The OFAC Sanctions List and What It Has to Do With Crypto
Updated: September 21, 2026
OFAC is the U.S. Treasury's Office of Foreign Assets Control. One of its tools is the SDN list (Specially Designated Nationals), which names not just people and companies but specific crypto addresses, once it's established that sanctioned or criminal money moves through them.
How a crypto address ends up on the list
Usually after an investigation into a specific incident: a hacking group, a ransomware operator, a darknet marketplace, or an entity that helps route funds around sanctions through crypto. OFAC publishes actual BTC, ETH, and other addresses — not just names and jurisdictions.
Why this isn't only a U.S.-persons problem
Formally, OFAC restrictions apply to people and entities under U.S. jurisdiction. In practice, almost every major exchange and payment provider worldwide follows these lists to keep its access to the U.S. banking system. If a sanctioned address turns up in your transaction history, an exchange can freeze operations or ask for an explanation — regardless of your citizenship.
How an ordinary user can run into this without meaning to
- Buying crypto from a P2P seller who themselves received it from a flagged address.
- Using a mixer or exchanger that at some point handled sanctioned funds.
- Getting paid for goods or services by a counterparty whose wallet previously interacted with a sanctioned address.
None of these scenarios require intent — but an exchange's compliance team usually can't tell deliberate involvement from an accidental overlap, and the default first reaction is to freeze first and ask questions later.
How to lower the risk
Check a counterparty's address before the deal, not after — there's no way to undo a link to a sanctioned address once the funds are already yours. A direct check takes seconds and compares the address against the current OFAC SDN list and the Ransomwhere ransomware-address database; if there's no direct match, the wallet's recent transaction history is also checked up to two hops deep.
Frequently asked questions
Is the OFAC list updated in real time?
No, updates are published as OFAC makes new determinations. Our database syncs with the public version of the list, but there can be a delay between an official update and ours.
If an address isn't on the OFAC list, is it completely safe?
Not necessarily — the list only covers officially documented cases. It's also worth checking transaction-based exposure (hop analysis) and ransomware-address databases, which cover a different part of the risk.