Dutch supervisors are asking accountants to connect ownership, goods, routes and decisions.
A Dutch technology supplier receives an attractive order through a distributor outside the European Union. The customer name produces no sanctions match. The product has an ordinary industrial use. Sales sees no reason to wait.
Then the accountant asks who ultimately controls the buyer. The bank wants the final destination. Nobody can immediately explain why payment will come from another group company. Nothing in that sequence points to one simple conclusion. Yet the order cannot move comfortably until several disconnected facts form one credible story.
That is the practical weight of the June findings from the Bureau Financieel Toezicht and the Dutch Authority for the Financial Markets. Their accountancy-sector review found broad awareness of sanctions risk, alongside weaknesses in how firms recorded ownership, goods, services, specialist advice and the effect on monitoring.
The search result is only the beginning
BFT examined client due diligence and ongoing monitoring in ten cases at three institutions. AFM reviewed six audit firms with regular licences, covering around thirty statutory audits. The review was limited, but it exposed a useful pressure point for companies and advisers.
BFT found incomplete documentation of ultimate beneficial owner checks. In some cases, the records did not explain why a firm had concluded that a pseudo-UBO should be recorded. Firms had also consulted sanctions specialists without consistently documenting their own assessment or translating the advice into their Wwft risk classification and monitoring.
AFM identified another weakness. Firms sometimes read sanctions risk too narrowly, focusing on listed people and entities while giving less attention to prohibited goods and services. The review also highlighted possible circumvention through third countries.
The business question has therefore changed. “Did we search the name?” is too small. The better question is: “Can we explain why this relationship and this transaction were acceptable when we approved them?”
Ownership is only one part of the answer. A company may also need to understand who gives instructions, what is supplied, where it ends up, how payment travels and whether the route makes commercial sense.
A moving target needs dated reasoning
The EU adopted its 21st Russia sanctions package on 23 July 2026, after the supervisory review. The Dutch government described measures aimed at oil revenues, the shadow fleet, banks, companies involved in circumvention and further listed parties.
That later package gives the June findings a sharper meaning. A conclusion reached during onboarding does not remain reliable simply because it was reasonable at the time. Lists change. Restrictions change. Ownership changes. Products acquire new destinations, and distributors introduce new parties into the chain.
The date of the assessment therefore matters. So does the reason for reopening it.
For a small company, the trigger need not be complicated. A different payer, a new delivery country, a change in ownership or an altered product description may justify another look. The point is not to treat every variation as suspicious. It is to recognise when earlier reasoning no longer covers the transaction now on the desk.
Return to the technology supplier. Its clean customer search remains useful. It cannot explain the third-party payment or confirm the final destination. Those facts sit in the contract, invoice, correspondence, transport details and ownership information. If each answer lives in a different inbox, the company has knowledge but little control.
Commercial records carry the reasoning
This is where sanctions compliance meets ordinary administration. The sales order says what was promised. The product description says what will move. The invoice identifies the buyer. The bank record identifies the payer. Delivery evidence shows where the goods went. Ownership information helps explain who stands behind the counterparty.
These documents do not need to become a second bureaucracy. They need to agree with one another, or explain why they do not.
External advice also has limits. A specialist can interpret sanctions rules, but the company still owns the commercial decision. Someone must record what the advice meant for this customer, this order and this payment route. Otherwise, the opinion sits beside the transaction rather than inside the decision.
The governance question I would ask is precise: who can show why this relationship was accepted, on what information, and what event would cause another review?
Without a named owner, the answer tends to dissolve across sales, finance, logistics and the external adviser. That becomes expensive when a bank or accountant asks for clarification. Staff stop other work, old messages are retrieved and the person who understood the arrangement may already have left.
Keep the legal boundaries clear
Sanctions obligations and Wwft duties are connected, but they are not identical. The Dutch government states that everyone must comply with applicable sanctions. Restrictions can concern people, entities, ownership, control, goods and services.
Wwft client checks, monitoring and FIU reporting duties apply within a defined statutory perimeter. They do not turn every Dutch business into a reporting institution. For institutions inside that perimeter, intended as well as completed unusual transactions can require prompt reporting. BFT also states that a transaction prohibited under the Sanctiewet must be reported by a Wwft institution as an intended or completed unusual transaction.
That distinction matters because vague compliance language creates poor decisions. A small exporter, an accountant and a payment provider may face different formal duties, even when they are looking at the same transaction.
The shared commercial need is simpler. Each must be able to retrieve reliable information when a legitimate question arrives.
For the supplier, the sensible outcome may be that the order proceeds after the ownership, payer and destination are explained. The value lies in reaching that conclusion before the goods wait at the warehouse door or the payment stalls in review.
Sanctions discipline is not measured by the size of a compliance folder. It is visible in whether ordinary records support one current, reasoned decision. A clean search can open the conversation. Only coherent business evidence can finish it.
If your sanctions decisions are scattered across systems, I can help turn them into a clear, reviewable file.
The data, sourcing, and analysis behind this article were conducted by Paolo Maria Pavan. AI was not used to identify sources, build the factual basis, or produce the analytical judgment contained here. AI was used only as a drafting aid. The final English text was personally reviewed, edited, and approved by Paolo Maria Pavan before publication.
References
- AFM en BFT: accountantssector moet beheersing sanctierisico’s verder versterken
- Bureau Financieel Toezicht - Accountancy-sector sanctions file quality
- Autoriteit Financiële Markten - From name screening to full sanctions-risk assessment
- Rijksoverheid - Sanctions rules continue to change after the supervisory review
- Rijksoverheid - Ownership, control and prohibited transactions
- Autoriteit Financiële Markten - Wwft due diligence, monitoring and reporting perimeter
- FIU-Nederland - FIU reporting requires usable transaction and identity records
- De Nederlandsche Bank - Regular regulatory change as a control burden
