What Is an OFAC Background Check? Process, Matches, and Penalties

An OFAC background check is a screening of a person’s or company’s name against the sanctions lists maintained by the U.S. Department of the Treasury’s Office of Foreign Assets Control, run to confirm that doing business with them is not legally prohibited.¹ Banks, employers, title companies, insurers, and anyone whose money or goods might touch a foreign party run these checks so they don’t transact with a sanctioned individual, company, or government.

How It Differs From a Criminal Background Check

A criminal background check looks at arrests and convictions. An OFAC check does not. It has nothing to do with someone’s criminal history in the ordinary sense. It asks one narrower question: is this name on a U.S. sanctions list? The lists include foreign officials, terrorists, narcotics traffickers, weapons proliferators, front companies, and entities owned or controlled by sanctioned regimes.¹ Someone can have a clean criminal record and still be an OFAC match, and someone with a serious criminal history can be entirely clear of OFAC.

Who Has to Run One

OFAC compliance applies to all U.S. citizens and permanent residents wherever they live, every person and entity physically in the United States, every U.S.-incorporated company, and the foreign branches of those companies.² The obligation follows the person, not the size of the deal.

That sweeps in more than most people expect. Banks and credit unions, insurance companies, real estate firms, import-export businesses, employers with international operations, and small businesses that send or receive international wire transfers all need some form of screening. A freelancer invoicing a foreign client, a landlord renting to a foreign national, and a small manufacturer buying parts overseas are all inside OFAC’s jurisdiction.

What Gets Screened Against

The main list is the Specially Designated Nationals and Blocked Persons List, usually called the SDN List. It covers individuals, companies, front organizations, and specific vessels and aircraft that OFAC has designated under its various sanctions programs, and the people and entities on it can be located anywhere in the world.³

A thorough screen also covers OFAC’s other lists:⁴

The Sectoral Sanctions Identifications (SSI) List, which targets persons in specific sectors of the Russian economy.
The Foreign Sanctions Evaders (FSE) List, covering foreign persons who have violated or helped circumvent U.S. sanctions on Iran.
The CAPTA List, foreign financial institutions barred from correspondent or payable-through accounts in the U.S.
The Non-SDN Menu-Based Sanctions List, for persons under targeted restrictions short of a full asset freeze.

These are Treasury lists. The Commerce Department and State Department publish separate ones, including the Denied Persons List and the Entity List. The International Trade Administration’s Consolidated Screening List combines all three departments’ lists in one search if you want a wider net.⁵

How the Screening Actually Works

OFAC runs a free Sanctions List Search tool on its website. It uses fuzzy logic to catch partial and misspelled name matches across the SDN List and the Non-SDN Consolidated Sanctions List.⁶ You type in a name, and the tool returns any possible matches along with identifying details like dates of birth, nationalities, and passport numbers so you can judge whether the hit is real. Anyone can use it.

The free tool is fine for occasional lookups. Businesses that screen at volume generally use commercial compliance software instead. Those platforms run batch screening, automatically rescreen existing customers when OFAC updates the lists, keep audit trails for regulators, and tune algorithms to cut false positives. The free tool is a snapshot; commercial software watches the relationship over time.

Either way, the check compares identifiers you have on file — full legal name, aliases, date of birth, address, nationality, ID numbers — against the list entries. The timing depends on the industry. Banks screen at account opening and again on transactions. Employers screen during hiring. Title companies screen buyers and sellers before closing.

Handling a Possible Match

Most hits are false positives. Common names generate them constantly. OFAC publishes a five-step process for working through a potential match:⁷

Confirm the hit came from an OFAC list, not a Commerce or State Department list. If it’s not OFAC’s, contact that agency.
Compare entity types. If your customer is an individual and the list entry is a company or vessel, it isn’t a valid match.
Evaluate the name match. A single overlapping part of a multi-part name, on its own, is not a valid match.
Compare every available identifier — date of birth, nationality, passport number, address. If you don’t have enough information about your customer to compare, collect more before deciding.
Make the call. If multiple identifiers line up or come close, call OFAC’s compliance hotline. If the details clearly diverge, you can clear the match internally.

Document each step. If regulators later ask why you proceeded, your file needs to show a reasonable process. Commercial screening software creates that documentation on its own, which is much of what you’re paying for.

What Happens When a Match Is Confirmed

A confirmed match forces action. Depending on the sanctions program, the transaction is either blocked or rejected.

When the sanctioned party has a blockable interest — for example, funds flowing to an SDN or to a sanctioned government’s financial institution — the funds must be frozen in a segregated, interest-bearing account. They stay there until the target is removed from the list, the sanctions program ends, or OFAC issues a license authorizing release.⁸

When the transaction is prohibited but there is no blockable interest — for instance, a payment heading to a non-designated party in a comprehensively sanctioned country — the transaction is rejected and returned to the sender rather than frozen.⁹ Either way, the organization must report the blocked or rejected transaction to OFAC within 10 business days.¹⁰

For an employer, a confirmed match means you cannot hire, pay, or continue a business relationship with the person. For a real estate closing, the deal stops. There is no workaround without an OFAC license.

Penalties for Skipping or Missing a Check

OFAC enforces civil penalties on a strict liability basis. You can be liable even if you had no idea the other party was sanctioned.¹¹ “We didn’t know” is not a defense, which is the whole reason screening programs exist.

Under the International Emergency Economic Powers Act, the civil penalty is the greater of $250,000 or twice the value of the underlying transaction, per violation.¹² After annual inflation adjustments, the per-violation ceiling reached $377,700 as of January 2025.¹³ For older programs governed by the Trading with the Enemy Act, the adjusted maximum is $111,308 per violation.

Criminal penalties are reserved for willful violations. A person who knowingly violates sanctions faces up to $1,000,000 in fines and up to 20 years in prison.¹² Penalties apply per violation, so a pattern of prohibited transactions compounds fast.

When a License Allows the Transaction Anyway

A match does not always mean the deal is dead forever. OFAC issues licenses that authorize otherwise-prohibited transactions, in two forms:¹⁴

General licenses are pre-authorized categories that apply automatically. If your transaction fits the description, you can proceed without applying. Certain humanitarian aid shipments to sanctioned countries fall under general licenses.
Specific licenses are written authorizations issued to a particular person for a particular transaction. You apply in writing and wait for OFAC’s approval before proceeding.

Follow the license conditions exactly. A general license permitting humanitarian goods does not also permit sending money to a sanctioned bank. Misreading a license’s scope creates the same liability as having none.

Where OFAC Checks Come Up in Practice

Financial institutions run these checks most heavily. Banks and credit unions screen at account opening, during wire transfers, and as part of ongoing customer monitoring, and examiners test for it directly.⁸

Real estate is the next place people encounter one. Title companies and settlement agents screen every party to a transaction before closing, and a potential match halts the closing until it’s resolved. Buyers and sellers are often surprised because they associate OFAC with banking, not home purchases.

Employers in defense, government contracting, and international logistics screen new hires and sometimes existing staff. Import-export businesses screen foreign trading partners, freight forwarders, and end-users. Insurance companies screen policyholders and claimants. The common thread is any relationship where money or goods might reach someone who’s sanctioned.

1
Office of Foreign Assets Control. Office of Foreign Assets Control – Mission
2
Office of Foreign Assets Control. Who Must Comply With OFAC Sanctions
3
U.S. Department of the Treasury. Specially Designated Nationals and the SDN List
4
Office of Foreign Assets Control. Additional Sanctions Lists
5
International Trade Administration. Consolidated Screening List
6
Office of Foreign Assets Control. Sanctions List Search Tool
7
Office of Foreign Assets Control. Assessing OFAC Name Matches
8
FFIEC BSA/AML InfoBase. FFIEC BSA/AML Manual – Office of Foreign Assets Control
9
Office of Foreign Assets Control. Frequently Asked Questions – Blocking and Rejecting Transactions
10
eCFR. 31 CFR 501.604 – Reports of Rejected Transactions
11
Office of Foreign Assets Control. OFAC FAQ 65 – Strict Liability
12
Office of the Law Revision Counsel. 50 USC 1705 – Penalties
13
Federal Register. Inflation Adjustment of Civil Monetary Penalties
14
Office of Foreign Assets Control. What Is a License