OFSI Sabre Global Technologies £1 Million Penalty: Russia Sanctions Lessons

On 17 June 2026 the UK's Office of Financial Sanctions Implementation (OFSI) announced a monetary penalty of £1,000,920.59 against Sabre Global Technologies Limited (SGTL), a travel technology company. Government publicity at the time described it as the largest penalty for financial sanctions breaches since Russia's 2022 invasion of Ukraine; OFSI's later penalty on Citibank, N.A., London Branch was larger. The case is not about a bank: SGTL provides a Global Distribution System (GDS) that connects travel suppliers and travel sellers. That is exactly why it matters to accountants and compliance teams in any sector, because it shows how supplying a service to a designated person can breach UK sanctions, and how moving a payment to another route can become circumvention. If you are building your sanctions knowledge, see our CPD courses.

This guide is based on the HM Treasury announcement and OFSI's public penalty notice. We read them through a summarising tool, so check every figure against the notice before you quote it.

What happened

SGTL has supplied GDS services to the Russian airline Ural Airlines under a contract dating back to 2007. Ural Airlines was designated under the UK's Russia sanctions on 19 May 2022, and SGTL's legal representatives told the company the same day. OFSI says SGTL nonetheless kept Ural Airlines' GDS access active from 19 May to 6 December 2022, about seven months.

During that period Ural Airlines was invoiced for services, and three payments from it, in June, July and September 2022, were frozen by SGTL's UK bank. In July and August 2022 SGTL explored other ways to receive payment, including a US bank account. On 21 September 2022 Ural Airlines sent a $200 test payment to that US account. OFSI treated that step as circumvention of the sanctions.

The rules that were breached

The penalty was imposed under section 146 of the Policing and Crime Act 2017 for breaches of the Russia (Sanctions) (EU Exit) Regulations 2019. OFSI identified three breaches:

• Regulation 13, making funds available to a designated person (two payments);
• Regulation 14, making economic resources available to a designated person (the GDS access itself); and
• Regulation 19, circumventing the prohibitions (the test payment).

The notice says the breaches happened both before and after the amendments of 15 June 2022 that introduced strict liability for civil monetary penalties. Our guide on UK financial sanctions, OFSI and strict liability explains what that standard means in practice.

How the penalty was calculated

The notice sets the total value of the breaches at £2,634,001.54, made up mainly of the value of the economic resource provided (about £2.1 million) and the two payments. The statutory maximum was £1,317,000.77. OFSI set a baseline penalty of £1,251,150.73 and applied a 20% discount for voluntary disclosure and settlement under transitional arrangements, giving the final £1,000,920.59. OFSI issued a notice of intention on 16 January 2026, and the penalty was agreed on 26 May 2026 after settlement discussions. SGTL waived its rights to ministerial review and appeal to the Upper Tribunal.

Why OFSI rated it most serious

OFSI assessed the case as "most serious" rather than "serious". It gave three main reasons: active circumvention, continued service after potential breaches had been identified, and the direct provision of an economic resource to a designated person. The aggravating factors it lists include:

• seeking alternative payment routes to get around the regulations;
• a high breach value;
• undermining sanctions objectives, given Ural Airlines' role in a strategic transport sector;
• reasonable cause to suspect the conduct could breach UK sanctions;
• poor knowledge of sanctions and weak compliance systems during the breach period;
• no licence application despite multiple red flags; and
• breaches spanning seven months.

The one mitigating factor was SGTL's full and timely cooperation in the investigation. Its voluntary disclosure, made on 31 October 2022 and covering the three frozen payments, was treated as neither aggravating nor mitigating, because it contained limited information and SGTL continued to provide services after making it.

The compliance failings OFSI describes

• Senior oversight. The senior responsible officer misidentified the contracting entity and did not escalate key information, and for a period there was no permanent chief legal officer or chief compliance officer.
• Resources. The legal team was short-staffed.
• Policies. Sanctions documents focused on general and US requirements, not UK regimes.
• Screening. Third-party software did not automatically flag the designation.
• Red flags. SGTL's UK bank raised sanctions concerns several times between June and September 2022, and a US bank flagged a payment, yet the service continued.

OFSI notes that SGTL has since strengthened its compliance function, but considers those measures largely address deficiencies that should already have been in place. Our guide to sanctions screening and alert resolution covers how to test that screening actually catches new designations.

Lessons OFSI draws

• Do not reroute payments to get around a block. Testing, rerouting or restructuring payment channels, including through third countries, can itself be circumvention.
• Treat services and data as economic resources. Software access and digital services can be an economic resource made available to a designated person.
• Have UK-specific policies. A group policy written around US rules is not enough.
• Test your screening. Do not assume a tool will pick up new designations automatically.
• Act on red flags. Blocked payments and bank queries should trigger an escalation and, where appropriate, a licence application.
• Disclose promptly and in detail. OFSI accepts an early partial disclosure with a timeline for the full report, but thin information limits the credit.

The ownership and control questions behind designations are covered in our guide to the ownership and control test for UK and US sanctions.

Frequently asked questions

How much was the OFSI penalty?

£1,000,920.59, after a 20% discount from a baseline of £1,251,150.73.

Does OFSI only penalise banks?

No. This case involved a travel technology provider. Any person or business in the UK, or a UK person abroad, can be penalised for breaching financial sanctions.

What counts as circumvention?

In this case OFSI treated a $200 test payment to a different bank account, made to prepare future payments after UK payments were blocked, as circumvention under regulation 19.

What we could not confirm

We read the HM Treasury announcement and OFSI's penalty notice through a summarising tool, so wording and figures should be checked against the notice. The notice does not give a separate issue date for the penalty notice itself beyond the dates stated above.