Non-crypto OFAC penalties — traditional finance

Traditional banks have paid the largest OFAC penalties on record, establishing the standard crypto programs are now measured against.

TL;DR

TL;DR: Traditional finance has paid OFAC's largest penalties, with multibillion-dollar settlements against global banks for processing sanctioned transactions. The same strict-liability rules now apply to crypto and agent payments.

What happened

OFAC's biggest enforcement actions have targeted global banks, not crypto firms. Major institutions settled for billions of dollars for clearing payments tied to sanctioned parties. These cases involved name-matching failures, stripped payment messages that hid counterparties, and a lack of screening before funds moved. Specific settlement figures for individual banks are public record, while any figure this page cannot verify is Not documented.

The rules behind the penalties

OFAC enforces under strict liability, so intent is not required, and civil penalties start at $356,000 per violation. The 50 Percent Rule extends blocking to entities 50% or more owned by a blocked person. Traditional banks learned these rules through billion-dollar settlements; the rules themselves have not changed for crypto, stablecoins, or AI agents that move money.

The lesson

Bank penalties show that the failure is usually a missing screen, not a deliberate scheme. Screening a counterparty against the SDN List of 19,218 names and 947 OFAC-listed crypto wallets in one call under 100 ms, returning ALLOW or BLOCK, is the same control banks pay for at scale but that agentmail makes available for one HTTP call. Payment rails such as x402 and AP2 move money without screening, so the check belongs in front of every transfer.