SanctionsLookup

Data last synced:

Operation Economic Fury: OFAC Screening Can't Keep Up (2026)

Operation Economic Fury has triggered 10 SDN List updates in under five weeks, turning Iran sanctions compliance into a moving target for U.S. businesses. A vendor that cleared screening yesterday could be sanctioned today.

Below is each designation wave, why old screening results can go stale, and where U.S. businesses face the most risk.

OFAC update frequency is a compliance blind spot

Each SDN List update makes previous screening results stale. Operation Economic Fury has turned that risk into a live operational problem, with 10 SDN List updates in under five weeks across individuals, companies, vessels, and crypto wallets.

OFAC does not follow a fixed schedule, so compliance teams must either monitor new actions continuously or risk missing a designation.

For manual teams, the burden is constant monitoring. For automated systems, the real question is data freshness: how often does your system or provider re-screen against the latest OFAC data?

If your screening data syncs weekly, a counterparty can be designated before your system alerts you. That makes already-approved customers, vendors, vessels, and counterparties the real blind spot.

What is Operation Economic Fury

Operation Economic Fury is the April 2026 escalation of the U.S. Treasury's sanctions campaign against Iran. The broader maximum-pressure policy began in February 2025, when President Trump restored maximum pressure on Iran through NSPM-2.

Treasury Secretary Scott Bessent described the effort as the "financial equivalent of a bombing campaign".

Treasury has framed Economic Fury as part of its broader maximum-pressure campaign to cut off Iran's oil revenue, shadow finance networks, and military procurement channels.

Economic Fury targets:

  • Iran's oil revenue and export networks
  • Shadow banking and sanctions-evasion infrastructure
  • Weapons, missile, and UAV procurement networks
  • Terrorist financing and Iran-backed proxy groups
  • Vessels, front companies, exchange houses, and financial intermediaries

Designations have reached entities in Iran, UAE, Turkey, China, Hong Kong, and Iraq, an unusually wide geographic footprint for an Iran campaign. Nearly $500M in Iranian crypto assets has been seized. The Shamkhani oil network alone was valued at multiple billions of dollars.

The OFAC sanctions list is the main enforcement tool here: each designation wave adds new names, aliases, vessels, companies, and identifiers that U.S. businesses are expected to screen against.

Operation Economic Fury timeline

Through May 25, 2026, OFAC had issued 10 confirmed waves of Economic Fury designations, with 10 SDN List updates in under five weeks spanning different parts of Iran's financial infrastructure.

WaveDateFocusEntity typesKey targets
1Apr 15Oil smuggling + Hizballah financingIndividuals, companies, vesselsShamkhani network, Seyed Moosavi, front companies in UAE, Marshall Islands, India
2Apr 17Iraqi militia commandersIndividuals7 commanders from Kata'ib Hizballah, Asa'ib Ahl Al-Haqq, Kata'ib Sayyid Al-Shuhada, Harakat Al-Nujaba
3Apr 21Missile + UAV procurementIndividuals, companies, aircraft14 entities in Iran, Turkey, UAE; PESC, Mahan Air affiliates, Emti Fiber Textile
4Apr 24Shadow fleet + oil tradeCompanies, vessels~40 shipping firms and vessels; Hengli Petrochemical (China); GL V wind-down
5Apr 28Shadow banking facilitators + teapot refinery alertCompanies, individuals35 entities; Iran shadow banking architecture; FAQ 1249; teapot refinery risk alert
6May 1Shadow banking + illicit oil tradeCompanies, individuals, vesselsIranian exchange houses, front companies; Qingdao Haiye Oil Terminal; GL W issued
7May 7Iraqi oil diversion + Iran-backed militiasIndividuals, companiesAli Maarij Al-Bahadly (Iraq Deputy Minister of Oil); senior leaders of Kata'ib Sayyid Al-Shuhada and Asa'ib Ahl Al-Haq
8May 8UAV + weapons supply chainIndividuals, companies10 individuals and companies in Middle East, Asia, Eastern Europe; PESC further targeted
9May 11IRGC oil operationsCompanies, individuals12 entities in UAE and Hong Kong enabling IRGC oil sales to China
10May 19Oil and shipping revenue networksCompanies, individuals, vessels50+ companies, individuals, and vessels generating revenue for the regime

The bigger pattern is entity-type expansion. Economic Fury is not only adding sanctioned people and companies. It is adding vessels, aircraft, exchange houses, front companies, shipping managers, procurement intermediaries, and foreign trade networks. This means screening only legal entity names is not enough.

For US businesses, the practical risk is stale approval. A vendor, vessel, bank, refinery, or logistics partner that looked safe before one wave may need re-checking after the next.

The more countries and entity types OFAC touches, the harder it becomes to rely on manual lookup or onboarding-only screening.

Why this Iran sanctions campaign is different

Economic Fury targets entire networks, spans multiple high-risk jurisdictions, and raises secondary sanctions risk for businesses that never dealt with Iran directly.

Network-Based Risk, Not Just Named Entities

  • Whole networks: Shipping companies, logistics firms, vessel managers, and front companies were designated together as part of the Shamkhani network.
  • Indirect exposure: If your counterparty does business with a designated entity, you may be at risk even without dealing with Iran directly.
  • Front-company risk: UAE and Turkey act as key intermediary jurisdictions, where companies can look legitimate until they appear on the SDN List.

Geographic Spread: China, UAE, Turkey, and Iraq Now in Scope

  • China: Five Chinese teapot refineries are on the SDN List, marking a major expansion into Chinese oil infrastructure.
  • UAE and Turkey: Intermediaries in both jurisdictions were designated for weapons and UAV procurement.
  • Iraq: An Iraqi Deputy Minister of Oil and militia commanders were added to the SDN List.
  • Business impact: US businesses with counterparties in these jurisdictions may need to review their screening coverage.

Secondary Sanctions: The Hidden Exposure

  • Indirect risk: You do not need to deal with Iran directly to face sanctions exposure.
  • Banking access: Foreign financial institutions risk losing US correspondent banking access for facilitating transactions with designated persons.
  • Fintech risk: Non-custodial fintechs are not a loophole; intermediaries can still have blocking and reporting obligations.
  • Weak controls: Smaller banks and fintechs can be attractive targets for sanctions evaders because their controls may be weaker.

You are probably not re-screening often enough

Most companies screen at onboarding and move on. Under Economic Fury, with updates dropping multiple times per week, that approach creates gaps. The question is not whether to re-screen. It is whether your system does it fast enough.

Re-screen after every OFAC update

US businesses should re-screen after every SDN update. Under Economic Fury, updates have been dropping multiple times per week, so a fixed monthly or onboarding-only schedule is not enough. Verify how often your system or compliance vendor actually syncs. Many update daily at best.

Your existing approved counterparty list is your biggest exposure, not new onboarding. A vendor that cleared screening six months ago may have been designated since. Treat every approved record as unverified until re-checked against the latest SDN data.

How to automate OFAC screening for rapid updates

To automate OFAC screening, connect onboarding, payments, vendor review, and counterparty systems to a screening API that updates when OFAC changes the SDN List. The goal is not only to screen new records. It is to re-screen existing approved records after each relevant update.

A practical workflow looks like this:

  • Sync OFAC data frequently: Your screening results are only as current as the sanctions data behind them.
  • Screen at key workflow points: Check customers, vendors, vessels, aircraft, and counterparties during onboarding, payment review, vendor approval, and high-risk transactions.
  • Re-screen existing records after updates: When OFAC adds new designations, run your approved database against the latest list version.
  • Use identifiers, not names alone: Match against aliases, DOBs, passport numbers, business identifiers, vessel data, aircraft data, and crypto wallets where available.
  • Log the decision: Store the screening timestamp, list version, match score, and review outcome so you can prove what data was used.

SanctionsLookup syncs OFAC data every 15 minutes, so automated checks and batch re-screening run against the newest available SDN data, not yesterday's list. Explore the OFAC API

FAQ

What is the difference between Operation Economic Fury and Operation Epic Fury?

Operation Epic Fury is the military campaign: US and Israeli airstrikes on Iran and a naval blockade of Iranian ports, launched February 28, 2026. Operation Economic Fury is the financial campaign running alongside it: Treasury and OFAC using sanctions, asset freezes, and SDN designations to cut off Iran's revenue streams. The maximum pressure policy behind Economic Fury began in February 2025 under NSPM-2 and escalated significantly in April 2026 alongside the military campaign. Epic Fury targets Iran's military capacity; Economic Fury targets its ability to fund it.

How often does OFAC update the SDN List?

OFAC updates the SDN List on an irregular schedule with no fixed frequency. Historically updates came a few times per month. Under Economic Fury, OFAC has issued 10 SDN List updates in under five weeks. OFAC publishes updates publicly, but businesses still need a process or vendor to detect those updates and re-screen affected records.

What is the difference between primary and secondary sanctions?

Primary sanctions apply to US persons and businesses directly. They prohibit transactions with designated entities. Secondary sanctions go further: they target non-US persons and foreign companies that do business with sanctioned entities, even if no US person is involved. Under Economic Fury, Treasury has explicitly warned foreign banks, refineries, and shipping companies in China, UAE, and elsewhere that facilitating Iranian oil trade risks secondary sanctions exposure.

What is a shadow fleet and how does OFAC target it?

A shadow fleet is a network of vessels that transport sanctioned oil while disguising their origin, ownership, and destination. Common tactics include turning off AIS transponders, ship-to-ship transfers, and registering vessels under flags of convenience. OFAC targets shadow fleets by designating the vessels themselves, their registered owners, ship managers, and logistics companies. In Wave 4 of Economic Fury alone, approximately 40 shadow fleet vessels and shipping firms were added to the SDN List.

What is a teapot refinery and why does it matter for sanctions compliance?

Teapot refineries are small, independent oil refineries in China, primarily in Shandong Province, that operate outside major state-owned energy companies. They have historically been significant buyers of discounted sanctioned Iranian crude. OFAC has designated five Chinese teapot refineries on the SDN List since the maximum pressure campaign resumed. Any US business or foreign financial institution that transacts with a designated teapot refinery risks sanctions exposure, including secondary sanctions.

Does OFAC screening include crypto transactions?

Yes. OFAC sanctions apply to crypto transactions involving designated persons or wallets. OFAC can include digital currency wallet addresses as identifying information on SDN entries. US persons are prohibited from transacting with designated persons or wallets. As part of Economic Fury, nearly $500 million in Iranian crypto assets has been seized. Screening solutions should check crypto wallet addresses in addition to individuals, companies, and vessels.

Does my compliance vendor update in real time after OFAC changes?

Most do not. Many compliance vendors sync SDN data once daily, some less frequently. There is no truly real-time feed from OFAC; the question is how quickly your provider picks up a new update after OFAC publishes it. SanctionsLookup syncs every 15 minutes, meaning your screening runs against data that is never more than 15 minutes old after an OFAC update drops.