OFAC Sanctions Penalties and How to Avoid Them

Violating U.S. sanctions can cost a business hundreds of thousands of dollars per transaction in civil penalties — and willful violations carry criminal fines and prison time. The Office of Foreign Assets Control (OFAC) enforces most U.S. sanctions, and its civil penalties apply even when you did not know you were breaking the law. The good news: the steps that prevent violations are well understood, and OFAC rewards businesses that take them. Here is what the penalties are and how to stay clear of them.

Civil Penalties Apply Even Without Intent

The feature that surprises most businesses is that OFAC civil liability is strict liability — you can be penalized even for an unintentional violation. For sanctions programs based on the International Emergency Economic Powers Act (IEEPA), which covers most modern programs, the maximum civil penalty is set by statute and adjusted for inflation each year. As of the January 2025 inflation adjustment, that maximum is the greater of roughly $377,700 per violation or twice the value of the underlying transaction. Because the figure is recalculated annually, always confirm the current amount before relying on it. And note the word per violation: a pattern of prohibited transactions can multiply quickly.

Criminal Penalties Require Willfulness

Criminal liability is reserved for willful conduct — knowingly and deliberately violating the law. The exposure is far heavier.

OFAC can also pursue a civil action in parallel with a criminal referral to the Department of Justice, so the two tracks are not mutually exclusive.

Enforcement Reaches Back Ten Years

In April 2024, Congress doubled the statute of limitations for civil and criminal violations of IEEPA- and TWEA-based sanctions from five years to ten years. OFAC has correspondingly extended its recordkeeping expectations to ten years. The practical effect: conduct from a decade ago can still be enforced today, and the records you keep need to last as long.

How OFAC Sets the Number

OFAC does not simply apply the maximum. Its Economic Sanctions Enforcement Guidelines weigh aggravating and mitigating factors — whether the conduct was willful or reckless, how senior the people involved were, the harm to the sanctions program, and the quality of your compliance program. A strong, well-run risk-based compliance program is a recognized mitigating factor; its absence is an aggravating one. This is why the program you build before anything goes wrong directly shapes what a violation costs.

How to Avoid Violations

Avoiding penalties is not about clever workarounds — it is about routine compliance done consistently. The practical steps are the same ones regulators look for:

• Screen every party against OFAC’s SDN List and other restricted-party lists, and apply the 50 Percent Rule to catch entities owned by blocked persons.
• Run risk-based due diligence on counterparties and destinations, heavier where the risk is higher.
• Document your decisions so you can show good-faith compliance if questioned.
• Voluntarily self-disclose if you discover a violation. A qualifying voluntary self-disclosure — made before OFAC learns of the conduct, and complete and timely — is treated as a substantial mitigating factor and can reduce the base civil penalty by up to 50%.

The thread running through all four is that OFAC consistently rewards businesses that try to comply and come forward, and penalizes those that look away. Deliberately structuring transactions to evade sanctions is itself a violation and a serious aggravating factor — the opposite of a defense.

Frequently Asked Questions

Can I be fined if I did not know I violated sanctions? Yes. OFAC civil penalties are strict liability, so intent is not required. Criminal penalties, by contrast, require a willful violation.

What is the maximum civil penalty for a sanctions violation? For IEEPA-based programs, the greater of about $377,700 per violation or twice the transaction value, as of the 2025 inflation adjustment. OFAC updates the figure annually.

Does self-reporting actually help? Yes. A qualifying voluntary self-disclosure is a substantial mitigating factor and can cut the base civil penalty by up to half.

How far back can OFAC go? Up to ten years, following the 2024 extension of the statute of limitations for IEEPA- and TWEA-based violations.

Worried about a possible sanctions exposure? Reidel Law Firm prepares flat-fee Import/Export Compliance Memos and advises on voluntary disclosures and enforcement responses — with direct access to the trade attorney handling your matter. Get a flat-fee compliance memo →