In banking, OFAC stands for the Office of Foreign Assets Control, a unit of the U.S. Department of the Treasury that writes and enforces the economic and trade sanctions programs U.S. financial institutions must follow. For a bank, OFAC is the reason customer names and wire transfers get screened against government lists, the reason certain funds get frozen on the books, and the reason a single missed match can trigger a civil penalty of more than $377,000.
What OFAC Does
OFAC sits under the Treasury Department’s Office of Terrorism and Financial Intelligence, and its focus is narrow: sanctions enforcement. That mandate separates it from the other regulators banks deal with. The Financial Crimes Enforcement Network (FinCEN) handles anti-money laundering and Bank Secrecy Act compliance. The Federal Reserve and OCC focus on safety and soundness. OFAC cares about one question: whether U.S. financial channels are being used by sanctioned parties or for prohibited transactions.
The agency’s programs target foreign countries, regimes, terrorist organizations, and specific individuals in support of U.S. foreign policy and national security goals. Its primary enforcement authority comes from the International Emergency Economic Powers Act, which lets the President block transactions and freeze assets tied to threats originating outside the United States.1Office of the Law Revision Counsel. 50 USC 1705 – Penalties OFAC also enforces sanctions under the Trading with the Enemy Act and various country-specific executive orders.
Who Has to Follow OFAC Rules
OFAC’s regulations apply to all “U.S. persons,” and the term reaches further than most people expect. It covers every U.S. citizen and permanent resident wherever they live, every person physically present in the United States, and every entity organized under U.S. law, including the foreign branches of U.S. companies.2eCFR. 31 CFR 560.314 – United States Person; U.S. Person A U.S. bank’s branch in London or Singapore is bound by every OFAC prohibition the same way its New York office is.
Some programs stretch further through secondary sanctions, which target non-U.S. entities. Executive Order 14024, for example, lets OFAC impose blocking sanctions on foreign banks or cut off their access to U.S. correspondent accounts if they facilitate significant dealings with Russia’s military-industrial base.3Office of Foreign Assets Control. Updated Guidance for Foreign Financial Institutions on OFAC Sanctions Authorities Targeting Support to Russia’s Military-Industrial Base Any foreign bank with U.S. dollar exposure has strong reason to screen against OFAC lists even without other U.S. ties.
The Lists Banks Screen Against
The SDN List
The Specially Designated Nationals and Blocked Persons List, universally called the SDN List, is OFAC’s main tool. It names individuals, companies, terrorist organizations, and entities tied to targeted regimes whose property must be frozen the moment it touches U.S. jurisdiction.4Office of Foreign Assets Control. Office of Foreign Assets Control – FAQ 18 U.S. persons are broadly prohibited from any dealings with anyone on it. The list runs to tens of thousands of entries and is updated frequently, sometimes several times a week.
The SDN List has a critical extension called the 50 Percent Rule. Any entity owned 50 percent or more, in the aggregate, by one or more blocked persons is itself treated as blocked property, even if it is not named on the list.5Office of Foreign Assets Control. Entities Owned by Blocked Persons (50% Rule) Ownership is added together, so two SDNs each holding 25 percent triggers blocking. Working out those chains falls entirely on the bank, which is why beneficial ownership due diligence sits so close to sanctions compliance.
The Other Lists
OFAC maintains several additional lists whose restrictions differ from the full asset freeze that applies to SDNs.
- The Sectoral Sanctions Identifications List (SSI List) targets specific sectors of a country’s economy with narrower prohibitions, such as restrictions on certain debt and equity transactions rather than a full freeze.6U.S. Department of the Treasury. Sectoral Sanctions Identifications List
- The Foreign Sanctions Evaders List (FSE List) names foreign persons and entities that have violated U.S. sanctions or helped others do so. Transactions by U.S. persons involving FSEs are prohibited.7Office of Foreign Assets Control. Additional Sanctions Lists – Foreign Sanctions Evaders (FSE) List
Compliance software usually consolidates all applicable lists into a single screening run, but the response to a match depends on which list produced it, so compliance staff need to understand the restrictions attached to each.
Screening relies on fuzzy-logic algorithms because sanctioned parties rarely present themselves under their listed names. OFAC’s guidance describes character matching, string matching, and phonetic matching as tools to catch variations and transliterations, and it deliberately declines to prescribe a specific match-score threshold. Each institution sets its own based on its risk assessment.8Office of Foreign Assets Control. How to Search OFAC’s Sanctions Lists Set it too high and real matches slip through. Set it too low and the queue fills with false positives that reviewers start clearing on autopilot.
What a Bank Does When a Name Hits
When screening flags a real match, the bank has to decide whether to block or reject the transaction. The difference comes down to whether a sanctioned party has a property interest at stake.
Blocking applies when the transaction involves property in which an SDN or other blocked person has an interest. The bank freezes the funds immediately and holds them in an interest-bearing account on its books until OFAC authorizes release.9Office of Foreign Assets Control. Blocking and Rejecting Transactions
Rejecting applies when a transaction is prohibited but no blocked person has a property interest in the funds. A wire between two non-sanctioned parties involving an export to a comprehensively sanctioned country like Cuba, Iran, or North Korea is prohibited because of the destination, but there is no SDN property to freeze. The bank declines the transaction and returns the funds to the originator.
Both blocked and rejected transactions must be reported to OFAC within 10 business days, filed electronically through the OFAC Reporting System.10eCFR. 31 CFR 501.603 – Reports of Blocked, Unblocked, or Transferred Blocked Property Not every prohibited-looking transaction is off limits forever. OFAC issues general licenses that authorize categories of transactions for entire classes of persons without an application, and specific licenses issued in writing to a particular party in response to a formal request.11Office of Foreign Assets Control. What is a License? Relying on a general license that doesn’t actually apply, or missing one of its conditions, creates the same exposure as processing the transaction with no license at all.
What Non-Compliance Costs
OFAC enforcement carries real financial weight. Civil penalties under IEEPA reach the greater of $250,000 per violation or twice the value of the underlying transaction, with the statutory floor adjusted annually for inflation.1Office of the Law Revision Counsel. 50 USC 1705 – Penalties As of the January 2025 adjustment, the inflation-adjusted cap stood at $377,700 per violation.12Federal Register. Inflation Adjustment of Civil Monetary Penalties Because each prohibited transaction is a separate violation, exposure stacks quickly for an institution processing thousands of payments.
Criminal penalties apply to willful violations and carry fines up to $1,000,000 and prison sentences of up to 20 years for individuals.1Office of the Law Revision Counsel. 50 USC 1705 – Penalties The statute of limitations for both civil and criminal actions is 10 years from the date of the violation.
OFAC does not treat every violation the same. When it sets a penalty amount, it weighs aggravating factors such as willful or reckless conduct, management awareness, and concealment, against mitigating factors including the quality of the compliance program, remedial response, and cooperation.13eCFR. Appendix A to Part 501 – Economic Sanctions Enforcement Guidelines A first-time violation with substantial cooperation can see a 25 to 40 percent reduction even without a voluntary self-disclosure. A qualifying voluntary self-disclosure, made before OFAC or any other agency discovers the violation, can cut the base penalty by 50 percent.14Department of the Treasury. Department of the Treasury’s Office of Foreign Assets Control’s Voluntary Self-Disclosure Policy
Recent enforcement gives a sense of scale. OFAC imposed over $6.6 million in penalties across just three actions in early 2026, with individual settlements ranging from roughly $1.1 million to $3.8 million.15Office of Foreign Assets Control. Civil Penalties and Enforcement Information
What a Compliance Program Looks Like
OFAC’s own “Framework for OFAC Compliance Commitments” lays out five components every sanctions program should include, and the presence and quality of the program is an explicit factor when OFAC evaluates a violation.16U.S. Department of the Treasury. A Framework for OFAC Compliance Commitments
- Management commitment, meaning real funding, staffing, and authority for the compliance function rather than statements of support.
- A written, risk-based assessment that analyzes the bank’s customers, products, geography, and counterparties to identify where sanctions risk concentrates. A community bank with no international wires has a different profile than a money-center bank running cross-border trade finance.
- Internal controls, including customer and transaction screening, beneficial ownership collection for the 50 Percent Rule, and clear escalation procedures.
- Independent testing and auditing to confirm the screening software is calibrated correctly, staff follow the escalation procedures, and policies keep pace with new sanctions programs.
- Training that is regular, at least annual, and tailored to each role. A wire operator needs different material than a loan officer, and significant sanctions changes call for extra sessions.
The through-line is that a bank that detects problems early keeps its options open. Strong monitoring preserves the window for voluntary self-disclosure and the 50 percent penalty reduction that comes with it. A bank that first hears about a violation when OFAC calls has already lost that discount.