Where Are Your Products Really Going? The International Distributor Risk You Cannot Ignore
Selling through a foreign distributor does not necessarily end a U.S. company's sanctions or export-control responsibilities. In 2026, enforcement actions are reinforcing why businesses need to know their customers, their distributors—and the ultimate destination of their products.
For many U.S. companies, international expansion begins with a distributor.
Instead of establishing an office, hiring employees and building an entire sales operation overseas, the company contracts with a local partner that already understands the market.
The distributor purchases the product.
The distributor finds customers.
The distributor handles local sales.
The U.S. company gets access to a foreign market without building an international operation from scratch.
Commercially, the arrangement can make tremendous sense.
From a trade-compliance perspective, however, it can create a dangerous assumption:
“Once we sell the product to the distributor, what happens afterward is the distributor's responsibility.”
That is not necessarily true.
U.S. sanctions and export-control laws can make the ultimate end user, end use and destination of a product highly important—even when an intermediary sits between the U.S. company and the final customer.
An August 2026 sanctions enforcement action provides a timely example.
A Distributor in the UAE Did Not End the Compliance Analysis
On August 12, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control (“OFAC”) announced a $60,764 settlement with Wisconsin-based Rice Lake Weighing Systems, Inc.
The matter involved Rice Lake's Italian subsidiary, Dini Argeo S.r.l., which manufactured and distributed weighing equipment.
According to OFAC, between 2019 and 2021 Dini sold approximately $121,527 of weighing equipment and components to a distributor located in the United Arab Emirates.
On paper, the immediate customer was in the UAE.
But OFAC found that Dini knew—or had reason to know—that the products were ultimately destined for an Iranian company.
The goods were therefore allegedly reaching Iran indirectly through the UAE distributor.
OFAC concluded that eight transactions constituted apparent violations of U.S. sanctions regulations. Rice Lake voluntarily disclosed the matter, cooperated with the investigation and implemented compliance improvements, and OFAC classified the case as non-egregious.
The lesson from the case is much larger than its settlement amount.
A business cannot necessarily avoid sanctions risk by placing an intermediary between itself and a restricted destination.
OFAC specifically highlighted the risks associated with reexports through jurisdictions where diversion risk may be elevated and emphasized that companies need controls capable of identifying indirect dealings with sanctioned parties and destinations.
For businesses using foreign distributors, resellers, agents and other intermediaries, that is an important warning.
The Question Is Not Just “Who Are We Selling To?”
Traditional customer onboarding often focuses on fairly straightforward commercial questions:
Is the customer legitimate?
Can it pay?
Does it have a good reputation?
Does it understand the market?
Can it sell our product effectively?
International trade compliance requires additional questions.
Businesses may also need to determine:
Who owns the customer?
Who will ultimately use the product?
Where will the product ultimately go?
Will the distributor resell or reexport it?
What will the product be used for?
Are any parties restricted or sanctioned?
Is a license required?
Are there facts suggesting that the transaction is not what it appears to be?
These questions matter because U.S. trade restrictions do not operate solely according to the name appearing on an invoice.
Two Different Compliance Systems Can Affect the Same Sale
Businesses operating internationally should understand that economic sanctions and export controls are related but distinct legal regimes.
OFAC Sanctions
OFAC, within the U.S. Department of the Treasury, administers and enforces economic and trade sanctions based on U.S. foreign-policy and national-security objectives.
Depending on the sanctions program involved, restrictions may apply to:
certain countries or regions;
governments;
companies;
financial institutions;
individuals;
vessels;
aircraft;
industries;
particular transactions; or
entities owned by sanctioned parties.
A transaction therefore cannot always be cleared simply by checking whether a customer appears by name on the Specially Designated Nationals and Blocked Persons List.
Under OFAC's 50 Percent Rule, an entity can itself be considered blocked when one or more blocked persons directly or indirectly own 50% or more of that entity in the aggregate, even if the entity's own name does not appear on the SDN List.
That makes ownership due diligence important.
A company may screen the distributor's name and receive no match.
But that does not necessarily answer the question:
Who owns the distributor?
BIS Export Controls
The U.S. Department of Commerce's Bureau of Industry and Security (“BIS”) administers the Export Administration Regulations (“EAR”).
The EAR can regulate the export, reexport and transfer of commodities, software and technology subject to U.S. export controls.
Depending on the transaction, businesses may need to evaluate:
whether the item is subject to the EAR;
its Export Control Classification Number (“ECCN”), if applicable;
whether it is designated EAR99;
the destination country;
the end user;
the intended end use;
restricted-party lists;
licensing requirements;
license exceptions; and
special end-use or end-user controls.
The fact that an item is commercially available—or even classified EAR99—does not automatically mean it can be exported to anyone, anywhere, for any purpose.
End-user, end-use and destination restrictions can still apply.
BIS expressly states in its “Know Your Customer” guidance that provisions of the EAR depend on a person's knowledge of facts concerning the end use, end user and ultimate destination of a transaction. BIS instructs companies to consider abnormal circumstances or “red flags” indicating that a transaction may involve an inappropriate destination, end use or end user.
Export Controls Can Follow Products Beyond the First Sale
Another misconception is that U.S. export-control risk disappears once a product has left the United States.
It may not.
Certain items remain subject to the EAR when they are reexported from one foreign country to another or transferred within a foreign country.
Some foreign-produced products may also become subject to the EAR under specific rules.
A significant June 2026 BIS enforcement action illustrates just how far U.S. export controls can reach.
On June 17, BIS announced that German company Robert Bosch GmbH agreed to pay a $36.18 million penalty in connection with exports from outside the United States to Huawei and its affiliates.
According to BIS, the transactions involved approximately $72.4 million in foreign-produced sensor products and automotive software that were subject to the EAR pursuant to the Foreign Direct Product Rule. The products were exported to Huawei entities without required authorization. Bosch voluntarily disclosed the conduct and cooperated with the investigation.
The Bosch case involved a very different factual and regulatory situation from the Rice Lake matter.
Together, however, the two enforcement actions illustrate an important principle:
International businesses should not assume U.S. trade-compliance obligations end simply because the merchandise has left the United States or because a foreign affiliate or distributor is handling the subsequent transaction.
Screening the Distributor Is Only the Beginning
Restricted-party screening is an essential component of international trade compliance.
The U.S. government maintains numerous lists containing individuals and entities that may be subject to restrictions.
The International Trade Administration's Consolidated Screening List (“CSL”) brings together multiple screening lists administered by the Departments of Commerce, State and Treasury and allows businesses to search parties involved in export transactions.
The government cautions, however, that finding a potential match should lead to further due diligence because the consequences can range from a license requirement to a complete prohibition or additional end-use and end-user restrictions.
But screening only the company's direct customer leaves significant gaps.
Depending on the risk presented by the transaction, relevant screening may include:
the distributor;
the distributor's owners;
beneficial owners;
consignee;
intermediate consignee;
ultimate consignee;
freight forwarder;
end user;
purchasing company;
financial institutions;
other transaction participants; and
parties identified in shipping or payment documents.
And screening should not necessarily happen only once.
Restricted-party lists change.
Ownership changes.
Sanctions change.
Customers change.
End users change.
A company that was permissible to deal with when the relationship began may present a different risk later.
“Know Your Customer” Means More Than Running a Name Through a Database
Automated screening software can be valuable.
But trade compliance cannot be reduced to:
Search name → no match → approve transaction.
BIS's Know Your Customer guidance expressly requires companies to consider red flags surrounding a transaction.
For example, BIS identifies concerns when an order does not appear consistent with the purchaser's needs or when a customer declines installation or testing services that would normally accompany the product.
More broadly, businesses should be alert when a transaction simply does not make commercial sense.
Potential warning signs can include circumstances such as:
the distributor refuses to identify the ultimate customer;
the customer gives vague answers about the product's intended use;
the product is inconsistent with the customer's normal business;
the shipping route appears unnecessarily complicated;
an unfamiliar intermediary suddenly appears in the transaction;
payment comes from an unrelated third party;
the customer requests unusual changes to invoices or shipping documents;
the destination changes immediately before shipment;
the distributor asks that certain parties not appear on commercial documents;
the customer appears unusually unconcerned about product specifications;
the product's technical capabilities appear inconsistent with the claimed use;
the transaction involves a jurisdiction associated with elevated diversion risk; or
the distributor refuses to provide requested compliance certifications.
None of these facts necessarily proves a violation.
But red flags generally should be resolved—not ignored.
A company's sales team should not be rewarded for treating inconvenient information as someone else's problem.
The Ultimate End User Matters
Imagine a U.S. manufacturer sells industrial equipment to a distributor in Country A.
The distributor is legitimate.
It is not sanctioned.
Its name does not appear on a restricted-party list.
Payment arrives from a normal commercial bank.
At first glance, the transaction appears straightforward.
But suppose the distributor intends to resell the equipment to Company B in Country B.
Company B may be:
subject to sanctions;
owned by a blocked person;
listed on the Entity List;
a military end user;
involved in a prohibited activity;
located in a restricted destination; or
otherwise subject to licensing requirements.
The compliance analysis therefore cannot always stop with the direct distributor.
The appropriate level of diligence will depend on the product, destination, intermediary, end user and other risk factors.
But companies should establish a process for identifying when the ultimate customer must be known before the transaction proceeds.
The Ultimate End Use Matters Too
Even when the customer itself is not restricted, the intended use of a product can create export-control concerns.
Certain U.S. export controls are tied to prohibited or restricted end uses.
That means businesses selling technology, industrial equipment, electronics, software, chemicals, sensors, laboratory products, advanced manufacturing equipment and other potentially controlled items should understand what their products will actually be used to do.
A distributor answering:
“For commercial use.”
may not always provide enough information.
Depending on the product and destination, appropriate diligence may require more detail.
What industry will use the product?
What facility will receive it?
What process will it support?
Who is the final user?
Will it be incorporated into another product?
Will it be reexported?
Could it support military, nuclear, missile, chemical, biological or other restricted activities?
The greater the risk, the more important those answers become.
Geography Can Be a Red Flag Without Being a Prohibition
The Rice Lake case also illustrates a subtle but important distinction.
Doing business with a distributor in a particular country does not automatically mean something improper is happening.
But certain jurisdictions may present greater diversion or transshipment risk, depending on the product and ultimate destination.
In its Rice Lake enforcement release, OFAC specifically advised companies dealing with counterparties in jurisdictions known to present elevated diversion risks—citing the UAE as an example in the circumstances of that matter—to pay particular attention to indirect dealings with sanctioned parties.
The correct response is not to assume every customer in a transshipment hub is problematic.
It is to adjust diligence to the risk.
That can mean asking more questions.
Obtaining end-user certifications.
Reviewing the customer's business.
Understanding shipping routes.
Confirming ultimate destinations.
Requiring contractual controls.
And escalating unusual transactions for legal review before shipment.
Contracts Matter—but Contract Language Alone Is Not Enough
International distributor agreements should address trade compliance directly.
Depending on the business and markets involved, relevant provisions may include:
Sanctions Compliance
The distributor represents that it will comply with applicable economic sanctions.
Export-Control Compliance
The distributor agrees to comply with applicable export, reexport and transfer restrictions.
Restricted-Party Restrictions
The distributor agrees not to sell products to prohibited or restricted parties without necessary authorization.
End-Use Restrictions
The agreement prohibits certain restricted uses of the products.
Destination Restrictions
The distributor agrees not to export or reexport products to specified countries or regions in violation of applicable law.
No Diversion
The distributor agrees not to divert products contrary to applicable trade restrictions.
Information Obligations
The distributor must provide information concerning customers, end users, destinations and uses when reasonably required for compliance.
Notification Obligations
The distributor must notify the company of suspected diversion, sanctions issues, export-control inquiries or compliance violations.
Screening Requirements
The distributor may be required to maintain appropriate restricted-party screening procedures.
Recordkeeping
Relevant transaction and compliance records must be maintained for an appropriate period.
Audit or Verification Rights
Higher-risk relationships may justify contractual rights allowing the company to confirm compliance.
Termination Rights
The agreement should permit suspension or termination when continued performance could violate applicable law.
But contracts are only one part of the system.
A beautifully drafted sanctions clause does very little if company personnel receive an email saying:
“Please don't put the Iranian end customer on the invoice.”
and nobody investigates.
Compliance Must Extend to Foreign Subsidiaries
The Rice Lake settlement offers another particularly important lesson for companies with foreign operations.
Rice Lake had communicated to its Italian subsidiary that Iran-related transactions were prohibited after applicable authorization was revoked.
But OFAC found that additional compliance failures followed.
According to OFAC, the company had not taken sufficient steps to ensure that subsidiary personnel understood that indirect sales were also prohibited, complied with the restrictions and were appropriately monitored.
Following discovery of the conduct, Rice Lake implemented improvements including:
employee training;
vetting of end distributors; and
reexport-control warnings on commercial invoices.
OFAC emphasized the importance of training personnel throughout foreign subsidiaries—not only senior management—and tailoring training to factors such as local language and business practices.
This highlights a common multinational compliance problem.
A parent company may have an excellent policy written in English.
But do foreign sales employees understand it?
Do distributors know about it?
Does the subsidiary know what to do when a red flag appears?
Who has authority to stop a transaction?
Who monitors compliance?
A policy stored on a shared drive is not the same thing as an operational compliance program.
Eight Questions Businesses Should Ask Before Appointing an International Distributor
Before giving a foreign company the right to sell products in another market, businesses should consider at least the following questions.
1. Who owns the distributor?
Identify relevant ownership and beneficial-ownership information and assess whether sanctions restrictions may apply.
2. Where does the distributor actually operate?
Understand the countries and territories where it sells, warehouses, ships and maintains affiliates.
3. Who are its typical customers?
A distributor selling exclusively to ordinary retailers presents a different risk profile from one serving defense, aerospace, government or highly technical industrial customers.
4. Will it reexport the products?
If so, where?
5. Does the distributor maintain a compliance program?
Ask about sanctions screening, export controls, employee training and escalation procedures.
6. Will the distributor identify end users when necessary?
A refusal to provide transparency should be evaluated carefully.
7. Has the distributor or its management faced trade-compliance problems?
Appropriate due diligence may include litigation, enforcement, sanctions and regulatory history.
8. Does the agreement give your company the right to act if a problem occurs?
A company should not discover after identifying a serious compliance concern that its contract requires it to continue shipping.
A Practical Export-Compliance System
Not every small or mid-sized business needs the compliance infrastructure of a multinational corporation.
But businesses engaged in recurring international sales should consider implementing a proportionate, risk-based export-compliance system.
BIS itself recommends formal Export Compliance Programs (“ECPs”) and identifies eight fundamental elements, including management commitment, risk assessment, export-authorization procedures, recordkeeping, employee training, audits, procedures for handling compliance issues and ongoing maintenance of the program.
For many companies, an effective process might look something like this:
Step 1 — Classify the Product
Determine whether the item is subject to the EAR and its appropriate ECCN or EAR99 status.
Step 2 — Identify the Parties
Know the purchaser, distributor, consignee, end user and other relevant participants.
Step 3 — Screen
Check applicable government restricted-party lists and evaluate relevant ownership issues.
Step 4 — Determine the Destination
Identify not merely where the product is first shipped but, when appropriate, its ultimate destination.
Step 5 — Understand the End Use
Determine what the product will actually be used for.
Step 6 — Check Licensing Requirements
Determine whether a license, license exception or other authorization may be required.
Step 7 — Resolve Red Flags
Do not ship while material compliance questions remain unanswered.
Step 8 — Document the Decision
Maintain records showing what diligence was performed and why the transaction was approved.
Step 9 — Monitor the Relationship
Rescreen and reassess when circumstances change.
Step 10 — Escalate Problems Early
Employees should know exactly whom to contact when something does not look right.
The Sales Department Needs to Be Part of the Compliance Program
Export compliance is sometimes delegated exclusively to legal, logistics or compliance personnel.
That can create a significant blind spot.
Salespeople often learn information first.
They communicate with customers.
They hear where the goods are really going.
They receive unusual requests.
They know when the customer's explanation does not make sense.
They may receive emails from ultimate users that never reach the compliance department.
In the Rice Lake matter, OFAC noted communications in which employees of the Iranian ultimate customer contacted subsidiary personnel with questions about Rice Lake products, with references to Iran appearing in email signature blocks. Those communications contributed to OFAC's conclusion that personnel knew or had reason to know the products were destined for Iran.
That is exactly why frontline employees require training.
The employee who sees the red flag needs to understand that closing the sale is not more important than stopping an unlawful transaction.
What Happens When a Company Discovers a Problem?
Discovering a potential violation does not mean a company should ignore it—or attempt to quietly correct future transactions while leaving the past untouched.
The appropriate response depends heavily on the circumstances, but businesses may need to:
suspend pending transactions;
preserve relevant documents;
conduct an internal investigation;
determine the scope of potentially affected transactions;
involve experienced sanctions or export-control counsel;
correct compliance procedures;
train relevant personnel;
assess whether licensing issues exist;
consider voluntary disclosure options; and
cooperate appropriately with regulatory authorities.
Both OFAC and BIS consider voluntary self-disclosure and cooperation in their enforcement frameworks.
In the Rice Lake matter, OFAC specifically treated voluntary disclosure, cooperation and remedial measures as mitigating factors.
Similarly, BIS emphasized Bosch's voluntary self-disclosure and cooperation when announcing the June 2026 settlement.
The important point is that businesses should obtain advice before improvising a response to a potential violation.
The Biggest Mistake Is Assuming the Distributor Owns the Risk
Foreign distributors are valuable precisely because they create distance between a company and the day-to-day complexities of an overseas market.
But commercial distance does not necessarily create legal distance.
The distributor may know the customer.
The distributor may arrange transportation.
The distributor may receive payment.
The distributor may complete the resale.
But the U.S. company still needs an appropriate compliance system capable of answering a fundamental question:
Where are our products actually going?
In today's enforcement environment, businesses engaged in international trade should know more than the identity of the company placing the purchase order.
They should understand, when the risk warrants it:
who owns the parties involved, who will ultimately receive the goods, what the products will be used for, where they will ultimately travel and whether anything about the transaction suggests diversion or prohibited activity.
International expansion creates opportunity.
It also creates responsibility.
The goal is not to make every overseas sale unnecessarily difficult.
It is to build enough compliance into the transaction that a company can confidently distinguish a legitimate global opportunity from a sale it should never make.
Sources & Further Reading
U.S. Department of the Treasury, Office of Foreign Assets Control. Rice Lake Weighing Systems Settles with OFAC for Iran-Related Apparent Violations, Aug. 12, 2026. OFAC announced a $60,764 settlement involving eight apparent sanctions violations connected with products sold through a UAE distributor and ultimately destined for Iran.
U.S. Department of Commerce, Bureau of Industry and Security. Robert Bosch GmbH (Bosch) To Pay $36 Million Penalty to BIS for Violations Pertaining to Shipments to Huawei, June 17, 2026.
U.S. Department of Commerce, Bureau of Industry and Security. Know Your Customer Guidance and Red Flags, Supplement No. 3 to Part 732 of the Export Administration Regulations.
U.S. Department of Commerce, International Trade Administration. Consolidated Screening List. The CSL consolidates multiple export-screening lists maintained by the Departments of Commerce, State and Treasury.
U.S. Department of the Treasury, Office of Foreign Assets Control. Guidance regarding Entities Owned by Blocked Persons—OFAC's 50 Percent Rule.
U.S. Department of Commerce, Bureau of Industry and Security. Export Compliance Programs. BIS guidance identifies eight elements for establishing and maintaining an effective export-compliance program.
This article is provided for general informational purposes only and does not constitute legal advice. The application of U.S. sanctions and export-control laws depends on the parties, products, technology, destination, end use, ownership structure and specific regulations applicable to each transaction. Businesses should evaluate potentially restricted transactions based on their particular facts and current law.