INTERNATIONAL TRADE LAW
Penalties for Violating Export Control Laws

Export control violations carry both civil and criminal penalties — up to 20 years in prison and over a million dollars per violation — and they apply per violation, which is how a single shipment becomes a catastrophic number. Three U.S. regimes do most of the enforcing, each with its own statute, agency, and penalty ceiling. This guide lays out what is actually at stake and why “per violation” is the phrase to watch.
Civil Versus Criminal — and Why “Knowing” Matters
Export enforcement runs on two tracks. Civil penalties are administrative fines the agencies impose directly; they do not require proof that you meant to break the law, which is why even unintentional violations can be expensive. Criminal penalties require a culpable mental state — typically a willful violation (an intentional act in disregard of the law) or a knowing one (acting with awareness that conduct is unlawful) — and carry fines plus imprisonment. The same conduct can draw both tracks at once.
The other multiplier is the unit of counting. Penalties attach per violation, and a course of dealing — multiple shipments, multiple items, multiple parties — can be charged as many violations. Maximums that look survivable in isolation stack quickly.
The Three Enforcement Regimes
| Regime | Agency | Statute | Covers |
|---|---|---|---|
| EAR | Commerce / BIS (Office of Export Enforcement) | Export Control Reform Act (ECRA) | Dual-use items on the Commerce Control List |
| ITAR | State / DDTC | Arms Export Control Act (AECA) | Defense articles on the U.S. Munitions List |
| Sanctions | Treasury / OFAC | Int’l Emergency Economic Powers Act (IEEPA) | Dealings with sanctioned countries, parties, and sectors |
Which regime applies depends on what you exported and to whom. Many enforcement actions touch more than one — an unlicensed shipment to a sanctioned end user can implicate both the EAR and OFAC.
What the Penalties Actually Run
The headline criminal exposure is essentially the same across all three regimes: up to 20 years of imprisonment and up to $1 million in fines per violation for individuals. Civil maximums differ by regime and are adjusted every year for inflation, so any specific number is a snapshot. As of 2025, the per-violation civil maximums run roughly:
- EAR (BIS): the greater of about $374,000 or twice the value of the transaction.
- Sanctions (OFAC, under IEEPA): the greater of about $378,000 or twice the transaction value.
- ITAR (DDTC): the greater of about $1.27 million or twice the transaction value.
Treat those figures as current-as-of-2025 and rising — they are reset each January, so confirm the live amount with the relevant agency before relying on a number. Beyond the dollars, the consequences that often hurt most are non-monetary: denial of export privileges (BIS), debarment from defense trade (DDTC), asset freezes (OFAC), loss of government contracts, and the reputational damage that follows a public enforcement action.
Mitigating Factors That Move the Number
Penalties are not fixed; the agencies weigh how you behaved. The single biggest lever is the voluntary self-disclosure — reporting a violation to the agency before they find it. A timely, complete self-disclosure is consistently treated as a substantial mitigating factor and routinely cuts exposure. Other factors that help: a genuine compliance program in place at the time, prompt corrective action, and full cooperation. Factors that aggravate: willfulness, concealment, harm to national security, and a history of prior violations.
How Violations Usually Happen
Most enforcement matters are not exotic. They cluster around a few predictable failures:
- Misclassification — treating a controlled item as EAR99 or as EAR-controlled when it is actually ITAR.
- Skipped or stale party screening — shipping to a listed party or a sanctioned end user.
- Deemed exports — giving a foreign national access to controlled technology without authorization.
- License conditions ignored — exporting outside the terms of a license that was actually granted.
- Unauthorized re-exports — a downstream party moving the item to a destination it was never cleared for.
Each of these is preventable with the same disciplines that make up a basic compliance program: classify, screen, license, and document.
Frequently Asked Questions
Can I be penalized for an unintentional export violation?
Yes. Civil penalties do not require intent. An honest mistake — a misclassification, a missed screening hit — can still draw an administrative fine, which is why agencies expect documented reasonable care rather than perfect outcomes.
Does a voluntary self-disclosure really help?
It is the most reliable way to reduce exposure. Across the EAR, ITAR, and sanctions regimes, a timely and complete voluntary self-disclosure made before the government discovers the violation is treated as a significant mitigating factor and often substantially lowers the penalty.
Are the penalty amounts fixed?
No. Criminal maximums are set by statute, but the civil penalty maximums are adjusted annually for inflation. Any specific figure is a point-in-time number; check the current amount with BIS, DDTC, or OFAC before relying on it.
Which agency would pursue my case?
It depends on the item and the conduct: BIS for dual-use items under the EAR, DDTC for defense articles under ITAR, and OFAC for sanctions matters. A single transaction can fall under more than one, and the agencies coordinate on overlapping cases.
The cheapest export violation is the one you prevent. Reidel Law Firm helps exporters build compliance programs, evaluate potential violations, and prepare voluntary self-disclosures on flat-fee terms. Get an import/export compliance memo.
This article is general information about U.S. export enforcement, not legal advice about a specific matter. Penalty amounts change annually; confirm current figures with the relevant agency.


