Compliance Atlas/
Home/Topics/Us Ofac
TOPICS·CORPORATE GOVERNANCE

US OFAC Sanctions Program

US Treasury sanctions program administering economic and trade restrictions against targeted countries and persons.

USUpdated May 2026
IN A NUTSHELL
What
US sanctions programme administered by OFAC, prohibiting transactions with sanctioned countries, entities, and individuals worldwide.
Who
All US persons and entities; non-US persons risk secondary sanctions for significant transactions with sanctioned parties.
When
Ongoing. OFAC continuously updates the SDN list and country-specific programmes. Compliance is immediate upon designation.
Penalty
Civil penalties up to the greater of USD 368,136 per violation or twice the transaction value; criminal penalties up to USD 1M and 20 years imprisonment.
OVERVIEW

Administered by the Office of Foreign Assets Control within the US Department of the Treasury, the OFAC sanctions program is one of the most consequential tools of US foreign policy and national security. OFAC administers and enforces economic sanctions against targeted foreign countries, regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy, or economy of the United States. The sanctions are based on executive orders and congressional legislation, and are implemented through a series of sanctions regulations published in the Code of Federal Regulations.

OFAC sanctions apply to all US persons, which includes US citizens, permanent residents, and entities organised under US law, as well as their foreign branches. The US dollar nexus doctrine extends OFAC jurisdiction to any transaction that clears through a US financial institution or involves a US person in any capacity, giving the programme extraordinary extraterritorial reach. Additionally, secondary sanctions allow OFAC to target non-US persons who engage in significant transactions with sanctioned parties, even where no direct US nexus exists. This means that companies worldwide, particularly those with any connection to the US financial system, must be aware of and comply with OFAC requirements.

Core compliance obligations include screening all counterparties, customers, and transactions against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List, sectoral sanctions identifications, and other sanctions lists. Transactions involving blocked persons or countries subject to comprehensive embargoes must be rejected and reported to OFAC. Companies must implement risk-based compliance programmes tailored to their specific business profile, including management commitment, risk assessment, internal controls, testing and auditing, and training. OFAC has published a Framework for Compliance Commitments that outlines the components of an effective programme.

Enforcement can be severe. OFAC has authority to impose civil monetary penalties of up to the greater of approximately 360,000 dollars per violation or twice the value of the transaction, depending on the sanctions programme. In egregious cases, criminal penalties including fines of up to 20 million dollars and imprisonment of up to 30 years may apply. Recent enforcement actions have resulted in multi-million and multi-billion dollar settlements, particularly in cases involving financial institutions and multinational corporations.

OFAC sanctions operate alongside the EU sanctions framework, and companies with operations or transactions spanning both jurisdictions must reconcile potentially divergent requirements. The BSA/AML framework intersects with sanctions compliance, as many financial institutions integrate sanctions screening into their broader AML compliance programmes. For businesses, OFAC compliance is not optional where any US nexus exists, and the programme's extraterritorial reach makes it a consideration for companies worldwide that interact with the US financial system or US persons.

KEY MILESTONES
May 28, 2026
YOU ARE HERE
WHO DOES THIS AFFECT?

Select your company type for tailored compliance guidance.

KEY OBLIGATIONS
Screen all transactions against SDN List and other OFAC lists
Block transactions involving blocked persons and report to OFAC within 10 days
Implement risk-based OFAC compliance programme
File annual reports on blocked property
Apply for specific licenses where permitted transactions require authorisation
YOUR FIRST STEP

Ensure your sanctions screening system covers all OFAC lists (SDN, SSI, CAPTA) with real-time updates and comprehensive fuzzy matching

KEY COMPLIANCE REQUIREMENTS
01
SDN list screening
Screen all counterparties against the Specially Designated Nationals and Blocked Persons (SDN) list.
02
Country-based sanctions
Comply with comprehensive and sectoral sanctions programmes targeting specific countries and regions.
03
Blocking and rejecting
Block (freeze) property of SDN-listed parties; reject prohibited transactions and report to OFAC within 10 days.
04
Risk-based compliance programme
Implement a risk-based OFAC compliance programme with management commitment, risk assessment, internal controls, testing, and training.
05
Voluntary self-disclosure
Self-report apparent violations to OFAC promptly; voluntary disclosure is a significant mitigating factor in enforcement.
06
License applications
Apply for specific or general OFAC licenses when transactions may be authorised under exceptions or exemptions.
KEY INTERPRETATIONS & FAQ
RELATED TOPICS
EU Sanctions FrameworkUS Bank Secrecy Act & AML Framework
← ALL TOPICS