Who Must Comply With OFAC Sanctions Regulations?

Meta description: Learn who must comply with OFAC sanctions regulations, including U.S. persons, businesses, foreign subsidiaries, and companies handling U.S.-connected transactions.

The short answer is that OFAC sanctions apply most directly to U.S. persons and to transactions with a U.S. connection. But foreign companies and individuals can also face restrictions or sanctions exposure, depending on the program, transaction, and parties involved. Knowing where the rules apply helps businesses, financial institutions, and individuals avoid prohibited dealings, blocked property, and costly enforcement actions.

Who Is Required to Comply With OFAC Sanctions?

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) administers and enforces U.S. economic and trade sanctions. Its rules are established through federal statutes, executive orders, and regulations covering particular countries, people, organizations, and activities.

U.S. persons generally must comply with applicable OFAC sanctions wherever they are located. In most sanctions programs, that includes U.S. citizens and lawful permanent residents, people physically in the United States, and entities organized under U.S. law, including their foreign branches. The exact definition and obligations can depend on the applicable sanctions program and regulation.

OFAC rules are not limited to banks or companies that trade internationally. They can affect individuals, nonprofits, exporters, payment processors, insurers, investors, and other parties whose activities involve a sanctioned person, region, or property. A transaction may be prohibited even if it is small, routine, or conducted through an intermediary.

What Counts as a U.S. Person?

The term “U.S. person” appears throughout OFAC regulations, but its precise definition should be checked in the rules for the relevant sanctions program. Commonly, it includes the following:

• U.S. citizens and lawful permanent residents, including when they are outside the United States.
• Individuals physically present in the United States, regardless of citizenship or immigration status.
• Entities organized under U.S. federal or state law, such as corporations, partnerships, and other business organizations.
• Foreign branches of U.S.-organized entities, which are generally treated as part of the U.S. entity for sanctions purposes.

For a specific program, the applicable regulation controls. Some programs define covered persons or activities in additional ways, and other U.S. legal restrictions may apply alongside OFAC rules. OFAC’s Frequently Asked Questions and the text of the relevant regulations are useful starting points.

Do U.S. Businesses Have to Comply Outside the United States?

Generally, yes. A company formed under U.S. law does not shed its U.S.-person status by operating abroad. Its employees, officers, and agents may also have individual obligations when acting on its behalf, depending on the facts and applicable regulation. A U.S. citizen working for a foreign company is still a U.S. person and may not participate in conduct prohibited by the applicable sanctions rules.

U.S. companies should not assume that a foreign office, local partner, or separate payment channel makes a restricted transaction permissible. Using another party to carry out a transaction that a U.S. person could not lawfully conduct may create additional legal risk. The details matter: the sanctions program, the people involved, the transaction’s U.S. connections, and any available authorization all require review.

Are Foreign Companies and Individuals Covered?

Foreign persons are not automatically subject to every OFAC restriction simply because they are outside the United States. However, they may have to comply when a transaction involves a U.S. person, U.S. territory, U.S.-origin goods or services subject to restrictions, or property within U.S. jurisdiction. A U.S. bank’s role in clearing a payment, for example, can create a U.S. connection that requires the bank to follow applicable sanctions rules.

Non-U.S. companies can also face secondary sanctions under certain laws and programs. These provisions may expose foreign persons to restrictions or designation for specified conduct, even when a transaction does not involve a U.S. person or take place in the United States. Secondary sanctions are not a single, uniform rule: their scope and consequences vary by statute, executive order, and program.

Foreign companies should therefore distinguish between direct compliance obligations—such as rules triggered by a U.S. nexus—and the separate risk that certain activity could lead to sanctions or other restrictions. The governing law and current OFAC guidance should be reviewed before making that assessment.

How OFAC Sanctions Reach Businesses and Transactions

OFAC restrictions can apply to more than a direct sale to a named person. They may cover providing or receiving services, transferring funds, exporting or importing goods, dealing in property, or facilitating a prohibited transaction. The precise prohibition depends on the relevant program. A business may need to examine customers, suppliers, owners, intermediaries, banks, shipping parties, and the destination or origin of goods.

Sanctions can also prohibit dealings with certain geographic areas or sectors, or restrict particular types of financing, investment, or trade. A company should not infer that a transaction is allowed merely because a counterparty is not named on a sanctions list. Some programs impose broader restrictions, and some rules extend to entities owned by blocked persons.

For example, a U.S. company may need to stop a payment involving a blocked person even when the company did not sell goods directly to that person. A foreign company’s payment may also be rejected by a U.S. financial institution if the transaction falls within a prohibition or presents unresolved sanctions concerns.

Blocked Persons, Ownership, and the 50 Percent Rule

OFAC publishes the Specially Designated Nationals and Blocked Persons List (SDN List), along with other sanctions-related lists. A person or organization on the SDN List is generally subject to property-blocking restrictions, but the consequences depend on the applicable program. “Blocking” typically means property subject to U.S. jurisdiction must be frozen and cannot be transferred, paid, exported, withdrawn, or otherwise dealt in without authorization. It does not mean that the blocked property is automatically confiscated.

OFAC’s 50 Percent Rule states that an entity is generally treated as blocked if one or more blocked persons own, directly or indirectly and in the aggregate, 50 percent or more of it. The entity may be blocked even if it does not appear by name on the SDN List. Control by a blocked person, without 50 percent ownership, does not automatically make an entity blocked under this rule, though other restrictions or risks may still apply.

Because ownership can be indirect or spread across multiple blocked owners, a basic name search may not be enough. Businesses often need to identify beneficial owners and trace ownership through intermediate entities. OFAC provides guidance on the rule in its FAQs on entities owned by blocked persons.

What Does Compliance Require in Practice?

OFAC does not prescribe one identical compliance program for every organization. Its guidance encourages companies to build controls suited to their size, customers, products, locations, and exposure to sanctions risk. A practical program may include these steps:

• Screen relevant parties. Check customers, suppliers, owners, banks, vessels, and other parties against applicable OFAC lists and restrictions.
• Assess transaction details. Review the countries, goods, services, payment routes, end users, and intermediaries involved—not just the customer’s name.
• Investigate ownership. Determine whether a counterparty is owned, directly or indirectly, by blocked persons.
• Escalate potential matches. Do not treat a possible name match as a confirmed violation; investigate identifying details and keep a record of the decision.
• Use appropriate controls. Establish clear review procedures, staff training, recordkeeping, and processes for stopping or holding transactions when needed.
• Check for authorization. Confirm whether an OFAC general or specific license applies and follow its conditions. A license should not be assumed to cover activity beyond its terms.

Screening tools can support compliance, but they do not replace judgment. Lists change, names can be transliterated in different ways, and sanctions may reach unlisted entities through ownership rules or program-specific prohibitions. OFAC’s Framework for OFAC Compliance Commitments describes elements the agency considers when evaluating a sanctions compliance program.

What Happens When Property Must Be Blocked?

When a U.S. person holds property in which a blocked person has an interest, the relevant rules may require the property to be blocked rather than returned or transferred. A bank, business, or other holder generally must prevent unauthorized access or movement and follow applicable reporting and recordkeeping requirements. The details and deadlines are set by the relevant regulations.

Blocking is different from rejecting a transaction. In broad terms, a transaction is often rejected when it is prohibited but does not involve property that must be blocked; blocking applies when the rules require the property itself to be frozen. The correct response depends on the facts and program. OFAC provides reporting instructions and requirements in its regulations and on its official website.

Can a License Permit an Otherwise Prohibited Transaction?

Some sanctions restrictions have exceptions or can be authorized by an OFAC license. A general license permits specified categories of activity when its conditions are met. A specific license is written authorization for a particular person or transaction. Neither should be treated as blanket permission: limits, reporting duties, payment conditions, and recordkeeping requirements may apply.

Other legal requirements may still matter even when OFAC authorizes a transaction. Export controls, anti-money-laundering rules, customs requirements, and other federal or state laws can apply independently. A company should confirm that each relevant legal requirement is satisfied before proceeding.

Enforcement and Civil Penalties

OFAC can impose civil penalties for violations of sanctions regulations. Civil liability may apply on a strict-liability basis, meaning the government may not need to prove that the person knew the conduct violated sanctions. Knowledge, diligence, cooperation, and other circumstances can still be relevant to enforcement decisions and penalty calculations. Criminal penalties may also apply in cases involving willful violations under applicable law.

Potential consequences extend beyond fines. A violation can lead to blocked funds, rejected payments, loss of business relationships, investigations, and reputational harm. OFAC’s Civil Penalties and Enforcement Information explains its enforcement approach, while the rules for particular programs specify applicable obligations and reporting procedures.

How to Determine Whether OFAC Rules Apply

A reliable assessment starts with the exact transaction and the sanctions program that may cover it. A business or individual can ask:

1. Is a U.S. person involved, including a U.S. citizen, U.S.-organized entity, or U.S. branch?
2. Does the transaction involve U.S. territory, a U.S. bank, U.S.-origin items, or another U.S. connection?
3. Is a party, owner, or relevant intermediary blocked or otherwise restricted?
4. Do ownership rules, geographic restrictions, sectoral measures, or activity-specific prohibitions apply?
5. Is there an exception or license, and are all of its conditions met?

OFAC’s sanctions programs and lists can change, so a past screening result may not settle whether a new transaction is allowed. The most dependable sources are the current regulations, executive orders, OFAC sanctions lists, and agency guidance. For complex transactions or possible violations, qualified legal counsel can help interpret the rules and determine appropriate next steps.