For any attorney practicing in international trade, finance, or business law, a thorough command of the Office of Foreign Assets Control (OFAC) regulatory framework is no longer optional — it is foundational. OFAC administers and enforces more than 30 sanctions programs covering dozens of countries, thousands of designated individuals, and hundreds of entity categories. Enforcement has accelerated significantly in 2024–2025, with penalties reaching into the hundreds of millions of dollars. This guide covers the core knowledge that every sanctions lawyer — and every sophisticated compliance professional — needs to operate effectively in this environment.
OFAC’s Statutory and Regulatory Foundation
OFAC is a financial intelligence and enforcement agency within the U.S. Department of the Treasury. It operates under a delegation of the President’s authority — primarily under the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), and various country-specific statutes. Each sanctions program is established by Executive Order or statute, and OFAC’s regulations implementing each program are codified in Title 31 of the Code of Federal Regulations (Parts 500–598).
The primary enforcement tool is the SDN list — the Specially Designated Nationals and Blocked Persons list — which as of early 2026 contains thousands of designations across individuals, companies, vessels, and aircraft. Knowledgeable OFAC attorneys understand that the SDN list is just one component of the overall framework; sectoral sanctions, country embargoes, and program-specific prohibitions create a complex web of overlapping restrictions.
SDN List Categories and Key Designee Types
The Specially Designated Nationals list encompasses several distinct categories of designees, each tied to a specific sanctions program:
- SDN — General designation applicable across multiple programs
- SDGT — Specially Designated Global Terrorist (under E.O. 13224)
- SDNTK — Specially Designated Narcotics Trafficker (Kingpin Act)
- FSE — Foreign Sanctions Evader
- NS-ISA — Non-SDN Iran Sanctions Act designees
- SSI — Sectoral Sanctions Identification (Russia-related, Directive-based)
Understanding which designation category applies is critical because it determines exactly which transactions are prohibited, what licensing exceptions may exist, and what the appropriate strategy is for achieving OFAC delisting.
The 50% Rule: A Critical Practitioner Tool
OFAC’s 50% rule is one of the most practically significant — and most frequently misunderstood — aspects of the SDN framework. Under this rule, any entity that is owned 50% or more, directly or indirectly, by one or more SDN-listed persons is itself treated as blocked, even if it is not separately named on the SDN list.
This has enormous implications for due diligence. A company dealing with what appears to be an unlisted entity may in fact be dealing with a constructively blocked party. The rule requires screening not just the direct counterparty but their ownership chain. For complex corporate structures with multiple layers of ownership across jurisdictions, this can be a significant compliance challenge. A skilled OFAC attorney will conduct thorough beneficial ownership analysis to identify 50% rule exposure before transactions close.
OFAC issued updated guidance on the 50% rule in 2014 (OFAC FAQ 398) confirming that aggregated ownership by multiple SDNs also triggers the rule — so two SDNs each owning 30% of an entity renders that entity blocked. The rule also applies to entities owned indirectly through chains of subsidiaries.
The Licensing Framework: Specific vs. General Licenses
Not all transactions with sanctioned parties or countries are absolutely prohibited — OFAC’s licensing framework creates important exceptions. Understanding the distinction between general and specific licenses is essential for any sanctions practitioner.
General Licenses
A General License (GL) is a standing authorization published by OFAC that permits specific categories of transactions without the need for an individual application. GLs are program-specific — each sanctions program has its own set. In April 2026 alone, OFAC issued new General Licenses for Russia-related transactions (GL on April 17), Nicaragua-related activities (April 16), and cyber-related transactions (April 23). Practitioners must monitor each relevant program’s GLs because they can change rapidly in response to geopolitical developments.
Specific Licenses
A specific license is an individual authorization granted by OFAC upon application, permitting a particular transaction that would otherwise be prohibited. Applications are submitted to OFAC’s Licensing Division with supporting documentation explaining the purpose of the transaction, the parties involved, and the legal basis for the request. Common grounds include legal representation fees, medical expenses, family support, humanitarian activities, and business wind-downs. Turnaround times vary from weeks to months depending on program complexity and case volume.
Experienced OFAC compliance lawyers know how to frame licensing applications in terms that align with OFAC’s policy priorities, significantly improving approval prospects. Weak or incomplete applications frequently result in delays or denials that could have been avoided.
Blocking vs. Rejection Obligations
One of the most operationally important distinctions in OFAC compliance is the difference between transactions that must be blocked and those that must be rejected.
Blocking applies when a transaction involves property or interests in property of an SDN-listed party (or constructively blocked entity under the 50% rule). The U.S. person or financial institution must freeze the funds — holding them in a blocked account — and report the blockage to OFAC within 10 business days. Blocked funds must be reported annually thereafter.
Rejection applies when a transaction involves a country or activity subject to sanctions but does not involve property that must be blocked (for example, certain transaction parties in sanctioned countries where only some dealings are prohibited). A rejected transaction is simply refused and returned — it is not frozen or held.
Misclassifying a blocking obligation as a rejection — or vice versa — is a compliance violation in itself. Financial institutions and businesses with exposure to blocked assets must train their compliance teams to correctly identify which obligation applies to each transaction type.
Recordkeeping: The Five-Year Requirement
Under 31 CFR § 501.601, all U.S. persons must maintain complete records relating to transactions involving blocked or rejected property for five years from the date of the transaction. This includes:
- All documents pertaining to blocked transactions
- All licenses (both general and specific) relied upon
- All due diligence documentation related to sanctions screening
- All rejected transaction records and supporting rationale
OFAC investigators frequently request historical records during enforcement proceedings. Inadequate recordkeeping is both an independent violation and a factor that significantly worsens penalty outcomes. A documented OFAC compliance program with clear recordkeeping procedures is essential.
OFAC’s Enforcement Process
OFAC enforcement follows a defined process that every OFAC enforcement defense attorney should understand:
- Referral or self-disclosure: Investigations may begin through a Voluntary Self-Disclosure (VSD) submitted by the potential violator, referrals from other agencies (FinCEN, DOJ, BIS), or OFAC’s own monitoring.
- Subpoena/document request: OFAC issues administrative subpoenas to gather evidence. Compliance is mandatory.
- Pre-Penalty Notice (PPN): If OFAC determines a violation occurred, it issues a PPN setting out the proposed penalty amount and the basis for it.
- Response period: The respondent has 30 days to respond to the PPN, presenting mitigating evidence and legal arguments.
- Final Penalty or No Action Letter: OFAC issues a Final Penalty or a no-action determination. Most cases resolve through settlement before final penalty.
Voluntary Self-Disclosure (VSD): Mechanics and Strategy
Voluntary self-disclosure to OFAC is one of the most powerful tools available for mitigating penalties when a sanctions violation has occurred. Under OFAC’s enforcement guidelines, a timely and complete VSD is treated as a “substantial mitigating factor” and can reduce the base penalty by up to 50%.
An effective VSD must: (1) be submitted before OFAC initiates its own investigation; (2) describe the apparent violation in complete detail; (3) outline the remediation steps taken or planned; and (4) be accompanied by complete supporting documentation. Incomplete or misleading VSDs can backfire — they notify OFAC of the violation without providing the full mitigating credit.
The decision of whether to file a OFAC VSD requires careful strategic analysis. Skilled counsel will evaluate the probability that OFAC will independently discover the violation, the likely penalty with and without VSD, reputational considerations, and the quality of available documentation. In many cases, a well-prepared VSD combined with robust remediation is the most cost-effective path forward.
Penalty Calculation: OFAC’s Risk Factors
OFAC’s Economic Sanctions Enforcement Guidelines (31 CFR Part 501, Appendix A) set out the factors OFAC considers in determining civil monetary penalties. These include:
- Willfulness/recklessness: Whether the violation was intentional or whether the party was reckless in ignoring obvious red flags. This is the single most significant aggravating factor.
- Awareness of conduct: Did the parties involved know they were dealing with sanctioned parties?
- Harm to program objectives: Did the violation directly undermine the goals of the sanctions program?
- Individual characteristics: Sophistication of the parties, compliance history, and whether they are a financial institution.
- Remediation: What steps were taken to address the root cause after discovery?
- Cooperation: Full cooperation with OFAC’s investigation is a significant mitigating factor.
The statutory maximum OFAC penalties for most programs are the greater of $1,000,000 per transaction or twice the transaction value. In egregious cases involving willful violations by large financial institutions, penalties have exceeded $1 billion. Understanding how to present the strongest possible mitigating case is a core skill for any OFAC enforcement defense attorney. A full review of OFAC enforcement actions from the past five years reveals consistent patterns in how mitigating factors are weighted.
OFAC FAQ Guidance: A Practitioner’s Resource
OFAC publishes an extensive library of Frequently Asked Questions on its website, currently numbering over 1,000 FAQ entries across all programs. These FAQs are not legally binding in the way regulations are, but they represent OFAC’s official interpretive position on countless specific scenarios and are treated as authoritative guidance by practitioners. Key uses include:
- Clarifying the scope of General Licenses
- Explaining how the 50% rule applies in specific corporate structures
- Addressing specific industry questions (e.g., shipping, finance, technology)
- Providing guidance on humanitarian exemptions and authorizations
Staying current with new FAQ publications is essential, as OFAC regularly adds entries in response to industry questions and emerging enforcement priorities. Practitioners should also monitor AML and OFAC compliance guidance from FinCEN, which often supplements OFAC’s own publications in the anti-money laundering context.
Frequently Asked Questions
What is the 50% rule and why does it matter?
The 50% rule means any entity owned 50% or more by one or more SDN-listed persons is itself treated as blocked — even if not separately listed. This means thorough beneficial ownership screening of counterparties is essential, as a company can be constructively blocked without appearing anywhere on the published SDN list.
How much can OFAC fine a company for sanctions violations?
Statutory maximums are the greater of $1,000,000 per transaction or twice the transaction value. For egregious willful violations, particularly by financial institutions, penalties have exceeded $1 billion in high-profile cases. Mitigating factors — including voluntary self-disclosure, cooperation, and robust remediation — can significantly reduce final penalty amounts.
What is the difference between a general license and a specific license?
A general license is a pre-published authorization for entire categories of transactions — no individual application required. A specific license requires an individual application to OFAC for authorization of a particular transaction. Specific licenses are granted on a case-by-case basis and typically take longer to obtain.
Does voluntary self-disclosure always reduce penalties?
Not automatically. VSD is treated as a substantial mitigating factor if it is timely, complete, and accompanied by genuine remediation. An incomplete or misleading VSD can actually worsen outcomes. The strategic decision to disclose requires careful legal analysis of all relevant factors.
How long do records of OFAC-related transactions need to be kept?
Under 31 CFR § 501.601, records relating to blocked or rejected transactions must be maintained for five years from the date of the transaction. This includes all supporting documentation, screening records, and license copies.
Staying Current: Monitoring OFAC Changes
The dynamic nature of OFAC’s sanctions programs demands systematic monitoring. New designations are published on OFAC’s website daily — sometimes multiple updates in a single day during periods of geopolitical escalation. General Licenses are issued and sometimes revoked. FAQ entries are added, updated, and occasionally withdrawn. Program-specific advisories are published in response to emerging evasion techniques. The pace of change in the Russia sanctions program in 2022–2025 alone has been unprecedented.
Practical monitoring strategies for practitioners include: subscribing to OFAC’s email update service for all relevant programs; setting up RSS or API feeds from OFAC’s website for SDN list changes; monitoring joint advisories from OFAC, FinCEN, and BIS; and participating in industry working groups and sanctions bar association events where practitioners share emerging guidance interpretations. Businesses operating across multiple jurisdictions should implement equivalent monitoring for EU, UK, and UN sanctions updates simultaneously, given the importance of international sanctions regimes to their compliance posture.
Working with Clients: Practical Application of OFAC Knowledge
The test of OFAC knowledge is its practical application in client situations. Common scenarios that require deep practitioner knowledge include:
- Pre-transaction due diligence: Assessing whether a proposed transaction triggers sanctions prohibitions, applying the 50% rule to complex ownership structures, and identifying applicable General Licenses or exemptions
- Post-designation crisis management: Advising a client who has just discovered they or a key counterparty has been designated — assessing immediate obligations, applying for emergency licenses, and developing a strategic response plan
- Compliance program design: Building a program that satisfies OFAC’s 2019 Framework for Compliance Commitments while addressing the client’s specific risk profile and operational realities
- Enforcement defense: Representing a client facing OFAC investigation or a Pre-Penalty Notice, marshaling the full range of mitigating factors, and negotiating the most favorable resolution possible
In all of these scenarios, the depth of OFAC knowledge — particularly familiarity with program-specific guidance, enforcement precedents, and licensing practice — is what separates competent advice from truly expert counsel. For clients navigating the most complex situations, working with top sanctions law firms with a demonstrated track record in OFAC matters is the most reliable path to the best possible outcomes. Whether the issue involves SDN list designation, an enforcement investigation, or building a compliance architecture from scratch, the investment in quality legal representation consistently delivers results that general practitioners cannot match.