How are OFAC sanctions enforced?

How are OFAC sanctions enforced?

OFAC enforces sanctions through three primary mechanisms: civil monetary penalties (fines up to $330,944 per violation or twice the transaction value), criminal prosecution (up to $1 million and 20 years imprisonment for willful violations), and financial system exclusion (losing access to the US banking system).

Civil enforcement

OFAC's civil enforcement process follows its Economic Sanctions Enforcement Guidelines. Key factors in determining penalties include: whether the violation was voluntarily disclosed, whether a compliance program existed, the sophistication of the violator, harm to sanctions program objectives, and cooperation throughout the investigation.

Criminal enforcement

Willful violations of OFAC sanctions can be prosecuted criminally under the International Emergency Economic Powers Act (IEEPA). The penalty: up to $1,000,000 in fines and up to 20 years in federal prison. Criminal cases are referred to the Department of Justice and prosecuted in federal court.

Enforcement trends (2020-2026)

YearEnforcement actionsTotal penaltiesNotable cases
20209$13.6MBitGo, BitPay
202112$32.7MCoinbase
202216$53.4MKraken, Bittrex
202323$1.1BBinance ($968M)
202418$245MMultiple crypto cases
2025-202614*$89M*Increasing agent-focus

*Partial year data. Source: OFAC enforcement data compilation, sanctionsai.dev/data/ofac-enforcement.

Agent-specific risk: OFAC has not yet issued specific AI agent guidance, but its existing strict-liability framework applies directly. An agent that processes autonomous payments screens exactly the same as a human payment processor — and the operator is liable for what the agent signs.

Related questions

Try SanctionsAI →