INTERNATIONAL TRADE LAW
Responding to an OFAC Enforcement Action
If you discover a sanctions violation — or receive an inquiry from OFAC — stop the conduct immediately, preserve every relevant record, and get counsel before you decide whether to file a voluntary self-disclosure. What you do in the first days shapes the outcome, because OFAC weighs your response heavily when it decides how (and whether) to penalize. Here is how the process works and how to respond.
Know OFAC’s Range of Responses
OFAC does not treat every apparent violation the same way. Its Economic Sanctions Enforcement Guidelines lay out a ladder of responses, from no action to criminal referral.
| Response | When OFAC uses it |
|---|---|
| No action | No violation, or not warranted on the facts |
| Request for more information | OFAC needs to understand what happened |
| Cautionary letter | Conduct is concerning but a penalty is not warranted |
| Finding of violation | A violation occurred and should be documented, but no monetary penalty |
| Civil monetary penalty | A violation warrants a fine |
| Criminal referral | Willful conduct referred to DOJ for prosecution |
Most matters resolve well below the top of the ladder — especially when the company self-reports and cooperates.
How a Civil Penalty Proceeds
If OFAC pursues a civil penalty, the process is procedural and time-bound:
- Pre-Penalty Notice. OFAC states the apparent violation and proposed penalty. You have 30 days to respond in writing; missing the window waives your right to respond.
- Penalty Notice. After considering your response, OFAC issues its decision. You then have 30 days to pay or request a hearing.
- Hearing / resolution. If you request a hearing, OFAC may refer the matter for an administrative hearing or discontinue the action. In practice, most cases settle.
- Judicial review. After exhausting administrative remedies, you can seek review of OFAC’s final decision in federal court under the Administrative Procedure Act.
Throughout, cooperation and prompt, accurate responses count in your favor.
The Voluntary Self-Disclosure Decision
A voluntary self-disclosure (VSD) is telling OFAC about an apparent violation before OFAC (or another party) discovers it. A qualifying VSD is a recognized mitigating factor: where a civil penalty is warranted, it can cut the base penalty in half. OFAC has also modernized the process, launching an online disclosure portal in early 2026.
A VSD is not automatic, though. It must be genuinely voluntary, complete, and timely, and disclosing commits you to a remediation path. This is the central strategic call after a violation surfaces, and it should be made with counsel — which is why preserving records and pausing the conduct first matters so much.
What OFAC Weighs in Setting a Penalty
OFAC’s General Factors drive the size of any penalty. The ones you can most influence:
- Willfulness or recklessness versus an inadvertent mistake.
- Awareness of the conduct within the organization, especially at senior levels.
- Harm to the objectives of the sanctions program.
- Compliance program — whether you had a real, risk-based program at the time.
- Remedial response — what you fixed, and how fast.
- Cooperation, including a qualifying VSD.
Strict liability means you can be penalized without intent — but these factors are why two companies with the same violation can land in very different places.
Your First Moves
When a violation surfaces, in order:
- Stop the conduct and freeze any blocked property; do not return or move it.
- Preserve all relevant records — transactions, communications, screening results, approvals.
- Engage counsel experienced in OFAC matters before contacting OFAC.
- Investigate scope: what happened, how many transactions, and root cause.
- Decide on a VSD and a remediation plan with counsel.
- Remediate the control gaps so the violation cannot recur.
For the program upgrades that follow, see how to comply with OFAC regulations and how to assess and manage sanctions compliance.
Frequently Asked Questions
Should I always file a voluntary self-disclosure? Not automatically. A VSD can substantially cut a penalty, but it is a strategic decision with real commitments. Make the call with counsel after you understand the full scope.
Can I be penalized even though the violation was an honest mistake? Yes. OFAC civil penalties are strict-liability. Intent affects the penalty amount and whether the matter goes criminal, not whether a civil violation exists.
How long can OFAC reach back? The statute of limitations for civil and criminal sanctions violations is ten years, and recordkeeping requirements now run ten years as well — so old conduct can still surface.
What is the single biggest mitigating factor I control? A real compliance program plus a prompt, well-documented remedial response — ideally paired with a qualifying voluntary self-disclosure.
The cost of a sanctions violation turns on facts unique to your transactions and your program. Reidel Law Firm delivers a flat-fee import/export compliance memo that finds the gaps before OFAC does and gives you a documented plan to close them. Get an export compliance memo →
