The United Nations paid at least $18 million last year to companies with close ties to Bashar Assad, some of them run by cronies of the Syrian president who are on U.S. and European Union blacklists.

Contracts for telecommunications and security were awarded to regime insiders including Rami Makhlouf, Assadโ€™s cousin. UN staff ran up a $9.5 million bill at the Four Seasons hotel in Damascus, co-owned by Syriaโ€™s tourism ministry, according to the U.N.โ€™s annual report on procurement for 2016, a 739-page document published in June. Some U.N. money even went to a charity set up by the presidentโ€™s wife.

The U.N. has its own global blacklist and isnโ€™t bound by sanctions imposed by member states or regional blocs such as the EU. Still, the distribution of funds to Assad allies will further fuel criticism that the world body has failed badly over Syria, where more than six years of civil war have left at least 400,000 people dead.

U.N. bodies repeatedly have condemned the conflictโ€™s atrocities. Western and Arab nations put most of the blame on Assad, yet the veto power wielded by Russia, a supporter of the Syrian regime, has prevented the UN Security Council from endorsing tougher action or adding Assad cronies to its blacklist.

โ€œAny money going to Assad and his allies shows that the U.N. is not impartial but is in fact helping the largest player in the conflict,โ€ said Kathleen Fallon, a spokeswoman for The Syria Campaign, an independent advocacy group. โ€œThe regime has been responsible for the majority of the deaths, and they are being rewarded. It sends the wrong message.โ€

U.N. officials point to the difficulty of operating outside the auspices of governments in countries such as Syria, and the premium placed on protecting its staff.

In 2003, when the U.S. invasion of Iraq had begun evolving into a civil war with parallels to the Syrian conflict, U.N. envoy Sergio Vieira de Mello and several members of his staff were killed by a car-bomb attack on the Baghdad hotel they were using as a base.

โ€œWe source locally and there are many places where the local economy is either state-owned or we have very limited options,โ€ said Stephane Dujarric, the U.N.โ€™s chief spokesman. Of U.N. spending at the Four Seasons, co-owned by Saudi billionaire Prince Alwaleed bin Talal, he said: โ€œthatโ€™s one place in Damascus that has been cleared for security.โ€

The U.N. spent $140 million on goods and services in Syria last year, according to the report.

Syriatel, which belongs to Makhlouf, was paid $164,300 by three different U.N. bodies including the refugee agency UNHCR and the childrenโ€™s relief organization UNICEF. Another U.N. agency, the United Nations Relief and Works Agency for Palestine, paid $105,043 to Qasioun, a security firm he owns.

Makhlouf, one of Syriaโ€™s richest businessmen, has been on the U.S. Treasuryโ€™s blacklist since 2008. Qasioun was specifically listed by the Treasuryโ€™s Office of Foreign Assets Control in December.

Muhammad Hamsho, another regime insider, was added to the U.S. sanctions list in 2011. The EU followed suit in 2015, saying he โ€œbenefits from and provides support to the Syrian regime through his business interests.โ€

Hamsho controls Jupiter Investment Co., according to the U.S. and EU. The company was awarded two contracts for office space and accommodations by the U.N.โ€™s peacekeeping operation monitoring the Golan Heights region between Syria and Israel. The U.N.โ€™s procurement report for 2016 said the company received contracts worth $1.5 million. A UN spokesman said by email that the world body had options to extend the leases, which have a total value of $7.7 million.