A company can look entirely clean on its registration extract, with a local director, a local owner and no mention of Russia anywhere, and still be connected one level below what the extract shows. The link rarely sits on the face of the document. It hides in the ownership chain, in a parent company abroad, in what the firm actually distributes, or in the route its goods travel. This is a working method: the six places the connection hides, and how to look in each one before you sign or send a payment.
For a buyer, investor or law firm outside Ukraine, this is not a reputational abstraction. It is a payment risk that triggers fast. Your bank can freeze a transfer the moment its screening surfaces a designated party in the ownership chain, and it does not need a court to do so. Your own company can pick up secondary-sanctions exposure by trading with someone already listed. A contract signed with a formally clean firm falls apart when the connection emerges mid-deal, usually at the least convenient moment. None of that requires the counterparty to be a bad actor. It only requires you not to have looked.
Worth being precise about the difference between two questions, because they are often treated as one. Is this company sanctioned? is a list lookup and takes minutes. Is this company connected to Russia? is an investigation across six layers, and only the last of those layers is a list. This article is the method for the second question. It assumes you already accept that the exposure matters.
Ukrainian companies are recorded in the Unified State Register, usually shortened to EDR, and every entity carries an eight-digit registration code known as the EDRPOU. That code is the search key you reuse across every other source, and it is the one thing you should always take from a counterparty in writing. Since 19 January 2026 the register is published as open data again, including ownership structure and the declared beneficial owner. That access had been restricted since 24 February 2022, so a great deal of the advice written between those two dates is now out of date in your favour.
What the register cannot do is verify itself. It records what the company declared about its own ownership, on one level, at one moment. It does not show who stands behind a foreign shareholder, what the company was called two years ago, what it distributes, or where its goods physically come from. Those live in different datasets entirely. So a clean extract and an absence of Russian links are two different statements, and only the first of them can be established in five minutes.
The table below is the short version of the whole method: where the connection hides, what you actually check there, and how open that layer is to an outside party.
| Where the link hides | What to check | Access |
|---|---|---|
| Ultimate owners | Citizenship and country of registration of the beneficial owners, not just the director. Size of stakes and how they changed. | Open |
| Parent company | Whether a non-resident parent sits above the entity, where it is registered, what share it holds, whether it is itself designated. | Open, then varies |
| Renamed subsidiary | History of name and shareholder changes, overlap of address and management with a known sanctioned group, registration date. | Open |
| Distribution and licences | Brands carried and their true origin, distribution and licensing agreements, trade marks and who holds them. | Partly open |
| Transit route | The physical route of the goods rather than the country on the invoice, intermediaries, transhipment, origin documents. | Closed to registers |
| Sanctions lists | OFAC, EU, UN, UK OFSI and Ukraine's own state sanctions register, run against beneficiaries as well as the entity. | Open |
The first and most common place is the ultimate owner. A Ukrainian legal entity can belong to a chain of companies that terminates in a Russian national, a company registered in Russia, or a holding in a jurisdiction chosen precisely because it obscures where the money came from. The register shows you a nominal local founder. Who stands behind that founder is a question one level up.
What to check: the ultimate beneficial owners rather than the formal director, their citizenship and the country where a corporate owner is registered, the size of each stake, and how those stakes moved over the last few years. When ownership runs through a Cyprus or other offshore holding, the question is who sits behind it. An offshore layer is not evidence of anything on its own. Plenty of legitimate exporters use foreign holding structures for financing and tax reasons. It is simply the layer where a Russian beneficiary is most often parked. The mechanics of reading an ownership chain, and the red flags of a nominee owner, are covered in the guide to checking the ultimate beneficial owner of a Ukrainian company.
The second layer is the company that sits above your counterparty. The Ukrainian entity is a genuine separate legal person with its own registration code, its own accounts and its own director, while the decisions, the money and the ultimate control run from a parent registered in Russia.
What to check: whether a non-resident parent appears in the ownership structure at all, where it is registered, what share it holds, and whether that parent is itself designated. Size of stake is where foreign buyers most often misjudge the risk. Under the OFAC 50 percent rule, an entity is blocked when designated persons own 50 percent or more of it, directly or indirectly and in the aggregate, even if that entity is not named on any list. EU and UK regimes look at ownership and control in a comparable way, and control can exist well below a majority holding. What matters is not only that a link exists but which way it points: who controls whom, and where the instructions come from.
Once a parent group is sanctioned, the routine move is to re-register the subsidiary under a new name. The sign changes. The people, the address, the assets and the actual business stay exactly where they were. In a freshly pulled extract that company looks new and unblemished, which is the entire point of the exercise.
What to check: the history of name and shareholder changes rather than the current record, overlap of registered address and management with a known sanctioned structure, and a registration date that sits suspiciously close to the date the predecessor was designated. A new name with no history behind it is a reason to dig, not a reason to tick a box marked "recently incorporated, therefore clean". This kind of restructuring is one of the recurring patterns in how sanctions get worked around rather than broken.
Sometimes the connection is not in the ownership at all, but in what the company carries. A firm with entirely local owners can be the official distributor of a Russian brand, hold a licence from a Russian manufacturer, or build its whole turnover on reselling goods that physically originate in Russia.
What to check: distribution and licensing agreements, the brands in the product range and their true origin rather than the name on the packaging, and the trade marks the company uses along with who owns them. The ownership can be spotless while the money still flows into a Russian value chain. That is exactly what a bank or a regulator sees when it looks at the transaction, and it is invisible in any corporate extract.
Goods can be declared as originating in a third country while the actual route runs through Russia or Belarus. Substituting the country of origin and moving cargo through Russian territory is a distinct sanctions and reputational risk, and nothing in the counterparty's own corporate paperwork will reveal it.
What to check: the physical route rather than the country stated on the invoice, the intermediaries and transhipment points along the way, and origin documents for internal inconsistencies. This is supply-chain territory, and the techniques are the same ones used to reconstruct commodity routes out of open shipping and trade data, described in the case of where stolen Ukrainian grain ends up. When your exposure sits in the route rather than the entity, a supply-chain trace is the right instrument, not a company report.
The last place is direct designation, and it is the one everybody starts with and most people stop at. Screen the legal entity, certainly, but screen its beneficial owners, its parent companies and its connected persons as well. Designations frequently attach to the owner rather than to the sign above the door, and an entity two steps below a listed person will not appear in a name search.
What to check: OFAC, the EU consolidated list, UN Security Council lists, UK OFSI, and Ukraine's own state sanctions register maintained by the National Security and Defence Council, run against every name in the ownership chain rather than the company name alone. How that screening works in practice, what you can run yourself at no cost, and where free screening stops being sufficient are set out in the guide to running an AML check on a company. One point of principle: sanctions status is a fact recorded by a state authority, not an analyst's opinion. Intelligence work surfaces and documents it. It does not confer it.
Doing all six of these alone is hard, and not because of any lack of diligence. It is the shape of the data. The Ukrainian register gives you the first level of ownership and stops. Beyond that the chain leads into foreign registers where you need the language, the structure of the database, and the ability to read an offshore filing for what it does not say. Renaming shows up only in change history, which is absent from the current record by definition. Distribution and transit are not in corporate filings at all. They are a different layer of data entirely, and reaching them means working from trade and shipping records rather than registries.
Two practical limits compound this for a foreign buyer. Beneficial-owner access across the EU has been uneven since the 2022 Court of Justice ruling, so a chain that crosses into one member state may be readable and a chain that crosses into another may not. And sanctions regimes do not mirror each other. A counterparty clean under one country's list can be exposed under another's, which is precisely the gap a compliance officer is paid to close. This is also why "clean register" and "no Russian link" should never be written into the same sentence in a file note as if they meant the same thing.
The first move is genuinely free. The register is open, the declared owner is a single field, and for a small first order that may be all the assurance the deal is worth. The calculation changes with the size of the exposure. Tracing a nominee through filings in three jurisdictions, unwinding a holding chain, reconstructing a supply route and screening every name in it takes tools, languages and time that a buyer working to a deadline does not have.
A basic counterparty check starts at $149 and covers legal status, sanctions screening and obvious red flags, usually within 4 to 24 hours. Tracing ownership to the real beneficial owner, with court records and a written verdict, sits in the Standard Report at $349. Deeper work on offshore layers, nominee directors and international investigative databases is priced from $799 after a short brief. The full tier structure is on the pricing page, and this Russia-link method is the sanctions layer of the broader six-step guide to verifying a Ukrainian company.
A company with a clean register and a company with no Russian ties are two different claims, and six layers sit between them: ultimate owners, parent structures, renamed subsidiaries, distribution of Russian-origin goods, transit routed through Russia, and sanctions screening run on beneficiaries rather than names. Before you sign a contract or send a prepayment, the question to answer is a narrow one. Has somebody actually walked all six levels, or are you relying on the first screen of a register?
Related reading: if your counterparty is registered in Turkey, Romania or Bulgaria rather than Ukraine, the jurisdictional picture is different again, and our Black Sea compliance screening covers what those three registers open and what they keep closed.
We walk all six layers: beneficial owners, parent structures, renamed subsidiaries, distribution, transit and sanctions screening on every name in the chain. PDF report with a verdict and an Argus Score, from $149.