Documentation · Risks

Export controls and dual-use goods

Export controls stop goods, software and technology with civilian and military uses from reaching a buyer, destination or end use that a permit or list forbids. This guide explains the risk in plain language, the warning signs regulators describe, what Canada, the United States, the European Union and the United Kingdom expect, and how to screen for it with Crown Intelligence.

What the risk is

Dual-use items are goods, software and technology that have both civilian and military uses. Export controls limit who may receive them, where they may go and for what end use, usually through a permit. In Canada, the government may place goods and technology on an Export Control List under section 3 of the Export and Import Permits Act, and an export permit is required for listed items.[1][3]

Export control risk differs from sanctions risk. A sanctions listing restricts dealings with a named person or country. An export control applies to a particular item, destination or end use, and can apply even when the buyer is not on any list. Some lists do both. The US Entity List names parties, and licence requirements then apply to the items in transactions involving them.[6][7]

The financing side of the same problem is proliferation financing. The FATF defines it as the risk of raising, moving or making available funds or economic resources for the proliferation of weapons of mass destruction, including dual-use goods used for non-legitimate purposes.[4]

Canada's Export Control List has seven groups: Group 1 Dual-Use List; Group 2 Munitions List; Group 3 Nuclear Non-Proliferation List; Group 4 Nuclear-Related Dual-Use List; Group 5 Miscellaneous Goods and Technology; Group 6 Missile Technology Control Regime List; and Group 7 Chemical and Biological Weapons Non-Proliferation List.[3]

How it shows up

FINTRAC describes the patterns below in suspected evasion of export controls and proliferation-related sanctions. They are most useful in screening, trade-finance review and onboarding.[4]

  • Goods with a dual-use or military purpose routed through several intermediaries or intermediate jurisdictions, where the route has no clear commercial reason.[4]
  • Shell or front companies as buyer or consignee: generic names, little online presence, and shared directors, addresses, emails or phone numbers with other entities in the network.[4]
  • Vague or misdescribed goods on documents, such as "samples" or "machines", or no end-use or end-user detail. A freight forwarder, bank or residential address listed as end user is a warning sign.[4]
  • Goods that do not fit the buyer's business or the destination's technical level, for example semiconductor manufacturing equipment shipped to a country with no electronics industry.[4]
  • A listed entity acting as purchaser, purchasing agent, freight forwarder or intermediate consignee. BIS treats transactions with listed entities as red flags.[6]
  • A company at the same address as a listed entity, or a near-match name or address. BIS treats both as red flags that call for further due diligence.[6]
  • Conflicts between trade and payment records: names, addresses, destinations or values that do not agree, or a payer not named on the trade documents.[4]
  • Intangible transfers, such as research partnerships, training, consultancy or joint ventures, with parties in a field of proliferation interest or with institutions in jurisdictions of concern.[4]
  • Open-account trade, or payments and virtual assets moved in ways that obscure the trail, such as chain-hopping into stablecoins.[4]

What regulators expect

Canada

  • Section 19 of the Export and Import Permits Act makes any contravention of the Act or its regulations an offence. Summary conviction carries a fine of up to $250,000, up to 12 months' imprisonment, or both. Indictable offences carry up to ten years' imprisonment.[2]
  • The Export Control List is updated annually, and the current edition of the guide took effect on 1 May 2026. Classify the item against the edition in force on the date of export.[3][4]
  • Export controls sit beside sanctions under the United Nations Act and the Special Economic Measures Act. Ministerial Directives under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act are in force for the Democratic People's Republic of Korea, Iran and Russia.[4]
  • Reporting entities must report to FINTRAC where there are reasonable grounds to suspect money laundering, terrorist financing or sanctions evasion. FINTRAC notes that list-scanning software may not adequately capture transactions linked to sanctions evasion, so a risk-based approach to monitoring and due diligence is expected.[4]
  • Controlled goods inside Canada fall under the Controlled Goods Program, which administers the Controlled Goods Regulations and the Controlled Goods List in the Defence Production Act.[4]

United States

  • The BIS Entity List, in Supplement No. 4 to Part 744 of the Export Administration Regulations, sets licence requirements for named entities. BIS recommends screening the parties to every transaction as a standard part of pre-transaction due diligence. Breaches of the EAR can lead to criminal and civil penalties.[6][7]
  • Use of licence exceptions is generally prohibited for almost all transactions involving a listed entity.[6]
  • A listing does not automatically extend to subsidiaries, parent or sister companies. An unlisted company that acts as an agent, front or shell for a listed entity can still breach the EAR.[6]
  • Financing or servicing an item with knowledge that it will be exported in violation of the EAR breaches General Prohibition Ten.[6]
  • BIS's Know Your Customer guidance and red flags (Supplement No. 3 to Part 732) is recommended for inclusion in an export compliance program.[8]

European Union

  • Regulation (EU) 2021/821 governs the export, brokering, technical assistance, transit and transfer of dual-use items. Annex I is the EU control list. Article 4 requires an authorization for non-listed dual-use items where the exporter is aware, or has grounds for suspicion, that they are intended for certain uses, which the Commission describes as including WMD programs.[9][10]
  • A Commission news item dated 14 September 2026 reports the 2026 update of the EU Control List of Dual-Use Items.[11]
  • There are four authorization types: EU general export authorizations (Canada, the United States, the United Kingdom and others are among the destinations), national general, global and individual authorizations. Member States set enforcement and penalties nationally.[10]

United Kingdom

  • The UK Strategic Export Control Lists, known as the consolidated list, are compiled from seven lists in international legislation. Strategic export controls apply to anyone exporting or transferring goods, software or technology on those lists.[12][13]

Screening with Crown Intelligence

The Export Control List classifies items; it is not a list of parties. Classify the product against the current edition of the guide or the EU Annex I list first, then screen the parties, their addresses and the intermediaries against the registers below.[3][9]

The table below is generated from the live data service when the page loads. It shows the US BIS registers, military end-user registers, strategic commodity lists and Canadian sanctions schedules currently loaded in Crown Intelligence.

Registers relevant to export controls, with records from the last load
RegisterTopicList typeCountryRecords (last load)
Loading live registers…

Crown Intelligence records are matches to check, not findings. Confirm each match against the source record and the list entry before acting on it.

Not yet included: the Canadian Export Control List is not loaded as a register. No register under that name is listed in Crown Intelligence at the time of writing.

Checklist

  • Classify each product against the current Export Control List guide or the EU Annex I list before quoting or shipping.
  • Screen every party: buyer, consignee, intermediaries, end user, freight forwarder, bank, and the owners and directors of each.
  • Screen addresses as well as names. Treat co-location with a listed entity as a red flag.
  • Obtain written end-use and end-user statements, and check that they match the goods and the destination.
  • Check the destination and any transshipment point against the registers and against jurisdictions of proliferation or diversion concern.
  • Re-screen existing customers when a list changes, and record the register version used.
  • Record each decision and its reason, and keep the documents that support it.
  • Report suspicious transactions to FINTRAC where your obligations apply, and take advice on any export that may already have taken place.

FAQ

Is a dual-use item the same as a sanctioned item?

No. A dual-use item is controlled by its technical characteristics and end use. A sanctioned item or party is restricted because of a listing or program. A transaction can involve both.[1][4][6]

Can a Canadian business deal with a party on the Entity List?

BIS does not prohibit all dealings with a listed entity. Its licence requirements apply to items subject to the EAR, and BIS treats any transaction with a listed entity as a red flag that calls for extra due diligence.[6]

Do US export rules apply to a Canadian company?

They can. BIS's jurisdiction covers the export, reexport and transfer of items subject to the EAR, which includes many US-origin goods wherever they are held. Canadian export controls apply separately.[6][3]

Will sanctions screening alone catch export-control evasion?

Not on its own. FINTRAC states that list-scanning software may not adequately capture transactions linked to sanctions evasion, and recommends risk-based monitoring and due diligence alongside it.[4]

How often do the lists change?

The Canadian guide is reissued regularly, with the current edition in force from 1 May 2026. A Commission news item dated 14 September 2026 reports an update to the EU Annex I list. The BIS Entity List changes through Federal Register notices.[3][11][6]

Where do I report a suspected export-control or sanctions-evasion transaction?

Reporting entities must report suspected sanctions evasion to FINTRAC. Where an actual export is suspected, the relevant export authority also applies; Global Affairs Canada administers the Export Control List. Seek legal advice on the route for your case.[4][3]

Sources

All sources were read on 10 October 2026. Where a source was read through a search excerpt, the excerpt is the basis for the statement and the full page should be checked before it is relied on.

  1. Export and Import Permits Act, section 3: Export control list of goods and technology. Justice Laws Website. Act current to 21 September 2026; section modified 28 September 2026.
  2. Export and Import Permits Act, section 19: Offence and penalty. Justice Laws Website. Section modified 28 September 2026.
  3. A Guide to Canada's Export Control List, January 2026 edition, with the edition index at A Guide to Canada's Export Control List. Global Affairs Canada. Edition in force from 1 May 2026; index modified 5 May 2026.
  4. Special Bulletin on financial activity associated with evasion of counter proliferation sanctions, reference FINTRAC-2025-SB001. FINTRAC. July 2025; page modified 11 July 2025.
  5. FATF Guidance: The Implementation of Financial Provisions of United Nations Security Council Resolutions to Counter the Proliferation of Weapons of Mass Destruction. Financial Action Task Force. Publication date not shown on the page read.
  6. Entity List FAQs. US Bureau of Industry and Security. Last updated 10 November 2025.
  7. Supplement No. 4 to Part 744, Title 15: Entity List. eCFR, Export Administration Regulations. Read via search excerpt; BIS states the eCFR was current as of 9 October 2026.
  8. Supplement No. 3 to Part 732, Title 15: BIS's "Know Your Customer" Guidance and Red Flags. eCFR, Export Administration Regulations. Read via search excerpt.
  9. Regulation (EU) 2021/821 of 20 May 2021 setting up a Union regime for the control of exports, brokering, technical assistance, transit and transfer of dual-use items (recast). EUR-Lex. Articles 3, 4 and 6 read.
  10. Exporting dual-use items. European Commission, Directorate-General for Trade. Page read; latest news items listed as of the read date.
  11. 2026 Update of the EU Control List of Dual-Use Items. European Commission, news item dated 14 September 2026. Read as a link from source 10.
  12. UK Strategic Export Control Lists: the consolidated list of strategic military and dual-use items that require export authorisation. GOV.UK. Read via search excerpt.
  13. Export controls: dual-use items, software and technology, goods for torture and radioactive sources. GOV.UK. Read via search excerpt.
  14. FINTRAC, Joint financial intelligence advisory: illegal procurement of dual-use goods by Russian end-users, 20 February 2024. Referenced in source 4; not opened separately.

Not legal advice

This guide describes public sources for information only. It is not legal advice, and it does not replace the Export and Import Permits Act, the Export Control List, the EU and US regulations, or advice from a qualified export control or sanctions adviser. Lists change often; check the current source before you act. Crown Intelligence records are matches for review, not determinations.

Last updated 2026-10-10