Sanctions Evasion in the Defense Sector
How a Vienna-based shell company supplied European technology to the Russian defense industry
Sanctions against Russia have been a central instrument of the European Union’s economic policy since 2022. At the same time, international networks are increasingly using sophisticated structures to circumvent sanctions and export restrictions. A recent case investigated by Austria’s Directorate for State Security and Intelligence (DSN) demonstrates the organizational effort involved: a Vienna-based company allegedly procured highly specialized industrial goods and routed them through several third countries to companies in the Russian defense industry.
The Case at a Glance
At the center of the investigation was a Vienna-based company that, according to the findings to date, was deliberately established to procure sanctioned industrial goods, including CNC machines and specialized metalworking tools, and ultimately supply them to Russia. Investigators found that industrial goods had allegedly been procured for Russian military users as early as 2019. Following the tightening of sanctions, the supply routes were redirected through third countries.
Since 2022, deliveries worth more than €3.3 million to Russian defense companies have been identified. The company generated more than €700,000 in revenue in Austria. On May 13, 2026, the company’s 28-year-old managing director and co-owner, a Belarusian citizen, was arrested. At the same time, sanctioned CNC machines and specialized tools worth around €140,000 were seized. According to the DSN, the suspect is in pre-trial detention.
How the Sanctions Evasion Worked
To conceal the actual supply routes, a network of companies in Turkey, the United Arab Emirates, Hong Kong, Belarus, Kyrgyzstan, South Korea, Poland and Lithuania was used.
A key role was played by forged End-User Certificates, which document the intended final recipient and use of exported goods. European manufacturers were thereby given the impression that the goods would remain in third countries. In reality, they were intended for companies associated with the Russian state-owned ROSTEC conglomerate. According to the investigation to date, the goods were used, among other purposes, in the production of engines for cruise missiles and fighter aircraft, as well as other military equipment.
Why Complex Supply Chains Are Difficult to Uncover
The case illustrates how multi-layered supply chains can be used to conceal the actual end user and intended use of goods. When companies and transactions are spread across multiple jurisdictions, an individual business relationship may initially appear legitimate.
Only by connecting corporate structures, ownership relationships, trade routes, business partners and stated end use can the broader picture emerge. This is a key challenge in detecting sanctions evasion: the individual transaction is not necessarily suspicious on its own. The relevant indicators may only become apparent when the relationships between the different elements of the network are examined together.
Warning Signs That May Require Closer Review
Companies dealing with sanctions-sensitive goods should pay particular attention to certain indicators. These may include newly established business partners with no credible track record, complex or difficult-to-trace ownership structures, unusual connections to companies in third countries, End-User Certificates that do not align with the buyer’s stated business model, or shipping routes without an apparent commercial or logistical rationale.
None of these indicators alone constitutes proof of sanctions evasion. What matters is the combination of multiple anomalies and whether the overall business relationship is economically plausible.
What Companies Can Learn from the Case
The case is particularly relevant because, according to the findings to date, the structures involved were deliberately established to facilitate sanctions evasion. For companies not involved in such activities themselves, the risk therefore lies primarily in unwittingly becoming part of an existing procurement structure.
A simple sanctions-list screening may not always be sufficient. A company may not itself be sanctioned while still forming part of a supply chain through which goods ultimately reach a sanctioned or military end user. A deeper assessment of ownership structures, business history, commercial relationships and actual end use can therefore be critical.
What This Means for Intelligence
FOREUS supports companies, financial institutions and compliance teams in detecting and preventing sanctions evasion and related economic crime. Our expertise includes Corporate Intelligence, Open Source Intelligence (OSINT), Background Investigations, UBO analysis and the investigation of international supply chains.
In practice, this can mean bringing together information from corporate registries, business relationships, trading activities and publicly available sources to build a reliable overall picture. Suspicious patterns often only emerge when individual pieces of information are connected: for example, when a business partner’s ownership structure does not correspond to its stated business model, when its commercial relationships extend into specific third countries, or when the stated end use of goods appears economically implausible.
The challenge is therefore not simply finding information, but identifying connections that may remain inconspicuous when viewed in isolation. This is where intelligence can add value: by helping make complex structures visible at an early stage and enabling potential risks to be assessed before a company inadvertently becomes part of a sanctions-evasion network.
The Case Shows: Transparency Does Not End with the Direct Business Partner
The Vienna procurement network demonstrates how international and complex sanctions evasion can be. Shell companies, forged documents and multi-layered supply chains can be used to ultimately make highly specialized European technology available to Russian defense companies.
For companies, the lesson is clear: sanctions compliance should not end with checking whether a direct business partner appears on a sanctions list. It can be equally important to understand who ultimately stands behind a company, where goods are actually going, how business relationships are connected and whether the stated end use is plausible.
A structured, intelligence-based approach can help make these connections visible at an early stage and reduce the risk of inadvertently becoming part of such a structure.
