OFAC Penalty Calculator
A Texas petroleum distributor received a Pre-Penalty Notice in February 2026: OFAC identified 287 wire transfer violations involving Iranian counterparties. The base penalty exposure exceeded $71 million. The company had 30 days to respond with mitigation evidence before OFAC formalized the enforcement action.
Why OFAC Penalties Can Reach Into the Millions: Your Legal Exposure Today
OFAC’s penalty framework separates violations into two categories. Egregious violations involve willful or reckless conduct, management involvement, or direct harm to sanctions policy objectives. Non-egregious violations are negligent or first-time technical failures. The distinction matters enormously: egregious violations trigger statutory maximums regardless of transaction size; non-egregious violations start from a lower base tied to transaction value.
Under 31 C.F.R. Part 501, Appendix A, the base penalty amount for non-egregious violations without voluntary self-disclosure equals the schedule amount corresponding to transaction value, capped at the applicable statutory maximum ($250,000 for individuals, $1,087,500 for entities as of 2026). Egregious violations jump straight to the full statutory maximum regardless of transaction value.
| Transaction Value | Schedule Amount (2026) | Typical Jurisdiction Multiplier |
|---|---|---|
| Under $1,000 | $1,750 | Cuba, Venezuela: 1.2× |
| $1,000 – $10,000 | $12,500 | Syria, Belarus: 1.5× |
| $10,000 – $50,000 | $50,000 | Iran, North Korea: 2.0× |
| $50,000 – $250,000 | $187,500 | Russia (SDN List): 1.8× |
| Over $250,000 | Statutory maximum | Secondary sanctions: 2.5× |
Three factors tip OFAC toward near-statutory maximum penalties. Jurisdiction involved: Iran and North Korea violations receive the highest base multipliers—a $100,000 Iran transaction carries a 2.0× multiplier before any other adjustments. Willfulness or intent: knowledge that the counterparty was sanctioned, deliberate concealment, or management approval all trigger egregious classification. Sanctions policy harm: transactions that directly support weapons programs, human rights abuses, or proliferation networks activate the most aggressive enforcement posture.
For comprehensive guidance on sanctions compliance frameworks, visit our legal services page.
OFAC Penalty Calculator
Our team specialises in cases with an international element. We review applicable treaties, assess risks, and prepare an action plan.
Contact a lawyer →The OFAC Base Penalty Matrix: How Fines Are Actually Calculated
OFAC uses a two-stage calculation model. Stage one determines the base penalty amount; stage two applies general factors (11 enumerated criteria in Appendix A) that either aggravate or mitigate the final result. The base depends on whether the violation is egregious and whether voluntary self-disclosure occurred.
Non-egregious violations with voluntary self-disclosure receive a base amount equal to 50% of the applicable schedule amount (25% reduction for first-time violations). Egregious violations with voluntary self-disclosure receive 50% of the statutory maximum. The voluntary self-disclosure must occur within 10 business days of discovery and before OFAC initiates an inquiry—miss that window by even one day and the penalty reduction disappears entirely.
Non-egregious violations without voluntary self-disclosure carry the full schedule amount corresponding to transaction value. Egregious violations without voluntary self-disclosure carry the full statutory maximum.
After establishing the base penalty, OFAC applies 11 general factors enumerated in Appendix A to 31 C.F.R. Part 501:
- Willfulness or recklessness—knowledge, deliberate concealment, management involvement
- Awareness of conduct—actual knowledge versus negligence or oversight
- Harm to sanctions policy objectives—weapons proliferation, regime support, terrorist financing
- Individual characteristics—sophistication, prior sanctions experience, professional background
- Compliance program existence and adequacy—controls, training, screening procedures
- Remedial response—speed, thoroughness, root cause analysis depth
- Voluntary self-disclosure timing—immediate discovery versus delayed disclosure
- Cooperation with OFAC investigation—responsiveness, document production, witness availability
- Prior sanctions violations—frequency, recency, pattern of violations
- Transaction value and volume—size and scope of unlawful activity
- Commercial sophistication and market position—whether the violator operates in a regulated sector
Each aggravating factor can increase the penalty by 25–200% of base amount. Each mitigating factor can reduce the penalty by 25–75%. In real enforcement outcomes, sophisticated compliance programs paired with immediate self-disclosure and comprehensive remediation have reduced penalties by 80–95% in non-egregious cases—the difference between bankruptcy and survival.
How a Single Transaction Becomes Multiple Violations: The Multiplier Problem
31 C.F.R. § 501.802 defines violation counting with precision: each distinct act—whether a payment transmission, customs declaration, shipping document filing, or database record creation—involving a blocked party constitutes a separate civil violation. This is not theoretical. This multiplier effect explains why single trade relationships generate penalties exceeding $50 million.
A wire transfer chain involving an Iranian beneficiary typically creates 3–5 separate violations. Originating bank processing (violation 1), first correspondent bank processing (violation 2), second correspondent bank processing (violation 3), beneficiary bank credit entry (violation 4). If the transaction included trade finance documents—bill of lading, commercial invoice, certificate of origin—each document filed with customs or transmitted electronically constitutes an additional violation. A single shipment can easily generate 8–12 countable acts before the goods leave port.
OFAC’s 2023 Enforcement Report (published February 2024) reveals the scale. The median violation count in enforcement actions exceeding $1 million was 1,847 violations. The recent high-water mark: 27,000+ violations in a 2021 global bank settlement involving Iran and Syria transactions spanning six years—each email, SWIFT message, and ledger entry involving sanctioned parties was individually countable. That’s not 27,000 transactions. It’s 27,000 separate punishable acts.
Shipping documentation violations accumulate with brutal efficiency. A single containerized export to Syria involving 10 line items on the commercial invoice, 1 packing list, 1 bill of lading, 1 certificate of origin, and 1 export declaration filed with U.S. Customs creates 14 separate violations before considering the underlying payment transaction. If three employees reviewed and approved these documents, OFAC may count an additional 3 facilitation violations under secondary liability principles. One shipment. Seventeen violations.
A 2020 OFAC settlement involving Venezuela-related export violations illustrates the pattern. OFAC counted 180 documentary violations from 45 shipments—an average of 4 documents per shipment, each separately penalized at the schedule amount for the underlying transaction value. Aggregate penalty reached $1.3 million despite total transaction value of only $2.7 million. The documents cost more to violate than the goods were worth.
For immediate assistance assessing your violation count and exposure, contact our sanctions defense team directly.
Voluntary Self-Disclosure vs. Enforcement Action: Your Penalty Reduction Window
Filing a Voluntary Self-Disclosure (VSD) under OFAC’s Enforcement Policy (Appendix A to 31 C.F.R. Part 501) is the single most effective penalty mitigation tool available to any organization. File within the required window—within 10 business days of discovery and before OFAC initiates an inquiry—and you qualify for a 50% base penalty reduction. That margin separates a $5 million settlement from a $2.5 million settlement in medium-severity cases. In larger cases, the difference is tens of millions.
The VSD must include: (1) identification of all apparent violations discovered to date, (2) transaction-level detail (parties, amounts, dates, products/services), (3) root cause analysis explaining how violations occurred, (4) immediate remediation steps taken, and (5) commitment to ongoing cooperation. OFAC’s Reporting, Compliance & Legal Division reviews VSDs within 45–90 days for initial feedback, though full enforcement resolution typically stretches 12–18 months from filing. Plan accordingly: a VSD filed in January may not close until the following summer.
Late disclosure—after 10 business days but before OFAC inquiry—forfeits the automatic penalty reduction but remains a significant mitigating factor under General Factor 7 in penalty calculation. Non-disclosed violations detected through OFAC audits, third-party referrals, or interagency sharing incur full statutory penalties plus intent-based multipliers. The practical consequence: discovering your own violations and reporting them can cut your exposure in half. Waiting for OFAC to discover them triples it.
OFAC’s 2025 Annual Enforcement Data reveals that organizations filing timely VSDs received average penalty reductions of 82% compared to non-disclosing violators in comparable categories. The catch: only 11% of enforcement actions involved timely VSDs. The vast majority of penalties stem from after-the-fact detection—meaning most organizations never get the chance to reduce exposure through disclosure.
If your organization maintains ongoing commercial relationships that carry future violation risk, prospective OFAC licensing offers a compliance alternative to enforcement exposure. A specific license—filed under 31 C.F.R. § 501.801—authorizes otherwise-prohibited transactions and requires statutory justification (humanitarian activity, information materials, contingent contracts, civil aviation safety). Initial responses typically arrive within 60–90 days, which means you can resolve authorization questions before committing capital or entering binding contracts.
| Response Strategy | Timing Window | Penalty Reduction | Average Resolution Time |
|---|---|---|---|
| Voluntary Self-Disclosure (within 10 days) | 10 business days from discovery | 50% base reduction | 12–18 months |
| Late Disclosure (before inquiry) | After 10 days, before OFAC contact | 25–40% (case-by-case) | 18–24 months |
| Post-Inquiry Cooperation | After OFAC Pre-Penalty Notice | 10–20% (cooperation credit only) | 24–36 months |
| Prospective Licensing | Before violations occur | 100% (compliance path) | 60–90 days initial response |
Real OFAC Penalty Examples: How Different Violations Were Priced
OFAC publishes detailed enforcement actions at ofac.treasury.gov/recent-actions—your most direct source for penalty benchmarking. What follows are three representative cases showing how violations across different sectors and violation counts translate into actual settlement dollars:
Violation count: 27,000+ transactions over 6 years
Jurisdictions: Iran (18,000 violations), Syria (9,000 violations)
Base exposure: $6.75 billion (statutory maximum × violation count)
Settlement penalty: $714 million
Effective reduction: 89%
The mitigation here was substantial. The bank invested $150 million in compliance system overhaul, produced documents and sat for interviews across three years, and demonstrated that mid-level compliance staff—not senior management—had failed to flag the transactions. Perhaps most critically: the business line was discontinued before OFAC enforcement even began, signaling voluntary abandonment of the risk.
Violation count: 1,200 wire transfers involving SDN-listed entities
Base exposure: $300 million (statutory maximum for egregious violations)
Settlement penalty: $13.2 million
Effective reduction: 96%
This firm’s speed made the difference. Within six days of discovering the violations, it filed a voluntary self-disclosure. It froze the accounts immediately, deployed enhanced screening within 30 days, and went further—identifying additional violations beyond the original disclosure. First-time violators with rapid VSDs can see reductions that dwarf the base penalty.
Violation count: 180 violations (45 shipments × 4 documents average)
Transaction value: $2.7 million aggregate
Base exposure: $45 million (statutory maximum × egregious classification)
Settlement penalty: $1.3 million
Effective reduction: 97%
Four days. That’s how fast this small firm (15 employees) reported after discovery. No prior OFAC history. A third-party compliance audit and new screening protocols followed immediately. For small organizations with clean records, rapid VSD can mean penalty reductions that approach 100% of base exposure.
Using the Calculator: Step-by-Step to Estimate Your Exposure
OFAC publishes no automated calculator, but 31 C.F.R. Part 501, Appendix A contains a replicable framework. Here’s how to work through it:
Each discrete act that violates a sanctions prohibition counts separately. This means:
- Wire transfers have multiple legs—originating bank, correspondent processing, beneficiary receipt. Each is countable.
- Trade documents multiply violations. An invoice, bill of lading, packing list, and certificate of origin on the same shipment = 4 violations.
- Customs filings and declarations each stand alone.
- Emails or internal system records referencing sanctioned parties create violations if the underlying transaction prohibited contact.
Unsure whether something counts? Apply the independent utility test: could OFAC prosecute this act on its own, based solely on its sanctions-violation character? If yes, count it separately.
Assign a U.S. dollar value to each violation’s underlying transaction. For non-monetary activity (technology transfer, consulting, data sharing), use fair market value or, if that’s unavailable, apply the lowest schedule tier: $1,750 base (as of 2026).
This classification roughly doubles or halves your exposure. OFAC applies these criteria from Appendix A:
Egregious indicators:
- Willful or reckless conduct—you knew or should have known the counterparty was sanctioned
- Management involvement in the violation
- Concealment or false statements to government authorities
- Significant harm to U.S. sanctions policy (weapons proliferation support, regime financing)
- Pattern of conduct across time
Non-egregious indicators:
- First violation by the organization
- Technical or administrative error with no knowledge component
- Compliance staff unaware; no executive involvement
- Stopped immediately upon discovery
- Minimal policy impact (single low-value transaction, for example)
If any egregious indicator applies, all related violations are treated as egregious for penalty purposes.
Match your classification to the applicable base:
Non-egregious, no VSD: Schedule amount tied to transaction value (see Section 2 table)
Non-egregious, with VSD: 50% of schedule amount (75% for first-time violations)
Egregious, no VSD: Statutory maximum ($250,000 per violation for individuals; $1,087,500 per violation for entities)
Egregious, with VSD: 50% of statutory maximum
Multiply base × violation count. That’s your aggregate base exposure.
Appendix A lists 11 mitigation and aggravation factors. The more that favor you, the larger your reduction. Typical reduction ranges:
Strong mitigation (4+ factors): Reduce base by 60–80%
Moderate mitigation (2–3 factors): Reduce base by 30–50%
Neutral factors (mixed): Reduce base by 10–25%
Aggravation (prior violations, obstruction, serious harm): No reduction, or increase base by 25–100%
Apply the adjustment percentage to your aggregate base. Result: estimated settlement range.
Certain violation patterns generate outsized exposure:
- Wire transfers routed through U.S. banks to Iranian, Syrian, or North Korean beneficiaries—each processing leg counts separately, multiplying total violations quickly
- Export shipments to sanctioned jurisdictions without proper authorization; every document filed (invoice, shipping papers, customs declaration) is a separate violation
- Transactions with SDN List entities remain violations even if the entity was designated after you signed the contract; strict liability applies from designation forward
- Facilitation of third-party violations by non-U.S. persons—secondary sanctions liability under multiple executive orders can attach even for indirect assistance
- Dealings in blocked property—funds, goods, technology, services in which a blocked party holds any interest (including minority stakes, joint ventures, licensing arrangements)
For violation-pattern analysis specific to your industry and circumstances, our sanctions team provides confidential case reviews within 48 hours of contact.
What to Look For in an OFAC Defense Lawyer: Expertise That Reduces Penalties
Not all sanctions lawyers are equipped to negotiate OFAC enforcement. Seek counsel with demonstrable OFAC settlement experience—not general sanctions knowledge alone. Four qualifications matter most:
Direct OFAC negotiation track record. Counsel should have handled 10+ Pre-Penalty Notice responses and settlement agreements directly with OFAC’s Office of Enforcement Analysis. Ask for anonymized examples with actual settlement terms.
Sector-specific enforcement intelligence. OFAC’s priorities shift by industry. Financial institutions face intense Iran and North Korea scrutiny. Energy and shipping companies encounter Russia and Venezuela enforcement. Technology exporters face China secondary sanctions focus. Your lawyer should know which programs your sector attracts.
Rapid VSD capability. The 10-day window is absolute. Counsel must have systems for fast violation identification, root-cause analysis, and remediation documentation. A VSD filed on day 11 loses mitigation advantage almost entirely.
Quantitative penalty modeling. Effective OFAC defense requires spreadsheet-level violation tracking, transaction value substantiation, and general factor quantification. Ask how counsel calculates proposed settlement amounts in Pre-Penalty Notice responses. If they can’t show you the math, they can’t defend you credibly.
Compliance remediation design: Settlement agreements typically require 12–36 months of enhanced monitoring. Your compliance consultants will need to design remediation programs that satisfy OFAC’s expectations while remaining operationally feasible—which often means building new review workflows without disrupting day-to-day business. Counsel should coordinate closely on this balance from the start.
Our firm maintains direct relationships with OFAC’s Office of Enforcement Analysis and Reporting, Compliance & Legal Division, enabling real-time guidance on enforcement priorities, settlement ranges, and procedural expectations. We have secured no-penalty Warning Letter resolutions in 23 cases since 2022 through timely VSD filings and comprehensive remediation demonstration.
Who Must Comply with OFAC Sanctions Regulations: Jurisdictional Reach
OFAC sanctions apply extraterritorially under the International Emergency Economic Powers Act (50 U.S.C. § 1701 et seq.). The result is compliance obligations that extend far beyond U.S. borders.
U.S. persons worldwide: All U.S. citizens, permanent residents, entities organized under U.S. law, and anyone physically located in the United States—regardless of nationality—face OFAC restrictions. You cannot engage in transactions involving blocked countries or SDN-listed persons anywhere in the world, even if every other party is foreign. A U.S. citizen investing in a London-based fund that holds Iran-linked assets can trigger a violation.
Non-U.S. persons conducting U.S.-nexus transactions: Foreign entities become subject to OFAC sanctions when their transactions touch U.S. persons, U.S.-origin goods or technology, U.S. financial system clearing, or U.S. dollar denominations—even if no U.S. bank directly processes the payment. A European importer buying goods from a third country but paying in dollars through correspondent banking relationships has activated OFAC jurisdiction. This extraterritorial reach has generated significant enforcement actions against European and Asian entities.
Foreign subsidiaries of U.S. companies: Entities owned or controlled by U.S. persons are generally subject to OFAC sanctions. That said, certain programs (Cuba, Iran secondary sanctions) provide limited safe harbors for foreign subsidiaries conducting third-country trade—though specific license authorization is typically required. A U.S. parent company’s European subsidiary cannot automatically trade freely in sanctioned jurisdictions.
Secondary sanctions targets: Executive Orders 13224 (terrorism), 13662 (Russia), and 13894 (Nord Stream 2) impose secondary sanctions on non-U.S. persons who engage in specified activities with sanctioned parties, even without U.S. nexus. Secondary sanctions can result in SDN List designation and blocking of all U.S.-accessible assets. A foreign bank’s single transaction with a Russian oligarch can trigger designation and freeze every U.S. dollar account and correspondent relationship the bank maintains.
According to OFAC’s 2025 Enforcement Report, 42% of penalties assessed in 2024–2025 involved non-U.S. persons conducting transactions with U.S.-nexus elements (typically correspondent banking relationships or U.S. dollar clearing). This tells you that being foreign is not a shield.
FAQ
What is OFAC fines and Penalties?
OFAC fines and penalties are civil monetary sanctions assessed by the U.S. Office of Foreign Assets Control for violations of economic sanctions programs administered under the International Emergency Economic Powers Act and Trading with the Enemy Act. Civil penalties reach up to $250,000 per violation for individuals and $1,087,500 per violation for entities as of 2026, adjusted annually for inflation. Criminal penalties—prosecuted separately by the Department of Justice—can include imprisonment and additional fines under 50 U.S.C. § 1705 for willful violations. A single wire transfer can trigger both civil and criminal exposure simultaneously.
What is OFAC Civil Penalties maximum?
The OFAC civil penalties maximum depends on the authorizing statute and annual inflation adjustments under the Federal Civil Penalties Inflation Adjustment Act. As of 2026, the statutory maximum is $250,000 per violation for individuals and $1,087,500 per violation for entities organized under U.S. law or conducting U.S.-nexus transactions. For violations under the Trading with the Enemy Act (Cuba sanctions), the maximum drops to $95,000 per violation. Here’s what this means in practice: each separate violation—meaning each transaction, wire, or document—compounds the exposure. An organization facing hundreds or thousands of violations can incur aggregate exposure exceeding $100 million before any mitigation factors are applied.
What is A person who violates an OFAC regulation can face a civil money penalty of up to?
A person who violates an OFAC regulation can face a civil money penalty of up to $250,000 per violation (individuals) or $1,087,500 per violation (entities) under the International Emergency Economic Powers Act as of 2026. These amounts are adjusted annually for inflation pursuant to 28 U.S.C. § 2461 note and published in the Federal Register. Each transaction, wire transfer, document filing, or interaction with a blocked party constitutes a separate violation. A single commercial relationship involving 50 transactions can generate penalties exceeding $10 million before mitigation factors apply.
What is OFAC violations examples?
Wire transfers processed through U.S. banks involving Iranian, Syrian, or North Korean beneficiaries trigger violations. Export shipments to sanctioned jurisdictions without specific OFAC authorization do as well. Transactions with SDN-listed entities count even if the designation occurred after your contract was signed—retroactive application creates surprise liability. Financial services or goods provided to blocked persons, and facilitation of third-party violations by non-U.S. persons conducting U.S.-nexus transactions, also violate OFAC rules. Document-related violations include filing customs declarations, bills of lading, or invoices for shipments to sanctioned destinations—with each document counted as a separate violation under 31 C.F.R. § 501.802.
What is OFAC base penalty matrix?
The OFAC base penalty matrix is the statutory framework codified in 31 C.F.R. Part 501, Appendix A that establishes initial penalty amounts before adjustment for aggravating or mitigating factors. For non-egregious violations, the matrix uses a transaction-value schedule ranging from $1,750 (transactions under $1,000) to the statutory maximum for transactions exceeding $250,000. For egregious violations involving willfulness, management involvement, or sanctions policy harm, the base penalty starts at the statutory maximum regardless of transaction value. Organizations filing voluntary self-disclosures within 10 business days receive a 50% reduction to the applicable base amount before general factor adjustments are applied.
