What was the Binance OFAC settlement?

$968 million in November 2023 for 1.6 million apparent sanctions violations involving users in Iran, Syria, Cuba, and Crimea. Part of a $4.3 billion global resolution.

What was the root cause of Binance violations?

Inadequate compliance infrastructure: no effective geolocation, no real-time screening, under-resourced compliance team, and growth prioritized over controls.

Did Binance voluntarily self-disclose?

No. OFAC discovered the violations independently. The lack of voluntary self-disclosure meant no penalty mitigation was applied.

What can other exchanges learn from Binance?

Implement real-time wallet and name screening, use multiple layers of geolocation verification (not just IP), and resource compliance teams proportionally to transaction volume.

Binance OFAC settlement case study (2023)

In November 2023, Binance agreed to a $968 million settlement with OFAC for 1.6 million apparent violations of multiple sanctions programs. This is one of the largest OFAC settlements in history.

TL;DR: Binance failed to screen transactions involving users in comprehensively sanctioned jurisdictions (Iran, Syria, Cuba, Crimea). The root cause: inadequate compliance infrastructure that prioritized growth over controls. The settlement demonstrates why real-time screening is non-negotiable.

Background

Binance, the world's largest crypto exchange by volume, grew rapidly from 2017 to 2021. During this period, the exchange allowed users from comprehensively sanctioned jurisdictions to trade freely, despite US sanctions prohibiting such transactions.

What happened

Between August 2017 and October 2022, Binance processed approximately 1.6 million transactions worth $899 million involving users in Iran, Syria, Cuba, and the Crimea region of Ukraine. The exchange failed to implement adequate IP-based geolocation controls and did not screen users against OFAC sanctions lists.

Root causes

Penalty breakdown

Root cause	Detail
No effective geolocation	Users from sanctioned jurisdictions accessed the platform using VPNs
No real-time screening	Transactions were not screened against OFAC SDN list
Growth over compliance	Compliance staff were outnumbered and under-resourced
No voluntary self-disclosure	Binance did not voluntarily disclose; OFAC discovered independently

$968 million OFAC civil penalty (part of a broader $4.3 billion global resolution including DOJ and FinCEN). No voluntary self-disclosure mitigation. Statutory maximum was $3.5 billion.

Lessons for compliance teams

1. Geolocation is not enough. VPNs bypass IP checks. Screen user names and wallet addresses, not just IP addresses. 2. Real-time screening is mandatory. Post-hoc review of historical transactions does not prevent violations. 3. Compliance must scale with growth. Hiring and resourcing compliance teams must keep pace with transaction volume.

For AI agents: If your agent processes crypto payments, implement real-time wallet screening via API BEFORE transaction execution. The Binance case shows what happens when screening is absent.

Screen your agent's next payment

Check any wallet, name, or entity against OFAC, EU, UN sanctions lists in real time.

Free wallet checker

Frequently Asked Questions

What was the Binance OFAC settlement?: $968 million in November 2023 for 1.6 million apparent sanctions violations involving users in Iran, Syria, Cuba, and Crimea. Part of a $4.3 billion global resolution.
What was the root cause of Binance violations?: Inadequate compliance infrastructure: no effective geolocation, no real-time screening, under-resourced compliance team, and growth prioritized over controls.
Did Binance voluntarily self-disclose?: No. OFAC discovered the violations independently. The lack of voluntary self-disclosure meant no penalty mitigation was applied.
What can other exchanges learn from Binance?: Implement real-time wallet and name screening, use multiple layers of geolocation verification (not just IP), and resource compliance teams proportionally to transaction volume.