OFAC Enforcement: An Overview
The Office of Foreign Assets Control (OFAC) administers and enforces U.S. economic and trade sanctions with broad, extraterritorial reach. Unlike most areas of regulatory law, OFAC violations carry strict liability — there is no requirement for OFAC to prove that the violating party intended to breach sanctions, or even knew that a sanctions nexus existed. A single transaction clearing a U.S. correspondent bank that benefits a sanctioned party can give rise to a civil penalty, regardless of where the transaction originated and regardless of the knowledge or intent of the parties.
For Dubai businesses, the practical implications are stark. The UAE's deep integration into global dollar-clearing networks means that virtually every U.S. dollar transaction — whether a trade finance payment, an investment transfer, or a real estate purchase price — routes through the United States and is therefore potentially subject to OFAC scrutiny. The extraterritorial reach of OFAC's enforcement authority has been exercised repeatedly against non-U.S. financial institutions and companies, including those in the Middle East, reinforcing that geographic distance from the U.S. provides no protection.
OFAC Civil vs Criminal Enforcement
The vast majority of OFAC enforcement actions are civil in nature, resolved through settlement agreements, civil penalty notices, or cautionary letters. Criminal enforcement — pursued in coordination with the Department of Justice — is reserved for wilful violations and typically involves individual executives or compliance officers who deliberately facilitated sanctions evasion. However, even purely civil cases can be professionally and financially devastating, and the risk of referral to DOJ for criminal prosecution is always present in cases involving apparent wilfulness or deceptive conduct.
Civil OFAC Penalties: Maximum Amounts (2024)
OFAC adjusts its civil penalty maximums annually for inflation. The following table reflects the current maximums per transaction for the principal sanctions programmes relevant to Dubai businesses:
| Sanctions Programme | Maximum Civil Penalty (per transaction) | Notes |
|---|---|---|
| Iran / North Korea / SDN (IEEPA) | $1,423,956 | Highest exposure; Iran Transactions & Sanctions Regulations |
| Most OFAC Programmes (IEEPA) | $368,136 | Applies to most country and thematic programmes |
| Russia (Ukraine-/Russia-Related) | $356,579 | EO 13685 / EO 14024 violations |
| Cuba (TWEA) | $91,946 | Trading With the Enemy Act basis |
| Criminal Violations (Wilful) | $1M+ / 20 years | Per count; individuals face imprisonment |
These maximums apply per transaction. In cases involving multiple transactions — which is common in financial institution enforcement actions — the aggregate exposure can be hundreds of millions of dollars. Penalty calculations begin from the statutory maximum and are then adjusted upward or downward based on OFAC's aggravating and mitigating factors.
Key Factors in OFAC Penalty Determination
OFAC's Economic Sanctions Enforcement Guidelines set out the factors it considers in determining the appropriate civil penalty. Understanding these factors — and presenting them strategically — is the foundation of an effective enforcement defence:
- Egregious vs non-egregious classification: The most consequential initial determination. Egregious violations (wilful, reckless, involving management, or harmful to sanctions objectives) attract the statutory maximum as the base penalty. Non-egregious violations attract a significantly lower base.
- Voluntary self-disclosure: Filing a complete, accurate, and timely VSD before OFAC becomes aware of a violation can reduce the base penalty by 50% in non-egregious cases, and is treated as a significant mitigating factor in egregious cases.
- Compliance programme: The existence of a pre-violation OFAC compliance programme — even an imperfect one — is a significant mitigating factor. A robust programme that itself detected the violation is among the most powerful mitigating arguments available.
- Senior management involvement: Personal involvement of senior management in a violation is a powerful aggravating factor that can push a case toward egregious classification and dramatically increase the penalty.
- Harm to sanctions objectives: Whether the violation resulted in any actual benefit to sanctioned parties or undermined U.S. foreign policy or national security objectives is assessed as both an egregiousness factor and a penalty factor.
- Remediation: Steps taken after discovery of a violation — including disciplinary action, enhanced controls, and cooperation with OFAC — are treated as mitigating factors and can significantly reduce the final penalty.
Voluntary Self-Disclosure (VSD): The Most Critical Decision
The decision of whether to file an OFAC Voluntary Self-Disclosure is the single most consequential decision an organisation faces when it discovers a potential sanctions violation. It requires careful legal analysis of the facts, the applicable sanctions programme, the likelihood of OFAC discovering the violation independently, and the strength of available mitigating arguments. This decision must be made with expert legal counsel — and made quickly.
Benefits of Filing an OFAC VSD
- 50% base penalty reduction: In non-egregious cases, a timely VSD automatically reduces the base penalty amount by half — a reduction that can represent millions of dollars in savings.
- Demonstrates good faith: A VSD is the clearest possible signal to OFAC that the violating party takes sanctions compliance seriously and is committed to remediation, making a favourable settlement outcome substantially more likely.
- Preserves control of the narrative: By disclosing on your own terms, you control the framing of the violation and can present the full mitigating context before OFAC forms its own view of events.
- Reduces criminal exposure: A prompt VSD demonstrates the absence of wilfulness — the key element of criminal sanctions violations — and reduces the likelihood of DOJ referral.
When to File and What to Include
A VSD must be filed before OFAC becomes aware of the violation through other means — for example, through a bank's OFAC report, a counterparty disclosure, or OFAC's own investigation. The VSD itself must be complete and accurate: a VSD that omits material facts, or that is filed only after OFAC has already initiated an investigation, does not receive full mitigating credit. Shaun Gregory Morgan guides clients through every aspect of VSD preparation — from the initial internal investigation, through privilege considerations, to the drafting and submission of the disclosure itself.
Received an OFAC Notice? Act Immediately.
If you have received an OFAC Pre-Penalty Notice, Subpoena, or administrative demand, you have a limited window — typically 30 days — to file a written response. This response is your primary opportunity to present mitigating factors, contest the alleged violation, and negotiate the penalty. Engaging specialist counsel immediately is essential. Contact Shaun Gregory Morgan now for emergency OFAC enforcement advice: +971 4 327 98 97.
The OFAC Enforcement Investigation Process
Understanding the OFAC enforcement timeline enables effective strategic planning at each stage of a case:
- Investigation: OFAC investigates potential violations through its own intelligence, information provided by U.S. financial institutions under Bank Secrecy Act obligations, VSD filings, and counterparty referrals. OFAC may issue administrative subpoenas for records.
- Pre-Penalty Notice (PPN): If OFAC concludes that a violation occurred and that a civil penalty is appropriate, it issues a PPN setting out the alleged violations, the proposed penalty amount, and the aggravating and mitigating factors it has applied.
- Response period: The recipient of a PPN has 30 days (60 days for complex cases with extension) to file a written response contesting the violation, the penalty amount, or both. This is the critical phase for presenting legal and factual arguments.
- Settlement negotiations: In the majority of cases, OFAC enters into settlement discussions following receipt of the PPN response. These negotiations — which can last months or years — determine the final penalty amount and the terms of the compliance commitments required.
- Final Penalty Notice: If no settlement is reached, OFAC issues a Final Penalty Notice. The recipient may then pay the penalty or request an administrative hearing before an administrative law judge.
- Administrative hearing: Administrative hearings are rare — the vast majority of OFAC enforcement actions are resolved by settlement — but remain an option for cases where the violation or penalty is genuinely contestable.
OFAC Settlement Negotiations
The overwhelming majority of OFAC enforcement cases — well over 90% — are resolved through negotiated settlement agreements rather than litigated to a Final Penalty Notice. OFAC settlement negotiations are therefore not a peripheral aspect of enforcement defence: they are the process. An effective settlement strategy involves presenting the strongest possible combination of legal arguments challenging the violation, factual arguments establishing non-egregiousness, mitigating factors under the enforcement guidelines, and remediation commitments that satisfy OFAC's compliance expectations. As a former OFAC Enforcement Division insider, Shaun Gregory Morgan has unique insight into how OFAC evaluates settlement submissions and what arguments are most likely to move the needle on penalty amounts.
Immediate Steps If You Discover an OFAC Violation
The actions taken in the hours and days immediately following discovery of a potential sanctions violation can determine the difference between a minor cautionary letter and a multi-million dollar penalty. The following steps should be taken without delay:
- Preserve all records: Immediately preserve all documents, communications, and records related to the potential violation. Destruction of relevant records — even inadvertent destruction under routine document retention policies — can be treated as obstruction.
- Engage a specialist OFAC lawyer: Contact Shaun Gregory Morgan immediately. Attorney-client privilege from the outset is essential to protect internal investigation documents and legal advice from OFAC disclosure.
- Cease the violating conduct: If the potential violation involves an ongoing transaction or relationship, cease that activity immediately pending legal advice. Continuing to engage in a sanctionable transaction after discovery dramatically increases penalty exposure.
- Conduct a privileged internal investigation: Under legal privilege, conduct a thorough internal investigation to understand the full scope of the violation — including whether additional transactions may be affected — before making any disclosures.
- Consider the VSD decision: Based on the facts revealed by the internal investigation, make a strategic decision about whether and when to file a Voluntary Self-Disclosure with legal counsel.
- Implement immediate remediation: Take concrete steps to remediate the controls failure that led to the violation — enhanced screening, personnel changes, policy updates — and document those steps. Remediation evidence presented to OFAC is a powerful mitigating factor.
How Shaun Gregory Morgan's OFAC Background Benefits Your Case
Former OFAC Enforcement Division experience is not merely a credential — it is a strategic advantage that directly benefits clients in enforcement matters. Shaun Gregory Morgan understands how OFAC investigators evaluate evidence, how enforcement attorneys analyse penalty factors, and what arguments are most persuasive in settlement negotiations. This insider knowledge enables more accurate risk assessment, more targeted legal arguments, and ultimately, better outcomes. For Dubai businesses facing the most consequential regulatory threat they are likely ever to encounter, that experience is the difference between an acceptable resolution and a catastrophic one.