What Is OFAC Screening?

OFAC screening is the process of checking individuals, organizations, and entities against sanctions lists maintained by the Office of Foreign Assets Control (OFAC), a division of the U.S. Department of the Treasury.

While often associated with banks, OFAC regulations apply to all U.S. persons and businesses. Engaging in international trade, financial transactions, or cross-border software services requires you to ensure you are not doing business with sanctioned parties.

Why Does OFAC Screening Matter?

OFAC administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals. These sanctions target foreign countries, terrorists, international narcotics traffickers, and those involved in the proliferation of weapons of mass destruction.

Who must comply?

Every U.S. person — including citizens, permanent residents, entities organized under U.S. law, and their foreign branches — must comply with OFAC regulations. Additionally, non-U.S. companies can face exposure if their transactions process through the U.S. financial system or involve U.S. persons.

Key Risks of Non-Compliance

Violations can result in substantial fines and legal action. Under the International Emergency Economic Powers Act (IEEPA), penalties can be severe:

• Civil penalties: The maximum civil penalty per violation is the greater of $377,700 (adjusted annually for inflation) or twice the amount of the underlying transaction.
• Criminal penalties: Willful violations can lead to fines of up to $1,000,000 and imprisonment of up to 20 years.
• Operational risk: Beyond fines, violations often lead to reputational damage, loss of banking relationships, and blocked assets.

What Lists Does OFAC Maintain?

The primary list for screening is the Specially Designated Nationals and Blocked Persons List (SDN List).

The SDN List includes individuals and entities whose assets are blocked. U.S. persons are generally prohibited from dealing with them.

The 50% Rule

A critical nuance often missed is that any entity owned 50% or more, directly or indirectly, by one or more blocked persons is automatically blocked, even if that entity does not appear on the SDN List itself.

Other Lists

OFAC maintains other lists like the Sectoral Sanctions Identifications (SSI) List and the Foreign Sanctions Evaders (FSE) List. While these may not always trigger full blocking requirements (unless the entity is also an SDN), they often impose strict restrictions on specific types of transactions or financing.

How Does OFAC Screening Work?

An effective compliance workflow involves more than just a search bar.

1. Collect entity data — Gather legal names, dates of birth, countries of operation, and unique identifiers (like tax IDs) during onboarding.
2. Screen (fuzzy matching) — Run this data against sanctions lists. Names often vary due to transliteration (e.g., "Gaddafi" vs. "Qaddafi") or typos. Exact matching is rarely sufficient; fuzzy matching algorithms are essential to catch these variations.
3. Review & adjudicate — Determine if a "hit" is a true match or a false positive. Does the date of birth match? Is the location consistent?
4. Document — Maintain a record of the search, the result, and your decision rationale. This "audit trail" is your primary defense during a regulatory audit.
5. Take action — If a match is confirmed, you may need to block the transaction and file a report with OFAC, or simply reject the business, depending on the specific sanctions program.

When Should You Screen?

• Customer onboarding — Before establishing a new account or contract.
• Transaction processing — Before releasing funds or shipping goods.
• Ongoing monitoring — Sanctions lists change frequently. Daily or weekly monitoring ensures you catch existing customers who are newly designated.

How SanctScan Helps

SanctScan modernizes compliance with a developer-first platform designed for accuracy and speed:

• Low-latency screening — Screen names against OFAC and major global sanctions lists with sub-second API response times.
• Intelligent fuzzy matching — Our advanced algorithms detect matches despite spelling variations, transliterations, and typos, reducing the risk of missed hits.
• Automated monitoring — Don't just screen once. SanctScan automatically monitors your entities and alerts you via webhook if their status changes.
• Developer-first API — Integrate full sanctions screening directly into your onboarding flow or payment stack with just a few lines of code.
• Audit-ready logs — Every screening decision is permanently logged, providing the documentation you need for internal audits and bank reviews.

Start screening for free — no credit card required.