What is OFAC compliance for Web3?
OFAC compliance for Web3 means screening counterparties against sanctions lists before transactions, with the same obligations traditional finance carries.
TL;DR
TL;DR: Web3 companies face the same OFAC obligations as banks and payment processors: screen counterparties before transactions and block designated parties. Decentralization is not a compliance defense.
Why decentralization does not remove liability
OFAC jurisdiction turns on activity and US nexus, not on architecture. A protocol, DAO, or marketplace that facilitates a transaction with a Specially Designated National can be liable under strict liability, where intent is not required. The fact that software is open or governance is distributed does not change the fact that a prohibited transaction occurred, and civil penalties start at over $350,000 per violation.
What compliance looks like in practice
A Web3 project needs at minimum a pre-transaction screen. sanctionsai.dev offers an OFAC screening API for agents and automated payments: one HTTP call returns clean (ALLOW) or flagged (BLOCK) in under 100 ms, against 947 OFAC-listed crypto wallets and 19,218 SDN names synced hourly from the US Treasury sdn.csv.
Minimum viable controls
- Screen every counterparty wallet before funds move.
- Block flagged addresses and log the decision.
- Apply the 50 Percent Rule to entities owned by blocked persons.
Web3 does not get a pass on sanctions; it gets the same screening duty with a different toolset.
Treat sanctions screening as a protocol-level feature: if your smart contract can move value, it should call a screening check before it does.
Screening turns that principle into a concrete, auditable step every transaction can run.