OFAC Sanctions FAQ:
Authoritative Answers
for Dubai Businesses

OFAC — the Office of Foreign Assets Control — is a highly specialized financial intelligence and enforcement agency operating under the U.S. Department of the Treasury. Its core mandate is to administer and enforce economic and trade sanctions in support of U.S. foreign policy and national security priorities.

OFAC targets foreign governments, regimes, geographic regions, entities, and individuals that threaten U.S. interests. These targets include entities associated with international terrorism, the proliferation of weapons of mass destruction, narcotics trafficking, transnational organized crime, and malicious cyber activities.

OFAC has the power to block assets within U.S. jurisdiction, prohibit transactions by U.S. persons, and levy severe civil monetary penalties. Crucially, OFAC enforcement is a strict liability system. This means that a violation does not require intent or knowledge; even an inadvertent transaction that clears through a U.S. financial institution can trigger massive corporate penalties.

The Specially Designated Nationals and Blocked Persons List (commonly known as the SDN List) is OFAC's primary enforcement roster. It contains the names of thousands of individuals, corporate entities, trusts, shipping vessels, and aircraft that are designated under various country-specific and thematic sanctions programmes.

Once a person or entity is placed on the SDN List:

• All of their property and interests in property that are in the United States or come within the possession or control of a U.S. person are "blocked" (frozen).
• U.S. persons — including U.S. citizens, permanent residents, entities organized under U.S. law, and foreign branches of U.S. firms — are strictly prohibited from engaging in any transaction or dealing with them.
• Because global banking systems rely heavily on U.S.-dollar clearing networks, foreign banks routinely screen transactions against the SDN List. Consequently, being listed as an SDN effectively isolates the target from the international financial system.

To understand screening requirements and the administrative process to lift these restrictions, visit our dedicated OFAC Sanctions List guide.

Dubai's position as a premier global hub for trade, logistics, and financial services exposes local businesses to significant OFAC risk. Under U.S. law, OFAC sanctions have a vast extraterritorial reach that impacts non-U.S. companies in three main ways:

1. U.S. Dollar Transactions: Every transaction denominated in U.S. dollars must clear through a U.S. correspondent bank in New York. This clearing process brings the transaction under U.S. jurisdiction. If a Dubai company processes a USD wire payment involving a sanctioned party, that transaction represents an unauthorized export of services from the United States, exposing the Dubai firm to direct OFAC liability.
2. U.S. Elements: Any transaction involving a U.S. person (such as an American employee in a Dubai office), U.S. branch offices, or U.S.-origin goods or technologies falls directly under OFAC jurisdiction.
3. Secondary Sanctions: In certain high-stakes regimes (particularly Iran and Russia), the U.S. government maintains "secondary sanctions." These authorize the U.S. Treasury to penalize non-U.S. companies — even in transactions with no U.S. nexus — by completely severing their access to the U.S. banking system or designating them directly as SDNs.

Therefore, maintaining robust compliance that aligns with UAE Central Bank regulations while respecting international realities is essential for protecting the commercial viability of Dubai-based enterprises.

The U.S. maintains a comprehensive embargo on Iran, primarily governed by the Iranian Transactions and Sanctions Regulations (ITSR, 31 C.F.R. Part 560). Under the ITSR, U.S. persons are prohibited from exporting, importing, investing in, or facilitating any commercial transaction involving Iran or the Government of Iran.

For Dubai and the wider Gulf region, the secondary sanctions implications are particularly severe. Legislation such as the Comprehensive Iran Sanctions, Accountability, and Divestment Act (CISADA) and the Iran Freedom and Counter-Proliferation Act (IFCA) target foreign financial institutions and trade facilitators. Engaging in significant transactions involving Iran’s energy, shipping, shipbuilding, or automotive sectors can result in foreign entities being shut out of the U.S. financial system or placed on the SDN List.

Given the historical and geographic commercial ties in the region, UAE companies must maintain flawless compliance protocols to ensure that no transactions route through U.S. dollar-clearing channels or violate secondary sanctions limits. To review these frameworks in detail, see our OFAC Iran Sanctions page.

Since 2014, and dramatically expanding since 2022, U.S. sanctions against Russia have become the most complex, dynamic sanctions regime in history. Governed by Executive Order 14024, the Countering America's Adversaries Through Sanctions Act (CAATSA), and multi-agency export controls, these regulations target the core of the Russian economy.

Key components of the Russia sanctions framework include:

• SDN Designations: All major Russian state-owned banks, oligarchs, defense firms, and technology companies are blocked.
• Sectoral Sanctions (SSI List): Specific restrictions on debt, equity, and credit terms for firms in Russia's financial, energy, and defense sectors.
• Price Cap Mechanisms: Prohibitions on U.S. maritime service providers facilitating the trade of Russian crude oil and petroleum products unless sold below specific G7 price limits.
• Evasion Enforcement: OFAC actively prosecutes and designates third-country entities (including those in transit and logistics hubs) accused of acting as facilitators or transshipment points for restricted industrial or electronic components destined for Russia.

Dubai businesses engaging in commodity trading, trade finance, or high-value real estate must perform deep-dive beneficial ownership audits to avoid indirect Russia sanctions exposure. Read our OFAC Russia Sanctions analysis for detailed insights.

The OFAC 50% Rule is one of the most critical and challenging principles in sanctions compliance. First issued in 2008 and revised in 2014, the rule states that any entity owned 50% or more, directly or indirectly, in the aggregate by one or more blocked persons (SDNs) is itself considered blocked.

Crucially, this auto-blocking occurs **automatically by operation of law**, regardless of whether the sub-entity is specifically named on the SDN List or the public Federal Register.

Key aspects of the 50% Rule include:

• Aggregate Ownership: If SDN "A" owns 25% of Company "X" and SDN "B" owns 26% of Company "X", the company is blocked because the aggregate ownership by blocked persons is 51% (more than 50%).
• Indirect Ownership: Ownership is tracked down the corporate chain. If an SDN owns 60% of Company "A", and Company "A" owns 60% of Company "B", then Company "B" is considered blocked (as Company "A" is treated as 100% blocked, making its 60% holding in Company "B" a blocked interest).
• Control vs. Ownership: While the 50% Rule formally relies on ownership percentage, OFAC strongly cautions that entities *controlled* (but not owned 50%) by an SDN are extremely high-risk. U.S. banks will routinely freeze transactions involving entities controlled by SDNs to avoid facilitation risks.

Firms must conduct rigorous Ultimate Beneficial Ownership (UBO) screening to identify hidden corporate layers that might trigger the 50% Rule.

Yes. OFAC has issued explicit guidance stating that sanctions compliance obligations apply equally to transactions involving virtual currencies, digital assets, and blockchain technology. OFAC does not make a distinction between fiat and digital currency in its enforcement.

For Virtual Asset Service Providers (VASPs), crypto exchanges, and OTC desks operating under VARA (Dubai) or FSRA (ADGM) frameworks, compliance involves:

• Wallet Screening: OFAC includes verified digital wallet addresses (Bitcoin, Ethereum, USDC, etc.) directly on the SDN List. VASPs must screen transaction counterparties against these addresses.
• Geofencing and IP Blocking: Active blocking of users originating from comprehensively sanctioned jurisdictions (such as Iran, Syria, North Korea, Crimea, etc.).
• Blockchain Analytics: Using advanced forensic tools to identify transactions originating from high-risk mixers, peer-to-peer pools, or wallets associated with illicit actors and SDN fronts.

OFAC has taken aggressive enforcement action against international cryptocurrency exchanges that failed to implement sufficient sanctions screening, resulting in significant multimillion-dollar civil penalties.

An OFAC Voluntary Self-Disclosure is a formal administrative submission by an entity that has discovered an apparent violation of U.S. sanctions law. By disclosing the violation to OFAC before the agency detects it through bank audits, subpoenas, or intelligence channels, the company can secure massive reductions in civil liability.

Under OFAC's Economic Sanctions Enforcement Guidelines:

• A timely, complete VSD serves as a significant mitigating factor that automatically reduces the base civil penalty amount by **50% or more**.
• In non-egregious cases, a well-drafted VSD often results in a "Cautionary Letter" or a "No-Action" finding, resolving the matter with zero financial penalties.
• A VSD must be comprehensive, presenting a complete forensic review of the transactions, identifying the root causes, and documenting the immediate implementation of robust corrective actions.

However, filing a VSD is a highly strategic legal decision. A poorly framed disclosure that fails to address key compliance failures or is filed late can trigger formal enforcement. Engaging an experienced OFAC lawyer to analyze the case under attorney-client privilege before filing is critical. For details on how we manage this, see our OFAC Enforcement Defence page.

OFAC civil monetary penalties are severe and are updated annually to account for inflation. The statutory maximum penalty per violation is currently set at over $360,000 or twice the transaction value, whichever is greater, under the International Emergency Economic Powers Act (IEEPA).

OFAC calculates actual penalty assessments through a structured, multi-step process outlined in its guidelines:

1. Transaction Value: The base penalty is anchored to the value of the transactions involved in the violation.
2. Egregiousness Determination: OFAC reviews whether the conduct was "egregious" (reckless, intentional, or part of a systematic scheme) or "non-egregious" (accidental or administrative). Egregious violations carry base penalties close to the statutory maximum.
3. VSD Mitigation: If a VSD was filed, the base penalty is immediately halved.
4. Aggravating/Mitigating Factors: OFAC adjusts the final penalty downward or upward based on the quality of the company's pre-existing compliance programme, its level of cooperation with investigators, and its history of prior violations.

Because multiple transactions are often grouped into an investigation, cumulative base penalties can quickly rise into millions of dollars. Early legal defense is essential to achieve maximum mitigation.

An OFAC licence is an official administrative authorization that permits transactions that would otherwise be strictly prohibited by sanctions regulations. OFAC issues two types of licences:

• General Licences: Broad authorizations that permit certain categories of transactions for all eligible persons (e.g., humanitarian trade or legal representation) without requiring an individual application. These are published directly in the Federal Register.
• Specific Licences: Case-by-case authorizations issued to specific individuals or companies upon written request. A Specific Licence application must be submitted through OFAC's online portal.

To secure a Specific Licence, the applicant must present a compelling, evidence-backed legal petition. The submission must detail all parties involved, outline the proposed transaction, explain why the request falls within U.S. foreign policy interests or licensing precedents, and provide comprehensive compliance safeguards.

Processing timelines for Specific Licences are lengthy, often taking between 6 to 18 months. Having an experienced attorney structure the application correctly is crucial for avoiding administrative delays or outright denials. Review the process on our OFAC Licensing page.

Yes. OFAC maintains a formal administrative process for SDN List removal (delisting) under **31 C.F.R. § 501.807**. Administrative delisting is not based on political lobbying; it is a highly structured, evidence-based legal proceeding.

A successful delisting petition must demonstrate a "change in circumstances" or establish that the original designation was factual error. This requires the petitioner to:

• Demonstrate that the problematic conduct that triggered the designation has completely ceased.
• Verify the implementation of rigorous internal corporate restructurings, including severing ties with blocked business partners, divesting sanctioned ownership shares, or replacing management.
• Implement an independent, third-party audited compliance programme to prevent recurrence.
• Respond to extensive "Questionnaires" issued by OFAC investigators during the review process.

Shaun Gregory Morgan's experience as an adviser within the OFAC Enforcement Division gives clients unique insight into the specific evidence and corporate governance changes OFAC expects to see before granting delisting. Detailed steps are outlined in our OFAC Sanctions List guide.

Managing U.S. sanctions risk from the Middle East requires a dual perspective. A corporate team cannot rely solely on a standard local firm that lacks direct U.S. regulatory experience, nor can they rely on a generic Washington D.C. firm that does not understand the unique commercial structures of the UAE.

Engaging Shaun Gregory Morgan in Dubai provides critical advantages:

• Direct Enforcement Background: As a former consultant to the U.S. Treasury's OFAC Enforcement Division, Mr. Morgan understands exactly how federal investigators build cases, evaluate compliance, and negotiate settlements.
• On-the-Ground Presence: Being based in the Dubai International Financial Centre (DIFC) allows for immediate, face-to-face counsel and crisis response under strict attorney-client privilege.
• Local Context, Global Standard: Our advisory integrates seamlessly with UAE Central Bank frameworks, DFSA/DIFC compliance standards, and local commercial realities, ensuring a compliance framework that protects your business without suffocating operations.

Protecting a multi-jurisdictional business requires proactive, specialist legal representation. Get in touch via our Contact page to arrange a confidential discussion.