Skip to main content
Integrity Path
Category: Anti-Corruption and AML

Office of Foreign Assets Control

Also known as: OFAC, Office of Foreign Assets Control
Simply put

The Office of Foreign Assets Control (OFAC) is a U.S. government agency within the Department of the Treasury. It administers and enforces economic and trade sanctions against foreign countries, individuals, and entities that the United States identifies as threats to its national security or foreign policy interests. OFAC operates under U.S. jurisdiction, and its requirements are specific to that legal framework.

Formal definition

OFAC is a financial intelligence and enforcement agency situated within the United States Department of the Treasury that administers and enforces U.S. economic and trade sanctions programs targeting designated foreign countries, individuals, and entities. It is the successor to the Office of Foreign Funds Control (FFC), established at the outset of World War II. OFAC's mandate is jurisdiction-specific to U.S. law; compliance obligations arising under OFAC sanctions are legally binding on U.S. persons and, in certain cases, non-U.S. parties subject to U.S. jurisdiction. Adherence to OFAC sanctions is a compliance matter rather than a values-based ethics matter, and specific application to any transaction or counterparty should be confirmed with qualified legal counsel. This entry is educational and not a substitute for professional advice.

Why it matters

OFAC sanctions carry the force of U.S. law, and violations can expose organizations and individuals to enforcement action. Because OFAC administers and enforces economic and trade sanctions targeting designated foreign countries, individuals, and entities, organizations that operate internationally, or that process transactions touching U.S. jurisdiction, must be able to identify and avoid prohibited dealings. This is a compliance obligation, meaning it concerns adherence to binding legal requirements with defined consequences, rather than a values-based ethics matter that exceeds legal minimums.

For compliance programs, OFAC screening is one specific control within a broader sanctions and financial-crime framework; it does not, on its own, constitute a complete compliance program. Its significance stems from the fact that OFAC requirements are legally binding on U.S. persons and, in certain cases, on non-U.S. parties subject to U.S. jurisdiction. The precise reach of any given sanctions program depends on the facts of a transaction and the parties involved, which is why application to a specific counterparty or dealing should be confirmed with qualified legal counsel. Exact penalty amounts, program details, and current designations change over time and should be verified against OFAC's primary sources rather than assumed.

Who it's relevant to

Compliance officers and sanctions teams
Those responsible for sanctions compliance must understand OFAC's role in administering and enforcing U.S. economic and trade sanctions, and integrate screening controls into a broader financial-crime and compliance framework. OFAC screening is one control within that system, not a substitute for it.
Legal and audit teams
Because OFAC requirements are legally binding under U.S. jurisdiction and their application to specific transactions can be complex, legal and audit functions play a central role in interpreting obligations, confirming applicability to particular counterparties, and verifying current designations against OFAC's primary sources.
Learning and development staff designing compliance training
Those who build training modules should present OFAC accurately as a compliance obligation with U.S.-specific scope, ensuring learners understand it concerns adherence to binding law rather than values-based ethics, and that a training module is only one component of an overall compliance program.
Organizations with international or cross-border operations
Entities that transact internationally or whose dealings touch U.S. jurisdiction may fall within OFAC's reach, including certain non-U.S. parties subject to U.S. jurisdiction. Such organizations should seek qualified legal counsel to determine how specific sanctions programs apply to their activities.

Inside OFAC

Office of Foreign Assets Control (OFAC)
A component of the U.S. Department of the Treasury that administers and enforces economic and trade sanctions. Its authority derives from U.S. law and applies within U.S. jurisdiction and to U.S. persons; the extent to which its programs reach non-U.S. persons depends on the specific sanctions program and facts, which should be confirmed with qualified legal counsel.
Sanctions programs
OFAC administers multiple sanctions programs that may be country-based, regime-based, or list-based, targeting particular countries, governments, entities, or individuals. The specific prohibitions and permissions vary by program and change over time; primary sources should be consulted for current scope.
Specially Designated Nationals and Blocked Persons (SDN) List
A list published by OFAC identifying individuals and entities whose assets are blocked and with whom U.S. persons are generally prohibited from dealing. Screening against this and other lists is a common control, though it is one element of sanctions compliance rather than the whole of it.
Blocking and prohibited transactions
Requirements that U.S. persons block (freeze) property in which sanctioned parties have an interest and refrain from prohibited dealings. The precise obligations depend on the applicable program and facts, and interpretation is a legal matter.
Licenses
Authorizations that permit transactions otherwise prohibited under sanctions, issued either as general licenses (available to categories of persons) or specific licenses (case-by-case applications). Reliance on a license depends on meeting its exact terms.
Relationship to a broader compliance program
OFAC sanctions compliance is typically supported by risk assessment, screening, policies, training, and monitoring functions. A sanctions-focused training module educates personnel on obligations but does not by itself constitute a complete sanctions compliance program.

Common questions

Answers to the questions practitioners most commonly ask about OFAC.

Is OFAC compliance a form of ethics training, or is it a regulatory obligation?
OFAC compliance is a regulatory obligation, not an ethics concept. It concerns adherence to U.S. sanctions laws and regulations administered by the Office of Foreign Assets Control, with defined legal consequences for violations. While an organization may frame sanctions awareness within a broader values-based culture, OFAC obligations sit firmly on the compliance side of the compliance-ethics spectrum: they are externally imposed, legally binding requirements rather than discretionary conduct that exceeds legal minimums. Any application to your circumstances should be confirmed with qualified legal counsel.
Does delivering an OFAC training module mean our organization has an adequate sanctions compliance program?
No. A training module is one component of a sanctions compliance program, not the whole of it. Training is intended to build awareness and support employees in recognizing sanctions risk, but it does not by itself constitute screening, risk assessment, monitoring, escalation procedures, recordkeeping, or the governance structures that a broader program typically includes. Treating training as equivalent to a complete program is a common misconception; its effectiveness depends on how it is integrated with these other elements and on overall implementation. This entry is educational and not a substitute for professional advice.
Who within an organization typically needs OFAC-related training?
The population requiring training generally depends on where sanctions risk arises in the organization's operations, and scoping should follow from a risk assessment rather than a fixed rule. Roles commonly considered include those involved in customer or counterparty onboarding, payments and finance, procurement, international sales, and any function that touches cross-border transactions. The appropriate scope is jurisdiction- and organization-specific and should be determined with qualified legal and compliance input rather than assumed to be universal.
How does OFAC training relate to screening and monitoring functions?
Training and screening are distinct components that support one another but are not interchangeable. Screening and monitoring are operational controls intended to identify sanctioned parties or prohibited activity, while training is intended to help personnel understand why those controls exist, how to respond to alerts or red flags, and when to escalate. Training may support the effective use of screening tools, but it does not replace them, and neither element alone guarantees compliance. Outcomes depend on how the components are integrated and implemented.
How often should OFAC training be refreshed?
Refresh frequency is generally driven by changes in sanctions risk, regulatory developments, and organizational changes rather than a single fixed interval. Because sanctions designations and requirements can change, many programs treat training as something to be reviewed and updated as circumstances warrant. The appropriate cadence should be determined through your risk assessment and program governance, with input from qualified counsel, and any specific regulatory expectations should be confirmed against primary sources.
How can an organization assess whether its OFAC training is working?
Assessment typically looks at indicators such as completion and comprehension, employees' ability to recognize and escalate sanctions red flags, and whether training content stays aligned with current risk and regulatory expectations. These measures may support an evaluation of effectiveness but should not be read as proof that misconduct or violations have been prevented, since outcomes depend on implementation and context. Measurement approaches should be tailored to the organization and reviewed with qualified compliance and legal advisors; this entry is educational and not a substitute for professional advice.

Common misconceptions

OFAC sanctions are an ethics matter left to individual judgment.
OFAC administers legally binding sanctions with defined prohibitions and potential consequences; this sits at the compliance end of the spectrum (adherence to external U.S. law) rather than being a values-based ethics choice. Related ethical considerations may exist but do not replace the legal obligation.
OFAC requirements apply universally to any company anywhere in the world.
OFAC's authority is grounded in U.S. law and centers on U.S. jurisdiction and U.S. persons. Whether and how it reaches non-U.S. persons or transactions is jurisdiction- and program-specific and requires analysis by qualified legal counsel; it should not be assumed to apply uniformly across all jurisdictions.
Screening names against the SDN List means an organization is fully sanctions-compliant.
List screening is one control and addresses only part of the obligation. Sanctions compliance also involves country- and program-based prohibitions, blocking requirements, licensing, and ongoing monitoring; screening alone does not guarantee compliance or legal protection.

Best practices

Treat OFAC sanctions compliance as adherence to binding U.S. law and route interpretive questions about jurisdiction, program scope, and licensing to qualified legal counsel rather than resolving them informally.
Position sanctions training as one component within a broader program that also includes risk assessment, screening, policies, and monitoring, rather than presenting training as sufficient on its own.
Consult current OFAC primary sources for the applicable sanctions programs and lists, since programs, designations, and the SDN List change over time and should not be relied on from memory.
Confirm the precise terms of any general or specific license before relying on it, and document the basis for any transaction believed to be permitted.
Assess whether OFAC obligations apply to specific persons, entities, or transactions based on the relevant program and facts, avoiding assumptions that requirements apply uniformly across all jurisdictions.
Use qualified language in internal materials, noting that screening and training may support compliance but do not by themselves guarantee prevention of violations or legal protection, and that entries are educational and not legal advice.