How sanctions evasion hides behind ordinary companies
Legitimate companies can mask sanctions evasion through shell networks and false invoices. Learn how to detect hidden payment purposes during investor onboarding.

How sanctions evasion hides behind ordinary companies
A company can have a registration number, a bank account and a professional-looking invoice while leaving the real purpose of a payment concealed.
That is what makes sanctions evasion relevant to investor onboarding. The compliance team may encounter an apparently ordinary legal entity long before it sees anything that looks like a sanctions problem. Understanding the company means asking how its owners, activity and funding fit together.
In September 2026, Jersey's government highlighted the National Crime Agency's alert on A7. Its summary describes a network using shell companies in intermediary jurisdictions and complex payment routes, with false invoices used to give transactions an appearance of legitimacy. It is a concrete example of how ordinary corporate and banking infrastructure can be used to obscure the underlying relationship.
For an onboarding reviewer, the case raises a specific question: does the evidence support the company's account of its ownership, activity and funding?
A plausible document still needs a plausible explanation
An invoice tells a reviewer what the parties say happened. Its existence does not settle whether the underlying transaction occurred, whether the parties performed the stated roles or whether someone else directed the arrangement.
The NCA's August 2026 A7 alert describes foreign-registered companies controlled from Russia and an infrastructure of websites and email addresses supporting their apparent commercial presence. The alert also makes an important qualification: individual warning signs must be assessed alongside the surrounding facts and circumstances.
For an onboarding reviewer, the useful habit is to compare the explanation across records. Does the stated business activity fit the income being described? Does the company receiving or sending money have an intelligible role? Are the people giving instructions consistent with the authority documented in the file?
A newly formed company may have a sound commercial purpose. A holding company may have few employees and little public presence. Those characteristics become meaningful through context. Treating every sparse website as suspicious would generate noise while leaving the harder questions untouched.
The more revealing issue is whether the investor can explain a relationship and provide evidence proportionate to the risk when asked.
Screening needs an accurate picture of the parties
Name screening is useful only within the scope of the people and entities being screened. If an ownership record omits a relevant controller, even a well-run search of the listed names leaves a gap.
UK financial sanctions guidance explains that restrictions can extend to entities owned or controlled by designated persons, including entities that are not themselves named on the sanctions list. The precise ownership and control assessment depends on the applicable regime. A clean search against a company name cannot settle that separate question.
This creates a close relationship between entity verification and sanctions work. The reviewer needs to establish who matters to the structure, then assess the screening results and any ownership or control implications using the relevant rules.
Good data also helps reviewers resolve false positives in AML screening. An incorporation number, date of birth or corroborated address can help distinguish unrelated parties. A decision supported by those identifiers is more useful than a dismissal based on a familiar-looking name.
Follow the explanation through an investment subscription
Imagine a fictional overseas company subscribing to a private credit fund. It states that this subscription will be funded from retained trading profits. The supporting pack includes accounts, a corporate chart and evidence of a proposed payment from another group company.
The reviewer needs to understand the subscriber's activity, its place in the group and why another company will provide the money.
The supporting records instead identify an intercompany loan as the source of the subscription payment. The reviewer now needs to reconcile that funding route with the original explanation. The enquiry includes the lending entity, its relationship to the subscriber and evidence supporting the loan. Continuing to label the funds “trading profits” would leave the file inconsistent with its supporting records.
The manager or administrator also needs a clear process for communicating funding conditions to the team receiving the subscription. If a payment arrives from a different party, that information must reach the people responsible for the AML decision. An approval based on one funding route should not silently become approval for another.
The funding explanation is part of knowing the investor. It gives the payments team a basis for recognising a departure from the approved arrangement.
Preserve the connections that support the decision
These questions become harder when the corporate chart sits in one folder, screening outcomes in another and the funding explanation in an email thread. Each reviewer may complete their assigned task without seeing the inconsistency that emerges across the file.
The case record should show which parties were assessed and which evidence established their roles. Keep any unresolved discrepancy visible to the person responsible for approval.
Steward includes screening within its investor onboarding platform. The reviewer can assess the entity information and screening result together, including the lender and its relationship to the subscriber when those parties form part of the review.
The intercompany loan needs an explanation that connects the lender, the subscriber and the payment. If the supporting records cannot establish that connection, the reviewer has a specific unresolved issue to escalate.
Related Insights

What should trigger a fresh look at an approved investor?
When approved investors change: triggering fresh KYC reviews without waiting for scheduled updates. Detect ownership shifts, funding changes and screening alerts.

What actually closes an AML remediation finding?
AML remediation findings require proof the underlying control works, not just task completion. Learn what regulators expect from effective remediation.

Source of wealth and source of funds in investor onboarding
Distinguish source of wealth from source of funds in investor onboarding. Learn why identifying money origins matters for effective KYC compliance.