Your autonomous agent just tried to send a payment to a wallet on the OFAC SDN list. Here's exactly what happens next — and how to prevent it from happening in the first place.
OFAC sanctions enforcement operates under strict liability. You are liable for violations by your AI agent regardless of whether you knew about the transaction, intended it, or had a compliance program in place. The maximum civil penalty is roughly $368,000 per violation — and criminal penalties can include up to 20 years imprisonment.
| Stage | What happens | Timeline |
|---|---|---|
| 1. Detection | The transaction is flagged — either by your own screening system, a bank's compliance team, or a blockchain analytics firm monitoring the ledger. | Instant to 30 days |
| 2. Freeze | The receiving institution freezes the funds. Your agent's wallet may be flagged. Any linked accounts may also be frozen under the "domino effect" of compliance risk. | Hours to days |
| 3. OFAC notification | If the transaction went through, OFAC may be notified by the intermediary bank. If it was blocked, the blocking party files a blocked property report within 10 business days. | 10 business days |
| 4. Investigation | OFAC investigates. They examine whether this was an isolated incident or part of a pattern, whether you had a compliance program, and whether you voluntarily self-disclosed. | 6–18 months |
| 5. Enforcement action | OFAC issues a penalty notice or, in cases of voluntary self-disclosure with full cooperation, a cautionary letter with no monetary penalty. | 12–24 months |
If your agent screens before transacting and blocks the payment, no violation has occurred. You file a blocked property report with OFAC and move on. This is the entire purpose of pre-transaction screening.
If your agent doesn't screen and executes the transaction, you now have an actual sanctions violation on your hands. The money moved. The receiving wallet is a sanctioned entity. You are now in the investigation pipeline.
If a violation has occurred, OFAC's Enforcement Guidelines treat voluntary self-disclosure (VSD) as the single most powerful mitigating factor. When you self-disclose before OFAC discovers the violation, the base penalty is reduced by 50%. Combined with a documented compliance program and full cooperation, penalties can drop to zero in cases deemed "non-egregious."
The catch: VSD must be filed promptly after discovery. Waiting "to see if OFAC notices" eliminates the VSD benefit entirely.
Agentmail is designed for exactly this workflow: every transaction your AI agent initiates is screened against the OFAC SDN list in real time, before execution. If a match is found, the transaction is blocked and an alert is generated. The violation never occurs because the transaction never executes.
The screening takes under 100ms — fast enough to be invisible to your agent's workflow but thorough enough to satisfy OFAC's "reasonable precautions" standard.
Screen every agent transaction against the OFAC SDN list in real time.
Get started →