Inadequate supply chain due diligence can breach sanctions and fuel proliferation financing

A questionable source of origin in the global grain trade has shed new light on the critical risks of robust supply chain due diligence. A high-profile case involving an Egyptian military agency’s import of over 20,000 tons of wheat from occupied Ukraine, carried by a Russian vessel with a murky trading history, should serve as a vital warning for businesses about the compliance risks inherent in complex international logistics.

 

From Russia with risk

The vessel in question, the Mikhail Nenashev, originally set out for Syria, was rerouted to Egypt under suspicious circumstances just as Syrian dictator Assad was fleeing to Russia. The cargo was exported by Pallada LLC, a relatively new Russian company with documented ties to grain sourced from occupied regions of Ukraine. Documents obtained by the Organized Crime and Corruption Reporting Project (OCCRP), an investigative group, reveal that in the months leading up to the shipment, Pallada LLC had received small batches of wheat from Ukraine’s Zaporizhzhia region, an area under illegal Russian occupation since 2022.

At the same time, reports in the international press showed that the ultimate destination for the goods—Egypt—had transferred authority for strategic commodity imports like grain from a civilian agency to military control. The new military-run Mostakbal Misr Agency’s abruptly  took over all Egyptian commodity imports.

The wheat however was actually headed for Syria. Ukraine has repeatedly accused Syria of buying such shipments of wheat from Russian-occupied regions, and Russia was Syria’s main backer during the civil war, providing extensive air and other military support

Tracking data shows the vessel reacting to global events in real time. After departing the Black Sea near Istanbul at the end of November, the Mikhail Nenashev then lingered off the coast of Cyprus as the Assad regime in Syria crumbled and quickly collapsed by early December. Finally, the vessel anchored in Alexandria, Egypt, on December 30, 2024. The Egyptian military received the shipment and paid the Russian company Pallada at least $6.7m for the tainted wheat.

Egypt exports over 8 million tons of agricultural goods around the world, with a total value of over $4.1 billion annually. With a relatively cheap currency and excellent trade links to the Middle East, Africa and Europe, Egyptian goods would not normally be associated with produce from Russian-occupied Ukraine. But as the saga of the Mikhail Nenashev demonstrates, without extensive supply chain due diligence, the risk remains.

 

The regulatory risks of global supply chains

For any compliance officer or supply chain professional, this case should raise a number of warning signs that are worth considering in broader supply chain due diligence. 

Ambiguous origin of cargo: Allegations that Pallada LLC sold wheat from illegally occupied Ukrainian territories immediately raise concerns regarding adherence to international sanctions. Engaging with such sources can inadvertently breach sanctions imposed by the US, UK and EU.

Irregular routing and documentation: The vessel’s rerouting from Syria to Egypt just as the Assad regime collapsed, along with the Egyptian military’s takeover of commodity imports. Without clear, verifiable data, businesses risk unknowingly facilitating transactions that may contribute to sanctions breaches, money laundering, or other illicit financial flows.

Obscure ownership and history: A cursory investigation of Pallada LLC shows it was established only in August 2022, with 89% owned by a little-known businessman. It rapidly entered into a high-risk sector. The lack of a longstanding operational history in the wheat market adds an additional layer of risk, making thorough vetting by trading partners and financial institutions all the more essential.

Involvement of military agencies: The abrupt takeover of Egyptian commodity imports by the military should raise concerns. Companies involved in Egyptian trade should further assess the destination of their payments if made to armed forces, as this could tie back to sanctioned individuals or risk fuelling proliferation financing.

 

The broader compliance implications

The risks demonstrated by the Mikhail Nenashev shipment extend beyond isolated trading irregularities in the wheat industry. In today’s regulatory environment, companies involved in international trade at any level of the supply chain must navigate a labyrinth of sanctions and export control regulations designed to prevent the funding of conflict and breaches of sanctions.

Nor is this the first case of tainted goods causing problems for the supply chain. In 2024, the UK Court of Appeal ruled companies are increasingly liable for the criminal origin of the goods in their supply chain. Stemming from the cotton trade in the Xinjiang region of China, allegations of forced labour and human rights abuses of the Uyghur minority resulted in a ruling that any company, anywhere in the supply chain that handles tainted goods, from slave-picked cotton to illegally-grown wheat, could face criminal investigation for money laundering. 

The risks of failing to conduct adequate supply chain assessments can result in:

Sanctions breaches: Businesses might unwittingly engage in transactions with entities that are subject to international sanctions, leading to hefty fines, reputational damage, and legal action.

Proliferation financing: Transactions linked—even indirectly—to regions with ongoing conflicts or occupations risk channelling funds toward activities that support regime aggression or illicit arms trade. Russia is the highest risk country for proliferation financing. 

Operational disruptions: Regulatory investigations and the subsequent need for remedial measures can significantly disrupt business operations and erode trust among international partners.

 

Conducting advanced supply chain due diligence

Tracing the origin of any commodity presents significant challenges, particularly because cargoes are often aggregated from multiple sources, obscuring the true provenance of the goods. This complexity is heightened in regions affected by conflict or political instability, where illicit trade routes and compromised supply chains are more common. Innovative solutions are beginning to emerge to address these challenges, such as advanced tracking technologies, blockchain-based documentation systems, and government-led initiatives like the UK’s grain verification scheme. These tools aim to provide greater transparency and traceability, allowing businesses to verify the legitimacy of their suppliers and the ethical sourcing of their commodities.

However some of these systems are commodity-specific, and they achieve more widespread adoption, companies must take proactive measures to safeguard their operations. This involves implementing rigorous internal compliance frameworks, conducting thorough supplier vetting, and regularly auditing procurement processes. Engaging with third-party verification services and maintaining close communication with regulatory authorities can further strengthen due diligence efforts.

Unlawful wheat sold to Egypt serves as a stark reminder that international trade in general remains a murky business, where opaque transactions can easily mask sanctions violations, money laundering, or even facilitate proliferation financing. The risks are not merely reputational; regulatory penalties, legal liabilities, and financial losses are all potential consequences of failing to conduct proper supply chain assessments. 

With global scrutiny intensifying, driven by stricter enforcement of international sanctions and a growing focus on corporate accountability, businesses cannot afford to overlook the necessity of comprehensive due diligence. The integrity of the entire supply chain, from farm to port, must be scrutinised to ensure compliance with both legal and ethical standards in today’s increasingly interconnected and regulated global marketplace.

 

Join our free webinar on conducting better supply chain due diligence on Wednesday, 19 February 2025 at midday UK time.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”

Picture of James

James

VinciWorks CEO, VInciWorks

Spending time looking for your parcel around the neighbourhood is a thing of the past. That’s a promise.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.