Explainer · Updated May 2026

OFAC Crypto Sanctions: Rules, Enforcement & Compliance (2026)

A comprehensive guide to OFAC crypto sanctions — how the Office of Foreign Assets Control regulates cryptocurrency and digital assets, recent enforcement actions, the GENIUS Act, and what compliance teams need to know in 2026.

Last updated: May 2026 Sources: OFAC, U.S. Treasury, GENIUS Act, Chainalysis

Tool What Is OFAC? Understand OFAC’s role in U.S. sanctions. Tool OFAC Sanctions Checker Screen entities against Cuba sanctions lists. Tracker Sanctions Tracker Latest sanctions developments and updates.

1. What Are OFAC Crypto Sanctions?

OFAC crypto sanctions are the application of U.S. economic sanctions laws to cryptocurrency and digital asset transactions. The Office of Foreign Assets Control (OFAC), a division of the U.S. Treasury Department, has made clear that sanctions obligations apply equally to transactions involving digital currencies as they do to traditional fiat currency transactions. This means U.S. persons and companies are prohibited from engaging in crypto transactions with sanctioned individuals, entities, or jurisdictions — including Cuba, Iran, North Korea, and Russia.

Key Takeaways

All U.S. sanctions apply to crypto — OFAC treats digital assets the same as traditional financial instruments.
The GENIUS Act (2025) codified specific crypto compliance obligations into federal law for the first time.
OFAC has designated specific wallet addresses on the SDN List, making them sanctioned property.
Enforcement penalties can reach millions of dollars — Exodus settled for $3.1M, ShapeShift for $750K.
Companies must implement risk-based compliance programs with five essential components per OFAC guidance.

2. Legal Framework for OFAC Crypto Sanctions

OFAC’s authority over cryptocurrency derives from the same statutes that govern traditional sanctions: the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), and various country-specific sanctions programs. Key legal foundations include:

IEEPA (50 U.S.C. §1701–1706): Grants the President broad authority to regulate economic transactions during national emergencies.
TWEA: The legal basis for Cuba sanctions specifically (CACR, 31 CFR Part 515).
Executive Orders: Various EOs establish country-specific sanctions programs covering crypto transactions.
GENIUS Act (2025): The first federal statute to explicitly require crypto sanctions compliance.

Important: OFAC sanctions apply to all U.S. persons (citizens, permanent residents, and entities organized under U.S. law) regardless of where the transaction occurs. Non-U.S. persons can also face secondary sanctions for significant transactions with sanctioned parties. Learn more at our What Is OFAC? explainer.

3. The GENIUS Act: Crypto Sanctions in Federal Law

The Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act), signed into law on July 18, 2025, represents the first comprehensive federal framework for stablecoins and digital assets. Critically for sanctions compliance, the GENIUS Act built specific economic sanctions obligations directly into statute.

GENIUS Act Sanctions Requirements

Compliance programs: Permitted payment stablecoin issuers (PPSIs) must maintain effective sanctions compliance programs.
Transaction screening: Mandatory procedures to screen for and block transactions involving sanctioned persons or countries.
Customer due diligence: KYC requirements aligned with Bank Secrecy Act obligations.
Transaction monitoring: Ongoing monitoring for suspicious activity, including sanctions evasion patterns.
Suspicious activity reporting: SAR filing requirements consistent with existing AML frameworks.
OFAC screening: Explicit requirement to screen against the SDN List and other OFAC lists.

4. Recent OFAC Crypto Enforcement Actions

Date	Company	Settlement	Key Issue
Dec 2025	Exodus	$3.1 million	Non-custodial wallet allowed sanctioned-jurisdiction users; Terms of Use deemed insufficient
Sep 2025	ShapeShift	$750,000	17,183 apparent violations across multiple sanctions programs totaling $12.5M in transactions
Jan 2026	Zedcex / Zedxion	Designation	First OFAC designation of IRGC-linked digital asset exchange infrastructure
Jan 2026	Bank Markazi wallets	Designation	Two crypto wallets designated as property of Iran’s central bank; $344M frozen

Lesson from Exodus: OFAC found that relying solely on Terms of Use to prevent sanctioned-jurisdiction users from accessing a platform is insufficient. Companies must implement practical, technical mechanisms — such as IP blocking, geofencing, and transaction screening — to prevent violations.

5. OFAC-Designated Crypto Wallets & Addresses

Since 2018, OFAC has added specific cryptocurrency wallet addresses to the Specially Designated Nationals (SDN) List. Any transaction with a designated address is a sanctions violation, and any property (including digital assets) in a designated wallet must be blocked if it comes within the possession or control of a U.S. person.

SDN List wallet addresses: OFAC adds Bitcoin, Ethereum, and other blockchain addresses as identifiers on the SDN List.
Blocking requirements: U.S. persons who identify a match must freeze the assets and file a report with OFAC within 10 business days.
Chain analysis: OFAC expects compliance programs to use blockchain analytics tools to trace transactions to and from sanctioned addresses.
Mixer and tumbler services: OFAC has designated several mixing services (e.g., Tornado Cash, Blender.io) used to obscure sanctioned transactions.

6. Building an OFAC Crypto Compliance Program

OFAC has outlined five essential components for a sanctions compliance program, which apply equally to crypto businesses:

OFAC’s Five Pillars of Compliance

1. Management commitment: Senior leadership must support and resource the compliance program.
2. Risk assessment: Evaluate exposure to sanctioned jurisdictions, persons, and transaction types specific to your platform.
3. Internal controls: Implement screening tools, IP-based geofencing, KYC procedures, and transaction monitoring systems.
4. Testing and auditing: Regular independent testing of the compliance program’s effectiveness.
5. Training: Ongoing, specific training for all relevant personnel on sanctions risks and procedures.

For Cuba-specific sanctions compliance, use our OFAC Cuba Sanctions Checker to screen entities and transactions.

7. Cuba & OFAC Crypto Sanctions

Cuba remains a comprehensively sanctioned jurisdiction under OFAC’s Cuba sanctions program (CACR, 31 CFR Part 515). This means cryptocurrency transactions involving Cuban nationals, Cuban entities, or Cuban IP addresses are generally prohibited for U.S. persons. The same restrictions that apply to traditional financial transactions with Cuba apply to crypto transactions.

Sending cryptocurrency to Cuban wallets is prohibited absent an OFAC license.
Crypto platforms must screen for Cuban users and block their access.
Remittance rules that apply to traditional transfers also apply to crypto remittances to Cuba.
The Cuba sanctions tracker monitors changes to these restrictions.

8. OFAC Crypto Sanctions: 2026 Outlook

Increased enforcement: OFAC is expected to bring more enforcement actions against crypto platforms, particularly non-custodial wallets and DeFi protocols.
GENIUS Act implementation: Rulemaking for the stablecoin compliance framework is ongoing, with full implementation expected by late 2026.
Secondary sanctions: Expansion of secondary sanctions targeting non-U.S. crypto platforms facilitating transactions for sanctioned jurisdictions.
Chain analytics: OFAC’s partnerships with blockchain analytics firms (Chainalysis, TRM Labs) continue to enhance tracing capabilities.
DeFi focus: Decentralized finance protocols face increasing scrutiny, with OFAC exploring how to enforce sanctions in trustless environments.

Frequently Asked Questions

Do OFAC sanctions apply to cryptocurrency?

Yes. OFAC has made clear that all U.S. sanctions laws apply to cryptocurrency and digital asset transactions. U.S. persons are prohibited from engaging in crypto transactions with sanctioned individuals, entities, or jurisdictions — including Cuba, Iran, North Korea, and Russia. The GENIUS Act (2025) codified specific crypto compliance obligations into federal law.

What is the GENIUS Act and how does it affect crypto sanctions?

The Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act), signed July 18, 2025, is the first federal statute to explicitly require crypto sanctions compliance. It mandates that stablecoin issuers maintain sanctions compliance programs, screen transactions against OFAC lists, implement KYC procedures, and file suspicious activity reports.

What happens if you violate OFAC crypto sanctions?

Penalties for OFAC crypto sanctions violations can be severe. Recent settlements include Exodus ($3.1 million, December 2025) and ShapeShift ($750,000, September 2025). Penalties can reach up to $20 million and 30 years imprisonment for willful violations under IEEPA. OFAC may also designate non-compliant platforms, effectively cutting them off from the U.S. financial system.

Can I send Bitcoin to Cuba?

Generally, no. Cuba is a comprehensively sanctioned jurisdiction under OFAC's Cuba sanctions program (CACR, 31 CFR Part 515). Cryptocurrency transactions involving Cuban nationals, entities, or IP addresses are prohibited for U.S. persons absent a specific OFAC license. The same restrictions that apply to traditional financial transfers to Cuba apply to crypto transactions.

What are the five pillars of an OFAC crypto compliance program?

OFAC's five essential components are: (1) Management commitment — senior leadership support and resources; (2) Risk assessment — evaluating exposure to sanctioned parties; (3) Internal controls — screening tools, geofencing, KYC, and transaction monitoring; (4) Testing and auditing — independent review of program effectiveness; (5) Training — ongoing education for relevant personnel.

Sources

U.S. Treasury / OFAC — Sanctions Compliance Guidance for Digital Assets
GENIUS Act (Pub. L. 119-XX) — Stablecoin Compliance Provisions
Chainalysis — Crypto Sanctions Report 2026
DLA Piper — OFAC Sanctions Enforcement in Fintech and Crypto (2026)
Steptoe — OFAC Sanctions and Digital Assets
Akin Gump — OFAC Settlement with Blockchain Wallet Provider

Stay Compliant with OFAC Crypto Sanctions

Use our OFAC Sanctions Checker to screen entities, monitor the Sanctions Tracker for regulatory updates, and learn the fundamentals at What Is OFAC?. Also explore the Cuba embargo explainer, review Helms-Burton Act risks, check Cuba Restricted List entities, and see how public companies face Cuba exposure.