OFAC screening and PEP screening both look at who you’re doing business with, but they answer different questions and carry different consequences. OFAC screening is a legal check against U.S. government sanctions lists — if a customer or counterparty matches, you’re prohibited from transacting and must block or reject and report. PEP screening is a risk check for politically exposed persons, and a match doesn’t stop the relationship; it triggers enhanced due diligence and a documented decision by senior management. One is a mandate with strict liability. The other is risk management that regulators expect to see inside a broader anti-money laundering program.
What OFAC Screening Requires
The Office of Foreign Assets Control, part of the U.S. Treasury, administers economic and trade sanctions against foreign countries, regimes, terrorists, narcotics traffickers, and others deemed threats to U.S. national security or foreign policy.1U.S. Department of the Treasury. Office of Foreign Assets Control – Mission Most OFAC programs draw their authority from the International Emergency Economic Powers Act.2Office of the Law Revision Counsel. 50 U.S. Code Chapter 35 – International Emergency Economic Powers
Sanctions compliance is not limited to banks. Every U.S. person must comply: every U.S. citizen and permanent resident regardless of where they live, every individual and entity physically located in the United States, and every U.S.-incorporated company along with its foreign branches.3Office of Foreign Assets Control. FAQ 11 – Who Must Comply With OFAC Sanctions Under certain programs, foreign subsidiaries owned or controlled by U.S. companies must comply too. Non-U.S. persons cannot cause a U.S. person to violate sanctions or engage in conduct designed to evade them.
The primary list to screen against is the Specially Designated Nationals and Blocked Persons List. The SDN List identifies individuals, companies, and organizations whose assets must be frozen and with whom U.S. persons cannot transact.4Office of Foreign Assets Control. Specially Designated Nationals and the SDN List Screening cannot stop at the SDN List itself. Under the 50 Percent Rule, any entity owned 50 percent or more — directly, indirectly, or in aggregate — by one or more SDNs is treated as blocked even if it isn’t listed.5Office of Foreign Assets Control. FAQ 398 – OFAC 50 Percent Rule Ownership by two SDNs at 30 percent and 25 percent aggregates to 55 percent, and the entity is blocked. The rule looks at ownership, not operational control.
OFAC also maintains narrower lists. The Sectoral Sanctions Identifications List, for instance, applies limited financing restrictions to certain Russian energy, defense, and finance firms rather than a full asset freeze. A screening program should cover the relevant lists for the institution’s risk profile.
What PEP Screening Is
A politically exposed person is someone who holds or has held a prominent public function: heads of state, senior government officials, military leaders, executives of state-owned enterprises, and senior political party figures. The Financial Action Task Force groups PEPs into three categories — foreign PEPs entrusted with public functions by another country, domestic PEPs holding similar roles within the home country, and international organization PEPs such as senior officials of the United Nations or World Bank.6Financial Action Task Force. Guidance on Politically Exposed Persons – Recommendations 12 and 22 The designation extends to immediate family members and close associates.
Being labeled a PEP is not an accusation of wrongdoing. It reflects the elevated corruption and bribery risk that comes with access to state resources and decision-making authority. Under the FATF framework, foreign PEPs are always treated as high risk and require enhanced due diligence. Domestic and international organization PEPs require enhanced measures only when the specific relationship presents higher-than-normal risk.6Financial Action Task Force. Guidance on Politically Exposed Persons – Recommendations 12 and 22
PEP Screening Is Not a U.S. Legal Mandate
U.S. federal law does not require banks or other businesses to screen for PEPs. There is no Bank Secrecy Act regulation specific to PEPs, and the Customer Due Diligence rule does not require institutions to determine whether a customer is a PEP.7FFIEC BSA/AML InfoBase. Politically Exposed Persons Federal banking regulators and FinCEN said as much in a joint statement: there is no regulatory requirement and no supervisory expectation for banks to have unique, additional due diligence steps for customers who may be PEPs.8FinCEN. Joint Statement on Bank Secrecy Act Due Diligence Requirements for Customers Who May Be Considered Politically Exposed Persons
Even so, a risk-based AML program will typically flag PEPs. The general obligation to apply risk-proportionate due diligence under the BSA9FinCEN. Bank Secrecy Act effectively requires heightened scrutiny for a customer who happens to be a senior foreign government official, even without a PEP-specific rule. Institutions screen for PEPs because it’s the fastest way to identify relationships that demand closer attention.
The Operational Difference When You Get a Match
The clearest way to see how these two checks differ is to look at what happens after the alert.
An SDN match is binary. You block any property in your possession or control in which the sanctioned person has an interest, or you reject the transaction, and you report to OFAC. There is no discretion, no risk tolerance, and no relationship going forward unless OFAC issues a license authorizing it.
A PEP match is a judgment call. You investigate the source of the person’s wealth, examine the nature of their transactions, and assess whether the relationship makes sense given the risks. Senior management reviews the file and approves or declines. You are not prohibited from doing business with a PEP; you are expected to understand the risk and document your decision. This is what compliance programs call Enhanced Due Diligence.
Put simply: OFAC screening enforces a prohibition. PEP screening informs a decision.
Handling an OFAC Match: Reporting and Deadlines
When you block property or reject a transaction under OFAC sanctions, you must file a report with OFAC within 10 business days of the blocking or rejection.10Office of Foreign Assets Control. Filing Reports With OFAC The report describes the property, identifies the sanctions target, and explains the circumstances.
Holders of blocked property also face an annual obligation. By September 30 each year, you must file a comprehensive report with OFAC listing all blocked property held as of June 30.11eCFR. 31 CFR 501.603 – Reports on Blocked and Unblocked Property The report must include account numbers, the date the property was blocked, its estimated value in U.S. dollars, and the legal authority for the block. Missing the deadline is itself a violation.12Office of Foreign Assets Control. Reminder to File the Annual Report of Blocked Property If you held no blocked property as of June 30, no filing is required.
Handling a PEP Match: Enhanced Due Diligence
Because PEP status is a risk indicator rather than a prohibition, the response is a structured investigation rather than a blocking action. Source of wealth and source of funds are examined, transaction patterns are reviewed against what the customer profile would predict, and senior management signs off on continuing the relationship. The documentation is what protects the institution: a regulator reviewing the file later wants to see that the risk was identified, evaluated, and knowingly accepted.
Clearing False Positives on Either List
Automated screening uses fuzzy matching, so false positives are inevitable on both OFAC and PEP checks. Most alerts in a well-tuned system are false matches — a customer with a common name triggering against a different individual with the same name. Resolving these efficiently without dismissing genuine hits is where compliance programs succeed or fail.
OFAC’s guidance on evaluating name matches tells users to compare the full SDN entry against all available customer information. SDN entries typically include the person’s full name, address, nationality, passport number, tax identification number, place and date of birth, and known aliases.13Office of Foreign Assets Control. Assessing OFAC Name Matches If the customer file doesn’t have enough of these data points to reach a determination, collect more information before clearing the alert. Clearing based on a hunch that it’s a different person is the kind of shortcut that shows up in enforcement actions.
Penalties That Make the Distinction Matter
OFAC violations carry serious civil penalties. The statutory maximum under IEEPA is the greater of $377,700 per violation or twice the value of the underlying transaction.14Legal Information Institute. 31 CFR Appendix A to Subpart F of Part 501 – Economic Sanctions Enforcement Guidelines The per-violation figure is adjusted annually for inflation.15Office of Foreign Assets Control. FAQ 12 – How Much Are the Penalties for Violating OFAC Sanctions Regulations For a large transaction, twice the value can far exceed the per-violation cap.
Civil penalties can be imposed even when the violation was unintentional. OFAC operates under strict liability for sanctions, so not knowing the counterparty was sanctioned is not a defense. Your screening program is what’s supposed to catch that.
Willful violations become criminal. A person who knowingly violates OFAC sanctions faces fines up to $1,000,000 and, for individuals, imprisonment of up to 20 years.16Office of the Law Revision Counsel. 50 U.S. Code 1705 – Penalties Entities face the same $1,000,000 criminal fine ceiling.
There is no standalone “PEP penalty.” Failures involving PEP-related risk are enforced as BSA compliance failures — inadequate customer due diligence, weak internal controls, or a program that doesn’t match the institution’s risk profile. These lead to consent orders, monetary penalties, and reputational damage that can drive away correspondent banking relationships. A failure to apply risk-proportionate due diligence that results in processing corrupt funds will be treated as a BSA violation.
The asymmetry is deliberate. OFAC penalties enforce a national security prohibition, and they are strict, quantified, and per-transaction. PEP-related enforcement enforces a general standard of care through the BSA, and it looks at whether the program as a whole was reasonable for the risks the institution faced. A compliance program needs both checks running, but for different reasons and with different playbooks when a match appears.