Office of Foreign Assets Control (OFAC)

Financial Regulation
advanced
14 min read
Updated Jun 15, 2024

What Is the Office of Foreign Assets Control?

The Office of Foreign Assets Control (OFAC) is a specialized agency within the U.S. Department of the Treasury that administers and enforces economic and trade sanctions against targeted foreign countries, terrorists, international narcotics traffickers, and other threats to U.S. national security.

The Office of Foreign Assets Control (OFAC) is the successor to the Office of Foreign Funds Control, which was established at the advent of World War II to prevent Nazi use of occupied countries' currency holdings. Today, it serves as the financial warfare arm of the U.S. government. Its primary mission is to leverage the dominance of the U.S. financial system to advance foreign policy and national security objectives without resorting to kinetic military force. OFAC acts under the authority of the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), and various other statutes. These laws give the President broad powers to regulate commerce in times of national emergency. When the President declares a national emergency regarding a specific threat (e.g., cyberattacks or human rights abuses), OFAC is the agency that implements the financial penalties. While it is a domestic agency, OFAC's influence is global. Because the U.S. dollar is the world's reserve currency and most international banking transactions eventually pass through a U.S. correspondent bank, foreign financial institutions must also comply with OFAC sanctions to maintain their access to the U.S. financial system. This extraterritorial reach makes OFAC one of the most powerful regulatory bodies in the world.

Key Takeaways

  • OFAC operates under presidential national emergency powers and specific legislation to impose controls on transactions and freeze assets under U.S. jurisdiction.
  • The agency manages comprehensive sanctions programs (embargoes) against countries like Cuba, Iran, and North Korea.
  • It also targets non-state actors through "smart sanctions," focusing on individuals and entities rather than entire populations.
  • Compliance with OFAC regulations is mandatory for all U.S. citizens, permanent residents, and entities, regardless of where they are located.
  • OFAC has the authority to impose significant civil penalties and refer cases for criminal prosecution for sanctions violations.

How OFAC Enforcement Works

OFAC enforcement relies on a strict liability standard for civil penalties. This means that a person or company can be fined for violating sanctions even if they did not know they were doing so. "I didn't know" is not a valid defense; it is only a mitigating factor in determining the penalty amount. The agency publishes the Specially Designated Nationals and Blocked Persons List (SDN List), which contains thousands of names of individuals, companies, vessels, and aircraft. U.S. persons are generally prohibited from dealing with SDNs. When a bank processes a transaction, its software scans the names against the SDN list. If a match is found: 1. Blocking: The bank must "block" (freeze) the funds immediately. The money is placed in an interest-bearing account, and the bank must report it to OFAC within 10 business days. The funds cannot be released without a specific license from OFAC. 2. Rejecting: In some cases, where the underlying transaction is prohibited but the parties are not SDNs (e.g., a trade with a sanctioned country that is not fully blocked), the bank must "reject" the transaction—sending the money back to the sender—and report the rejection to OFAC. OFAC encourages companies to self-report violations. Those who voluntarily disclose an error typically receive significantly lower penalties than those who are caught by OFAC investigators.

Types of Sanctions Programs

OFAC administers several distinct types of sanctions:

  • Comprehensive Sanctions: Full trade embargoes prohibiting virtually all imports, exports, and financial transactions with a specific country (e.g., Cuba, Iran, North Korea).
  • Sectoral Sanctions: Targeted restrictions on specific sectors of a country's economy (e.g., Russian energy, financial, and defense sectors) without a full embargo.
  • List-Based Sanctions: Freezing assets of specific individuals and entities (e.g., terrorists, drug kingpins, human rights abusers) regardless of their location.
  • Secondary Sanctions: Penalties imposed on non-U.S. persons for doing business with sanctioned entities (e.g., sanctioning a Chinese bank for financing North Korean trade).

Compliance for Financial Institutions

For banks, broker-dealers, and insurance companies, OFAC compliance is a massive operational undertaking. They must employ sophisticated "interdiction software" to filter every wire transfer, account opening, and trade against OFAC lists in real-time. The "50 Percent Rule" is a critical compliance concept. It states that any entity owned 50% or more, directly or indirectly, by one or more blocked persons is itself considered blocked. This applies even if the entity does not appear on the SDN list. This "shadow blocking" requires institutions to conduct deep due diligence into corporate ownership structures, not just screen names. When a violation occurs, OFAC evaluates the "General Factors" to determine the penalty. These include: Was the violation willful or reckless? Did the company have a compliance program? Did they cooperate? Did they self-disclose? A strong compliance culture can mean the difference between a warning letter and a multi-million dollar fine.

Real-World Example: The BNPP Case

In 2014, French bank BNP Paribas (BNPP) agreed to plead guilty and pay nearly $9 billion for violating U.S. sanctions against Sudan, Iran, and Cuba. 1. The Scheme: BNPP processed billions of dollars in transactions for sanctioned entities by "stripping" information from wire transfers to hide the origin of the funds from U.S. correspondent banks. 2. The Violation: This was a willful, systemic effort to evade OFAC controls over several years. 3. The Consequence: * $8.9 billion forfeiture and fine. * One-year suspension of its ability to clear certain U.S. dollar transactions (a "death penalty" for a global bank). * Termination of 13 employees involved in the misconduct. Significance: This case demonstrated that OFAC and the Department of Justice would aggressively pursue foreign banks for processing U.S. dollar transactions that violate U.S. sanctions, asserting broad extraterritorial jurisdiction.

1Total Transaction Value: ~$190 billion over 10 years
2Sanctioned Value: ~$8.8 billion involved in illegal transactions
3Fine Amount: $8.97 billion
4Ratio: The fine exceeded the total value of the illegal transactions processed.
Result: The penalty was designed to be punitive, stripping the bank of all profits from the illicit business and sending a global deterrence message.

Common Misconceptions

Clarifying common myths about OFAC:

  • "It only applies to banks": False. All U.S. persons—individuals, exporters, insurers, and non-profits—must comply.
  • "I can send money to family in a sanctioned country": Maybe. OFAC often issues "General Licenses" for personal remittances, but the amounts and methods are strictly regulated. Always check the specific program (e.g., Cuba Sanctions).
  • "Crypto is anonymous, so OFAC can't stop it": False. OFAC actively sanctions digital wallet addresses and pursues exchanges that facilitate transactions for ransomware gangs or sanctioned states.

FAQs

OFAC's authority stems primarily from the Trading with the Enemy Act (TWEA) of 1917 and the International Emergency Economic Powers Act (IEEPA) of 1977. These acts empower the President to declare national emergencies and regulate economic transactions to deal with unusual and extraordinary threats.

A General License is a standing authorization issued by OFAC that allows certain types of transactions that would otherwise be prohibited. For example, a General License might allow the export of food and medicine to a sanctioned country or allow NGOs to provide humanitarian aid. You do not need to apply for a General License; you just need to ensure your activity fits its terms.

A Specific License is a written document issued by OFAC to a particular person or entity, authorizing a specific transaction in response to a written application. These are case-by-case exceptions and are often difficult to obtain.

Yes. An SDN can petition OFAC to be removed from the list ("delisting"). They must prove that the behavior that caused the designation has stopped, that they are no longer associated with the sanctioned entity, or that the designation was a mistake. This is an administrative process that can take years.

Generally, no. OFAC targets foreign threats. U.S. citizens who violate laws are typically handled by the Department of Justice or FBI through criminal charges. However, a U.S. citizen acting as an agent of a foreign sanctioned entity could theoretically be designated, though it is rare.

The Bottom Line

The Office of Foreign Assets Control (OFAC) is the silent enforcer of American foreign policy. By controlling the flow of dollars, it can isolate rogue regimes, cripple terrorist networks, and punish human rights abusers without firing a shot. For the financial industry, OFAC represents the ultimate compliance challenge: a zero-tolerance regime where a single slip-up can lead to billion-dollar fines and reputational ruin. Understanding OFAC is essential for any business engaged in international trade or finance, as the line between legal commerce and prohibited activity can shift with a single presidential executive order.

At a Glance

Difficultyadvanced
Reading Time14 min

Key Takeaways

  • OFAC operates under presidential national emergency powers and specific legislation to impose controls on transactions and freeze assets under U.S. jurisdiction.
  • The agency manages comprehensive sanctions programs (embargoes) against countries like Cuba, Iran, and North Korea.
  • It also targets non-state actors through "smart sanctions," focusing on individuals and entities rather than entire populations.
  • Compliance with OFAC regulations is mandatory for all U.S. citizens, permanent residents, and entities, regardless of where they are located.