The UK’s Office of Financial Sanctions Implementation has fined Apple Distribution International, Apple’s Ireland-based subsidiary, £390,000 for making two payments totalling more than £635,000 to a sanctioned Russian entity through the App Store in 2022. The fine is, by Apple’s standards, negligible: roughly 0.00001 per cent of the company’s annual revenue. The precedent it sets is not.

This is the first time a UK sanctions regulator has penalised a major technology platform for processing developer payments to a sanctioned entity. It establishes explicitly that app store payment flows fall within OFSI’s enforcement scope and that the companies operating those platforms bear compliance obligations that extend to knowing who their developers are, who owns them, and when that ownership changes.

What happened

The payments went to Okko, a Russian video streaming service. Okko had been owned by Sberbank, Russia’s largest bank and one of the first financial institutions sanctioned by Western governments after the invasion of Ukraine in February 2022. In May 2022, Sberbank sold Okko, along with several other digital assets, to a company called JSC New Opportunities, a Moscow-based entity created on 24 March 2022 with 10,000 roubles (approximately $175) in authorised capital. Its sole registered owner, Tatiana Portnykh, a former stock-transfer agency representative, also controlled four similar shell companies created around the same time. The Foundation for the Defense of Democracies described the transaction as an apparent attempt to evade sanctions.

The UK sanctioned JSC New Opportunities in June 2022. Apple Distribution International made two payments to Okko in June and July 2022, totalling £635,618. The payments represented App Store revenue from customers purchasing Okko’s streaming services and were routed through UK banks, bringing them within OFSI’s jurisdiction. In October 2022, Apple’s subsidiary voluntarily disclosed the payments to the regulator.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

Apple said in a statement that it had identified the payments to a developer that “days earlier had become affiliated with a sanctioned entity” and had “promptly and proactively reported” the finding. The fine was reduced from what it might otherwise have been because of the self-reporting and because Apple waived its right to appeal. OFSI confirmed that the penalty was imposed on the Irish subsidiary, not on Apple Inc. itself.

The compliance problem for app stores

The structural issue the case exposes is not unique to Apple. Every major app marketplace, including Google Play, processes payments to developers in dozens of jurisdictions, including countries where beneficial ownership is opaque, corporate structures change rapidly, and sanctions designations can shift overnight. The Okko case illustrates how a sanctioned entity can be obscured behind a shell company sale designed specifically to frustrate compliance, and how an app store that processes millions of developer payments globally may not have the visibility to catch it in real time.

Apple withdrew from direct sales in Russia in March 2022, shortly after the invasion. It suspended App Store submissions from Russian developers and disabled Apple Pay in the country. But the App Store continued to process outstanding developer payments for a period, and it was during that window that the Okko payments were made. The gap between Apple’s public withdrawal from Russia and the completion of its financial disengagement from sanctioned Russian entities was, in OFSI’s view, too long.

The question of whether Google, which operates a similar developer payment infrastructure through Google Play, has similar exposure is one that sanctions lawyers are likely now asking. OFSI’s annual review for 2024-25 signalled a deliberate expansion of enforcement beyond traditional banking into professional services, real estate, luxury goods, and cryptocurrency. Technology platforms were not named specifically, but the Apple fine suggests they are now on the list.

The enforcement signal

OFSI announced in January 2026 that it would double the maximum penalty for financial sanctions breaches to the greater of £2 million or the total value of the breach, and introduced a new settlement scheme with a 20 per cent discount for early resolution. The agency also signalled a shift from reactive, disclosure-driven enforcement to proactive, intelligence-led investigations. In that context, the Apple fine looks less like an isolated case and more like a first example of a new enforcement posture.

The £390,000 penalty will not appear in Apple’s quarterly earnings. The company’s compliance team will absorb the finding, update its screening processes, and move on. But the case creates a compliance obligation that extends across the entire app marketplace industry. If OFSI is willing to fine Apple for processing developer payments to a sanctioned entity, it is willing to fine any platform that does the same. The next case may not involve a company that self-reported, and the penalty framework has since been tightened.

The broader pattern is one in which sanctions enforcement, once primarily directed at banks and commodity traders, is extending into the technology supply chain. App stores, cloud computing platforms, advertising networks, and payment processors all handle financial flows that can reach sanctioned entities, and regulators are making clear that operating a technology platform does not exempt a company from the same compliance obligations that apply to financial institutions. Apple’s fine is small. The regulatory direction it represents is not.