The European Union on 23-24 July published its 21st package of restrictive measures against Russia, the bloc’s most wide-ranging sanctions update in four years. The 248-page legal act adds 218 individuals and entities to the EU blacklist, tightens financial and energy-sector curbs and, for the first time, creates a legal basis for a blanket visa ban on Russian combatants and ex-combatants involved in the war against Ukraine. Visa issuance for those listed will be suspended once an implementing regulation is adopted, and Member States will be expected to refuse entry at external borders and annul any existing Schengen or national visas. For Cyprus, the measures carry both geopolitical and practical mobility implications. Russian nationals accounted for roughly 7 % of all first-time residence permits issued by the Republic in 2025, with many travelling on business, shipping or IT assignments. Cypriot consular posts – particularly in Moscow and St Petersburg – will have to introduce additional screening and may see a surge in appeals and litigation from rejected applicants. Local banks, trust companies and corporate service providers that facilitate work-permit sponsorships must now screen staff lists and client rosters against more than 1 300 names on the consolidated sanctions list. Businesses that move staff between Cyprus and Russia also face new due-diligence burdens. The package extends asset-freeze provisions to crypto-asset platforms and allows the EU to bar third-country intermediaries that help Russians circumvent restrictions. Employers will therefore have to verify that salary payments, travel allowances and inter-company transfers do not touch newly sanctioned banks, e-wallets or logistics operators. HR and mobility managers should update travel-approval workflows to include sanctions checks and obtain written confirmation from travel agencies that routing through sanctioned airports or shadow-fleet tankers is avoided. Immigration advisers note that Cyprus’s Civil Registry and Migration Department (CRMD) is likely to tighten document-verification procedures for Russian applicants for the fast-track Company-Staff Work Permit and the Regulation 6(2) Permanent Residency route. Letters of no-objection from the Ministry of Foreign Affairs may now require enhanced explanations of how the applicant’s role relates to permitted business activity and evidence that the employer has conducted sanctions risk assessments. Practical tips for employers: • Audit existing Russian assignees for potential name matches on the updated sanctions list. • Flag any Russian or Belarusian passport-holders due to travel for business in the next 30 days and build in extra visa-processing time. • Instruct travel managers to avoid airlines or airports newly designated under the package. • Coordinate with banks to ensure salary payments do not transit restricted institutions or payment systems. Although the EU Council must still adopt implementing measures to trigger the visa ban, Cypriot companies with Russian links should act immediately. Failure to update compliance controls could expose firms to criminal penalties of up to €500 000 and jeopardise their status under Cyprus’s fast-track immigration regimes.
