Effective representation in sanctions matters begins with mastering the foundational mechanics of how OFAC operates. Whether you are advising a financial institution, a multinational corporation, or an individual who has been designated, a practitioner-level understanding of OFAC’s jurisdiction, list structure, compliance obligations, and enforcement tools is essential. This guide is written for OFAC attorneys and legal professionals who need a rigorous, up-to-date grounding in the basics — including the significant regulatory developments of 2025 and 2026.
OFAC’s Institutional History and Mandate
The Office of Foreign Assets Control was established in 1950 within the U.S. Department of the Treasury. It traces its institutional roots to the Office of Foreign Funds Control, which administered foreign asset controls during World War II. Today, OFAC administers more than 30 active sanctions programs — making it one of the most active financial regulatory bodies in the world.
OFAC’s mandate is to administer and enforce economic and trade sanctions based on U.S. foreign policy and national security goals. It acts under presidential authority granted by statute, primarily the International Emergency Economic Powers Act (IEEPA) and the Trading With the Enemy Act (TWEA), and implements specific sanctions through executive orders and program-specific regulations published in Title 31 of the Code of Federal Regulations.
Critically, OFAC is not a law enforcement agency in the traditional sense — it is a regulatory and enforcement body. It does not prosecute criminal cases (that function belongs to DOJ), but its civil penalty authority is formidable, and its OFAC enforcement actions regularly result in multi-million-dollar settlements against banks, corporations, and other entities.
OFAC Jurisdiction: Who Is Subject to U.S. Sanctions?
One of the first questions a sanctions lawyer must answer in any matter is whether OFAC has jurisdiction. The answer is broader than many clients expect.
U.S. Persons: Primary sanctions apply to “U.S. persons,” a term that encompasses:
- U.S. citizens and lawful permanent residents, wherever located in the world
- Entities organized under U.S. law (including their foreign branches)
- Any person physically located within the United States
Extraterritorial Reach — Secondary Sanctions: Beyond primary jurisdiction, OFAC’s secondary sanctions regime extends U.S. sanctions pressure to non-U.S. persons. A foreign company with no U.S. nexus may face U.S. market access restrictions, correspondent banking cutoffs, and designation risk if it engages in conduct covered by secondary sanctions — such as purchasing Iranian oil, facilitating Russian military-industrial transactions, or doing business with North Korean entities. This international sanctions regimes dynamic is among the most consequential developments of the past decade.
Dollar-Clearing Jurisdiction: Any transaction cleared in U.S. dollars passes through a U.S. correspondent bank, bringing it within OFAC’s reach regardless of the nationalities of the parties involved. This is why global financial institutions — even those with no U.S. operations — maintain rigorous OFAC screening programs.
Sanctions Program Types: A Practitioner’s Taxonomy
OFAC administers three main categories of sanctions programs, each with distinct legal mechanisms and compliance implications:
Comprehensive Country Programs impose broad prohibitions on virtually all economic transactions with a targeted country. As of 2026, comprehensive programs apply to Cuba, Iran, North Korea, and Syria. These programs typically prohibit imports, exports, financial transactions, and travel-related spending, with limited exceptions for humanitarian activities and licensed transactions. The Iran program is the most expansive, reaching not only direct dealings but also transactions involving any Iranian interest anywhere in the global supply chain.
List-Based Programs target specific individuals, entities, vessels, and aircraft rather than entire countries. Designations are made under various authorities — terrorism (SDGT), narcotics (SDNTK), WMD proliferation (NPWMD), cyber (EO 13694), and others. An entity designated under one program may also be subject to secondary designations under additional programs, compounding the compliance complexity.
Sector-Specific Programs impose targeted prohibitions on defined sectors of a country’s economy. The Russia program is the leading example, with sectoral sanctions under CAATSA targeting Russia’s energy, defense, and financial sectors without imposing a comprehensive embargo. The sectoral approach reflects a calibrated policy tool — more surgical than a comprehensive program, but still requiring sophisticated compliance analysis. Our Russia sanctions lawyer team regularly advises on these complexities.
Understanding the OFAC Lists: SDN, CAPTA, FSE, and More
The Specially Designated Nationals list is the most widely known OFAC tool, but it is far from the only one. Sanctions attorneys must advise clients on the full suite of OFAC lists:
The SDN List designates individuals and entities whose assets are blocked and with whom U.S. persons are generally prohibited from dealing. As of 2026, the SDN list contains thousands of entries across dozens of programs. October 2025 saw the significant addition of Russian energy majors Rosneft and Lukoil, triggering extensive 50% rule analysis for downstream affiliates.
The CAPTA List (Correspondent Account or Payable-Through Account) identifies foreign financial institutions subject to special measures under Section 311 of the USA PATRIOT Act, including prohibitions on correspondent or payable-through accounts. This list is critical for correspondent banking compliance.
The Foreign Sanctions Evaders (FSE) List targets individuals and entities that have violated or attempted to evade U.S. sanctions, specifically in relation to Syria and Iran. FSE designations prevent the listed parties from accessing U.S. markets and financial services.
The Sectoral Sanctions Identifications (SSI) List identifies persons subject to sector-specific restrictions under the Russia program. Unlike SDN designations, SSI listings do not result in full asset blocking — they impose narrower prohibitions on specific categories of transactions (new debt above defined maturities, new equity, etc.).
Proper sanctions database screening requires checking all applicable lists, not just the SDN list. Clients who screen only against the SDN list are systematically under-compliant.
Blocking Obligations vs. Rejection Obligations
Understanding when to block and when to reject is one of the most operationally critical distinctions in OFAC compliance:
Blocking is required when a transaction involves property in which a blocked person (e.g., an SDN) has a direct or indirect interest. Blocked property must be held in a segregated, interest-bearing account, cannot be returned to the originator or transferred, and must be reported to OFAC within 10 business days. Annual reports on all blocked property are due by September 30. If your client needs assistance recovering frozen funds, our release blocked funds practice can help.
Rejection (without blocking) applies to transactions that are prohibited but do not involve the property of a blocked person — for instance, a transfer to a non-blocked third party for the benefit of a sanctioned person, or a transaction that would otherwise facilitate a violation. These must also be reported within 10 business days. The distinction matters because incorrectly returning blocked funds constitutes an independent violation.
Recordkeeping Requirements
OFAC’s recordkeeping requirements impose a five-year retention obligation for all records related to transactions subject to the regulations, including:
- Blocked transactions and related correspondence
- Rejected transaction records
- License applications and OFAC responses
- Compliance program documentation
- Screening records showing the basis for clearance decisions
These records must be available for OFAC examination on request. Inadequate recordkeeping is frequently cited as an aggravating factor in enforcement matters and can convert a minor compliance failure into a significant penalty exposure.
The License Application Process
When a client needs to engage in a transaction that would otherwise be prohibited, the specific license application process is the primary avenue for relief. Key steps:
Determine applicable general licenses first. Before filing for a specific license, counsel should conduct a thorough analysis of all applicable general licenses. Many transactions — particularly humanitarian activities, legal representation fees, and certain personal transactions — are already authorized without individual OFAC approval.
Prepare a comprehensive application. An SL application should include: a detailed factual description of the proposed transaction; identification of all parties; the legal authority under which relief is sought; supporting documentation; and a legal memorandum explaining why the application should be granted. OFAC’s licensing policies — published in program-specific FAQs and prior license actions — provide guidance on what arguments are likely to succeed.
Manage the timeline. OFAC does not have a statutory deadline for resolving SL applications (except in certain narrow cases). Processing times can range from weeks to over a year for complex applications. Counsel should set client expectations accordingly and consider whether interim business arrangements are needed. Our sanctions compliance counsel manages these timelines for clients across multiple industries.
OFAC’s No-Action Equivalent: Informal Guidance and FAQs
Unlike some regulatory bodies, OFAC does not formally issue “no-action” letters. However, it provides several mechanisms through which parties can seek informal guidance:
- OFAC Hotline: OFAC maintains a compliance hotline for general inquiries. Responses are informal and not binding, but they can provide useful directional guidance.
- FAQ Publication: OFAC publishes detailed FAQs on its website addressing common questions about specific programs and transactions. These represent OFAC’s considered policy positions and are highly persuasive in enforcement matters.
- Informal License Requests: In some circumstances, OFAC will issue an informal opinion in connection with a license application — particularly for urgently needed authorizations. These are not precedential but may serve as a useful compliance reference.
Counsel should document all communications with OFAC, including hotline inquiries, and maintain records of the specific OFAC guidance relied upon in making compliance decisions.
Representing Sanctioned Clients: Ethical and Practical Considerations
A frequently misunderstood area of OFAC compliance is the authorization for attorneys to represent sanctioned clients. OFAC’s regulations generally permit U.S. persons (including attorneys) to provide legal services to SDN-designated clients, subject to specific conditions:
- Legal fees and costs may be received from blocked accounts pursuant to General License or specific license, subject to caps and notice requirements
- Legal services must not facilitate prohibited transactions or circumvent sanctions
- Attorneys representing SDN clients in U.S. court proceedings are generally covered under applicable general licenses or constitutional protections
The 2026 enforcement environment has brought heightened scrutiny to legal professionals. OFAC’s gatekeeper enforcement initiative emphasizes accountability for attorneys and compliance officers who — even without specific knowledge — create structures that obscure a client’s blocked status. The ethical obligation to know your client aligns with the legal obligation to conduct adequate due diligence. Our OFAC lawyers maintain strict intake procedures consistent with this standard.
Key 2026 Regulatory Changes Sanctions Attorneys Must Know
The 2025-2026 period has brought significant regulatory changes that affect daily sanctions practice:
- Syria sanctions lifted: OFAC issued a final rule in August 2025 removing Syria from certain sanctions programs following a change in political conditions — one of the most significant program terminations in years.
- Iran maximum pressure: The Trump administration reinstituted maximum pressure on Iran in 2025, sanctioning over 460 non-Iranian persons including Chinese, Emirati, and Turkish intermediaries. An Iran sanctions lawyer is increasingly needed by non-U.S. companies with indirect Iran exposure.
- Russia SDN expansions: Rosneft and Lukoil SDN designations in October 2025 with GLs providing limited wind-down relief through October 2026.
- Venezuela mineral sector: March 2026 GL amendments expanded authorizations in the minerals sector, superseding earlier gold-only restrictions.
- FATF grey list implications: Countries on the FATF grey list face heightened OFAC scrutiny, as grey-listing signals elevated financial crime risk consistent with sanctions evasion vulnerabilities.
- Crypto enforcement: OFAC’s crypto sanctions program continues to expand, with 2026 guidance addressing decentralized finance protocols and stablecoin risks.
Maintaining a current OFAC compliance checklist that reflects these changes is essential for every practitioner advising regulated entities.
Frequently Asked Questions
Does OFAC jurisdiction apply to foreign subsidiaries of U.S. companies?
Yes. Foreign subsidiaries of U.S. parent companies are considered U.S. persons for OFAC purposes because they are organized under U.S. law (or are controlled by a U.S. entity). This is one of the most common sources of extraterritorial compliance issues for multinational corporations.
What is the CAPTA list and why does it matter?
The CAPTA (Correspondent Account or Payable-Through Account) list identifies foreign financial institutions subject to special measures that prohibit U.S. banks from maintaining correspondent or payable-through accounts for them. Being on the CAPTA list effectively cuts off a foreign bank from the U.S. financial system, making CAPTA screening critical for correspondent banking compliance.
How long does OFAC take to process a specific license application?
OFAC does not have a statutory deadline for most license applications, and processing times vary widely — from a few weeks for straightforward applications to over a year for complex or novel matters. Attorneys should submit complete, well-documented applications and follow up proactively. Emergency situations may warrant a request for expedited review.
Can a U.S. attorney represent an SDN-designated client?
Yes, generally. OFAC’s program-specific general licenses typically authorize U.S. persons to provide legal services to designated parties, and legal fees may be received from blocked accounts subject to caps and notification requirements. However, attorneys must ensure their representation does not facilitate prohibited transactions, and should conduct appropriate due diligence on the engagement.
What are the recordkeeping requirements for OFAC compliance?
OFAC requires a five-year retention period for all records relating to blocked transactions, rejected transactions, license applications, and compliance activities. Records must be available for examination by OFAC on request. Poor recordkeeping is an aggravating factor in enforcement proceedings and can significantly increase penalty exposure.