Syria sanctions relief is not AML clearance: what the SST rescission changes

The United States rescinded Syria's State Sponsor of Terrorism designation on 24 August 2026, closing a listing that had run since December 1979. Syria sanctions are now almost fully lifted in Washington. The EU, the UK and the Financial Action Task Force have not moved, so most screening and due diligence duties survive the change.

• The State Department rescinded the State Sponsor of Terrorism designation and delisted Hay'at Tahrir al-Sham as a Specially Designated Global Terrorist. The Office of Foreign Assets Control (OFAC) removed the group from the Specially Designated Nationals (SDN) List and revoked Syria General License 25.
• Syria remains number 18 on the EU list of high-risk third countries, which triggers mandatory enhanced due diligence for every EU obliged entity regardless of what Washington did.
• The FATF confirmed Syria's increased-monitoring status on 19 June 2026, though its country narrative has not been rewritten since February 2023 because the security situation has blocked an on-site visit.
• The Financial Crimes Enforcement Network (FinCEN) special measure against the Commercial Bank of Syria was never repealed. It sits under a conditional exception that leaves correspondent account due diligence untouched.
• The same OFAC release that closed out the Syria programme added 24 Iran-related individuals and six vessels to the SDN List, so the net sanctions screening workload from that single release went up, not down.

What did the United States actually change on 24 August?

Two agencies acted on the same day to close out the US Syria sanctions programme. The State Department rescinded Syria's State Sponsor of Terrorism designation after the mandatory 45-day congressional notification period, and it revoked the Specially Designated Global Terrorist designation of al-Nusrah Front, better known as Hay'at Tahrir al-Sham. OFAC then removed the group from the Specially Designated Nationals and Blocked Persons List.

The designation was a statutory trigger rather than a single prohibition. The State Department groups its consequences into four categories: restrictions on US foreign assistance, a ban on defense exports and sales, controls over exports of dual-use items, and a set of miscellaneous financial and other restrictions. Rescission lifts the country-level trigger behind all four. It leaves every list-based designation exactly where it was.

In a press statement dated 24 August 2026, Secretary of State Marco Rubio framed the move as commercial rather than symbolic, saying it "eliminates the final major barriers for private sector investment in Syria". The practical effect is that Syria sanctions exposure no longer runs through the Terrorism List Governments Sanctions Regulations at 31 CFR part 596, or through 22 USC 7205(a)(1). The rescission leaves three countries on the State Sponsors of Terrorism list: Cuba, North Korea and Iran.

How did the Syria sanctions programme actually unwind?

The Syria sanctions programme unwound across nearly 14 months, and the rescission was the last step, not a single decision. Executive Order 14312 did the heavy lifting in June 2025 by terminating the national emergency and the six executive orders underpinning the programme. Everything since has been the removal of statutory and list-based residue.

What survives the Syria sanctions rollback is narrow but real. List-based designations remain on Bashar al-Assad and his associates, human rights abusers, Captagon traffickers, persons linked to past proliferation activity, ISIS and al-Qa'ida affiliates, and Iran and its proxies. Treasury administers these through the Promoting Accountability for Assad and Regional Stabilization Sanctions (PAARSS) programme.

What does this change for your compliance obligations?

The rescission changes less than the headline suggests. Only one duty moves materially, and that is sanctions screening. Ownership analysis under the 50 percent rule, correspondent account due diligence, enhanced due diligence and reporting duties all stay where they were. Treat the day as a list event to process, not as a clearance certificate for Syrian exposure.

Sanctions screening. Refresh the SDN List and reprocess open alerts. The HTS deletion carries 28 aliases with it, including Jabhat al-Nusrah, Tahrir al-Sham and Front for the Conquest of Syria. Alerts that fired on those strings can now be closed with a documented reason. The trap is symmetrical: the same release amended, rather than deleted, four individual entries carrying an al-Nusrah Front link, and those four people remain designated. A rule that auto-clears anything containing "Nusrah" will suppress live hits.

Ownership analysis. OFAC's 50 percent rule and its strict liability standard are untouched. A Syrian counterparty that is majority owned by a person still on the SDN List is still blocked property, and the rescission does not help you. This is the same failure pattern the agency penalised in its Rice Lake settlement, where control sat one corporate layer away from the screened name.

Correspondent banking. The USA PATRIOT Act section 311 special measure against the Commercial Bank of Syria at 31 CFR 1010.653 was never repealed. FinCEN granted conditional exceptive relief in May 2025, and that document is explicit that nothing in it "shall waive or alter the due diligence obligations for covered financial institutions" under section 312 and 31 CFR 1010.610. Enhanced correspondent account due diligence therefore continues in full.

Suspicious activity reporting. Delisting is not exoneration. Conduct involving designated persons remains reportable, and a Suspicious Activity Report obligation triggered before 24 August does not evaporate because country risk fell afterwards. Record-keeping duties on the pre-rescission relationship run for their full statutory retention period.

Why does Syria still trigger enhanced due diligence in the EU?

Syria still triggers mandatory EU enhanced due diligence because EU Syria sanctions and EU money laundering listings are separate instruments, and only the first has moved. Syria sits at number 18 in point I of the Annex to Commission Delegated Regulation (EU) 2016/1675, in the consolidated text applicable from 29 January 2026. That listing makes enhanced due diligence mandatory under Article 18a of Directive (EU) 2015/849 for every obliged entity in scope.

The EU picture is layered. The Council lifted economic sanctions on Syria in May 2025, then on 18 May 2026 renewed the targeted measures against people and entities tied to the former al-Assad regime until 1 June 2027, while delisting seven entities including the Ministries of Defence and Interior. Asset freezes and travel bans continue for those still designated. The United Kingdom likewise retains its Syria regime, amended in April 2026 rather than withdrawn.

The FATF position deserves care, because it is widely misread. Syria remains under increased monitoring as of the 19 June 2026 statement, but the FATF determined back in June 2014 that Syria had substantially addressed its action plan. The country stays listed because the security situation has prevented an on-site visit, not because deficiencies went unresolved. The FATF is also explicit that it "does not call for the application of enhanced due diligence measures" to jurisdictions on that list. National law can still borrow that list. EU obliged entities take their trigger from the EU instrument, while UK firms arrive by another route: SI 2024/69 redefined a high-risk third country in regulation 33 of the Money Laundering Regulations 2017 as any country named on either FATF list, so Syria's listing makes UK enhanced due diligence mandatory too.

What is still uncertain, and where could this go wrong?

Four risks stay open after the rescission: jurisdictional divergence, an unfinished regulatory tail, reversibility by executive action, and thin verification data in the Syrian market. First, divergence. A group operating in New York, Frankfurt and London now faces three different answers on the same customer, and the strictest binds. Firms that run a single global country-risk rating will either over-restrict US business or under-apply EU enhanced due diligence, and only the second is a supervisory finding.

Second, the regulatory tail is unfinished. The Tri-Seal Advisory says amendments to the International Traffic in Arms Regulations and further adjustments to the Export Administration Regulations are anticipated, not made. Trade compliance teams cannot yet rely on a settled rulebook.

Third, reversibility. The Tri-Seal Advisory states plainly that the government retains the International Emergency Economic Powers Act and the Export Control Reform Act of 2018 to reimpose measures. Relief delivered by executive action can be withdrawn by executive action, on no notice. Onboarding decisions taken this quarter should be documented against that possibility.

Fourth, verification capacity. Relief will pull onboarding volume toward a market where company registry coverage is thin and beneficial ownership data is poor. Firms will be asked to complete know your business checks on counterparties whose ownership chains cannot be resolved from any authoritative register. De-risking inertia is the likely result, and it will look like caution rather than the control failure it is.

How should compliance teams respond?

Start with the list refresh and work outward. Pull the updated SDN List and reprocess every open alert touching the deleted HTS aliases, recording the delisting as the closure reason. Separately, confirm that individuals whose entries were amended rather than removed are still screened as designated. Both steps should be evidenced, because an examiner will ask why an alert closed on 25 August.

The second block of work is policy rather than operations. Update your country risk model with three distinct fields, one each for the US, EU and UK Syria sanctions positions, so a single global rating cannot flatten the divergence. Re-paper the Syria section of your enhanced due diligence procedure against Article 18a where EU entities are in scope, and leave correspondent account controls for the Commercial Bank of Syria exactly where they are. Then brief the front office on what Syria sanctions relief does and does not permit, because commercial teams will read the headlines as an open door.

Registry-opaque entities will stay hard, and no vendor fixes a missing company register. Where the counterparty is an individual, though, the re-verification cost is addressable. The recurring problem is that country risk moves faster than the customer data you hold, and re-checking an existing book is expensive because the original evidence was captured once and then frozen. Zyphe issues a reusable credential backed by an NFC chip read to ICAO 9303 and eIDAS standards. Personal data is split across separate stores so no single store holds a complete record, and the audit trail exports in a form you can put in front of a supervisor. If you are reassessing an emerging-market book this quarter, book a demo.

The bottom line

The rescission is a real commercial opening and a modest compliance event. Washington has finished dismantling its Syria sanctions programme; Brussels, London and the FATF have not. The duties that actually consume compliance capacity are all still in place: enhanced due diligence on a high-risk third country, ownership analysis under the 50 percent rule, and correspondent account controls. Teams that treat this as a list refresh plus a country-risk model change will handle it in a week. Teams that treat it as clearance will find the gap at their next examination.

Cited sources

• OFAC recent action, 24 August 2026: removal of Syria's SST designation and associated list updates
• State Department: Rescission of Syria's Designation as a State Sponsor of Terrorism
• Tri-Seal Advisory: Sanctions and Export Controls Relief for Syria, updated August 2026
• Commission Delegated Regulation (EU) 2016/1675, consolidated text applicable from 29 January 2026
• FATF: Jurisdictions under Increased Monitoring, 19 June 2026
• Council of the EU: Syria restrictive measures renewed to 1 June 2027, 18 May 2026
• FinCEN: exceptive relief for the Commercial Bank of Syria section 311 special measure
• Congressional Research Service IN12712: Syria's State Sponsor of Terrorism Designation
• State Department: State Sponsors of Terrorism list
• Executive Order 14312: Providing for the Revocation of Syria Sanctions
• OFAC: Promoting Accountability for Assad and Regional Stabilization Sanctions programme
• The Syria (Sanctions) (EU Exit) (Amendment) Regulations 2026, SI 2026/436
• The Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) Regulations 2024, SI 2024/69