Economic Sanctions: Compliance Defense and Enforcement Risk

Economic sanctions administered by OFAC target specific countries, governments, individuals, and entities identified as threats to U.S. .ational security or foreign policy. OFAC maintains the Specially Designated Nationals and Blocked Persons List, known as the SDN List. Transactions involving SDN-listed parties are generally prohibited regardless of where they occur. Geographic programs target countries such as Iran, North Korea, Russia, and Cuba. Targeted programs address narcotics traffickers, terrorist networks, and weapons proliferators. Each program carries its own prohibitions and licensing requirements.

U.S. .anctions jurisdiction extends well beyond domestic companies and citizens. Foreign subsidiaries of U.S. .irms, foreign persons transacting in U.S. .ollars, and non-U.S. .ntities processing payments through U.S. .inancial institutions can all face exposure. Secondary sanctions create additional risk. They can penalize foreign parties conducting business with sanctioned countries or entities even without a direct U.S. .exus. Companies operating globally must assess sanctions exposure across their full network of operations, partners, and financial relationships.

Economic sanctions violations carry two distinct tracks of liability. Civil penalties apply under a strict liability standard. The violating party need not have known the transaction was prohibited. Criminal liability is different. Under 50 U.S.C. § 1705, willful violations of IEEPA-based sanctions may result in fines up to $1 million and imprisonment of up to 20 years per violation. Banks face additional consequences, including loss of correspondent banking access and regulatory sanctions from prudential supervisors.

OFAC's enforcement guidelines provide meaningful incentives for voluntary self-disclosure. A company that discovers a potential violation and reports it promptly may receive a non-public response or substantially reduced penalty. OFAC considers the severity of the violation, the company's compliance history, and whether disclosure was genuinely voluntary. Voluntary disclosure does not guarantee immunity. However, it is typically treated as a significant mitigating factor. Companies must weigh disclosure carefully, as the process requires producing detailed records that OFAC will scrutinize closely.

Facing an OFAC inquiry or potential sanctions violation? Early legal intervention can significantly affect the outcome. Contact our sanctions attorneys today for a confidential assessment.

OFAC guidance identifies five essential elements of an effective compliance program: management commitment, risk assessment, internal controls, testing and auditing, and training. Management commitment means senior leadership must actively resource compliance functions. Risk assessment requires mapping exposure across customers, counterparties, products, and geographies. Internal controls include transaction screening against the SDN List and other blocked party databases. Testing ensures controls are functioning. Training must reach all personnel with sanctions exposure, not only compliance staff.

Screening alone is not enough. Economic sanctions compliance requires ongoing due diligence on counterparties, beneficial ownership structures, and transaction patterns. OFAC's 50 percent rule means entities owned 50 percent or more by a sanctioned party are blocked, even if not listed on the SDN List. This requires looking beyond the immediate counterparty to underlying ownership chains. Compliance programs must also monitor for changes in OFAC designations, which can occur with little advance notice. Screening tools require regular updates and validation.

An OFAC subpoena or enforcement notice triggers immediate obligations. Document preservation must begin at once. Transaction logs, screening records, communications, and compliance reports should be secured before any internal review is conducted. Legal counsel should be engaged before any substantive response is prepared. The scope of any voluntary disclosure must be carefully evaluated. Over-disclosure can create additional liability. Under-disclosure can damage credibility with regulators. Getting the scope right from the beginning is critical.

Discovering a potential economic sanctions violation requires a disciplined internal response. The first step is stopping any ongoing conduct. The second is preserving all related records without alteration. Legal counsel should assess the violation against OFAC's enforcement framework and determine whether voluntary disclosure is appropriate. Remediation steps taken before or during disclosure are weighted favorably by OFAC. Our sanctions attorneys can evaluate potential violations, assess enforcement exposure, and develop a response strategy before regulatory contact occurs.