Economic Sanctions: Ofac Enforcement, Penalties, and How to Respond

OFAC derives its primary authority from IEEPA, which grants the president authority to regulate international transactions during a declared national emergency. TWEA provides parallel authority for transactions with enemy nations during wartime. OFAC uses these authorities to maintain country-specific programs targeting Cuba, Iran, North Korea, Russia, Syria, and Venezuela, as well as thematic programs targeting terrorism and weapons proliferation. The Specially Designated Nationals (SDN) List identifies specific individuals and entities whose assets are blocked and with whom all transactions are prohibited. Organizations with international operations should engage international sanctions & trade tariffs counsel immediately to identify which sanctions programs apply to their current business activities.

When OFAC sanctions prohibit a transaction, it must be blocked and reported to OFAC within 10 business days. Failure to report a blocked transaction is itself a separate OFAC violation. The obligation to block and report arises whether or not the transaction was intentional. Organizations that have encountered a potential blocked transaction should immediately engage international trade law counsel to assess reporting obligations and license requirements before taking any further action.

Every effective sanctions compliance program starts with a risk assessment. Every customer, vendor, correspondent bank, and transaction counterparty must be screened against the SDN List and applicable country sanctions lists before any transaction is processed. Screening must also be repeated when OFAC publishes new designations or when a counterparty's sanctions status may have changed. Organizations seeking to evaluate the adequacy of their current screening program should engage export controls counsel to assess screening coverage, update frequency, and fuzzy-matching protocols.

Sanctions internal controls must detect and block prohibited transactions at every stage of the business process. Automated screening flags potential matches for human review. Escalation procedures and a documented clearing process must also be in place for every flagged transaction. Transaction monitoring systems must be calibrated to detect evasion techniques such as shell companies, third-party intermediaries, and obfuscated payment routes. Regular audits must assess whether screening systems work and whether blocking and reporting obligations are being met. Organizations that have identified weaknesses in their sanctions internal controls should immediately engage corporate compliance & risk management counsel to remediate the deficiencies before OFAC identifies the problem first.

OFAC imposes civil penalties on a strict liability basis. You can be penalized even if you did not know the transaction was prohibited. Aggravating factors include willfulness, senior management involvement, and prior violations, while mitigating factors include voluntary self-disclosure and the existence of a compliance program. Criminal referrals to the DOJ occur when violations are willful and can result in up to 20 years in prison. Organizations facing potential OFAC civil or criminal exposure should immediately engage white collar crime counsel to assess the full scope of liability and develop a response strategy.

Voluntary self-disclosure (VSD) to OFAC is the single most powerful penalty reduction tool available. OFAC's Enforcement Guidelines provide that VSD can reduce the base civil penalty by up to 50 percent. VSD requires a written disclosure describing the nature, timing, and extent of the violations. The decision must be made carefully, because filing without first completing an internal investigation can expose the organization to additional enforcement risk. Organizations considering voluntary self-disclosure to OFAC should immediately engage government investigations counsel to assess whether VSD is appropriate, conduct the necessary internal investigation, and prepare the disclosure.

OFAC initiates investigations through subpoenas, administrative requests, or referrals from financial institutions. OFAC can issue civil penalties, require disgorgement of transaction proceeds, and impose compliance requirements as conditions of a settlement. OFAC also coordinates with the DOJ, which may bring parallel criminal charges when violations were willful. Organizations that have received an OFAC subpoena or inquiry should immediately engage anti-money laundering counsel to assess the scope of potential liability and manage the investigation response.

Issue a litigation hold immediately and preserve all transaction records, customer due diligence files, sanctions screening records, compliance policies, and any communications about the transactions under investigation. Retain outside counsel to conduct an internal investigation under attorney-client privilege before responding to OFAC's requests. Organizations that cooperate fully, remediate compliance failures promptly, and demonstrate a genuine commitment to future compliance consistently receive more favorable OFAC settlement outcomes. Organizations that have received an OFAC subpoena or enforcement notice should immediately engage export control law counsel to manage the investigation response and develop a settlement strategy.