OFAC Risk Matrix

An OFAC risk matrix is a structured framework for evaluating sanctions compliance risk across an organization's operations. It scores risk across multiple dimensions — customer types, geographic footprint, product lines, transaction channels, and agent/automation exposure — to determine where enhanced due diligence and controls are needed.

Common risk dimensions

• Customer risk: PEPs, shell companies, high-risk industries.
• Geographic risk: Comprehensively sanctioned countries, high-risk jurisdictions.
• Product risk: Cross-border payments, crypto, correspondent banking — all high-risk.
• Channel risk: Automated/agent payments — the newest and fastest-growing risk category.