SanctionsLookup

Data last synced:

OFAC Penalties Explained

The Office of Foreign Assets Control (OFAC), a bureau of the U.S. Department of the Treasury, enforces U.S. economic and trade sanctions designed to protect national security and foreign policy interests. Violating OFAC regulations can lead to significant civil monetary penalties, criminal charges, and other enforcement actions. Because many sanctions programs operate under a strict liability standard, even unintentional violations may result in substantial fines and regulatory consequences.

What are OFAC penalties?

OFAC penalties are enforcement measures imposed for violations of U.S. economic and trade sanctions regulations. These penalties are designed to deter prohibited transactions and ensure compliance with U.S. sanctions programs.

  • Civil monetary penalties are administrative fines that OFAC may impose for sanctions violations, including unintentional breaches.
  • Criminal penalties apply in cases involving willful misconduct and may include substantial fines and imprisonment, typically pursued by the U.S. Department of Justice.
  • Administrative enforcement actions may also include cautionary letters, findings of violation, license revocations, or settlement agreements.

Most OFAC penalties are authorized under federal statutes such as the International Emergency Economic Powers Act (IEEPA) and the Trading with the Enemy Act (TWEA), which grant the U.S. Department of the Treasury authority to administer and enforce economic and trade sanctions.

OFAC civil penalties

Civil penalties are the most common enforcement outcome for sanctions violations and are generally imposed under a strict liability standard. OFAC may impose monetary fines even when a violation was not intentional, particularly where a prohibited transaction occurred or required controls were not followed.

Maximum civil fines

Under statutes such as the International Emergency Economic Powers Act (IEEPA), the maximum civil penalty per violation is generally the greater of a fixed statutory amount or twice the value of the underlying transaction. The exact cap depends on the specific sanctions program and is periodically adjusted for inflation.

Because penalties are assessed per violation, multiple transactions can significantly increase total exposure.

How OFAC calculates civil penalties

OFAC does not automatically impose the statutory maximum. Instead, it evaluates several factors when determining the appropriate penalty amount.

  • Transaction value: The dollar value of the prohibited transaction is a key starting point in calculating the base penalty.
  • Egregious vs. non-egregious conduct: Cases involving willful or reckless behavior, concealment, or senior management involvement are treated more severely.
  • Voluntary self-disclosure: Promptly reporting an apparent violation to OFAC can substantially reduce the base penalty.
  • Cooperation: Providing complete information, responding to inquiries, and implementing corrective actions may mitigate the final penalty amount.

OFAC criminal penalties

Criminal penalties apply in cases involving willful violations of U.S. sanctions laws. Unlike civil penalties, which may be imposed on a strict liability basis, criminal enforcement typically requires evidence that the person or entity knowingly and intentionally violated sanctions regulations.

In serious cases, OFAC may refer the matter to the U.S. Department of Justice (DOJ) for criminal investigation and prosecution. This often occurs where there is deliberate evasion, concealment, falsification of records, or repeated noncompliance.

Criminal sanctions can include substantial fines and imprisonment, depending on the statute involved and the severity of the conduct. These penalties may apply to both organizations and responsible individuals.

How OFAC enforces sanctions

OFAC follows a structured administrative process when investigating and resolving potential sanctions violations. Depending on the facts, enforcement may result in no action, a civil penalty, a settlement, or referral for criminal prosecution.

Investigation

Enforcement typically begins with an investigation into an apparent violation of U.S. sanctions regulations. OFAC may request documents, issue administrative subpoenas, or coordinate with other regulators to determine whether sanctions laws were breached.

Pre-penalty notice

If OFAC believes a violation occurred and a monetary penalty may be appropriate, it issues a Pre-Penalty Notice. This document outlines the alleged violations, identifies the legal basis, and proposes a penalty amount. The subject has an opportunity to respond with mitigating information.

Settlement or penalty notice

Many cases are resolved through negotiated settlement agreements, which avoid a final determination of violation. If no settlement is reached, OFAC may issue a Penalty Notice, which constitutes a final agency determination and imposes a civil monetary penalty.

Criminal referral

In cases involving willful misconduct, fraud, or deliberate evasion of sanctions, OFAC may refer the matter to the U.S. Department of Justice for criminal investigation and potential prosecution.

Other consequences of OFAC violations

Beyond civil fines and criminal penalties, OFAC violations can trigger additional legal and business consequences that significantly impact operations.

  • Asset blocking (frozen funds) may occur when blocked property or transactions involve a sanctioned party. Financial institutions are required to block funds and report the action to OFAC, restricting access to assets subject to U.S. jurisdiction.
  • Reporting failures - such as failing to file required blocked property or rejected transaction reports - can result in separate civil penalties, even if no prohibited transaction ultimately occurred.
  • Loss of licenses or regulatory authorizations may follow serious or repeated violations, particularly in regulated industries such as banking, trade, and export-related businesses.
  • Reputational damage often accompanies public enforcement actions, which are typically published by OFAC. This can affect business relationships, investor confidence, and access to financial services.

Finally, organizations that violate sanctions may face increased regulatory scrutiny, including audits, enhanced monitoring, and more stringent compliance expectations from regulators and counterparties.

OFAC penalties for banks and financial institutions

Financial institutions face heightened exposure to OFAC enforcement due to their direct access to the U.S. financial system and their role in processing transactions.

  • Screening failures are a common source of violations. If a bank fails to properly screen customers or payments against the Specially Designated Nationals (SDN) List and other OFAC sanctions lists, it may process transactions involving sanctioned parties.
  • Failure to block occurs when a financial institution does not freeze funds or property belonging to a designated individual or entity, as required under blocking sanctions programs.
  • Failure to report blocked or rejected transactions within the required timeframes can result in separate penalties, even if the institution eventually identifies the issue.
  • A weak or poorly implemented compliance program, including inadequate controls, failure to address the OFAC 50 Percent Rule, insufficient training, or lack of independent testing, can significantly increase enforcement risk and lead to higher penalty amounts under OFAC's evaluation framework.

Largest OFAC penalties and enforcement cases

OFAC regularly publishes enforcement actions to highlight the financial and legal consequences of sanctions violations. Some cases involve relatively modest settlements, while others result in penalties reaching hundreds of millions or even billions of dollars. Reviewing major enforcement actions helps illustrate how sanctions violations occur and how penalty amounts are assessed.

Major banking and financial institution cases

Some of the most notable OFAC enforcement actions involve major financial institutions and global firms. For example, Binance Holdings Ltd. and British American Tobacco plc together accounted for over $1 billion in civil penalties and settlements in 2023 for sanctions violations, making them among the largest individual enforcement totals in recent years.

Wells Fargo also reached a high-visibility settlement of approximately $30 million for OFAC-related violations involving sanctions program compliance failures.

Interactive Brokers LLC agreed to an $11.8 million settlement in 2025 for processing transactions involving multiple sanctioned jurisdictions and individuals, highlighting that broker-dealers and financial intermediaries also face significant exposure.

GVA Capital - largest civil penalty for a non-bank financial firm

In June 2025, OFAC imposed a historic $215,988,868 civil monetary penalty against GVA Capital Ltd., a non-bank financial institution, for egregious violations of Ukraine/Russia-related sanctions and reporting obligations. This represents one of the largest civil monetary penalties ever levied in an OFAC case, underscoring the risk for firms that fail to maintain effective sanctions controls.

ExxonMobil OFAC penalty

In 2017, ExxonMobil Corporation and its U.S. subsidiaries were assessed a $2 million penalty by OFAC for violating the Ukraine-Related Sanctions Regulations by dealing services involving a blocked individual, illustrating that large multinational corporations can also be subject to enforcement actions for sanctions violations.

Iran sanctions enforcement

Civil penalties have been issued against individuals for violations of Iran sanctions. For example, an individual was fined approximately $1.1 million in 2024 for multiple sanctions violations connected to Iranian financial activities, highlighting that enforcement also targets non-corporate actors.

How to reduce OFAC penalty risk

Organizations can significantly reduce exposure to OFAC penalties by implementing proactive, risk-based compliance controls. Regulators consistently emphasize prevention, early detection, and cooperation as key mitigating factors in enforcement actions.

A risk-based compliance program tailored to the organization's size, industry, customers, and geographic exposure is essential as part of a broader sanctions compliance framework. Effective screening controls should cover customers, counterparties, beneficial owners, and transactions to detect potential matches before prohibited dealings occur.

When an apparent violation is identified, timely voluntary self-disclosure to OFAC can substantially reduce potential penalties. In addition, ongoing monitoring and regular updates to sanctions lists, policies, and internal controls help ensure continued compliance as sanctions programs evolve.

FAQ

What is the maximum OFAC fine?

The maximum OFAC fine depends on the specific statute involved. Under laws such as the International Emergency Economic Powers Act (IEEPA), the civil penalty per violation is generally the greater of a statutory maximum amount or twice the value of the underlying transaction. Because penalties may be assessed per transaction, total exposure can increase significantly in cases involving multiple violations.

Are OFAC violations criminal?

Yes. While many cases are resolved through civil monetary penalties, willful violations of U.S. sanctions laws can result in criminal prosecution. In such cases, individuals and organizations may face substantial fines and potential imprisonment.

Can you be fined for unintentional violations?

Yes. OFAC civil enforcement operates under a strict liability framework, meaning a person or company may be penalized even if the violation was not intentional. However, the level of intent, cooperation, and compliance controls can influence the final penalty amount.

What happens if a bank violates OFAC sanctions?

If a bank processes transactions involving sanctioned parties or fails to block and report required activity, it may face civil penalties, regulatory scrutiny, and reputational harm. In serious or repeated cases, enforcement actions can include substantial fines, compliance obligations, and increased oversight from regulators.