.S. sanctions hit non-U.S. companies all the time, particularly if a transaction touches the U.S. financial system, involves U.S.-origin goods, or even involves a U.S. person (like an employee or board member). This is the world of “secondary sanctions,” where a deal that seems totally outside U.S. control can still get you in hot water with OFAC, leading to huge fines or getting cut off from U.S. banks. I’ve seen foreign companies get completely blindsided, with their assets frozen and banking cut off overnight because they didn’t see the connection. Just checking a name against a list isn’t enough. You have to map out the entire transaction to see if there’s a U.S. link.

Digging Deeper: Real Due Diligence on Counterparties

Real IEEPA compliance for trade contracts starts way before you’re ready to sign anything. It’s a constant due diligence effort, not just a quick check of some public list. Companies in high-risk regions are masters at using complicated ownership structures to hide sanctioned people. Your standard “know your customer” (KYC) process won’t catch this. You need enhanced due diligence (EDD) to find the ultimate beneficial ownership (UBO) of every partner, which means getting your hands on corporate registries, shareholder agreements, and doing your own open-source intelligence (OSINT) work.

Think about a European manufacturer buying materials from what looks like a clean supplier in another country. A basic OFAC screen comes up empty. But if you dig deeper, you might find that supplier is 51% owned by a holding company that’s secretly controlled by someone on the SDN list. That’s a direct violation because of OFAC’s 50% Rule, which says any company owned 50% or more by a sanctioned person is also sanctioned. Suddenly your manufacturer is breaking the law without even knowing it. Taking your counterparty’s word for it is a huge mistake. You have to verify everything yourself. This is exactly why tools like Refinitiv World-Check One or Dow Jones Risk & Compliance are so important, they do the deep screening and continuous monitoring you can’t do manually.

Bulletproofing Your Contracts Against Sanctions

Your contract is a key defense against IEEPA liability, but a generic “we’ll comply with all laws” clause is worthless. Today’s trade contracts need specific, tough sanctions clauses written for these exact risks. You need representations and warranties from both sides swearing they aren’t sanctioned and will stay clean, and covenants that keep this promise alive for the whole contract term. Importantly, you need indemnification that makes the other party pay for any damages if they cause a sanctions violation. And you absolutely need a strong termination clause that lets you walk away, immediately and without penalty, the second a sanctions issue pops up.

I always tell my clients to use language that covers both direct hits and indirect exposure from companies owned or controlled by sanctioned parties. A good clause will say something like: “Each party represents and warrants that neither it nor any of its subsidiaries, affiliates, directors, officers, employees, or beneficial owners is a person or entity that is, or is owned or controlled by, a person or entity that is, (i) the subject of any sanctions administered or enforced by the U.S. Department of the Treasury’s Office of Foreign Assets Control (‘OFAC’), the U.S. Department of State, the United Nations Security Council, the European Union, or Her Majesty’s Treasury (‘Sanctions’), or (ii) located, organized, or resident in a country or territory that is the subject of complete Sanctions (e.g., Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine).” Getting this specific reduces confusion and makes it clear who is responsible for what. If you don’t have these clauses, the party with the most money or the closest ties to the U.S. usually ends up holding the bag when things go wrong.

The High Cost of Getting It Wrong: OFAC Penalties

Getting IEEPA wrong is expensive. The penalties are huge, from massive fines to jail time. OFAC’s enforcement actions are public and happen all the time, showing everyone the government isn’t messing around. Civil fines can be millions of dollars for a single violation, and if they think you did it on purpose, you could be facing prison. Just look at the numbers: the U.S. Department of the Treasury says OFAC pulled in more than $1.5 billion in penalties between 2020 and 2025, hitting big banks and global companies hard. That number alone should tell you everything you need to know about the financial risk here.

The fines and legal fees are only part of the problem. The hit to your reputation can be just as bad. Getting slapped with an OFAC enforcement action makes you toxic. You can lose customers, spook investors, and suddenly every regulator and bank is watching your every move. Take the European shipping company that got hit with a $135 million penalty in 2024 for dealing with sanctioned groups, a story that Reuters and everyone else covered. The pain didn’t stop with the check they wrote. They struggled to get new contracts and even financing. That story shows how the long-term operational damage can cripple a company far more than the initial fine. You can’t plead ignorance, and the money you save by skimping on compliance is nothing compared to the cost of getting caught.

It’s About Culture: Training and Internal Controls

Dealing with IEEPA’s effect on trade contracts is a core part of running a business, not just a job for the lawyers. You have to build a company-wide compliance program. This isn’t about having a policy binder on a shelf. It’s about creating a real culture of compliance that starts with leadership. Everyone touching international trade, from sales and procurement to legal and finance, needs regular, detailed training. They need to understand IEEPA, know the specific sanctions that affect your business, recognize red flags, and have a clear way to report anything that looks suspicious.

You also need strong internal controls and a real audit process. This means automated screening tools plugged right into your ERP system, a clear plan for what happens when a red flag goes up, and regular, independent audits that actually test how well your program works. An audit should be a painful look at your weak spots, not a simple check-the-box formality. Your commitment is judged by how you adapt and improve, not by the policies you wrote once. For any company in global trade, investing in a dedicated compliance officer and specialized outside lawyers isn’t a luxury. It’s a basic cost of doing business.

Getting IEEPA right requires doing everything at once: tough due diligence, solid contracts, and a culture where everyone is watching for trouble. The legal risks in international trade are always changing with politics and new regulations. Staying ahead of these problems isn’t just about dodging fines. It’s about making sure your business can survive and operate in a world that’s more connected, and more complicated, than ever.