OFAC Penalties and Enforcement: What Every Business Should Know

The Stakes Are High

OFAC penalties are among the most severe in the regulatory world. A single violation can result in civil penalties of hundreds of thousands of dollars. For serious or willful violations, criminal penalties include fines up to $1 million per violation and up to 20 years in prison. These numbers get the attention of businesses of all sizes.

Civil Penalties

OFAC can impose civil penalties without proving that you intended to violate the law. The maximum civil penalty depends on the specific sanctions program but can exceed $300,000 per violation under many programs. For some programs, the cap is significantly higher. The penalty amount is adjusted annually for inflation.

When calculating penalties, OFAC considers several factors:

• Was the violation willful or negligent? Intentional violations receive harsher treatment.
• Did the company self-disclose? Voluntary self-disclosure typically results in significantly lower penalties.
• What was the value of the transactions? Higher-value violations generally mean higher penalties.
• Does the company have a compliance program? Having a functioning compliance program is a mitigating factor.
• Has the company cooperated with OFAC's investigation? Cooperation can reduce the penalty.
• Is there a history of prior violations? Repeat offenders face tougher penalties.

Criminal Penalties

Criminal penalties apply to willful violations of OFAC sanctions. If a person or company knowingly engages in transactions with sanctioned parties or deliberately evades sanctions requirements, criminal prosecution is possible. Criminal cases are handled by the Department of Justice, often in coordination with OFAC.

Criminal penalties can include fines up to $1 million per violation and imprisonment of up to 20 years. While criminal prosecution is less common than civil enforcement, it is not reserved only for extreme cases. Individuals who knowingly circumvent sanctions face real criminal exposure.

Strict Liability

One of the most important things to understand about OFAC enforcement is that it operates on a strict liability basis. This means you can be penalized even if you did not know you were dealing with a sanctioned party. "I didn't know" is not a defense.

This is why screening is so important. You do not need to intend to violate the law to face penalties. Simply failing to screen, or using an inadequate screening process, can lead to violations that trigger enforcement action.

Recent Enforcement Trends

OFAC publishes its enforcement actions on the Treasury Department website. Looking at recent cases reveals some patterns:

• Technology and payments companies have faced significant penalties for processing transactions involving sanctioned jurisdictions.
• Financial institutions continue to be the most frequent targets, but enforcement has expanded to other industries.
• Small and mid-sized companies are not immune. OFAC has pursued actions against companies with limited international exposure that nonetheless processed transactions with sanctioned parties.
• Compliance failures, not just intentional violations, drive many enforcement actions. Companies that lacked screening programs or had outdated sanctions data have been penalized.

Voluntary Self-Disclosure

If you discover that your company has violated OFAC sanctions, voluntarily disclosing the violation to OFAC can significantly reduce your penalty. OFAC's enforcement guidelines treat voluntary self-disclosure as a major mitigating factor. In many cases, companies that self-disclose receive penalties that are 50% or more lower than they would otherwise face.

Voluntary self-disclosure must be timely, complete, and made before OFAC contacts you about the violation. If you think you may have a violation, consult with legal counsel promptly.

Protecting Your Business

The best way to avoid OFAC penalties is to not violate the law in the first place. That means having a compliance program that includes:

• Automated screening of customers and counterparties against current sanctions lists
• Written policies and procedures
• Staff training
• Regular testing and review
• Prompt investigation and escalation of potential matches

OFACScreen gives you the screening tools and audit trail you need to demonstrate that your business takes OFAC compliance seriously. That alone will not eliminate all risk, but it significantly reduces your exposure and puts you in a much better position if something does go wrong.