OFAC Penalty Calculator

Quick Answer: OFAC civil penalties are calculated as the greater of the statutory maximum per violation or twice the transaction value. Under IEEPA — the statute governing most modern sanctions programs — the maximum is $377,700 per violation (adjusted for inflation). Whether your violation is classified as egregious and whether you made a voluntary self-disclosure (VSD) determine which of four penalty tiers applies. Aggravating and mitigating factors then adjust the base penalty up or down. This guide walks you through the full calculation methodology so you can estimate your exposure before engaging with OFAC.

OFAC Penalty Calculation: The Basic Formula

OFAC’s civil penalty framework flows from its Economic Sanctions Enforcement Guidelines (31 C.F.R. Part 501, Appendix A). The core formula has three components:

1. Statutory Maximum: The ceiling set by the enabling statute for each sanctions program (IEEPA, TWEA, Kingpin Act, etc.), expressed per transaction/violation.
2. Transaction Value Multiplier: OFAC compares the statutory maximum with twice the value of the underlying transaction. The base penalty is whichever figure is higher.
3. Penalty Matrix Reduction: The base penalty is then reduced based on two binary factors — egregious vs. non-egregious classification, and whether you voluntarily self-disclosed.

The result is your base matrix penalty. OFAC then applies further percentage adjustments for aggravating and mitigating factors to arrive at the final settlement figure. Understanding how OFAC penalties work in practice requires knowing all three stages of this calculation.

One critical point: OFAC counts each transaction as a separate violation. A company that processed 50 prohibited payments over 18 months faces 50 separate violations — each subject to its own statutory maximum. The aggregate exposure can quickly reach tens of millions of dollars even for relatively modest individual transactions.

OFAC Penalty Matrix 2026

The penalty matrix is the most important tool for estimating your exposure. It creates four scenarios based on two yes/no questions: (1) Is the violation egregious? (2) Did you voluntarily self-disclose?

What this means in practice:

• Non-Egregious + VSD: Starting point is 50% of the statutory max. This is the most favorable scenario — typical for companies that catch violations through compliance reviews and promptly self-report.
• Non-Egregious + No VSD: Starting point is 100% of the statutory max. No VSD doubles your exposure compared to disclosure.
• Egregious + VSD: Starting point is 50% of the statutory max. Even with VSD, egregious classification maintains the same starting point as non-egregious without VSD.
• Egregious + No VSD: Starting point is 100% of the statutory max. This is the worst-case scenario and the starting point for OFAC’s most significant enforcement actions.

Note that for egregious cases, the “applicable statutory maximum” can mean the per-count maximum multiplied by the number of violations — creating eye-watering aggregate figures before any factor adjustments.

Penalty Amounts by Statute (2026)

The statutory maximum varies depending on which sanctions program you violated. OFAC administers over 30 sanctions programs under different legal authorities. Here are the key penalty caps:

Note: All figures are periodically adjusted for inflation under the Federal Civil Penalties Inflation Adjustment Act. The IEEPA figure of $377,700 reflects 2024–2026 adjustments. Always verify current caps with OFAC’s official guidance or an OFAC lawyer.

Aggravating Factors That Increase Your Penalty

After the matrix establishes the starting point, OFAC applies percentage adjustments based on specific aggravating factors. Each factor can push your penalty significantly higher — sometimes beyond the matrix baseline. OFAC’s guidelines identify the following key aggravating factors:

• Willful or reckless conduct (+30% to +50%): If OFAC determines you knew about the violation or consciously disregarded obvious red flags, this is the single largest aggravating factor. Willful violations can push final penalties toward or at the maximum statutory cap.
• Management awareness or involvement (+20% to +30%): When senior executives, compliance officers, or directors were aware of the prohibited conduct, OFAC treats this as a serious governance failure. Board-level knowledge is particularly damaging.
• Harm to sanctions objectives (+20% to +40%): If your violation actually benefited a sanctioned party (funds transferred, goods delivered, services rendered), OFAC assigns greater weight. Transactions that directly supported weapons programs, terrorism, or designated individuals attract maximum aggravation.
• Prior OFAC violations or warnings (+20% to +30%): A prior enforcement action within the past 5 years, or even a prior cautionary letter or Finding of Violation, significantly increases current penalties. OFAC treats recidivism as evidence of systemic compliance failure.
• Multiple schemes or concurrent violations (+10% to +20%): When violations span multiple sanctions programs, multiple business units, or reflect a pattern rather than an isolated incident, OFAC may apply upward adjustments for each additional scheme.
• Large volume or long duration (+10% to +25%): High transaction volumes or violations spanning multiple years signal institutional rather than accidental non-compliance.
• Concealment or obstruction (+25% to +50%): Attempting to hide violations, deleting records, or providing false information to OFAC investigators is treated extremely seriously and can convert a manageable case into a referral for criminal prosecution.

These factors are not rigidly formulaic — OFAC retains significant discretion, and the interaction between multiple aggravating factors is not simply additive. An experienced OFAC enforcement attorney can help you assess which factors realistically apply to your situation.

Mitigating Factors That Reduce Your Penalty

The good news is that OFAC’s guidelines give equal weight to mitigating factors. A well-constructed mitigation presentation — typically developed with legal counsel — can dramatically reduce the final penalty from the matrix baseline. Key mitigating factors include:

• Voluntary self-disclosure (-50% of base matrix penalty): This is the single largest individual factor. VSD halves the starting penalty and signals cooperation. However, VSD must be timely, complete, and accurate — a deficient VSD can be treated as an aggravating factor.
• Substantial cooperation with OFAC’s investigation (-20% to -40%): Providing complete records, answering questions promptly, making witnesses available, and assisting OFAC’s analysis all qualify. Cooperation is evaluated independently from VSD.
• Strong compliance program at the time of violation (-10% to -20%): If you had a robust, genuinely implemented OFAC compliance program and the violation occurred despite that program, OFAC gives significant credit. A program on paper that wasn’t followed provides little benefit.
• Remediation and program improvements (-15% to -30%): Demonstrating that you identified root causes, fired responsible personnel if appropriate, implemented new controls, and enhanced your compliance program shows OFAC you are a lower recidivism risk.
• No prior OFAC violations (-10% to -20%): First-time violators receive a clean-slate credit. This is especially valuable for individuals and small businesses that lack sophisticated compliance infrastructure.
• Immediate voluntary cessation (-10% to -15%): Stopping the violative conduct immediately upon discovery — before any enforcement contact — demonstrates good faith.
• Minimal harm to sanctions objectives (-10% to -20%): If the violation was technical (e.g., a data error that resulted in a payment to a non-SDN entity in a sanctioned country), OFAC may reduce the penalty based on the limited real-world impact.
• License eligibility (-5% to -15%): If the underlying transaction would have qualified for an OFAC general or specific license, the absence of actual harm to sanctions policy supports reduced penalties.

Combined mitigating factors can realistically reduce penalties by 60–80% from the matrix baseline in well-managed cases. The 2025–2026 enforcement record shows that companies with strong remediation stories regularly settle for 10–25% of their theoretical maximum exposure.

Voluntary Self-Disclosure: The 50% Reduction Explained

Voluntary self-disclosure deserves its own section because it is the most powerful tool available to companies and individuals facing potential OFAC penalties. Understanding how voluntary self-disclosure works can mean the difference between a manageable settlement and a catastrophic enforcement action.

What VSD achieves: Under OFAC’s guidelines, VSD serves as both a matrix modifier (halving the base penalty) and a standalone mitigating factor in the factor-adjustment stage. This double benefit means that in practice, VSD-plus-cooperation cases regularly settle for 15–25% of the theoretical maximum.

Requirements for VSD to count:

• Timeliness: The disclosure must be made before OFAC learns of the violation through its own investigation, a third-party report, or another federal agency. Once OFAC has independent knowledge, the “voluntary” element is lost.
• Completeness: You must disclose all violations you have discovered — not just the most favorable ones. A selective or incomplete VSD is treated as an aggravating factor, potentially worse than no disclosure at all.
• Accuracy: All facts reported must be accurate to the best of your knowledge. Material misstatements in a VSD can expose you to additional liability and destroy credibility with OFAC investigators.
• Proper form: VSD is submitted in writing to OFAC’s Enforcement Division. The submission must identify the sanctions program(s) violated, describe the nature and circumstances of each violation, provide transaction-level data, and explain what remediation steps have been taken.

When NOT to self-disclose: VSD is not always the right strategy. If OFAC already has knowledge of the violations (e.g., through a bank’s suspicious activity report), if the violations are not clearly established, or if disclosure would create criminal exposure that outweighs civil penalty mitigation, legal counsel should carefully evaluate the cost-benefit before filing. An OFAC lawyer can investigate the factual record and advise whether VSD will achieve its intended benefit.

Penalty Estimation Examples: 3 Case Studies

These illustrative examples show how the calculation flows from statutory maximum to realistic settlement figure. They are based on OFAC’s published methodology and recent enforcement patterns — not specific cases.

Case Study 1: Mid-Size Financial Institution — Non-Egregious, VSD

Facts: A regional bank processed 12 wire transfers totaling $480,000 to a company that was later designated under IEEPA’s Iran program. The compliance team discovered the violations during a routine audit 6 months after the transfers. The bank voluntarily self-disclosed within 30 days of discovery.

• Statutory maximum per violation: $377,700 (IEEPA)
• Transaction value comparison: $480,000 ÷ 12 = $40,000 per transaction × 2 = $80,000. Statutory max ($377,700) is higher.
• Total theoretical maximum: 12 × $377,700 = $4,532,400
• Matrix (Non-Egregious + VSD): 50% → $2,266,200
• Mitigating factors applied: VSD (already applied in matrix), strong compliance program (-15%), full cooperation (-25%), no prior violations (-15%), remediation (-15%) = aggregate mitigation ~70%
• Estimated settlement range: $2,266,200 × 30% = ~$680,000

Case Study 2: Technology Company — Egregious, No VSD

Facts: A software company knowingly provided cloud services to entities in a sanctioned country for 3 years, generating $2.1M in revenue. Senior management was aware. OFAC discovered the violations through a referral from the Treasury’s financial intelligence unit.

• Violations: 36 monthly subscription payments = 36 violations
• Statutory maximum per violation: $377,700 (IEEPA)
• Transaction value comparison: $2,100,000 ÷ 36 = $58,333 × 2 = $116,666. Statutory max ($377,700) is higher.
• Total theoretical maximum: 36 × $377,700 = $13,597,200
• Matrix (Egregious + No VSD): 100% → $13,597,200
• Aggravating factors: willful conduct (+40%), management involvement (+25%), 3-year duration (+15%), harm to sanctions objectives (+20%) = +100% potential
• Mitigating factors: cooperation post-investigation (-20%), remediation (-15%) = -35%
• Estimated settlement range: $13,597,200 × 65% = ~$8,800,000–$11,000,000

Case Study 3: Individual — Inadvertent Violation, Prompt VSD

Facts: An individual investor made a single investment of $75,000 in a private fund that unknowingly held a position in a Specially Designated National (SDN) entity. Upon receiving legal advice that this constituted an OFAC violation, the individual self-disclosed within 45 days.

• Statutory maximum: $377,700 (IEEPA) or 2× transaction value ($150,000) — statutory max applies
• Matrix (Non-Egregious + VSD): 50% → $188,850
• Mitigating factors: VSD (applied), no willfulness (-30%), no prior violations (-20%), minimal harm (-20%), prompt remediation (-15%), individual/first-time (-15%) = -100% theoretical but OFAC typically maintains a floor
• Estimated outcome: Finding of Violation with no monetary penalty, or a civil penalty in the range of $15,000–$40,000

These examples illustrate why early legal advice matters. The difference between Case Study 1 ($680K) and Case Study 2 ($9M+) is not just the conduct — it’s the response. Organizations that engage OFAC counsel immediately upon discovering potential violations consistently achieve dramatically better outcomes.

2025–2026 OFAC Enforcement: Recent Settlement Benchmarks

Real enforcement data provides the most reliable benchmarks for penalty estimation. Recent notable OFAC settlements include:

Total 2025 OFAC enforcement reached approximately $266M in penalties, with a significant portion from a small number of large egregious cases. The majority of cases settled for under $5M, with strong mitigating packages achieving settlements well below theoretical maximums.

How an OFAC Lawyer Can Minimize Your Penalty

The OFAC penalty calculation methodology creates significant room for advocacy at every stage. An experienced OFAC lawyer intervenes in the following ways:

• Pre-disclosure investigation: Before any communication with OFAC, counsel conducts a privileged internal investigation to identify all violations, assess their severity, and determine whether VSD is strategically advisable.
• Egregious classification defense: Whether a violation is classified as egregious often turns on contested facts about knowledge, intent, and management involvement. Legal counsel builds the factual record that supports non-egregious treatment — potentially cutting the base penalty in half.
• VSD preparation and submission: A well-crafted VSD submission is not simply a recitation of facts. It frames the narrative, presents mitigating context, and begins the mitigation argument before OFAC investigators form their initial views.
• Violation count minimization: OFAC counts transactions as violations, but what constitutes a “transaction” is not always obvious. Counsel can argue for transaction aggregation (treating multiple related payments as one violation) to dramatically reduce the total violation count.
• Mitigation presentation: Comprehensive mitigation submissions document compliance program strength, remediation steps, and cooperation in the most favorable light — presenting a systematic argument for the maximum downward adjustment on each factor.
• Settlement negotiation: OFAC retains discretion to accept settlements below the calculated matrix penalty. Counsel with existing relationships in the OFAC enforcement community understands the realistic settlement range and can negotiate effectively.

If you have discovered a potential OFAC violation — or received an OFAC subpoena or administrative inquiry — time is critical. The window for voluntary self-disclosure closes the moment OFAC independently learns of the violation. Contact our OFAC lawyers today for a confidential assessment of your exposure and options.