OFAC Enforcement
Receiving an official letter from the Office of Foreign Assets Control (OFAC) — a division of the U.S. Department of the Treasury — is one of the most serious challenges that any company or individual engaged in international activities can face. This is not merely a request for information. It is a signal of the initiation of a formal enforcement process, which could result in multimillion-dollar fines, reputational collapse, and even criminal prosecution. Attempting to ignore such a notice or respond to it without professional legal preparation is a strategic mistake with catastrophic consequences.
Effective defense in OFAC cases requires a deep understanding not only of sanctions legislation but also of the internal mechanics of the regulator’s operations. Success depends on an immediate response, conducting a thorough internal investigation, and establishing precise communication with U.S. authorities.
Received an OFAC subpoena or Cautionary Letter? You have 30 days to respond. An early voluntary disclosure can reduce penalties by 50%. Act immediately.
What is OFAC enforcement and how does an investigation begin?
OFAC enforcement is the process through which the Treasury Department’s Office of Foreign Assets Control identifies, investigates, and penalizes violations of U.S. sanctions programs. Investigations originate from bank filings, whistleblower tips, open-source information, or referrals from other federal agencies.
Most formal matters open with an Administrative Subpoena — a binding demand for contracts, bank records, correspondence, and related documentation tied to a specific transaction. A subpoena signals that OFAC already has grounds to suspect a violation; it is not a routine information request, and the response becomes part of the record OFAC relies on to reach a decision.
U.S. sanctions law operates on a strict liability standard: a violation can be established regardless of intent or awareness of a counterparty’s status. Lack of intent does not by itself eliminate liability, though it affects how a case is classified and how a penalty is calculated.
Our attorneys support clients through every stage of that process:
- Proactive consulting and internal investigations
The best way to avoid problems with OFAC is to prevent them. We help clients identify and eliminate potential risks before they attract the regulator’s attention.
Sanctions audit: We conduct a comprehensive review of business processes, counterparties, and transactions for compliance with current sanctions regimes.
Internal investigations: In case of suspicion of a possible violation, we organize a confidential internal investigation to establish the facts, assess risks, and develop a strategy for further actions. - Representation during OFAC investigations
If your company or you personally have become the subject of an OFAC investigation, it is crucial to immediately involve experienced lawyers. We provide full support at all stages of interaction with the regulator:
Responses to requests and subpoenas: We prepare legally accurate responses to administrative subpoenas (subpoenas) and other OFAC requests.
Communication with the regulator: We conduct all negotiations with OFAC representatives, building a constructive dialogue to protect your position. - Voluntary Self-Disclosure of Violations (Voluntary Self-Disclosure)
In some cases, the most effective strategy is voluntarily informing OFAC about the identified violation. Such a step demonstrates a responsible approach and can lead to significant mitigation of penalties, and in some situations — to their complete absence, limited to just a Cautionary Letter. We assist in preparing and submitting a comprehensive disclosure that will protect your interests to the fullest extent. - Dispute Resolution and Negotiations
Our deep expertise in the OFAC methodology allows us to effectively negotiate settlements. We analyze all circumstances of the case, including mitigating and aggravating factors, the degree of cooperation, and the nature of the violation, to achieve the most favorable outcome for the client, whether it be a reduction in the penalty amount or reaching a settlement agreement.
We represent financial institutions, logistics and technology companies operating in high-risk regions, and private individuals — including U.S. citizens with exposure tied to Russia and Crimea sanctions or other sanctions programs.
Stages of OFAC investigation
The OFAC enforcement process is a formalized and multi-stage procedure. Understanding each stage allows you to build an effective defense strategy, respond promptly to regulator requests, and minimize potential risks to your business. The entire process can be conditionally divided into several key stages.
The main steps that a company or individual goes through during an investigation:
- Receiving a subpoena and immediate actions. The first step after receiving a subpoena is to immediately contact lawyers specializing in sanctions law. It is critically important to halt any routine document destruction processes and issue a litigation hold. Any attempts to conceal or destroy information will be regarded as an aggravating circumstance and will significantly worsen your situation;
- Conducting a privileged internal investigation. Simultaneously with preparing a response for OFAC, your lawyers should initiate an internal investigation under attorney-client privilege. Its goal is to stay ahead of the regulator and obtain an objective picture of what happened. It is necessary to determine whether a violation occurred, whether it was intentional or accidental, which employees were involved, and how serious the systemic failures in the company’s compliance procedures are;
- Preparation of a strategic response to an OFAC subpoena. Responding to a subpoena is not just a mechanical submission of the requested documents. It is the first opportunity to present your version of events and outline your legal position. The documents must be accompanied by an explanatory letter that frames the facts in a favorable light, demonstrates a willingness to cooperate, and highlights the steps taken to remedy the situation. This stage lays the foundation for all subsequent negotiations.
- Communication and negotiations with OFAC. After receiving your response, OFAC may send additional requests to clarify details. At this stage, your lawyers engage in direct dialogue with representatives of the agency. The goal of the negotiations is to convince OFAC of the presence of mitigating circumstances, prove the absence of malicious intent, and, if a violation did occur, agree on a fair resolution of the case, which may include a reduction in the penalty amount;
- Completion of the case and possible outcomes. The investigation can conclude in various ways. In the best-case scenario, OFAC will issue a No-Action Letter. If the violation was minor, the regulator may limit itself to issuing a Cautionary Letter. In the case of a proven violation, the most likely outcome is a Settlement, under which the company agrees to pay a fine and fulfill certain conditions, such as improving its compliance program.
- Subpoena received — immediate steps. Contact sanctions counsel, issue a litigation hold, and halt any routine document destruction. Any appearance of concealment is treated as an aggravating factor on its own, separate from the underlying conduct.
- Privileged internal investigation, run in parallel with the subpoena response, to determine whether a violation occurred, whether it was intentional, and how deep any compliance failure runs.
- Strategic response to the subpoena, including a cover letter that frames the facts and demonstrates cooperation — the first real opportunity to shape OFAC’s view of the case.
- Negotiation with OFAC, aimed at establishing mitigating circumstances and, where a violation is confirmed, agreeing on a proportionate resolution.
- Resolution, typically one of five outcomes: No-Action Letter, Cautionary Letter, Finding of Violation, Civil Monetary Penalty, or Settlement Agreement.
Voluntary Self-Disclosure (VSD): what it actually changes
If an internal review turns up a violation before OFAC makes contact, a Voluntary Self-Disclosure can reduce the base penalty by up to 50% under the Economic Sanctions Enforcement Guidelines (31 C.F.R. Part 501, Appendix A). In some cases the matter closes with a Cautionary Letter and no fine. The full guidelines are published at ofac.treasury.gov.
A VSD only helps when it is accurate, complete, and timely — a rushed or partial disclosure that later needs correcting can do more damage than staying silent. A privileged internal investigation should always precede submission, not follow it.
A separate point worth flagging: the 50 Percent Rule. A company aggregately owned 50% or more by one or more blocked persons is itself treated as blocked, even where it does not appear on the SDN list directly. Checking counterparty ownership structure against this rule is a baseline element of sanctions compliance for exactly this reason.
Document retention also carries more weight than it used to: amendments to IEEPA extended the statute of limitations for sanctions violations from five years to ten, which in practice means supporting documentation should be retained for at least ten years — double the earlier standard.
How OFAC calculates the penalty
OFAC’s decision is not arbitrary — it flows from a defined set of factors under the Enforcement Guidelines, applied first to classify a case as egregious or non-egregious, then to account for whether it was voluntarily disclosed.
| Case category | Base penalty |
| Non-egregious, self-disclosed | one-half of the transaction value, subject to a statutory cap |
| Non-egregious, not disclosed | full transaction value, subject to a higher statutory cap |
| Egregious | one-half of the statutory maximum (disclosed) or the full statutory maximum (not disclosed) |
Penalties are calculated per violation, so a case involving multiple transactions can escalate into the tens of millions of dollars quickly — which is exactly why the classification decision at the start of a case matters.
OFAC’s 11 General Factors
- Willful or reckless nature of the conduct.
- Awareness of the conduct at the time of the transaction.
- Harm to the objectives of the applicable sanctions program.
- Individual characteristics of the sanctioned party (size, business type, history).
- Existence and functioning of a sanctions compliance program at the time of the violation.
- Remedial response after the violation was discovered.
- Degree of cooperation with OFAC during the investigation.
- Time elapsed between the violation and the case being addressed, including statute-of-limitations considerations.
- Other enforcement action taken by different agencies on the same conduct.
- Deterrence value of the resolution for future compliance.
- Other factors OFAC considers relevant to the specific case.
The full list is set out in Appendix A to 31 C.F.R. Part 501, available on OFAC’s site.
| Mitigating Factors | Aggravating Factors |
|---|---|
| Voluntary Self-Disclosure (VSD): Proactive notification to OFAC about a violation. | Intentional violation: Evidence that the violation was deliberate or committed with the purpose of circumventing sanctions. |
| Full cooperation with the investigation: Timely provision of accurate and complete information. | Concealment of information: Attempts to hide, destroy, or falsify evidence. |
| The presence of an effective compliance program: The existence and operation of internal policies for sanctions compliance at the time of the violation. | Awareness of top management: Involvement or knowledge of a violation by the company’s top management. |
| Remedial Action: Steps taken to correct deficiencies and prevent future violations. | Causing significant harm to the objectives of the sanctions program: If the violator’s actions have seriously undermined U.S. policy. |
| The absence of violations in the past: If this is the first violation for the company in the last five years. | The absence of a compliance program: Complete disregard for the creation of internal control systems. |
| Insignificant transaction volume: If the total amount of transactions that violated sanctions was small. | Repeated violations: The presence of similar violations in the past. |
Sanctions exposure is rarely confined to OFAC
A matter that starts with OFAC often reaches other agencies: the Department of Justice, where conduct appears criminal; FinCEN, on AML/BSA compliance and suspicious-activity questions; the Bureau of Industry and Security (BIS), where facts overlap with export controls; and the Directorate of Defense Trade Controls (DDTC), for transactions involving defense articles. Parallel proceedings across agencies on the same conduct change the defense strategy and require coordinated positions across all of them.
Consequences beyond the fine
- Reputational harm once an enforcement action becomes public.
- Criminal referral to the DOJ for willful or serious violations, carrying imprisonment risk for individuals.
- De-risking — banks closing accounts and refusing transactions once an investigation becomes known, which can paralyze a business faster than any fine.
- SDN listing in extreme cases, cutting off access to the U.S. financial system entirely (see our SDN List Removal service).
- Reputational damage. The publication of information about the investigation and OFAC fines causes irreparable harm to business reputation. Partners, clients, and creditors may reconsider their relationships with the company, fearing their own risks;
- Criminal prosecution. In cases of intentional and serious violations, OFAC may refer the case to the U.S. Department of Justice (DOJ) for criminal proceedings. This threatens not only fines but also imprisonment for executives and employees involved in the criminal scheme;
- Refusal of banking services (“De-risking”). Financial institutions around the world are extremely sensitive to sanction risks. Upon learning about an OFAC investigation, banks may unilaterally close a company’s accounts and refuse to process any transactions to protect themselves. This can completely paralyze the business;
- Inclusion in sanction lists. In exceptional cases, for particularly egregious violations, a company or individual may themselves be added to one of the sanction lists, for example, the SDN List. This is a “death sentence” for any international business, completely cutting off access to the global financial system.
Why sanctions counsel matters from the first letter, not the last
The General Factors OFAC applies — willfulness, awareness, harm to program objectives, compliance history, cooperation, remedial action — are the same factors counsel needs to be building a record around from day one. Our attorneys have negotiated penalty reductions of 50–75% for clients, with a combined track record exceeding $400M in reductions across sanctions matters. Whether the letter in hand is a Cautionary Letter, a subpoena, or a Pre-Penalty Notice, reaching out before the response deadline passes keeps more options on the table than waiting does.
Contact us for a complete and confidential consultation regarding your situation.
FAQ
Can I negotiate directly with OFAC without hiring a lawyer?
Nothing legally requires representation. In practice, most individuals and companies use counsel because OFAC’s Enforcement Guidelines reward a specific kind of documented cooperation and mitigation record — one that is difficult to build correctly without experience in how OFAC evaluates cases.
What happens if I simply ignore a subpoena or Cautionary Letter?
Non-response does not make the matter go away. OFAC can proceed to a Pre-Penalty Notice or Penalty Notice based on the information it already has, and a failure to respond is itself treated as a separate aggravating factor, on top of whatever the underlying transaction involved.
Can an OFAC settlement or penalty affect my immigration status or visa?
It can, particularly for non-U.S. nationals or where the underlying conduct also triggers other regulatory or criminal exposure. This is assessed case by case and should be raised with counsel alongside any sanctions defense strategy.
Is a civil monetary penalty from OFAC negotiable in terms of payment, or is it due immediately?
Settlement agreements can include payment terms, and in some cases installment arrangements are negotiated as part of the resolution — this is addressed during settlement talks rather than fixed by the initial Penalty Notice.
Does hiring a lawyer make OFAC scrutinize my case more closely?
No. Engaging counsel is a routine, expected step in any enforcement matter and is not treated as suspicious. A represented party’s submissions tend to be more organized, which OFAC has stated it takes into account favorably as a form of cooperation.
Do I need a U.S.-licensed attorney, or can foreign counsel handle an OFAC matter?
OFAC enforcement is a matter of U.S. federal law, so representation before OFAC and any related DOJ referral generally requires attorneys admitted to practice in the relevant U.S. jurisdiction, though international counsel can coordinate strategy, especially for cross-border clients.
