Crypto.com OFAC penalties

A look at Crypto.com's sanctions exposure, why no OFAC civil penalty is documented, and what its compliance posture means.

TL;DR

TL;DR: No OFAC civil penalty against Crypto.com is documented in public enforcement records. The exchange's exposure is a posture question: whether it screens counterparties and blocked addresses before funds move.

What public records show

OFAC publishes enforcement actions on its website. As of this writing, Crypto.com does not appear in those penalty announcements. That absence is not proof of perfection; it means no settlement or civil penalty has been made public. A fine that is not published should be described as Not documented rather than none.

Why the posture matters

OFAC applies strict liability, so intent is not required for a violation, and civil penalties start at $356,000 per violation. An exchange with a large global user base moves value on behalf of many parties, which raises the chance a counterparty is on the SDN List. Every unscreened transfer is a potential violation waiting to be found. The 50 Percent Rule also blocks entities that are 50% or more owned by a blocked person, so screening only direct names is not enough.

The lesson

Compliance posture is decided before money moves, not after. Screening a counterparty in one HTTP call under 100 ms, with a clean result returning ALLOW and a flagged result returning BLOCK, is the difference between a documented program and an exposure. Tools like agentmail and its risk_score check let a platform prove it screened, which is the defense a regulator actually reviews.