Primary vs Secondary OFAC Sanctions: Complete Legal Guide

The distinction between primary and secondary sanctions is one of the most consequential — and most misunderstood — concepts in modern sanctions law. For U.S. persons, the difference is relatively straightforward: primary sanctions prohibit direct dealings with designated parties and sanctioned countries. But for non-U.S. companies operating in global markets, secondary sanctions represent a fundamentally different category of legal risk: extraterritorial prohibitions that can apply even when a transaction has no direct U.S. nexus. Whether you are a multinational corporation, a financial institution, or an individual navigating these complex regimes, understanding the legal basis, scope, and enforcement of primary versus secondary sanctions is essential. Our team of experienced secondary sanctions counsel advises clients across all major programs.

What Are Primary Sanctions? Legal Basis and Scope

Primary sanctions are economic prohibitions imposed by the U.S. government that apply to U.S. persons — a category encompassing U.S. citizens, lawful permanent residents, U.S.-organized entities (including their foreign branches), and any person physically located within the United States at the time of the transaction.

The legal basis for primary sanctions is primarily the International Emergency Economic Powers Act (IEEPA), enacted in 1977, which grants the President broad authority to regulate international commerce and freeze foreign assets during a declared national emergency. Specific programs are established through executive orders. The Trading With the Enemy Act (TWEA) underpins the Cuba program. Program-specific statutes — including CAATSA (Russia/Iran/North Korea), CISADA (Iran), and the North Korea Sanctions Policy and Enhancement Act — layer additional statutory requirements on top of executive order authority.

Primary sanctions prohibit U.S. persons from:

• Engaging in transactions with parties on the SDN list or otherwise designated under applicable programs
• Dealing in property of blocked persons, regardless of where the property is located
• Facilitating transactions by non-U.S. persons that a U.S. person would be prohibited from engaging in directly
• Approving, financing, guaranteeing, or otherwise supporting such prohibited transactions

Primary sanctions also include comprehensive country programs against Cuba, Iran, North Korea, and (until August 2025) Syria — prohibiting essentially all economic dealing with those countries regardless of whether a specific SDN is involved. Understanding economic sanctions in this context means grasping that the prohibition runs to the country or designated party, not just to a specific item or transaction type.

Who Must Comply With Primary Sanctions?

The compliance universe for primary sanctions is broader than many assume:

• U.S. citizens and permanent residents anywhere in the world — a U.S. national living abroad is still bound by U.S. primary sanctions
• All entities organized under U.S. law, including subsidiaries and branches of U.S. companies operating abroad
• Any person or entity physically located within the United States during a transaction
• Any transaction processed through a U.S. financial institution or denominated in U.S. dollars — dollar-clearing through U.S. correspondent banks triggers U.S. jurisdiction

The dollar-clearing basis for jurisdiction is particularly significant: a transaction between two non-U.S. parties that is denominated in dollars will pass through a U.S. correspondent bank, bringing it within OFAC’s reach. This is why global banks — regardless of nationality — maintain rigorous OFAC screening programs. Our sanctions lawyers regularly advise foreign financial institutions on managing this exposure.

What Are Secondary Sanctions? Legal Basis and Extraterritorial Reach

Secondary sanctions are a fundamentally different animal. Rather than prohibiting U.S. persons from engaging in specific transactions, secondary sanctions impose penalties — typically loss of U.S. market access, correspondent banking cutoffs, or SDN designation — on non-U.S. persons who engage in conduct that the U.S. government has identified as sufficiently harmful to U.S. policy interests.

Secondary sanctions are coercive by design: they leverage U.S. control over global financial infrastructure (particularly dollar clearing and U.S. capital markets) to pressure third-country actors into complying with U.S. sanctions policy, even though those actors may have no direct U.S. legal obligations. A European company, a Chinese bank, or a Turkish trading firm can be exposed to secondary sanctions risk simply by doing business with certain Iranian, Russian, North Korean, or Venezuelan parties — even if every aspect of the underlying transaction is lawful under the laws of the company’s home country.

The legal basis for secondary sanctions varies by program but typically involves:

• Statutory authority under CAATSA (Section 231 — arms sales to Russia; Section 232 — Russian defense and intelligence; Section 235 — Iran/North Korea provisions)
• Iran-specific authorities under CISADA, the Iran Freedom and Counter-Proliferation Act (IFCA), and executive orders
• North Korea-specific authorities under CAATSA and the North Korea Sanctions Policy and Enhancement Act
• Venezuela-specific executive orders targeting gold, oil, and other sectors

A dedicated secondary sanctions lawyer can assess whether your company’s activities trigger exposure under any of these programs — analysis that is increasingly essential for businesses operating in Russia-adjacent, Iran-adjacent, or other high-risk markets.

Major Secondary Sanctions Programs: Iran, Russia, North Korea, Venezuela

Iran: The Iran secondary sanctions regime is the most extensive in the world. It targets non-U.S. persons who: purchase Iranian oil or petroleum products; provide material support to Iran’s energy, shipping, or shipbuilding sectors; engage with Iranian financial institutions; purchase Iranian metals, minerals, or auto sector goods; or assist in transactions involving designated Iranian parties. The Trump administration reimposed maximum pressure sanctions on Iran in 2025, designating over 460 non-Iranian persons in a single year — including companies and individuals in China, UAE, Turkey, and Hong Kong that served as intermediaries for Iranian oil exports and shadow banking. An Iran sanctions lawyer is critical for any company with potential Iran supply chain exposure.

Russia: Russia secondary sanctions authority under CAATSA Section 231 targets non-U.S. persons who knowingly engage in significant transactions with Russia’s defense and intelligence sectors. Executive Order 14024 (2021) expanded secondary risk for persons that engage in transactions with SDN-designated Russian entities. The 2025 SDN designations of Rosneft and Lukoil triggered widespread secondary analysis for companies in India, China, and Turkey that had been purchasing Russian energy commodities. A specialized Russia sanctions lawyer can evaluate your specific exposure under both OFAC primary and CAATSA secondary authorities.

North Korea: North Korea secondary sanctions are among the most expansive. CAATSA and the North Korea Sanctions Policy and Enhancement Act authorize secondary sanctions against non-U.S. persons who engage in significant trade in goods, services, or technology with North Korea; provide significant financial services to North Korea; or provide vessels or aircraft to North Korean shipping interests. The UN sanctions regime on North Korea is the most restrictive in the international system and provides the baseline for all national programs.

Venezuela: Executive Order 13850 targets non-U.S. persons who operate in, or provide goods or services to, designated sectors of the Venezuelan economy, including oil, gold, and financial services. Venezuela secondary sanctions have been used to target non-U.S. companies, particularly in the shipping and oil trading sectors, that assisted Venezuela in circumventing primary sanctions. March 2026 GL amendments expanded authorizations in the minerals sector, reflecting ongoing calibration of the Venezuela program. Understanding the international sanctions regimes dimension of these programs is essential for global businesses.

The OFAC 50% Rule in the Secondary Sanctions Context

The 50% ownership rule — which treats entities owned 50% or more by SDNs as themselves blocked — operates in both primary and secondary sanctions contexts. In the primary context, it means a U.S. person cannot deal with an entity controlled by an SDN even if that entity is not listed. In the secondary sanctions context, the implications are more complex:

• A non-U.S. company dealing with a non-listed entity that is 50%+ owned by an SDN is engaging with a de facto blocked person, triggering both primary sanctions risk (if any U.S. nexus exists) and potential secondary designation risk.
• The 2025-2026 OFAC enforcement focus on “obscured blocked person interests” — where SDN ownership is hidden behind nominee shareholders or complex structures — directly affects secondary sanctions diligence obligations for non-U.S. companies.
• Following major SDN designations (e.g., Rosneft and Lukoil in October 2025), the 50% rule created an immediate secondary analysis obligation for dozens of non-U.S. companies that had ongoing contractual relationships with entities in those corporate groups.

Proper sanctions database screening for secondary sanctions risk requires not just SDN list checks but beneficial ownership analysis — tracing corporate structures to identify any SDN control at 50% or above. Our OFAC compliance program advisory services build these capabilities into client compliance infrastructure.

How Secondary Sanctions Affect Non-U.S. Companies

The practical impact of secondary sanctions on non-U.S. businesses is profound and multifaceted:

Correspondent banking cutoffs: The most immediate secondary sanctions consequence for a non-U.S. company or bank is losing access to U.S. dollar correspondent banking. U.S. banks are prohibited from maintaining correspondent accounts for foreign institutions that have been designated or are subject to special measures under the CAPTA list. For institutions that rely on dollar-denominated trade finance, losing correspondent access is effectively an exclusion from global markets.

SDN designation: A non-U.S. company can be directly designated to the SDN list for engaging in secondary sanctions-triggering conduct — even with no U.S. ownership, operations, or connections. Once designated, the company’s assets within U.S. jurisdiction are blocked, and U.S. persons are prohibited from dealing with it. Pursuing SDN delisting petition proceedings is the primary administrative remedy. Our team handles how to get off the OFAC list proceedings for foreign-designated entities.

U.S. market access restrictions: Secondary sanctions legislation can bar designated persons from conducting transactions with U.S. financial institutions, receiving U.S. government contracts, or participating in U.S. capital markets. These restrictions can be economically devastating even for companies with limited day-to-day U.S. business, given the interconnected nature of global finance.

Blocking laws and conflict of laws: Several jurisdictions — including the EU, UK, Canada, and China — have enacted “blocking statutes” that prohibit companies from complying with certain U.S. secondary sanctions requirements. The EU Blocking Regulation (Regulation (EC) 2271/96, as updated) prohibits EU persons from complying with the extraterritorial effects of certain U.S. Iran and Cuba sanctions. This creates a genuine conflict-of-laws problem for EU companies operating in both U.S. and Iranian markets simultaneously, requiring careful legal analysis of competing obligations. An EU sanctions lawyer can navigate this conflict for European businesses.

Recent 2025-2026 Secondary Sanctions Enforcement

Secondary sanctions enforcement has intensified dramatically in 2025-2026:

• Iran shadow fleet: OFAC sanctioned more than 180 vessels responsible for transporting Iranian petroleum through shadow fleet operations by December 2025. Non-U.S. shipping companies, port operators, and insurance providers worldwide have faced designation risk for facilitating these shipments.
• Chinese teapot refineries: U.S. maximum pressure measures specifically targeted Chinese independent refineries (“teapot” refineries) that continued purchasing discounted Iranian crude oil. Over 460 non-Iranian persons — including significant Chinese, Emirati, and Turkish entities — were designated under Iran authorities in 2025 alone.
• Russian third-country circumvention: The EU’s 20th package (April 2026) specifically listed 28 third-country entities — including companies in China, Hong Kong, Turkey, UAE, and Thailand — for assisting Russia’s military industrial base or circumventing sanctions. This represents an alignment of EU and U.S. approaches to secondary-style enforcement against third-country circumvention.
• CAATSA Section 231 enforcement: The threat of CAATSA secondary sanctions has continued to deter third-country arms sales to Russia, though the primary enforcement focus has been on Iran-related secondary sanctions designations.

Understanding the full landscape of OFAC sanctioned countries and the secondary sanctions programs attached to each is essential for any company with global operations. The what it means to be sanctioned analysis differs significantly between primary designation (immediate U.S. asset blocking) and secondary-triggered designation (loss of U.S. market access).

Compliance Strategies for Primary and Secondary Sanctions

Building a compliance program that addresses both primary and secondary sanctions risk requires a risk-based approach calibrated to the specific business activities, geographic exposure, and industry sector of each client:

• Counterparty screening: Screen all counterparties against the full suite of OFAC lists — SDN, SSI, CAPTA, FSE, NS-MBS — and apply the 50% ownership rule through beneficial ownership analysis. Use PEP and sanctions screening to add context on politically exposed persons and adverse media signals.
• Secondary sanctions exposure mapping: Map the specific secondary sanctions authorities applicable to your industry, geography, and transaction types. Energy companies face different secondary risk than financial institutions or technology exporters.
• Transaction-level due diligence: For high-risk transactions, conduct enhanced due diligence including supply chain tracing, end-use verification, and review of shipping documents and financial intermediaries. A OFAC screening of the full transaction chain — not just the direct counterparty — is best practice.
• OFAC licensing where applicable: Where secondary sanctions create prohibitions on otherwise lawful business, evaluate whether an OFAC license or a general license already covers the activity.
• Voluntary self-disclosure framework: Establish clear policies for responding to discovered violations, including the trigger points for OFAC VSD filing and the escalation procedures to senior management and legal counsel.

Our OFAC compliance lawyers build tailored compliance programs that address both primary and secondary exposure across all major sanctions regimes. The OFAC compliance checklist we provide to clients integrates primary jurisdiction obligations with secondary sanctions risk assessment frameworks.

Frequently Asked Questions

Can a foreign company be designated to the U.S. SDN list for secondary sanctions violations?

Yes. OFAC regularly designates non-U.S. persons to the SDN list for secondary sanctions-triggering conduct — such as purchasing Iranian oil, facilitating Russian military transactions, or engaging with North Korean entities. Once designated, the company faces U.S. asset blocking and a prohibition on dealings with U.S. persons. The primary remedy is an OFAC delisting petition through the administrative reconsideration process.

What is the difference between secondary sanctions and blocking sanctions?

Blocking sanctions (primary sanctions) require U.S. persons to freeze assets of designated parties and prohibit all dealings. Secondary sanctions, by contrast, do not automatically block assets — they impose the threat of U.S. market access restrictions, correspondent banking cutoffs, or SDN designation on non-U.S. persons who engage in targeted conduct. Secondary sanctions are coercive tools; blocking sanctions are direct prohibitions.

Does the 50% ownership rule apply to secondary sanctions?

The 50% ownership rule applies primarily in the primary sanctions context — an entity 50%+ owned by an SDN is treated as blocked regardless of whether it is listed. In the secondary sanctions context, ownership by a sanctioned party is a significant red flag but the analysis is more fact-specific. However, a company that does business with an entity that is itself 50%+ owned by an SDN may simultaneously be triggering both secondary sanctions risk (for dealing with a sanctioned party’s affiliate) and primary sanctions risk (if any U.S. nexus exists).

How do EU blocking statutes interact with U.S. secondary sanctions?

The EU Blocking Regulation prohibits EU persons from complying with the extraterritorial effects of certain U.S. secondary sanctions (primarily Iran and Cuba-related). EU companies face a genuine conflict: complying with U.S. secondary sanctions may violate EU law, and vice versa. In practice, most large EU financial institutions have withdrawn from Iran business regardless, finding it impossible to serve both markets. Legal analysis of specific conflict situations requires expertise in both U.S. and EU law. Our EU sanctions lawyer team handles these cross-border conflicts.

What should a non-U.S. company do if it has been designated to the SDN list?

Immediately engage specialized OFAC enforcement defense counsel with experience in SDN delisting proceedings. The primary administrative remedy is an OFAC reconsideration petition, but parallel strategies — including engaging with the State Department, seeking to unblock specific assets through a specific license, and evaluating federal court litigation under the Administrative Procedure Act — may also be appropriate. Time matters: do not delay. Visit our how to get off the OFAC list resource for an overview of the process, and contact our team for a consultation.

Secondary Sanctions by Program: Risk Matrix for Non-US Companies

Non-US companies operating internationally must assess their exposure to secondary sanctions on a program-by-program basis. The risk profile varies dramatically depending on the sanctioned country or entity involved. The table below summarizes the key secondary sanctions regimes and their implications for foreign businesses and financial institutions.

The distinction between “High” and “Medium” risk programs reflects both the breadth of secondary sanctions authority and the current enforcement posture of the US Treasury Department. Russia and Iran secondary sanctions have been actively enforced against non-US financial institutions, with multiple foreign banks losing US correspondent access or facing SDN designation. North Korea secondary sanctions under EO 13810 represent perhaps the broadest extraterritorial authority — capable of sanctioning any foreign bank for any significant North Korea transaction.

For non-US companies operating in any of these risk areas, a formal OFAC compliance program with secondary sanctions screening protocols is essential. Our OFAC sanctions lawyers regularly advise European, Asian, and Middle Eastern companies on navigating these cross-border restrictions.