Navigating OFAC Sanctions Compliance for UAE-Based Businesses in 2025

As geopolitical tensions continue to shape the global regulatory landscape, the US Office of Foreign Assets Control (OFAC) has significantly intensified its enforcement focus on companies operating in or through the United Arab Emirates. For UAE-based businesses — whether locally incorporated or foreign subsidiaries — understanding the scope of OFAC's jurisdiction and the compliance obligations it imposes is no longer optional. It is a business imperative.

What Is OFAC and Why Does It Matter to UAE Businesses?

OFAC is a financial intelligence and enforcement agency within the US Department of the Treasury. It administers and enforces economic and trade sanctions based on US foreign policy and national security goals against targeted foreign countries, regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy, or economy of the United States.

Critically, OFAC's jurisdiction is not limited to US persons or entities on US soil. OFAC sanctions have extraterritorial reach — meaning that any company that processes transactions in US dollars, uses US financial institutions, employs US persons, or has a US nexus of any kind may be subject to OFAC regulations regardless of where it is incorporated or operates.

For UAE-based companies, this reality has become increasingly significant as the Emirates' role as a global trade and finance hub has expanded. Companies transacting in US dollars — which describes the vast majority of international trade — are at risk of violating OFAC sanctions programs, potentially triggering civil penalties of up to $1.3 million per transaction and, in egregious cases, criminal prosecution.

Key OFAC Enforcement Trends Affecting UAE Businesses in 2025

OFAC's enforcement posture has evolved substantially in recent years. Based on our monitoring of OFAC Enforcement Actions and regulatory guidance, the following trends are particularly relevant to UAE-based businesses:

1. Secondary Sanctions Risk and UAE Correspondent Banking

Secondary sanctions — which target non-US persons who deal with sanctioned parties — have become one of the most significant risks for UAE companies. The use of UAE-based financial institutions as a conduit for transactions involving sanctioned jurisdictions such as Iran, Russia, and North Korea has drawn significant OFAC scrutiny. In 2024 alone, OFAC settled more than a dozen cases involving payments that transited through UAE correspondent banking relationships.

2. Heightened Focus on Russian Sanctions Evasion

Following the expansion of Russia-related sanctions programs after February 2022, OFAC has placed the UAE squarely in its sights as a potential evasion hub. Companies involved in the trade of dual-use goods, electronics, luxury items, and financial services should be especially vigilant about ensuring their customers and counterparties are not front companies facilitating sanctions evasion.

3. Virtual Assets and Crypto Compliance

As Dubai has positioned itself as a global hub for virtual assets and blockchain technology, OFAC's Cyber-related sanctions designations and its guidance on virtual currency compliance have become increasingly relevant. Companies operating in the VARA-regulated ecosystem must conduct thorough blockchain analytics and OFAC screening on all counterparties.

Building a Robust OFAC Compliance Program

OFAC has published detailed guidance on what constitutes an effective sanctions compliance program. The core elements required are:

• Management Commitment: Senior leadership must actively support and resource the compliance function, including appointing a dedicated OFAC Compliance Officer.
• Risk Assessment: A documented, risk-based assessment of the company's exposure to OFAC-sanctioned countries, persons, and activities — conducted at least annually.
• Internal Controls: Automated screening of all counterparties, transactions, and goods against the SDN List and other OFAC sanctions lists, with documented escalation procedures.
• Testing and Auditing: Regular internal audits and independent testing of the sanctions compliance program to identify gaps before OFAC does.
• Training: Role-appropriate training for all employees, with enhanced training for personnel in higher-risk functions such as trade finance, correspondent banking, and business development.

The Voluntary Self-Disclosure Framework

One of the most powerful tools available to companies that discover potential OFAC violations is the voluntary self-disclosure (VSD) process. OFAC's enforcement guidelines treat VSD as a significant mitigating factor, potentially reducing penalties by up to 50% compared to cases where violations are discovered by OFAC. However, the decision to self-disclose is complex and requires careful legal analysis — a poorly structured VSD can actually worsen a company's position if not properly prepared and presented.

Shaun Gregory Morgan has guided numerous UAE-based companies through the VSD process, securing favorable resolutions that have allowed businesses to continue operating without disruption to their core commercial activities.

Practical Steps for UAE Companies in 2025

Given the current enforcement environment, we recommend that UAE-based companies take the following immediate steps:

• Conduct a comprehensive OFAC risk assessment covering all business lines, geographies, and counterparties.
• Implement or update automated SDN and OFAC sanctions list screening across all transaction workflows.
• Review all correspondent banking relationships and trade finance arrangements for potential secondary sanctions exposure.
• Ensure your virtual asset compliance program includes blockchain analytics tools approved for OFAC screening purposes.
• Review any Russia-nexus business activities for potential violations of OFAC's expanded Russia/Belarus sanctions programs.
• Brief your board and senior management on OFAC risks specific to your business sector and geography.

Conclusion

OFAC compliance is one of the most complex and rapidly evolving areas of international regulatory law. For UAE-based businesses operating in today's environment, proactive engagement with qualified OFAC counsel is not a luxury — it is essential risk management. The cost of getting it wrong, measured in penalties, reputational damage, and loss of access to the US financial system, vastly exceeds the cost of doing it right.

If you have concerns about your company's OFAC exposure or compliance posture, we encourage you to contact our office to arrange a confidential consultation.