OFAC NPWMD sanctions program

NPWMD is one of the program codes OFAC attaches to entries on the Specially Designated Nationals list. As of 2026-07-24 it appears on 1,174 SDN entries. Designations under this program are made under Executive Order 13382 (Non-proliferation), TRA and Executive Order 13599 (Iran).

What the NPWMD code means on an SDN entry

OFAC does not maintain one list per sanctions program. It maintains one SDN list, and tags each entry with the program or programs it was designated under. An entry can carry several: of the 1,174 entries tagged NPWMD, 964 also carry at least one other program code.

The legal authorities OFAC records against these designations are:

• Executive Order 13382 (Non-proliferation)
• TRA
• Executive Order 13599 (Iran)
• Executive Order 13224 (Terrorism)
• CISADA
• 31 CFR 594.201(a)(5)
• Executive Order 13694 (Cyber)
• CAATSA - Section 224
• Executive Order 14024 (Russia)
• Executive Order - Convential Arms (Iran)

That matters for screening: if you filter an SDN extract to a single program code you will silently drop entries that were designated under a different code but are blocked all the same. Screen the whole list, then use the program code to explain a hit — not to decide which entries to load.

NPWMD designations by type

When NPWMD designations were made

The earliest entry still carrying this code was published 2005-06-29; the most recent was 2026-07-15. Designations per year, most recent first:

Countries recorded against NPWMD entries

Counted from the address, nationality and citizenship fields on each entry. An entry can record more than one country, and many record none, so these do not sum to the entry count:

Most recent NPWMD designations

Names are reproduced exactly as OFAC publishes them. OFAC also publishes alternate identities (a.k.a. spellings and transliterations) for many entries, and a screening system that matches only the primary name will miss them.

Digital-currency addresses under NPWMD

OFAC publishes 24 digital-currency addresses on entries carrying this program code. Those are broken out by chain on the sanctioned address pages.

Screen this programmatically

The same data behind this page is available as a single unauthenticated GET. It checks a counterparty name against all SDN primary names and alternate identities, and returns a match list rather than a yes/no so you can log what matched and why:

curl "https://sanctionsai.dev/sanctions?name=VANGUARD%20TACTICAL%20SUPPLY%20LIMITED"

The free tier allows 5 checks per day with no signup, which is enough to wire the call up and see the response shape. Production limits and the audit log are on the paid tiers; the API reference covers batch screening and the degraded flag you should alert on.