Geopolitical Spillover: The Risks You Don't See Coming
Proactively Assessing Indirect Vulnerabilities Can Help Avoid Disruption
-
August 07, 2026
-
A company may have no operations in a conflict zone, no sanctioned customers and no obvious connection to a geopolitical dispute. Yet, in the wake of an event, it may still find payments delayed, suppliers disrupted, transactions stalled or regulators asking difficult questions.
Traditionally, geopolitical risk has been assessed through a direct exposure lens: Do you operate in an affected country? Do you have assets there? Do you sell to sanctioned parties? Are your people, offices or shipments directly exposed?
However, globalisation has extended corporate exposure well beyond the jurisdictions in which companies directly operate. Production may rely on suppliers across multiple countries, critical data and technology may be stored or processed elsewhere, or sales and distribution may depend on third parties operating across borders. The absence of direct exposure does not mean the absence of risk. A company not directly in the line of fire may still be connected to the networks through which potential consequences travel.
This risk is only intensifying. The World Economic Forum’s Global Risks Report 2026 identified geoeconomic confrontation as the top risk over the next two years, with 18% of respondents selecting it as the risk most likely to trigger a material global crisis in 2026.1 As geopolitics increasingly shapes trade, capital flows, technology access and regulatory enforcement, companies must be more alert to how external events can affect them indirectly.
For most businesses, the impact will not arrive as a single visible geopolitical event. It may appear first as a payment that does not clear, a supplier that can no longer deliver or a counterparty whose ownership or influence is not what it appeared to be. By the time these warning signs become visible, the crisis is already underway. What appeared as a distant concern may already be constraining the business’s ability to move money, meet its obligations and continue operating on existing terms.
When Payments Become Exposure
A counterparty may appear low risk, but the payment chain may not be. Payments can be delayed, rejected or frozen because of sanctions screening, correspondent banking concerns, heightened scrutiny over certain jurisdictions or changes in financial institutions’ risk appetite.
Recent sanctions enforcement illustrates the point. In one case, a company outside the relevant sanctions jurisdiction instructed a UK-based bank to process payments to a platform that was ultimately owned by a sanctioned entity. The issue in that case was not only the named counterparty, but the ownership link behind the transaction and the financial channel used to process the payment.2
This is where spillover risk becomes particularly difficult to manage. A business may be transacting with an acceptable counterparty, but the payment may still be affected by the route it takes, the banks involved, the jurisdictions it touches, the source of funds or prior links in the flow of money.
This can create practical consequences, including:
- Delayed payments or blocked receipts
- Vendor defaults and liquidity pressure
- Customer disputes
- Insurance or financing complications
- Regulatory scrutiny
- Reputational concern
A company may not have intended to breach a rule. But if it has not taken reasonable steps to understand the payment risks, what began as a delayed or blocked payment can quickly become an accountability issue.
Supply Chain and Critical Dependencies
Supply chain disruption is a familiar geopolitical risk. The spillover effect in this area is harder to see because it often sits behind what is being supplied. A recent survey suggests that only 30% of organisations have achieved visibility further down their supply chain.3
A company may contract with a supplier in a seemingly low-risk jurisdiction. The supplier may be properly incorporated, commercially established and outside any obvious conflict or sanctions exposure. Yet, the product or service being supplied may depend on:
- Raw materials from a restricted market
- Sub-components affected by export controls
- Technology sourced from a high-risk jurisdiction
- Labor or sourcing practices that create regulatory scrutiny
- Logistics routes, ports or hubs exposed to disruption
- Financing, ownership or upstream vendors linked to higher-risk networks
For example, a company may procure equipment from an approved vendor in one jurisdiction, only to find that a critical component, embedded technology or raw material originates from a restricted market. The supplier relationship may look clean, yet the exposure may sit behind the product itself. The disclosed owner may not be the party that controls the relationship. The risk may sit behind nominee shareholders, layered holding structures, proxy arrangements, side financing, family relationships, informal control or undisclosed related-party links.
This is a form of geopolitical spillover. A company may not be dealing with a sanctioned or restricted party directly. The exposure may travel through a counterparty that appears unrelated on paper, but is ultimately owned, influenced, financed or controlled by sanctioned, restricted or otherwise sensitive actors.
In 2026, guidance from the U.S. Office of Foreign Assets Control on sham transactions and sanctions evasion highlighted this issue. Arrangements that appear legitimate on paper may still create sanctions risk if they are used to obscure the role, control or benefit of a sanctioned party.4
For investors, this can mean inheriting exposure that was not visible through standard diligence. For operating companies, it can create sanctions exposure, procurement risk, contract disputes, reputational damage or regulatory scrutiny.
Sanctions screening is a necessary first step. But, for higher-risk relationships, companies may need to go further and ask who controls the counterparty, who benefits from the arrangement and whether any influence sits outside the formal ownership structure.
Reducing the Risk of Being Blindsided
The challenge is not to predict every sanctions change, conflict, export restriction or regulatory action. It is to understand where an unpredictable event could impact the business and which dependencies could turn it into an operational crisis.
That does not mean reviewing every relationship at the same level of detail, an exercise that would be impractical and unlikely to produce meaningful insight. A more effective approach is to focus on the relationships, inputs, routes and permissions that matter most to the business and then test where hidden exposure may sit.
In practice, this means focusing on three priorities:
- Prioritize what matters: Identify the suppliers, sub-suppliers, payment routes, logistics providers, technology platforms, local partners and regulatory permissions that are critical to continuity, liquidity, compliance or reputation.
- Look beyond the first layer: For higher-risk or business-critical relationships, test what sits behind the direct counterparty or supplier. This may include ownership and control, sources of funds, payment intermediaries, provenance of key inputs, upstream vendors, technology dependencies and undisclosed links.
- Prepare response options: Where vulnerabilities are identified, assess what can realistically be done if a key relationship, route, input, counterparty or permission becomes difficult to use. This may include developing alternative suppliers, revised payment routes, contractual protections, escalation triggers, enhanced monitoring or further diligence.
The objective is to move from just awareness toward a more holistic state of preparedness. Companies may not know which geopolitical event will trigger the next disruption, but they can understand their vulnerabilities and how to respond when it occurs.
The Shock May Be Elsewhere. The Impact May Not Be.
Geopolitical risk is becoming less linear because business itself has become more connected. Companies rely on extended supply chains, cross-border payments, technology platforms, outsourced providers, local partners and complex ownership structures. These connections create opportunities, but they also create channels through which disruption can travel.
The answer is not to treat every indirect relationship as equal. Rather, the focus should be on identifying the relationships, inputs, routes, counterparties and permissions that are most critical to the business and understanding how geopolitical disruption could affect them.
That is where preparedness begins. Once the pressure points are known, companies can assess whether alternatives exist, whether contractual protections are meaningful, whether diligence needs to be refreshed, whether escalation triggers are clear and whether management has practical options if disruption occurs.
In a fragmented geopolitical environment, resilience will not come from predicting every event. It will come from knowing where the business is vulnerable, what options are available and how quickly the organisation can act.
Footnotes:
1: World Economic Forum, “Global Risk Report 2026,” (14 January 2026).
2: “Imposition of monetary penalty: Apple Distribution International Limited,” HM Treasury, Office of Financial Sanctions Implementation (30 March 2026).
3: Madeleine Wright, “Companies seek AI solutions to supply chain fragility,” Financial Times (11 March 2025).
4: Office of Financial Assets Control, “Guidance on Sham Transactions and Sanctions Evasion,” (31 March 2026).
Related Insights
Published
August 07, 2026
Key Contacts