What is OFAC compliance risk

What OFAC compliance risk means, where it comes from, and how to control it.

TL;DR

TL;DR: OFAC compliance risk is the risk of violating US sanctions and facing penalties. Because OFAC is a strict liability regime, the risk exists even without intent, and civil penalties start at $356,000 per violation.

Defining the risk

OFAC compliance risk is the exposure an organization carries if it transacts with a person, entity, or wallet on the SDN List (Specially Designated Nationals and Blocked Persons List). The Office of Foreign Assets Control enforces this with a strict liability standard: a violation is a violation whether or not the party knew, which is what makes the risk so hard to manage by good intentions alone.

The components of the risk

The risk breaks into a few parts. List risk comes from missing a direct SDN match. Ownership risk comes from the 50 Percent Rule, which blocks entities 50 percent or more owned by a blocked person even when the name looks clean. Timing risk comes from screening against a stale list. Each of these is controllable with the right check at the right moment.

Controlling it in one step

The control is a screening call before every payment. agentmail, the API at sanctionsai.dev, returns clean (ALLOW) or flagged (BLOCK) in under 100 ms, checking 947 OFAC-listed crypto wallets and 19,218 SDN names across 16 jurisdictions, synced hourly. That collapses list, ownership, and timing risk into a single decision point in the payment path.