INTERNATIONAL TRADE LAW
Sanctions Compliance for Nonprofits & NGOs
A nonprofit or NGO needs an OFAC sanctions compliance program for the same reason a bank does: U.S. sanctions law applies to it, and the penalties do not care that the mission is humanitarian. The good news is that the same rules now come with real humanitarian carve-outs you can use. This guide covers both halves — the program you have to build, and the authorizations that let aid keep flowing.
Why Sanctions Reach Charitable Work
Aid organizations operate in exactly the places sanctions target: conflict zones, fragile states, and regions controlled by designated groups. That puts an NGO at risk of moving funds, goods, or services to a sanctioned person or jurisdiction — sometimes through a local partner, sometimes through a bank that “de-risks” and freezes the account at the first sign of geographic exposure. OFAC sanctions are strict liability, meaning a violation can occur without any intent to break the law, so good intentions are not a defense. A documented program is what protects both the mission and the people who run it.
The Five Pillars, Sized for a Nonprofit
OFAC’s Framework for OFAC Compliance Commitments sets five expectations. They apply to a 12-person NGO as much as a multinational — the difference is scale, not whether you need them.
| Pillar | What it means for an NGO |
|---|---|
| Management commitment | Board and leadership own compliance and fund it; name a responsible person |
| Risk assessment | Map where you operate, who your partners are, and how money and goods move |
| Internal controls | Written policies, partner vetting, and a path to pause a suspect transaction |
| Testing and auditing | Periodic check that the controls actually work; fix what is weak |
| Training | Staff and field partners know the red flags and how to escalate |
The most common failure for small organizations is treating compliance as a one-time policy document. It is a living function — a risk assessment that you revisit when you enter a new country or take on a new grantee.
Partner and Donor Due Diligence Is the Core Control
For most NGOs the highest-risk moment is choosing a local implementing partner, vendor, or grantee in a high-risk region. Build a proportionate diligence step: screen the organization and its key people against the SDN List, identify beneficial owners, and apply OFAC’s 50% Rule — an entity that is 50 percent or more owned, in the aggregate, by sanctioned parties is itself blocked even if its own name is not listed. Screen on the way in and re-screen periodically, because the lists change. A short companion read is the sanctions due-diligence checklist.
The Humanitarian Carve-Outs You Can Actually Use
This is the part that changed the landscape for aid groups. In December 2022 the UN Security Council adopted Resolution 2664, creating a standing humanitarian exception to UN asset-freeze measures. OFAC implemented it on December 20, 2022 by issuing and amending general licenses (GLs) across numerous sanctions programs, in four categories: U.S. government activity, certain international-organization activity, NGO humanitarian activity, and the provision of agricultural and medical goods. OFAC followed with supplemental guidance in 2023.
A general license is a standing authorization — you do not have to apply for it, but you do have to confirm your activity actually fits within its terms. Two practical points: read the specific GL for the program you are operating under, because the categories and conditions differ, and document why your activity qualifies. When an activity falls outside any general license, the path is a specific license — an application to OFAC for permission. Our overview of OFAC licenses and exemptions walks through both.
If a Problem Surfaces
If diligence reveals that a transaction has already gone to a sanctioned party, route the decision to counsel on a voluntary self-disclosure to OFAC, which can reduce the base civil penalty by up to 50% and, since February 2026, can be filed through an online portal. Keep your compliance records for 10 years, following OFAC’s March 2025 recordkeeping extension. Building this decision point into your escalation process — rather than improvising under pressure — is what preserves the option to disclose early.
Frequently Asked Questions
Do small nonprofits really have to comply with OFAC? Yes. Sanctions law applies to all U.S. persons and organizations regardless of size or mission. The program scales to your risk, but you cannot opt out of the rules.
What is a humanitarian general license? A standing OFAC authorization — created broadly after UNSCR 2664 in December 2022 — that permits defined humanitarian activity without a case-by-case application. You still must confirm your activity fits the specific license’s terms and document it.
Our bank froze a transfer to a high-risk country. Is that a sanctions violation? Not necessarily — banks often “de-risk” out of caution. A clean compliance file and the applicable general license are exactly what you show the bank to get legitimate aid moving again.
What is the 50% Rule and why does it matter for grantees? An entity owned 50 percent or more, in aggregate, by sanctioned parties is itself blocked even if unlisted. It means partner vetting cannot stop at a name check — you have to understand ownership.
Aid work and sanctions risk travel to the same places. Reidel Law Firm helps nonprofits and NGOs build right-sized OFAC compliance programs and confirm humanitarian licensing, delivered as a flat-fee compliance memo with direct attorney access. Get an export compliance memo →
