OFAC Sanctions and Crypto Compliance
Understanding the OFAC SDN list in crypto, compliance requirements, and the consequences of sanctions violations.
The Office of Foreign Assets Control (OFAC) is a financial intelligence and enforcement agency of the U.S. Treasury Department. Over the past decade, OFAC has increasingly focused on the cryptocurrency ecosystem, recognizing it as a vector for sanctions evasion.
For crypto businesses, investigators, and compliance officers, understanding OFAC regulations is not optional—it is a strict liability requirement.
The Specially Designated Nationals (SDN) List
The core of OFAC enforcement is the SDN list. This list contains individuals, entities, and countries prohibited from doing business with U.S. persons. Crucially, OFAC now regularly adds specific cryptocurrency addresses to the SDN list.
Addresses associated with ransomware gangs, state-sponsored hacking groups (like North Korea's Lazarus Group), and non-compliant mixers (like Tornado Cash) are explicitly sanctioned.
Strict Liability and Enforcement
OFAC violations are strict liability offenses. This means a company can be fined heavily even if they did not know they were interacting with a sanctioned entity; they only needed to have failed to prevent it.
- •Fines can reach millions of dollars per violation.
- •Criminal penalties can include prison time for willful evasion.
- •Loss of banking relationships and regulatory licenses is almost guaranteed.
Screening Requirements
Compliance teams must continuously screen all customer addresses, deposit addresses, and withdrawal destinations against the SDN list. However, simply checking exact matches is insufficient.
The Problem of Indirect Exposure
If an exchange accepts a deposit from Address A, and Address A received those funds directly from a sanctioned address, the exchange is exposed to extreme regulatory risk. Screening must encompass multiple "hops" (degrees of separation) from sanctioned entities.
Smart Contracts and Decentralization
The sanctioning of Tornado Cash in 2022 marked a paradigm shift: OFAC sanctioned a decentralized smart contract protocol rather than a specific person or company. This established that compliance obligations extend to interacting with autonomous code.
Consequently, block builders, validators, and DeFi front-ends are now grappling with how to implement OFAC filtering at the protocol and interface layers.
Automated Sanctions Screening
Aletheia provides real-time, multi-hop OFAC exposure monitoring, ensuring compliance teams can instantly identify and freeze direct or indirect flows from sanctioned entities.