OFAC List: Compliance Guide & Screening Steps

A logistics company in Rotterdam discovered in March 2025 that a routine shipment was blocked mid-transfer because one of its third-party vendors appeared on the U.S. Treasury’s sanctions database. The firm had 48 hours to document its screening procedures before facing potential civil penalties of up to $330,000 per transaction. Its compliance team needed to understand not just who was on the list, but how the entire OFAC system worked.

The OFAC list is the U.S. government’s primary financial blacklist used to freeze assets and prohibit trade with targeted foreign countries, terrorists, international narcotics traffickers, and entities involved in the proliferation of weapons of mass destruction.

The Office of Foreign Assets Control is a bureau of the U.S. Department of the Treasury established under the International Emergency Economic Powers Act and the Trading with the Enemy Act. OFAC administers more than 30 distinct sanctions programs. Beyond the SDN List—its most widely used screening tool—the agency maintains the Foreign Sanctions Evaders List, the Non-SDN Iran Sanctions Act List, the Sectoral Sanctions Identifications List, the List of Foreign Financial Institutions Subject to Correspondent Account or Payable-Through Account Sanctions, and the Non-SDN Palestinian Legislative Council List.

Each list operates under different legal authorities and imposes different consequences. The SDN List blocks all property and interests in property of designated persons within U.S. jurisdiction or in the possession or control of U.S. persons, wherever located. The Sectoral Sanctions Identifications List imposes more limited prohibitions—typically restrictions on debt or equity transactions with specific maturities rather than a full freeze. Most critical: the consolidated sanctions lists are updated continuously, sometimes multiple times per week, as OFAC issues new designations or removes entries following delisting petitions. A vendor could move from compliant to blocked between your morning and afternoon due diligence check.

OFAC’s legal authority derives from Executive Orders issued under the International Emergency Economic Powers Act (50 U.S.C. § 1701 et seq.) and specific Congressional legislation such as the Countering America’s Adversaries Through Sanctions Act. Designations are policy-driven administrative actions, not criminal convictions. An individual or entity can appear on the SDN List based on activities such as supporting terrorism, weapons proliferation, narcotics trafficking, human rights abuses, or corruption—even if no criminal charges have been filed.

Designations result from policy decisions made by OFAC in coordination with other U.S. government agencies, including the Departments of State, Justice, and Homeland Security. OFAC publishes press releases announcing new designations with detailed justifications tied to specific Executive Orders or statutory authorities. A designation under Executive Order 13224 (targeting terrorists and those who support terrorism), for instance, requires OFAC to determine that the person has committed, or poses a significant risk of committing, acts of terrorism that threaten U.S. national security, foreign policy, or economic interests.

Here’s what makes OFAC designations different from criminal convictions: they’re administrative, not judicial. No criminal conviction is required, and the evidentiary standard is lower than in criminal proceedings. Designated persons do not receive advance notice or an opportunity to contest the designation before it is imposed. OFAC designations are based on classified and unclassified intelligence, law enforcement reports, diplomatic cables, and open-source information. Once designated, the person’s name is added to the SDN List immediately, and all U.S. persons must block any property or interests in property of the designated person that come into their possession or control.

Designations can be based on direct conduct (e.g., engaging in terrorism, narcotics trafficking, or corruption) or on association with already-designated persons or prohibited regimes. Under the Foreign Narcotics Kingpin Designation Act, OFAC may designate persons who provide material support or assistance to, or act on behalf of, a previously designated kingpin. This “derivative designation” authority extends OFAC’s reach to networks of facilitators and front companies.

Designated persons may submit a delisting petition to OFAC at [email protected] with supporting documentation demonstrating that they no longer meet the criteria for designation or that U.S. sanctions policy objectives would be served by removal. Expect 6 to 9 months for OFAC to review and respond—a timeline that means your cash or assets remain frozen for much of that period. OFAC reviews petitions on a case-by-case basis. Alternatively, designated persons may challenge their designation in U.S. federal court under the Administrative Procedure Act, although courts have historically deferred to OFAC’s national security and foreign policy determinations.

OFAC violations carry penalties so severe they can destroy a business. Under the International Emergency Economic Powers Act (50 U.S.C. § 1705), civil penalties reach the greater of $356,579 per violation or twice the underlying transaction amount—and these figures adjust upward each year. Criminal penalties for willful violations: up to $1 million and 20 years in prison for individuals, and up to $20 million or twice the gain/loss for corporations. The per-transaction structure means a single business relationship involving multiple payments can generate dozens or hundreds of separate violations. One client, multiple violations, catastrophic exposure.

U.S. persons—all U.S. citizens, permanent residents, entities formed under U.S. law, and anyone physically in the United States—face strict liability. Your good faith or ignorance that a counterparty was listed does not protect you from civil penalties. Good faith matters only when OFAC decides how much to fine you, not whether you’re guilty. OFAC uses its Economic Sanctions Enforcement Guidelines to weigh factors like voluntary self-disclosure, investigation cooperation, remedial steps, and program adequacy.

Banks and financial institutions operate under different rules entirely. The Bank Secrecy Act (31 U.S.C. § 5311 et seq.) and related regulations (31 CFR Part 501–598) require risk-based sanctions compliance programs including policies, internal controls, testing, training, and designated compliance officers. Examiners from the Office of the Comptroller of the Currency, the Federal Reserve, and Financial Crimes Enforcement Network assess these programs regularly. Deficiencies trigger enforcement actions, consent orders, and separate civil penalties on top of any OFAC violations themselves.

Organizations that discover potential violations have a critical decision: submit a voluntary self-disclosure to OFAC, which can cut penalties by 50% or more compared to violations OFAC uncovers independently. For transactions involving sanctioned jurisdictions, licensing applications, or violations already discovered, professional legal review reduces exposure significantly.