OFAC Cryptocurrency Sanctions Lawyer — Crypto Compliance & SDN Removal

Key OFAC Cryptocurrency Enforcement Actions

Crypto vs Traditional Sanctions Compliance

What Are OFAC Cryptocurrency Sanctions?

The Office of Foreign Assets Control (OFAC) is the U.S. Treasury Department agency responsible for administering and enforcing economic and trade sanctions. While traditionally focused on conventional financial transactions, OFAC has aggressively extended its jurisdiction into the cryptocurrency space, fundamentally reshaping how digital assets are treated under U.S. sanctions law.

OFAC’s authority over cryptocurrency derives from the same statutory framework governing traditional sanctions — the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), and various country-specific sanctions programs. Critically, OFAC has confirmed that all U.S. persons are prohibited from transacting with designated individuals, entities, and cryptocurrency wallet addresses, regardless of whether the transaction occurs through a centralized exchange or a decentralized protocol.

In 2015, OFAC first issued guidance clarifying that digital currencies are subject to sanctions regulations. By 2018, OFAC began directly listing cryptocurrency wallet addresses on its Specially Designated Nationals and Blocked Persons (SDN) List — a watershed moment that transformed blockchain compliance. Today, hundreds of wallet addresses appear on the SDN List, spanning Bitcoin, Ethereum, Litecoin, and other blockchains.

The jurisdictional reach of OFAC’s cryptocurrency sanctions is broad. It covers: U.S. citizens and permanent residents worldwide; companies and organizations incorporated under U.S. law; any transaction that passes through the U.S. financial system; and in some cases, non-U.S. persons who facilitate transactions involving U.S. persons or U.S.-origin goods and services. For cryptocurrency businesses and individual holders, understanding this framework is not optional — violations can result in civil penalties of over $1 million per transaction and criminal prosecution.

Key OFAC Actions in Crypto (2020–2025)

The past five years have produced some of the most consequential OFAC enforcement actions in cryptocurrency history. These cases define the boundaries of what is permissible and signal OFAC’s intent to pursue violations aggressively across the digital asset ecosystem.

Tornado Cash (2022)

In August 2022, OFAC took the unprecedented step of sanctioning Tornado Cash, an Ethereum-based cryptocurrency mixing protocol, under Executive Order 13694. This was the first time OFAC had sanctioned an autonomous smart contract rather than an individual or company. OFAC alleged that Tornado Cash had been used to launder more than $7 billion in virtual currency since its creation in 2019, including over $455 million stolen by North Korea’s Lazarus Group. The designation blocked U.S. persons from interacting with the protocol’s smart contracts and froze associated wallet addresses. The action sparked significant legal challenges — in 2024, a federal appeals court partially reversed the sanctions, finding that immutable smart contracts cannot be “property” subject to OFAC designation — but the enforcement landscape remains complex and unsettled.

Lazarus Group and North Korean State-Sponsored Hacking

OFAC has designated North Korea’s Lazarus Group and affiliated hacking units multiple times, adding dozens of cryptocurrency wallet addresses tied to their operations. This group has been linked to the theft of billions of dollars in crypto assets, including the $625 million Ronin Network hack (2022) and the $100 million Harmony Horizon Bridge hack. In 2023 and 2024, OFAC continued to add Lazarus-linked addresses across multiple blockchains, including Ethereum, Bitcoin, and privacy coins. Any U.S. person receiving or transacting with these addresses — even unknowingly — faces potential liability.

Binance Enforcement Action (2023)

In November 2023, Binance — the world’s largest cryptocurrency exchange — pleaded guilty to violations of U.S. sanctions laws and the Bank Secrecy Act, agreeing to pay over $4.3 billion in penalties. OFAC’s settlement included a $968 million civil monetary penalty for processing transactions involving customers in sanctioned jurisdictions including Iran, Cuba, Syria, and the Crimea region of Ukraine. The case demonstrated that even large, globally prominent exchanges are not immune to OFAC enforcement and that systemic compliance failures will be met with historic penalties.

BitPay, BitGo, and Kraken Settlements

Multiple cryptocurrency businesses have settled OFAC violations in recent years. BitPay paid $507,375 (2021) for processing transactions from users in sanctioned jurisdictions. BitGo paid $98,830 (2022) for similar violations. Kraken paid $362,158 (2022) for apparent violations involving users in Iran. These settlements, while relatively modest, signal OFAC’s willingness to pursue even technical violations and establish precedents for how crypto companies must screen their user bases.

What Transactions Are Prohibited

OFAC cryptocurrency sanctions create several categories of prohibited conduct. Understanding exactly what is forbidden is essential for compliance.

Transactions with SDN-Listed Wallets

The most direct prohibition is transacting with any wallet address listed on OFAC’s SDN List. This includes sending funds to, receiving funds from, or facilitating transfers involving a listed address. The prohibition applies even if the underlying asset originated elsewhere — if funds pass through a sanctioned address in the transaction chain, the transaction may be tainted.

Mixing and Tumbling Services

Cryptocurrency mixing services — including Tornado Cash and similar protocols — have been designated by OFAC for facilitating money laundering and sanctions evasion. U.S. persons are prohibited from using these services, and exchanges must block transactions involving wallets that have interacted with sanctioned mixers. Even if a user employed a mixing service for legitimate privacy reasons, interaction with a sanctioned protocol creates legal exposure.

Decentralized Exchange (DEX) Transactions

OFAC’s position is that sanctions apply to decentralized exchanges and DeFi protocols to the extent U.S. persons are involved. While enforcement against pure smart contract interactions remains legally contested, U.S. persons using DEXs to transact with sanctioned counterparties or sanctioned tokens remain at risk. The FinCEN and OFAC joint guidance on DeFi (2023) reinforced that the decentralized nature of a protocol does not exempt it from applicable law.

Transactions Involving Sanctioned Jurisdictions

Beyond individual wallet designations, OFAC sanctions programs cover entire countries and jurisdictions — currently including Iran, North Korea, Cuba, Syria, the Crimea region of Ukraine, and parts of the Donbas. Providing cryptocurrency services to individuals or entities in these jurisdictions, regardless of whether their specific wallet is listed on the SDN, may violate comprehensive sanctions programs. This is the basis of most exchange-level OFAC enforcement actions.

OFAC SDN List and Crypto Wallets

The Specially Designated Nationals and Blocked Persons (SDN) List is OFAC’s primary tool for identifying prohibited parties. When an individual, entity, or — uniquely in the crypto context — a wallet address is added to the SDN List, all U.S. persons are immediately prohibited from transacting with it, and any assets it controls that are within U.S. jurisdiction are blocked.

OFAC began publishing wallet addresses as part of SDN designations in 2018. These addresses appear in the “Digital Currency Addresses” field of an SDN entry, identified by blockchain tag (e.g., “XBT” for Bitcoin, “ETH” for Ethereum, “XMR” for Monero). As of 2025, over 600 individual wallet addresses appear on the SDN List.

How Wallet Addresses Are Added to the SDN List

OFAC adds wallet addresses to the SDN List through the same administrative process used for all designations. The agency identifies a nexus between a wallet and a sanctioned party — through blockchain analytics, intelligence gathering, or coordination with law enforcement — and publishes the designation with minimum 24-hours notice. OFAC works closely with blockchain analytics firms like Chainalysis and Elliptic to trace funds and identify associated wallets. Once designated, the address is added to OFAC’s Sanctions List Search database and is typically integrated into compliance screening tools within hours.

Cluster Designations and Indirect Exposure

A significant compliance challenge in crypto is indirect exposure. OFAC designates not just primary wallets but entire clusters of related addresses controlled by the same sanctioned party. Blockchain analytics tools can identify these clusters with high confidence, and OFAC may add new addresses to an existing designation over time. A cryptocurrency business that processed a transaction with a wallet in 2022 may discover it interacted with a cluster subsequently designated in 2024 — creating retroactive compliance concerns.

Blocking vs. Rejecting Transactions

When a financial institution or exchange identifies a transaction involving a sanctioned wallet, they are generally required to block the transaction (hold the funds in a segregated account) rather than simply reject and return it. This distinction matters: blocked funds must be reported to OFAC within 10 business days and are held pending OFAC authorization. Returning funds without authorization may itself constitute a sanctions violation.

Cryptocurrency Exchanges and OFAC Compliance

Centralized cryptocurrency exchanges operating in or providing services to U.S. persons bear the most direct OFAC compliance obligations. These platforms function as money services businesses (MSBs) under FinCEN regulations and are subject to OFAC sanctions programs to the same extent as traditional financial institutions.

Exchange compliance programs typically include: sanctions screening of all customer wallet addresses against the SDN List at onboarding and transaction processing; IP geolocation to identify and block users in sanctioned jurisdictions; ongoing monitoring of transaction patterns for indicators of sanctions evasion; integration with blockchain analytics platforms to identify tainted funds; and reporting of blocked transactions to OFAC within required timeframes.

Exchanges that fail to implement adequate compliance programs face severe consequences, as the Binance enforcement action demonstrated. OFAC has also provided guidance that even non-U.S. exchanges may face secondary sanctions exposure if they process transactions that facilitate U.S. sanctions violations — a significant extraterritorial reach that has reshaped global exchange compliance practices.

For users, exchange compliance creates practical challenges. If an exchange’s screening system identifies a wallet as potentially connected to a sanctioned entity — even based on probabilistic blockchain analytics rather than a confirmed SDN match — it may freeze account assets while conducting enhanced due diligence. This process can take weeks or months, during which assets are inaccessible. Understanding your rights in this process and how to respond effectively requires experienced legal counsel.

What To Do If Your Crypto Is Frozen

Discovering that your cryptocurrency has been frozen — whether by an exchange, a DeFi protocol, or a government enforcement action — is a serious matter requiring immediate and methodical action. The steps you take in the first days after a freeze can significantly affect the outcome.

1. Do Not Attempt to Move Remaining Funds

If you learn that an exchange has frozen your account due to suspected sanctions issues, do not immediately attempt to transfer remaining accessible assets to other wallets or platforms. Such transfers could be interpreted as asset concealment and may complicate your legal position. Consult an attorney before taking any financial action.

2. Request Written Explanation

Contact the exchange or platform in writing and request a clear explanation of why your account or assets have been frozen. Ask specifically whether the freeze is OFAC-related, whether your wallet or a counterparty wallet has been flagged, and what documentation they require to lift the freeze. Preserve all correspondence.

3. Obtain Legal Counsel Immediately

OFAC sanctions matters are complex, and the legal framework governing blocked assets, reconsideration petitions, and licensing is highly technical. Retain an attorney with specific experience in OFAC compliance and cryptocurrency law before responding formally to any exchange or government inquiry. Legal privilege attaches to communications with your attorney from the moment of retention.

4. Assess the Sanctions Nexus

Your attorney will help you conduct a blockchain forensic analysis to understand exactly which transactions triggered the freeze and whether there is an actual SDN connection. In many cases, automated screening tools produce false positives — flagging wallets with statistically improbable connections to sanctioned addresses. Documenting the legitimate provenance of your funds is central to any unfreezing strategy.

5. Consider an OFAC License Application

If your funds are blocked due to a genuine sanctions nexus, OFAC has the authority to issue a specific license authorizing an otherwise prohibited transaction. License applications are formal submissions to OFAC documenting the nature of the transaction, the parties involved, and why authorization is warranted. Processing times vary from weeks to over a year, and the process requires precise legal drafting. Our attorneys have extensive experience preparing successful OFAC license applications in cryptocurrency contexts.

6. Pursue SDN Reconsideration if Wrongly Designated

If you believe your wallet has been incorrectly added to the SDN List, you have the right to petition OFAC for reconsideration of the designation. The reconsideration process requires submitting detailed evidence demonstrating that the factual basis for the designation is incorrect. This is a formal administrative proceeding with significant legal complexity, and legal representation is strongly advisable.

How Our Lawyers Help

Our attorneys bring deep experience in U.S. sanctions law, cryptocurrency compliance, and blockchain forensics to every client matter. We represent individuals, cryptocurrency businesses, DeFi developers, and institutional investors navigating OFAC’s expanding enforcement footprint in the digital asset space.

OFAC License Applications for Cryptocurrency

We prepare and submit OFAC specific license applications to authorize transactions that would otherwise be prohibited under sanctions regulations. In cryptocurrency matters, licenses may be sought for: releasing blocked assets held by exchanges; completing transactions with counterparties in sanctioned jurisdictions for authorized humanitarian or commercial purposes; winding down pre-existing contractual relationships; and de minimis transactions falling within OFAC’s discretionary licensing policy. Our attorneys understand OFAC’s internal review criteria and draft applications that address the specific concerns of each sanctions program.

SDN Delisting and Reconsideration Petitions

If your wallet address or associated entity has been designated on the SDN List, we guide you through OFAC’s administrative reconsideration process. We gather and present evidentiary records demonstrating that the designation’s factual predicate is incorrect, that the behavior giving rise to the designation has changed, or that humanitarian considerations support removal. Successful delisting restores full access to the U.S. financial system and removes the compliance burden that SDN designation places on your counterparties.

Sanctions Compliance Program Development

For cryptocurrency exchanges, DeFi projects, and digital asset businesses, we design and implement OFAC sanctions compliance programs tailored to your operational model. This includes risk assessment, policy drafting, screening tool selection and integration, staff training, and ongoing advisory support. A robust compliance program reduces enforcement risk and demonstrates good faith to regulators.

Voluntary Self-Disclosure and Enforcement Defense

If a cryptocurrency business discovers it has committed apparent OFAC violations, voluntary self-disclosure to OFAC can significantly reduce penalty exposure — potentially reducing civil penalties by up to 50%. Our attorneys assess the facts, advise on disclosure strategy, and represent businesses throughout OFAC’s administrative enforcement process. We also provide litigation representation in connection with OFAC civil and criminal referrals to the Department of Justice.

Blockchain Forensics and Asset Tracing

We work with leading blockchain analytics experts to trace the provenance of cryptocurrency assets, identify false-positive screening matches, and build evidentiary records for use in OFAC proceedings, exchange disputes, and court litigation. Understanding the on-chain history of your assets is often the key to resolving sanctions-related disputes.

Whether you are an individual whose assets have been frozen, a business seeking to build a defensible compliance program, or a DeFi developer navigating uncertain regulatory waters, our team provides the specialized legal expertise you need. Contact us today for a confidential consultation.