OFAC CYBER2 sanctions program
CYBER2 is one of the program codes OFAC attaches to entries on the Specially Designated Nationals list. As of 2026-07-24 it appears on 260 SDN entries. Designations under this program are made under Executive Order 13694 (Cyber), Executive Order 13757 (Cyber) and Executive Order 13848 (Election).
What the CYBER2 code means on an SDN entry
OFAC does not maintain one list per sanctions program. It maintains one SDN list, and tags each entry with the program or programs it was designated under. An entry can carry several: of the 260 entries tagged CYBER2, 113 also carry at least one other program code.
The legal authorities OFAC records against these designations are:
- Executive Order 13694 (Cyber)
- Executive Order 13757 (Cyber)
- Executive Order 13848 (Election)
- Executive Order 13661 (Ukraine)
- Executive Order 13382 (Non-proliferation)
- CAATSA - Section 224
- Executive Order 14024 (Russia)
- Executive Order 13722 (North Korea)
- Executive Order 13553 (Iran)
- Executive Order 14078 (Hostages)
That matters for screening: if you filter an SDN extract to a single program code you will silently drop entries that were designated under a different code but are blocked all the same. Screen the whole list, then use the program code to explain a hit — not to decide which entries to load.
CYBER2 designations by type
| Type | Entries | Share |
|---|---|---|
| Individuals | 171 | 65.8% |
| Entities | 85 | 32.7% |
| Aircraft | 3 | 1.2% |
| Vessels | 1 | 0.4% |
When CYBER2 designations were made
The earliest entry still carrying this code was published 2012-02-16; the most recent was 2025-01-03. Designations per year, most recent first:
| Year published | Entries |
|---|---|
| 2025 | 1 |
| 2024 | 38 |
| 2023 | 23 |
| 2022 | 34 |
| 2021 | 39 |
| 2020 | 31 |
| 2019 | 28 |
| 2018 | 43 |
| 2017 | 10 |
| 2016 | 12 |
Countries recorded against CYBER2 entries
Counted from the address, nationality and citizenship fields on each entry. An entry can record more than one country, and many record none, so these do not sum to the entry count:
| Country | Entries |
|---|---|
| Russia | 154 |
| Iran | 33 |
| China | 14 |
| Pakistan | 11 |
| Thailand | 10 |
| Nigeria | 6 |
| Ukraine | 6 |
| Saint Kitts and Nevis | 4 |
| Central African Republic | 4 |
| Latvia | 3 |
| Czech Republic | 3 |
| Israel | 3 |
Most recent CYBER2 designations
| Name as published | Type | Date published |
|---|---|---|
| INTEGRITY TECHNOLOGY GROUP, INCORPORATED | Entity | 2025-01-03 |
| INTERNATIONAL NON-PROFIT FOUNDATION CENTER FOR GEOPOLITICAL EXPERTISE | Entity | 2024-12-31 |
| GUAN, Tianfeng | Individual | 2024-12-10 |
| SICHUAN SILENCE INFORMATION TECHNOLOGY COMPANY, LIMITED | Entity | 2024-12-10 |
| POGODIN, Vadim Gennadievich | Individual | 2024-10-01 |
| RAMAZANOV, Beyat Enverovich | Individual | 2024-10-01 |
| RYZHENKOV, Sergey Viktorovich | Individual | 2024-10-01 |
| SHCHETININ, Aleksey Yevgenevich | Individual | 2024-10-01 |
| RYZHENKOV, Aleksandr Viktorovich | Individual | 2024-10-01 |
| YAKUBETS, Viktor Grigoryevich | Individual | 2024-10-01 |
| SOLAR-INVEST LLC | Entity | 2024-10-01 |
| VYMPEL-ASSISTANCE LLC | Entity | 2024-10-01 |
Names are reproduced exactly as OFAC publishes them. OFAC also publishes alternate identities (a.k.a. spellings and transliterations) for many entries, and a screening system that matches only the primary name will miss them.
Digital-currency addresses under CYBER2
OFAC publishes 393 digital-currency addresses on entries carrying this program code. Those are broken out by chain on the sanctioned address pages.
Screen this programmatically
The same data behind this page is available as a single unauthenticated GET. It checks a counterparty name against all SDN primary names and alternate identities, and returns a match list rather than a yes/no so you can log what matched and why:
curl "https://sanctionsai.dev/sanctions?name=INTEGRITY%20TECHNOLOGY%20GROUP,%20INCORPORATED"The free tier allows 5 checks per day with no signup, which is enough to wire
the call up and see the response shape. Production limits and the audit log are
on the paid tiers; the
API reference covers batch screening and the
degraded flag you should alert on.
Screening this in an agent or payment flow?
SanctionsAI is an OFAC screening API built for automated systems: one GET per counterparty, name and digital-currency address matching against the full SDN list, and an audit trail of what matched. Free tier, no signup.
See pricingSource. Every figure on this page is counted from the U.S. Treasury OFAC SDN enhanced XML export, published 2026-07-24. No figure is estimated. The authoritative list is OFAC's own Sanctions List Search.
Scope. SDN list only. This page does not cover the OFAC Consolidated (non-SDN) lists, the Sectoral Sanctions Identifications list, or the EU, UK or UN lists, and it does not apply the 50 Percent Rule, under which entities owned 50% or more by blocked persons are themselves blocked without being listed by name.
Not legal or compliance advice. A screening decision requires the official list and, where the stakes warrant it, counsel.