Penalties for OFAC Violations

OFAC Violation Penalties: What You Need to Know

Violating U.S. sanctions administered by the Office of Foreign Assets Control (OFAC) carries some of the most severe financial and criminal consequences in U.S. regulatory law. OFAC violation penalties can financially destroy businesses and result in prison sentences for individuals — even when the violation was accidental or unknowing.

OFAC enforces economic sanctions under authorities including the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), the Foreign Narcotics Kingpin Designation Act, and numerous other statutes. The range of penalties available to OFAC is broad, and the agency’s enforcement posture has grown increasingly aggressive. In 2026 alone, OFAC has already collected over $6.6 million in civil penalties across just three enforcement actions — and the year is far from over.

Understanding the full spectrum of penalties for OFAC violations — from civil fines to criminal prosecution — is essential for any business or individual that conducts cross-border transactions, international trade, or financial services. Our OFAC lawyers have defended clients across all categories of enforcement action described below.

OFAC Civil Penalty Amounts in 2026

Civil penalties under OFAC are imposed without the need to prove criminal intent. OFAC operates a strict liability standard for many violations — meaning a company can be penalized even if it did not know it was dealing with a sanctioned party. Civil penalties are calculated on a per-transaction basis, meaning each separate violating transaction generates a separate potential fine.

OFAC adjusts its civil penalty caps annually for inflation. The following table reflects the current penalty maximums applicable in 2026:

It is critical to understand that these penalties apply per transaction. A company that processed 100 prohibited transactions with a sanctioned counterpart could theoretically face up to $37.7 million in civil penalties under IEEPA alone. OFAC routinely aggregates violations across multiple transactions when calculating settlement amounts, which is why some enforcement actions reach into the hundreds of millions of dollars.

Criminal Penalties for Willful OFAC Violations

When OFAC violations are deemed willful — meaning the violator knew they were dealing with sanctioned parties and proceeded anyway — criminal prosecution is a real possibility. Criminal cases are handled by the U.S. Department of Justice (DOJ) in coordination with OFAC investigations. Criminal exposure is one of the most serious outcomes of an OFAC enforcement action, and it applies to both individuals and corporate officers.

Criminal penalties for willful OFAC violations include:

• Fines of up to $1 million per violation (IEEPA-based programs)
• Imprisonment of up to 20 years for individuals (IEEPA)
• Both fines and imprisonment, imposed simultaneously
• Corporate debarment from U.S. government contracts
• Disgorgement of all profits derived from sanctioned transactions
• Asset forfeiture of funds and property involved in the violations
• Personal liability for executives and compliance officers who enabled the violations

Criminal prosecution is most likely when OFAC discovers evidence of intentional evasion — for example, stripping payment messages of identifying information, using shell companies to obscure the sanctioned counterpart, or continuing violations after a prior OFAC warning. Banks and financial institutions face particularly acute criminal exposure due to their central role in processing sanctioned transactions.

Recent OFAC Enforcement Actions: 2025–2026 Cases

OFAC’s enforcement activity in 2025–2026 demonstrates the agency’s continued focus on financial services, technology platforms, and individual actors. The following are confirmed 2026 enforcement actions and recent major settlements:

The 2026 YTD total across just three enforcement actions is $6,607,661 — reflecting OFAC’s active enforcement posture in the new year. Notably, the $3.77 million individual penalty in February 2026 is exactly 10× the statutory IEEPA base amount, indicating egregious circumstances in that case.

Factors That Affect OFAC Penalty Size

OFAC uses a formal Economic Sanctions Enforcement Guidelines framework (codified at 31 C.F.R. Part 501, Appendix A) to calculate penalties. The guidelines define “base penalties” for egregious and non-egregious violations, which are then adjusted up or down based on aggravating and mitigating factors. Understanding this framework is essential to predicting and managing your OFAC exposure.

General Factors OFAC Considers:

• Willfulness or recklessness of the conduct vs. inadvertent or negligent violation
• Awareness of the conduct at the time — did management know?
• Harm to sanctions program objectives and U.S. foreign policy
• Individual characteristics (financial condition, sophistication of the entity)
• Whether the entity is a recidivist with prior OFAC violations

Aggravating Factors (increase penalties)

• Willful or reckless conduct — awareness of the violation and proceeding anyway
• Senior management involvement — executives or board members authorizing violating conduct
• History of prior OFAC violations — especially within the past 5 years
• Large transaction value or significant benefit derived from the sanctions program violation
• Concealment of violations — stripping wire transfer references, using front companies, falsifying records
• Harm to sanctions program objectives — e.g., transactions that benefit designated terrorist organizations or proliferators
• Obstruction of OFAC’s investigation or failure to cooperate

Mitigating Factors (reduce penalties)

• Voluntary Self-Disclosure (VSD) — typically reduces the base penalty by 50%
• Minimal or no harm to sanctions program objectives
• Robust compliance program in place at the time of violation — even if it failed to catch this instance
• No prior OFAC violations in the past 5 years
• Full cooperation with OFAC’s investigation
• Prompt remedial action — implementing systemic fixes after discovering the violation
• Isolated or low-value transaction with no pattern of violations

In practice, the difference between an egregious and non-egregious finding — combined with voluntary self-disclosure — can reduce a theoretical penalty of millions of dollars to a settlement of hundreds of thousands. This is why engaging experienced OFAC sanctions lawyers at the earliest possible stage is so critical.

Voluntary Self-Disclosure: How to Cut Your OFAC Penalty by 50%

One of the most important tools available to businesses facing potential OFAC violations is voluntary self-disclosure (VSD). OFAC’s Enforcement Guidelines treat VSD as a “substantial mitigating factor” and, in practice, consistently use it to reduce base penalty calculations by 50% or more.

For non-egregious violations where VSD is submitted, the base penalty is calculated at half the transaction value (capped at 50% of the applicable statutory maximum), compared to the full transaction value for cases without VSD. For egregious violations, VSD reduces the base penalty from the applicable statutory maximum to 50% of that maximum per transaction.

Benefits of voluntary self-disclosure to OFAC:

• Immediate 50% reduction in base penalty calculation
• Demonstrates cooperation, triggering additional mitigating credit
• Reduces likelihood of criminal referral to DOJ
• May result in a “no-action letter” for minor, isolated violations
• Allows the company to control the narrative and framing of the violation
• Protects the company’s banking relationships by demonstrating proactive compliance

VSD must be submitted before OFAC becomes aware of the violation through its own investigation or a third-party referral. Once OFAC opens an investigation, the benefit of VSD is typically lost. The disclosure must also be complete — withholding material facts undermines the self-disclosure and can result in aggravated penalties.

Our firm has extensive experience structuring and submitting OFAC voluntary self-disclosures in ways that maximize mitigation credit. Learn more on our dedicated voluntary self-disclosure page, or contact us for a confidential assessment of your disclosure options.

Egregious vs. Non-Egregious OFAC Violations

OFAC’s penalty framework distinguishes sharply between egregious and non-egregious violations, as this determination has a direct multiplier effect on the penalty amount.

Non-egregious violations involve negligent conduct, systemic failures, or unknowing violations where the entity lacked actual knowledge that it was engaging with a sanctioned party. Base penalties for non-egregious cases start at half the transaction value (or half the applicable statutory maximum per transaction) — and are further reduced by mitigating factors including VSD.

Egregious violations involve willful or reckless conduct — the entity knew it was violating sanctions and proceeded anyway, or exhibited reckless disregard for whether its counterparties were sanctioned. OFAC calculates egregious base penalties at or near the statutory maximum per transaction, with potential for criminal referral. Concealment of violations — such as stripping wire references or using intermediaries to obscure sanctioned counterparties — automatically elevates a case toward egregious treatment.

The egregious/non-egregious determination is made by OFAC’s Director based on the General Factors analysis. Engaging legal counsel before OFAC makes this determination — ideally through a self-disclosure or proactive compliance consultation — can significantly influence which category your case falls into. Our OFAC compliance team works with clients to build the evidentiary record supporting non-egregious treatment.

Statute of Limitations for OFAC Violations

Under 28 U.S.C. § 2462, OFAC has a 5-year statute of limitations for civil enforcement actions, running from the date of the apparent violation. For criminal prosecution under IEEPA and TWEA, the standard 5-year federal criminal statute of limitations also applies.

However, several practical complications affect how these limits work:

• Continuing violations — if a prohibited business relationship persisted over years, each day of the relationship may constitute a separate violation, restarting the clock
• Discovery of concealed violations — OFAC may argue that the statute of limitations was tolled (paused) if the violation was actively concealed
• Use of historical violations as context — even if time-barred from direct enforcement, OFAC may reference older violations as aggravating factors in current actions
• DOJ criminal investigations move on different timelines — a criminal grand jury subpoena may arrive years after the civil statute has expired

What To Do If You May Have Violated OFAC Sanctions

If you suspect your company has processed transactions with a sanctioned party, the steps you take immediately can make a significant difference in the ultimate penalty you face.

1. Engage experienced OFAC counsel immediately — attorney-client privilege protects your internal investigation from discovery by regulators
2. Conduct an internal investigation — identify the scope, nature, root cause, and full transaction history of the potential violation
3. Assess voluntary self-disclosure — early, complete disclosure to OFAC typically reduces the base penalty by 50%
4. Preserve all relevant records — do not destroy documents, communications, or transaction records related to the issue
5. Implement remedial compliance measures — demonstrate to OFAC that you’ve fixed the compliance failures that caused the violation
6. Assess secondary exposure — identify whether your banking partners, correspondent banks, or regulators are likely to independently discover the violation

Acting quickly and strategically is essential. For businesses with assets blocked due to an enforcement action, there are legal mechanisms to seek the release of frozen funds. Our team has handled OFAC cases across financial services, technology, cryptocurrency, shipping, and professional services — contact us to discuss your specific situation.