The Black Sea triangle: where a Turkish, Romanian or Bulgarian counterparty hides a russia trail

This is the structural problem with the Black Sea corridor, and it is not a Turkish peculiarity. Romania and Bulgaria are EU members and apply EU restrictive measures, so the designation question is settled there. What differs is what you can actually see: each of the three opens a different set of registers, and the layer that matters most is closed in exactly the country where the exposure is highest.

Why local clean does not mean clean for your bank

Sanctions regimes are national. A company is designated by OFAC, by the EU, by the UK or by Ukraine's NSDC register — not by the world. A jurisdiction that has not adopted those measures has no obligation to reflect them in its own registers, and a company designated in Washington continues to trade lawfully where it sits.

Your exposure, however, follows your own regime, your bank's correspondent relationships and your customers' compliance requirements. So the question is never "is this counterparty legal where they are". It is: does anything behind them appear on a list that binds me, my bank, or the party I resell to.

Dozens of Turkish companies have been added to OFAC's SDN list, and dual-use exports through the region have grown sharply since 2022. That is the pattern the corridor is watched for: goods and payments that route around a designation rather than through it.

What is open and what is closed, country by country

Turkey. Strong on the corporate layer: MERSIS holds company records, the Trade Registry Gazette is searchable back to 1992, and the EKAP procurement platform is open with an API. Closed to a third party: beneficial ownership, court records and property owners. So a Turkish counterparty can be established as a legal entity, traced through its filings and its public contracts — but the person at the end of the chain is not available from a register and has to be reconstructed indirectly. Turkey also has its own data-protection regime, KVKK, which is stricter than GDPR on the point that matters here: legitimate interest is a narrower basis and explicit consent carries more weight. Practically, that means corporate due diligence is workable and personal checks are not something to offer.

Romania. The cleanest of the three for an outside checker. Court records are searchable free of charge through the national portal, and company financial statements are published by the Ministry of Finance. Beneficial ownership is available on demonstrated legitimate interest for a small fee. Property cannot be searched by owner name, which limits asset work. Foreign direct investment screening has grown quickly, so a transaction with a Romanian target carries a regulatory layer worth checking early.

Bulgaria. Has one of the most open company registers in the EU: searchable without a local identifier, with extracts costing a few euros and financial statements published. Beneficial ownership is technically registered but access runs into a qualified electronic signature requirement, which is a practical barrier for a foreign checker. Bulgaria also sits on the FATF grey list, which cuts both ways — it means enhanced due diligence is expected by regulators, so the argument for running it is made for you.

Six places the trail actually shows

Where the beneficial-ownership register is closed, exposure is found in the pattern rather than in a single lookup.

The chain above the first level. The immediate owner is local and clean; the entity above it is registered somewhere with no public register. The first level is not the answer.

A recent change of ownership. A transfer dated shortly after a designation round is the single most informative fact in this corridor.

Age against volume. A company incorporated in 2023 moving eight-figure volumes in a commodity it has no history in. Trading companies do scale, but the mismatch is worth explaining before it is worth trusting.

The goods themselves. Dual-use categories — electronics, components, machine tools — carry a different level of scrutiny than the counterparty does.

The route. Transhipment through a jurisdiction that adds no commercial logic to the shipment usually exists for a reason other than logistics.

Address clusters. Dozens of unrelated trading companies at one registered address is a structural signal, not a coincidence of real estate.

Why a register check is not the work

Everything above is why a single-country screening report is close to worthless for this corridor. The counterparty is checked in their own jurisdiction, passes, and the exposure sits one link away in a register you did not open.

The work is cross-screening: the company and every person behind it, against OFAC SDN, the EU consolidated list, the UN list, UK OFSI and Ukraine's NSDC register simultaneously — plus reconstruction of the ownership chain where the local register does not disclose it, and a read of the goods and the route.

Turnaround and price

Exposure Screening lands in about 24 hours: the counterparty and its visible owners cross-screened against the five list regimes, with a written verdict. Deep Trace takes three to five days and adds ownership-chain reconstruction where the register is closed, connected-person analysis, and a read of the goods and route. The price of either is set after a short brief and fixed before work starts.

Against a stopped payment and the bank enquiry that follows it, either figure is a rounding error. The uncomfortable part is that the counterparty who triggers it will have looked entirely clean in their own country.

Frequently asked questions

Related reading: the method behind detecting concealed ties, in how to check whether a counterparty has Russian ties, and the wider wartime context, in checking a counterparty in wartime.