The United States is tightening controls over Hong Kong’s financial and trade systems, compelling local firms to address a rising threat: secondary sanctions. These penalties apply to actions without direct US involvement but that still undermine Washington’s sanctions policies. For Hong Kong, where global supply chains and international banking converge, the danger is no longer hypothetical.
Secondary sanctions differ fundamentally from primary ones. Primary sanctions target US persons, US-incorporated entities, or transactions involving US connections—such as dollar-based transactions or technology of US origin. In contrast, secondary sanctions punish non-US actors for engaging with sanctioned parties, even when all activity occurs outside US jurisdiction. Consequences may include exclusion from the US financial system or designation as a Specially Designated National (SDN).
Hong Kong’s vulnerability arises from its status as a financial and trade hub. The city’s accessibility, ease of company formation, and logistics infrastructure have positioned it as a key route for goods subject to sanctions and illicit financial movements linked to Iran, Russia, and North Korea. A recent report by the US-China Economic and Security Review Commission (USCC) described Hong Kong as a central point in China’s network for evading sanctions, citing shell companies, manipulated customs codes, and address-based diversion schemes.
In June 2025, the US Treasury’s Office of Foreign Assets Control (OFAC) designated 174 Hong Kong-connected individuals, entities, and vessels—including 17 Hong Kong-based intermediaries and Hong Kong-incorporated firms—tied to an Iranian shadow-banking operation. The network processed billions through foreign exchange firms and front companies, using false invoices and layered payments to obscure transactions. OFAC’s action demonstrated that even standard financial flows involving regional trading firms can intersect with prohibited regimes.
Expanding US enforcement targets physical locations
The risks extend beyond financial penalties. The US Department of Commerce’s Bureau of Industry and Security (BIS) has broadened enforcement efforts. In February 2025, BIS imposed a $1 million fine on a US thermal-imaging manufacturer for 19 export-control violations, several involving shipments to Hong Kong addresses later added to the Entity List due to their role in diverting sensitive technology to Russia. This case marked a shift: BIS now targets physical locations alongside named entities. Any Hong Kong business operating from or shipping to such addresses now requires export licenses, even without direct ties to sanctioned parties.
Hong Kong’s legal system adds complexity. Local regulations, including the Organized and Serious Crimes Ordinance, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, and the United Nations Sanctions Ordinance, cover securities trading and strategic commodities. However, these domestic rules operate alongside US secondary sanctions, creating overlapping compliance obligations.
Institutions now face the challenge of identifying risks before they materialize. Ownership and control analysis has become essential. Under OFAC’s 50 Percent Rule, an entity with 50% or more blocked ownership is itself blocked, even if no single owner holds a majority. Yet risks persist beyond direct ownership. OFAC has warned that entities with less than 50% blocked ownership may still face enforcement if used to conceal interests. The agency’s recent guidance on sham transactions clarified that trusts, proxies, and front businesses do not protect blocked persons from sanctions if they retain economic influence.
Beyond ownership, institutions must examine counterparties, transaction paths, and trade documentation. A Hong Kong trader with layered offshore ownership may require deeper scrutiny, particularly if payments route through third countries or shipments involve dual-use goods. The same applies to logistics subcontractors or freight forwarders that may not appear in primary records but play a critical role in transactions.
Banks and sectors face stricter transaction scrutiny
Banks are tightening oversight of correspondent chains and payment corridors, increasing the need for legal review before transactions proceed. Sectors like advanced electronics, aerospace, and maritime, where end-use tracking is limited, face heightened examination. Boards are now demanding clearer risk-appetite statements and documented decision frameworks to justify transactions under regulatory and counterparty review.
The Hong Kong Autonomy Act (HKAA) introduces mandatory exposure for financial institutions. Under its terms, foreign financial entities-including those based in Hong Kong-face automatic secondary sanctions if they conduct “significant transactions” with individuals or entities listed in the Section 5(a) Report for undermining Hong Kong’s autonomy. Though Treasury applies a totality-of-circumstances analysis – including transaction size, frequency, and nexus to a listed person – the statute creates strict, non-discretionary exposure for non-US institutions.
Treasury’s “totality of circumstances” test-considering transaction size, frequency, and connections-does not exempt institutions from compliance. Even limited exemptions, such as 30-day wind-down periods or corrective actions, do not eliminate enforcement risks. For Hong Kong banks and asset managers, routine dealings with politically exposed or state-linked counterparties now carry sanctions exposure, regardless of whether funds or goods pass through the US.
US report confirms Hong Kong’s role in sanctions evasion
On November 14, 2025, the USCC published a report characterizing Hong Kong as a central node in China’s industrial-scale sanctions-evasion ecosystem. In its November 2025 report, the commission characterized the city as a key node in China’s large-scale bypass of US restrictions, citing shell companies, altered customs classifications, and address-based diversion networks. While Beijing and Hong Kong officials have disputed these findings, the report has shaped US enforcement priorities.
The commission’s analysis showed how Hong Kong’s financial openness and logistics infrastructure facilitate the movement of restricted goods tied to Iran, Russia, and North Korea. The report highlights the city’s growing role as a transshipment hub, including the use of shell companies, altered customs codes, and address-based clusters of diversion activity – some of which have been added to the Entity List. The report’s conclusions have prompted Treasury and Commerce to expand focus on transshipment risks, particularly in maritime, aerospace, and dual-use technology sectors.
To mitigate risks, institutions must implement a structured compliance approach covering four stages: identification, escalation, decision-making, and governance. Identification begins with ownership and control analysis, extending beyond share percentages to include board appointments, veto rights, and informal influence. OFAC’s 50 Percent Rule sets the baseline, but the agency has emphasized that entities with less than 50% blocked ownership may still face penalties if they enable sanctions evasion. The March 2026 Sanctions Advisory on Sham Transactions reinforces this, stating that opaque structures, such as trusts, nominee shareholders, or front companies, do not shield blocked interests. Institutions must therefore assess not only legal ownership but also economic control, including whether a counterparty retains practical authority over assets or operations.