Mr. Sanctions

Category: Enforcement

  • February 25, 2026: OFAC Enforcement costs an individual $3,777,000 for 20 Syrian sanctions violations

    Gemini’s quick summary:

    Based on the enforcement release from the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) dated February 25, 2026, here is the reformatted and simplified summary of the action.

    What Happened

    A U.S. citizen (referred to as “U.S. Person-1”) worked as a high-level executive and board member for four real estate companies based in Syria. Even though the U.S. had strict sanctions against doing business in Syria at the time, this individual continued to manage these companies between 2018 and 2021. Their work included tasks like:

    • Reviewing and signing off on financial records.
    • Approving money spent on business operations and employee pay.
    • Overseeing the collection of service fees.

    Because these activities provided “managerial services” to Syrian businesses, they broke U.S. law. This case is a reminder that U.S. citizens must follow these rules no matter where in the world they live.

    The Penalty

    U.S. Person-1 agreed to pay $3,777,000 to settle the case. OFAC determined that the violations were “egregious,” meaning they were particularly serious, and noted that the individual did not come forward to report the mistakes voluntarily.

    Analysis of Factors

    OFAC used its official Enforcement Guidelines to decide on this penalty by looking at several “General Factors”:

    • Willfulness and Awareness (Aggravating Factor): * Applicable General Factor:General Factor A (Willfulness or Recklessness) and General Factor B (Awareness of Conduct).
      • Explanation: The individual was a sophisticated executive who held senior roles in multiple international companies. Given their position, they either knew or should have known that managing Syrian companies was illegal under U.S. sanctions.
    • Harm to Sanctions Program (Aggravating Factor):
      • Applicable General Factor: General Factor C (Harm to Sanctions Program Objectives).
      • Explanation: By providing high-level management to Syrian entities, the individual directly undermined U.S. foreign policy goals intended to pressure the Syrian regime.
    • Lack of Disclosure (Aggravating Factor):
      • Applicable General Factor: General Factor J (Voluntary Self-Disclosure).
      • Explanation: The individual did not report these activities to the government; instead, the government discovered them through an investigation supported by the FBI.
    • Cooperation (Mitigating Factor):
      • Applicable General Factor: General Factor I (Cooperation with OFAC).
      • Explanation: While the individual broke the law, they eventually cooperated with the investigation, which helped prevent an even higher fine.

    What are the Takeaways?

    This case provides several important lessons for staying compliant with U.S. laws:

    • Sanctions Apply to People, Not Just Places: If you are a U.S. citizen or permanent resident (Green Card holder), you must follow U.S. sanctions even if you live and work entirely outside of the United States.
    • Management is a “Service”: You don’t have to send money to a sanctioned country to break the law. Providing “managerial services”—like approving budgets or signing documents—is also a violation.
    • Individual Responsibility: OFAC will hold individuals personally accountable for sanctions violations, especially when they hold senior leadership roles.
    • The Importance of Vetting Roles: Before accepting a board seat or an executive position in a foreign company, U.S. persons should conduct a thorough “risk assessment” to ensure the company does not operate in sanctioned regions or with sanctioned people.

    Other Resources

    For more information on how to follow these rules or to see other recent cases, you can visit:

    • OFAC’s Recent Actions Page: A list of the latest updates to sanctions lists and enforcement news.
    • Civil Penalties Chart: A detailed summary of fines and settlements paid by companies and individuals for the current year.

    Actually, Gemini did leave out two minor points in the scheme of things: the individual signed a tolling agreement, and the usual “no enforcement actions in the last 5 years” factor. Minor enough that I didn’t feel the need to have it re-do the response.

    The Enforcement Release:

    20260225_individualDownload

    —

    , , ,

  • Notice to Exporters 2026/03: Illegal Exports lead to jail

    NTE 2026/03: company director jailed for illegal export

    Introduction

    A company director has been jailed for attempting to export military‑grade night vision rifle sights to Hong Kong without the required licence.

    Summary

    Key facts of the case include:

    • Steven Gates, 47, from Wakefield, attempted to export 8 thermal imaging rifle sights classified as ML1d under the UK Military List
    • he misdescribed the items as “low‑value cameras” to conceal their controlled status
    • Border Force seized 3 scopes at Manchester Airport in February 2022 and another 5 in April 2023
    • a search of Gates’ home uncovered evidence of 10 further unlicensed shipments to Hong Kong
    • he was convicted under sections 68 and 167 of the Customs and Excise Management Act 1979
    • Gates received a 2 year and 1 month prison sentence at Leeds Crown Court on 6 February 2026

    HMRC enforcement

    The UK operates strict export controls and a partial arms embargo on China and Hong Kong.

    HMRC has increased enforcement significantly, with 51 criminal investigations in 2024 to 2025, up from 5 in 2021 to 2022.

    HMRC statement

    Edwige Hill, Deputy Director, Fraud Investigation Service, said:

    “This was a calculated attempt to bypass the UK’s strict licensing regime. Anyone seeking to export military items without a licence will be detected and brought to justice.”

    Voluntary disclosures

    HMRC operates a voluntary disclosure process for unlicensed exports of strategic or sanctioned goods.

    Outcomes can include:

    • educational visits
    • written warnings
    • compound settlements
    • referral for prosecution

    Information on recent compound settlements is available through the Export Control Joint Unit’s Notices to Exporters collection.

    Guidance on how to submit a voluntary disclosure is provided in the export controls for military goods, software and technology guidance.

    —

    , , , , ,

  • OFSI teaches us lessons about the Bank of Scotland enforcement action

    From OFSI’s blog:

    Sanctions compliance in practice: lessons from OFSI’s £160,000 Bank of Scotland penalty

    OFSI, 23 February 2026 – OFSI Blog

    In January 2026, OFSI published the details of an £160,000 monetary penalty imposed on Bank of Scotland Plc, a subsidiary of the Lloyds Banking Group, for breaching the Russia financial sanctions regime. 

    The lessons in this case go beyond one bank and one customer. OFSI’s published outcomes demonstrate how OFSI assesses breaches, the circumstances surrounding them, and how weaknesses in screening, escalation and training are taken into account when breaches have occurred. These lessons can help firms better understand how to run sanctions controls in practice, and how weaknesses in screening, escalation and training can expose firms to the risk of breaching.

    UK financial sanctions apply to any conduct in the UK and to all UK persons (including UK legal entities) anywhere in the world.

    Lesson 1: Screening data and configuration really matter

    OFSI strongly encourages firms to utilise all information available to them to optimise sanctions controls relative to their risk. Firms are advised to assess and employ appropriate resources to enhance the effectiveness of such systems.

    In this case, Lloyds Banking Group had taken measures to implement sanctions screening. However, its automated sanctions systems failed to detect a spelling variation of a designated individual’s name.

    What this means for you:

    • Ask whether your screening can cope with spelling and transliteration variants.
    • Where your risk justifies it, consider enriched screening and commercial list providers alongside the new UK Sanctions List.

    Lesson 2: Automation is not a safety net

    This case illustrates that there are inherent risks associated with automated sanctions screening. It is essential that firms establish robust and explicit contingency procedures.

    Internal policies should provide robust and explicit guidance to staff regarding the escalation of potential sanctions concerns. This is particularly pertinent for areas of business that are more exposed to sanctions risk, such as those involving Politically Exposed Persons (PEPs).

    What this means for you:

    • Make sure front‑line teams know when to escalate, who to contact and how – not just that they “should escalate”.

    Lesson 3: Training must match today’s sanctions landscape

    The sanctions landscape has evolved significantly since the Russian invasion of Ukraine in February 2022, and continues to develop with ever-shifting geopolitical events. It is imperative that all training and associated materials relating to sanctions are regularly reviewed and updated.

    What this means for you:

    • Training content must be regularly reviewed and updated to accurately reflect relevant regulatory and geographical developments to ensure continued compliance.

    Lesson 4: Voluntary disclosure can shape the outcome

    This case is an example of prompt, voluntary disclosure of a potential breach. Lloyds Banking Group, on behalf of Bank of Scotland, made an initial notification within two weeks of identifying a potential breach. OFSI seeks to reward prompt and complete voluntary disclosures through penalty discounts, which alongside co-operation can result in a discount of up to 30% under new guidance.

    What this means for you:

    • You should report suspected breaches to OFSI as soon as practicable.
    • Where full disclosure is not possible, a person should make an early disclosure with partial information on the basis that they are still working out the facts and will make a further and full disclosure as soon as possible.
    • Reporting breaches protects the integrity of financial sanctions and assists government and law enforcement agencies in tackling serious crime.

    What firms should do next

    This case shows that OFSI is focused not only on whether firms have sanctions controls, but on how effectively those controls operate in practice. From the way screening data is configured, to how concerns are escalated, how often training is refreshed, and how quickly potential breaches are reported.

    Firms with UK touchpoints, including those operating internationally, should:

    • review their sanctions screening, escalation procedures and training considering these lessons
    • ensure they understand and comply with their reporting obligations, including reporting “as soon as practicable” where required.

    You can read the full penalty notice here: https://www.gov.uk/government/publications/imposition-of-monetary-penalty-bank-of-scotland-plc

    Further information and guidance on reporting information to OFSI is available here: https://www.gov.uk/government/organisations/office-of-financial-sanctions-implementation

    —

    , , ,

  • February 19, 2026: OFSI webinar on its enforcement consultation

    Office of Financial Sanctions Implementation HM Treasury

    OFSI Webinar: Civil Enforcement Processes – Updated Guidance

    Dear all,

    OFSI is pleased to invite you to our webinar on Tuesday 3 March, 14:00-15:00, covering the recently published consultation response on improving civil enforcement processes for financial sanctions. Feedback from this consultation has informed a strengthened enforcement framework, and OFSI updated its guidance on 9 February 2026 to reflect these enhancements. The guidance can be found here.

    This session will provide an opportunity to walk through the key changes in OFSI’s enforcement and monetary penalties guidance and highlight important points for industry. The webinar is designed to support understanding of the updates and their implementation.

    To register, please click here

    If you have any questions about the webinar or would like to submit a question in advance, please contact the OFSI Enforcement Consultation Team at ofsienforcementconsultation@hmtreasury.gov.uk. Pre‑submitted questions should be sent by close of play 24 February.

    Kind regards,

    OFSI Enforcement Consultation Team

    —

    , , , , ,

  • February 12, 2026: OFAC Settles for $1.7MM from IMG Academy

    Settlement Agreement between the U.S. Department of the Treasury’s Office of Foreign Assets Control and IMG Academy, LLC

    The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) today announced a $1,720,000 settlement with IMG Academy, LLC to settle its potential civil liability for 89 apparent violations of OFAC counternarcotics sanctions. Between 2019 and 2025, IMG Academy dealt in the property or interests in property of two Specially Designated Nationals (SDNs) sanctioned for their ties to a sanctioned Mexico-based drug cartel. Specifically, IMG Academy entered into yearly tuition agreements with the SDNs and received and processed payments pursuant to those agreements. The settlement amount reflects OFAC’s determination that IMG Academy’s conduct was non-egregious and not voluntarily disclosed.

    Here’s Gemini’s take:

    Based on the OFAC Enforcement Release regarding IMG Academy, LLC (the document referenced by the URL provided), here is the reformatted and simplified breakdown as requested.

    What Happened

    The Core Issue

    IMG Academy, a Florida-based sports prep school, agreed to settle its legal liability after it was discovered they had been doing business with two people on the U.S. sanctions list. These individuals were sanctioned due to their ties to a major Mexican drug cartel.

    The Two Sets of Violations

    The school entered into two separate tracks of business dealings:

    • Customer 1 (SDN 1): Between 2018 and 2022, the school signed three separate yearly tuition contracts with this individual.
    • Customer 2 (SDN 2): During that same period, the school signed another three yearly tuition contracts with this second individual.

    In both cases, the school provided “elite academic and athletic training” for the children of these individuals. Even though the parents’ names were clearly listed on the U.S. government’s “No-Business” list (the SDN List), the school continued to invoice them, communicate with them about payments, and process their money.

    How the Money Moved

    The school didn’t just take one-off payments. They processed 89 total transactions over several years. This included:

    1. Direct Charges: Using credit cards the sanctioned parents had left on file.
    2. Third-Party Wires: Accepting wire transfers from other people and companies in Mexico intended to cover the students’ costs.

    Description of the Apparent Violations

    IMG Academy appears to have violated § 598.202 of the Foreign Narcotics Kingpin Sanctions Regulations. Essentially, the school “dealt in the property” of sanctioned persons by providing services in exchange for their money, which is a violation of federal law.

    The Bottom Line

    While the school eventually reported the issue, they only did so after the government had already started an investigation, meaning they did not get credit for a “voluntary” disclosure.

    The Penalty

    The final settlement amount is $1,720,000.

    Violation Breakdown

    OFAC categorized all 89 violations as non-egregious (meaning they weren’t considered a “worst-case scenario” of intentional defiance), but because the school didn’t self-report before the investigation began, the penalty was still substantial.

    • Total Violations: 89
    • Total Egregious Violations: 0
    • Total Non-Egregious Violations: 89
    • Base Penalty: $1,720,000 (The “schedule” amount for non-disclosed, non-egregious violations).

    Mitigating and Aggravating Factors

    Aggravating Factors (Why the penalty remained high)

    • Failure to Perform Basic Checks
      • General Factor: Reckless Disregard. The school failed to run the parents’ names through any sanctions screening software, even though the parents provided their real names which matched the SDN list exactly.
    • Management Awareness of the Relationship
      • General Factor: Awareness of Conduct. While the school might not have realized the parents were “sanctioned,” they had actual knowledge of the transactions. They sent invoices directly to the parents and spoke with them regularly about their accounts.
    • Providing a “Safety Valve” for Cartel Money
      • General Factor: Harm to Sanctions Program. By accepting this money, the school allowed people tied to a drug cartel to use the U.S. financial system and obtain high-end services in the U.S.

    Mitigating Factors (Why the penalty wasn’t higher)

    • A Clean Recent Record
      • General Factor: Compliance Record. IMG Academy had not been flagged for a sanctions violation in the five years before this happened.
    • Coming Clean and Cooperating
      • General Factor: Cooperation. Once they realized the government was looking into them, the school cooperated fully, shared information quickly, and agreed to extend the legal deadlines to help the investigation.
    • A Total Compliance Overhaul
      • General Factor: Remediation. After a change in ownership in 2023, the school hired a new Chief Legal Officer, conducted a deep audit of their past mistakes, and built a professional sanctions screening system.

    What are the Takeaways?

    • Screen the Payors: It is not enough to screen the student; you must screen the person signing the contract and the person sending the wire transfer.
    • Names are Enough: If a customer gives you their real name and it matches a sanctioned person, “I didn’t know” is not a valid excuse if you never bothered to check the list.
    • Non-Bank Businesses are at Risk: This case shows that OFAC is looking closely at “non-traditional” sectors like private schools, luxury goods, and specialized training centers.
    • Ownership Changes are an Opportunity: If you buy a company, conduct a “compliance lookback” immediately. IMG’s new management helped limit the damage by fixing the system as soon as they took over.

    Other Resources

    • OFAC Civil Penalties & Enforcement: Visit the official Treasury website to see a list of recent actions and understand how OFAC applies these rules to different industries.
    • Compliance Framework: Review the “Framework for OFAC Compliance Commitments” to see the five pillars of a strong legal safety net.
    • Contacting OFAC: If you find a potential violation, you can contact the OFAC Compliance Hotline or use their online reporting portal.

    Here’s the actual Enforcement Release:

    20260212_img_academyDownload

    Note: Gemini originally didn’t catch that there were 2 sets of violations with SDN 1 and SDN 2. What flagged this for me was that the date range of the violations was wrong.

    Fixing it was pretty simple – I just told Gemini to recheck its work and why I thought it had missed something.

    Probably a good thing to do with enforcement actions that have “multiple’ something – whether its sets of actions, sanctioned parties or affected sanctions programs. It’s generally good practice to have an AI tool check its work – since I asked for a simplified recap, I expected it to omit certain detail. But, this was not that…

    —

    , , ,

  • February 9, 2026: OFSI updates its enforcement guidance

    Office of Financial Sanctions Implementation HM Treasury

    Financial sanctions enforcement and monetary penalties guidance updated

    Following our recent consultation, we have published updated guidance, reflecting a stronger and more transparent enforcement framework. These updates are designed to support compliance, give firms greater certainty and ensure sanctions are applied in a fair, effective and robust way. This guidance comes into effect from today and as a matter of policy OFSI assess all breaches of financial sanctions in line with the enforcement guidance in effect at the time of making its first formal decision whether to take enforcement action.

    To read the guidance click here.

    The guidance published today includes minor updates to a number of chapters, and the significant updates and additions below:

    Early Account Scheme, Settlements & Financial Hardship

    • Chapter 4 – Early Account Scheme (EAS): Introduction of a new EAS (with a penalty discount of up to 20%), enabling subjects to provide an early factual account of a breach in eligible cases. This section sets out clear eligibility criteria, a step-by-step process, and the information OFSI expects to receive.
    • Chapter 6 – Settlement Scheme: Introduction of a new Settlement Scheme (with a penalty discount of 20%). This section sets out how the scheme operates in practice and how it can apply to existing cases.
    • Chapter 7 – Financial Hardship: New policy explaining how OFSI will consider exceptional claims of financial hardship, including the burden on the subject to evidence hardship and OFSI’s ability to consider public interest factors.

    Enforcement Case Assessment & Discounts

    • Chapter 5 – Updated Case Factors: Several case factors have been updated, added, removed or renamed to provide clearer and more consistent assessments.
    • Chapter 5 – Four Level Seriousness Model: Replacement of the previous framework with a new four-tiered seriousness model (Levels 1–4), each with indicative outcomes ranging from warning letters to monetary penalties.
    • Chapter 6 – Voluntary Disclosure & Cooperation Discount: Introduction of a single penalty discount (up to 30%) for complete voluntary disclosure and co-operation, supported by expanded guidance clarifying what OFSI considers complete and timely cooperation.

    Information, Reporting & Licensing Offences

    • Chapter 13 – Fixed Monetary Penalties: New section detailing how £5,000 and £10,000 fixed penalties will be applied for relevant offences, including the assessment process, penalty determination, and examples of applicable conduct. This section also expands on OFSI’s interpretation of information offences.

    OFSI will host an online webinar in March 2026 to explain these changes in more detail. Further details on registration will follow.

    Unlike earlier versions of enforcement guidance, this is not in PDF – it’s a standard HTML web page here:

    Contents

    1. Overview
    2. Introduction
    3. Our enforcement approach
    4. The Early Account Scheme (EAS)
    5. Case assessment
    6. The monetary penalty process: imposing a penalty
    7. Procedure for imposing a monetary penalty
    8. The right of review
    9. Right of appeal
    10. Paying a monetary penalty
    11. Publication of penalties
    12. Publication of breaches where no monetary penalty is imposed
    13. Fixed Monetary Penalties (Information and Licensing)

    —

    , , ,

  • Welcome to the 21st century, OFAC!

    Launch of Voluntary Self-Disclosure Portal

    To further improve customer service, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) is launching a new online Voluntary Self-Disclosure Portal. This portal provides a streamlined, secure method for submitting voluntary self-disclosures of potential violations of OFAC-administered sanctions programs. By transitioning to this online system, OFAC aims to increase efficiency and transparency for persons submitting information, enabling faster acknowledgment of submissions, clearer communication throughout the review process, and a more user-friendly experience overall. OFAC strongly encourages parties to begin submitting voluntary self-disclosures through the new online portal.

    A little bit of snark on a Friday afternoon never hurt no one…

    —

    , ,

  • January 29, 2026: OFSI publishes response to enforcement framework consultation

    Office of Financial Sanctions Implementation HM Treasury

    OFSI Publishes Response to Enforcement Consultation

    We’ve published the response to our public consultation, setting out improvements to make sanctions enforcement more transparent and predictable.

    These changes are designed to support compliance, give firms greater certainty and help this government apply sanctions in a fair, effective and robust way.

    Here’s what’s changing:

    • Improve transparency for industry with a new case assessment matrix and updated guidance to make enforcement decisions clearer and more predictable.
    • Enable OFSI to resolve cases more efficiently by introducing settlement and Early Account schemes which will give suitable cases quicker routes to resolution.
    • Streamline process for lower-level breaches with set penalties for appropriate information, reporting and licensing offences.
    • Strengthen deterrence for serious breaches with plans to double OFSI’s maximum civil penalties, subject to legislation.

    Blog post: New and updated enforcement framework – a message from Giles Thomson, Director of OFSI

    Consultation outcome page: Improving civil enforcement processes for financial sanctions

    Consultation:

    OFSI_s_enforcement_processesDownload

    Consultation Response:

    Consultation_ResponseDownload

    —

    , ,

  • January 26, 2026: OFSI penalizes Bank of Scotland Plc for Russia sanctions breaches

    rOffice of Financial Sanctions Implementation HM Treasury

    OFSI Issues £160,000 penalty to Bank of Scotland Plc for Russia sanctions breaches

    The Office of Financial Sanctions Implementation (OFSI) has imposed a £160,000 monetary penalty on Bank of Scotland Plc (part of Lloyds Banking Group), for breaching the Russia financial sanctions regime.

    Between 8 and 24 February 2023, the bank processed 24 payments totalling £77,383.39 to and from a personal current account held by a UK‑designated person. OFSI concluded that the bank breached prohibitions on dealing with, and making funds available to, a designated person.

    The case highlights several important lessons for firms to:

    • Ensure that sanctions screening tools are sufficiently enriched with relevant information to optimise their capabilities. Firms with greater sanctions risk exposure may benefit from commercial packages, such as commercial sanctions lists to enrich their sanctions screening.
    • Address the inherent risks of automated screening with robust contingency procedures and clear escalation routes, particularly in higher‑risk areas such as those involving Politically Exposed Persons.
    • Keep sanctions training under regular review, so that its content accurately reflects relevant regulatory and geopolitical developments.
    • Consider prompt, voluntary disclosure of potential breaches. OFSI seeks to reward prompt and complete voluntary disclosures through penalty discounts.

    A 50% discount was applied in this case for prompt, voluntary disclosure.

    The full penalty notice:

    Penalty_Publication_Notice_LBG_2026Download

    When I looked at this, my first reaction that this was way more than OFAC would have assessed:

    • At best, the violations were due to poor decision-making relative to the Bank’s choice of screening solutions – there was no willfulness and no apparent management involvement
    • Additionally, the amounts involved were pretty nominal – 77,000 GBP is somewhere around $100,000. The number of violations and the time period over which they occurred were both pretty limited. Coupled with the fact that there was voluntary self-disclosure, it would see the base penalty would land around $50,000 – 1/2 the transaction value.
    • Even in terms of damage to sanctions program objectives, $100,000 pales in comparison to most things OFAC penalizes.
    • The best comparison was the 2019 settlement with Apple, where the base penalty was also 1/2 the transaction value. And Apple ended up paying about 20% less than that figure, despite a number of significant aggravating factors, including damage to sanctions program objectives, failure to correct the deficiencies in their program in a timely manner, and reckless behavior (due to the long period of time over which violations occurred).

    Apparently, Gemini agreed – I asked it to make a guess at what OFAC would have done:

    Based on the details in the OFSI penalty notice and the OFAC Economic Sanctions Enforcement Guidelines (31 C.F.R. Part 501, Appendix A), here is the estimated equivalent OFAC penalty.

    The Bottom Line

    The estimated OFAC civil monetary penalty would likely be approximately $49,000 – $65,000.

    Surprisingly, the OFAC penalty in this specific scenario would likely be lower than the OFSI penalty (£160,000 / ~$203,000). This is because OFAC’s calculation for “non-egregious” cases is strictly tied to the value of the transactions, whereas OFSI applied a discretionary “seriousness” baseline unrelated to the low transaction value.

    Detailed Calculation

    1. Fact Pattern & Assumptions

    • Violations: 24 distinct payments.
    • Total Transaction Value: £77,383.39.
      • Currency Conversion (approx. 2023 rates): ~1.27 GBP/USD = $98,276.
    • Nature of Breach: Screening failure (name variation not caught) and human error (PEP match misidentified).
    • Outcome: Voluntary Self-Disclosure (VSD) was submitted and accepted.

    2. Classification: Egregious vs. Non-Egregious

    • OFAC Standard: OFAC classifies cases as “Egregious” (involving willfulness or recklessness) or “Non-Egregious” (negligence or mistake).
    • Assessment: While the bank “possessed information” (the PEP match), the root cause was identified as “human error” (misinterpreting the list status) and “system failure” (transliteration). There is no evidence of willful intent to violate sanctions or concealment.
    • Conclusion: This would almost certainly be processed as a Non-Egregious case.

    3. Base Penalty Calculation

    For a Non-Egregious case with Voluntary Self-Disclosure (VSD), OFAC’s guidelines set the Base Penalty as follows:

    • Formula:50% of the Transaction Value.
      • (Note: The alternative cap is ~$180,000 per violation, but since the transaction value is lower, the transaction value governs).
    • Calculation: $98,276 (Total Value) × 50% = $49,138.

    (Contrast this with OFSI, which set a baseline penalty of £320,000 based on “seriousness” rather than transaction value.)

    4. Adjustments for General Factors

    OFAC adjusts the Base Penalty up or down based on aggravating and mitigating factors.

    Aggravating Factors (Increases Penalty)Mitigating Factors (Decreases Penalty)
    Large Institution: LBG is a sophisticated financial institution expected to have robust software.Voluntary Self-Disclosure: Already accounted for in the 50% base, but reinforces cooperation.
    Sanctions Harm: The payments benefited a designated person in a high-priority program (Russia).Cooperation: LBG provided all documents and responded promptly.
    Reason to Know: The bank had a PEP match that, if properly reviewed, would have stopped the payments.Remediation: Likely updated training and screening logic (implied).
    • Net Assessment: While the “Reason to Know” is a strong aggravator, the total value is very low ($98k). For large banks, OFAC typically does not nickel-and-dime small transaction-value cases unless they are part of a massive systemic pattern.
    • It is likely OFAC would settle near the Base Amount ($49,138), perhaps slightly higher to account for the “sophistication” factor, but unlikely to exceed the transaction value ($98k) for a self-disclosed error.

    Alternative Scenario: The “Egregious” Risk

    If OFAC determined the ignoring of the PEP match constituted recklessness (ignoring clear warning signs), the math changes drastically:

    • Formula (Egregious + VSD): 50% of the Statutory Maximum.
    • Statutory Max (IEEPA): ~$377,700 per violation (2025 inflation adjustment) × 24 violations = ~$9.06 Million.
    • Base Penalty: ~$4.53 Million.
    • Probability: Low. OFAC rarely classifies pure screening/human errors as egregious unless there is evidence of management involvement or deliberate blindness.

    Comparison Summary

    • OFSI Penalty: £160,000 (~$203,000).
    • OFAC Estimate: ~$49,000.

    Why the difference?

    OFSI’s enforcement model allows them to deem a case “Serious” and impose a penalty relative to the compliance failure (up to £1M) rather than the transaction value. OFAC’s non-egregious model is strictly arithmetic based on the dollar value of the payments processed.

    —

    , ,

  • Trendy! A look back at OFAC Enforcement Actions

    My prompts to Gemini:

    Please identify trends for: a) 2025 as compared to the years 2015 to 2024, inclusive b) the years 2023 to 2025, inclusive as compared to the years 2015 to 2022, inclusive c) the years 2021 to 2025, inclusive as compared to the years 2015 to 2020, inclusive. Please wait for clarification as to what I am looking for before proceeding.

    Identify trends in a) specific behaviors or failures, such as wire stripping, lack of DNS or other internet-based checks, or ignoring internal whistleblower warnings b) size of assessed penalties or settlement amounts c) size of base penalties d) the combination of the egregiousness factor and voluntary self-disclosure factor e) the industries of the firm involved f) the ratio of financial services firms penalized vs. non-financial firms penalized g) the aggravating factors noted h) the mitigating factors noted g) the general timeframe of the violations (e.g. 2 years, 3 months duration) h) the amount of time between the end of the violating behavior and the settlement i) any other patterns you can identify… Lastly, if you infer something other than what is explicitly named in the enforcement notices (and/or settelement agreements, if available), please identify it as such and explain your reasoning.

    please add for each insight the number of matching actions that fit the insight, and the percentage of each population that represents (example: 4 enforcement actions of 12 total, would be represented similarly to “4 enforcement actions, 33% of total). Use whole percentages only

    After a few extra refining steps, I got back this:

    Based on the enforcement actions published by OFAC through the end of 2025 (Total Population: 14 actions), and historical data from previous years, here is the trend analysis with the requested level of detail and corrected distributions.

    Trend Analysis by Time Period

    a) 2025 vs. 2015–2024

    • Rise of the “Gatekeepers”:
      • Trend: In 2025, OFAC heavily targeted firms that manage wealth or property rather than just moving funds. 5 of the 14 enforcement actions (36%) were levied against Venture Capital, Private Equity, Holding Companies, or Real Estate firms. This is a sharp deviation from the 2015–2024 average, where such “gatekeeper” actions typically represented less than 5% of the annual caseload.
      • Matching Actions (2025): GVA Capital, Gracetown Inc., IPI Partners, Key Holding, Family International Realty.
    • Individual Liability:
      • Trend: There was a significant spike in penalties assessed against specific persons rather than corporate entities. 3 of the 14 actions (21%) in 2025 explicitly named “An Individual” or a specific person alongside a small entity. In the 2015–2024 period, actions against individuals were rare outliers (often 0% to 5% of annual cases).
      • Matching Actions (2025): An Individual (Dec 9), An Individual (Nov 24), Family International Realty (and an Individual).

    b) 2023–2025 vs. 2015–2022

    • Crypto & Fintech Focus:
      • Trend: The 2023–2025 period solidified the Virtual Currency sector as a primary enforcement target. 11 of the ~43 enforcement actions (approx. 26%) over this three-year period involved crypto exchanges, wallet providers, or fintech platforms. In contrast, during the 2015–2022 era, this sector represented fewer than 5% of total actions.
      • Matching Actions (2025 examples): Exodus Movement, ShapeShift AG, Interactive Brokers.
    • Decline of Tier 1 Banks:
      • Trend: Traditional commercial banks have nearly vanished from the enforcement list. In the 2023–2025 period, traditional banks accounted for less than 10% of actions. This compares to the 2015–2019 period, where banks frequently constituted 30–50% of the annual lists due to the “wire stripping” sweeps.

    c) 2021–2025 vs. 2015–2020

    • The Russia Shift:
      • Trend: Driven by the 2022 invasion of Ukraine, the focus of enforcement has shifted decisively to Russia. In 2025 alone, at least 5 of the 14 actions (36%) were primarily driven by Russia/Ukraine-related sanctions (targeting oligarch assets or industrial exports). Across the 2021–2025 window, Russia cases represent approximately 30–40% of volume, whereas the 2015–2020 period was dominated by Iran, Cuba, and Sudan cases (often >60%).

    Detailed Factor Analysis (2025 Data Focus)

    • a) Specific Behaviors:
      • Gatekeeper Negligence: 5 actions (36%) involved trust or investment firms failing to identify that their ultimate beneficiary was a blocked person.
      • IP/Geolocation Failures: 3 actions (21%) explicitly cited the failure to use available IP address data to block users in sanctioned jurisdictions (e.g., Interactive Brokers, Exodus, ShapeShift).
    • b) Size of Assessed Penalties (Corrected Distribution):
      • Mega-Penalty (> $20 Million):1 action (7%).
        • Detail: GVA Capital ($216M). This single outlier accounted for the vast majority of the total dollar value.
      • Middle Market ($1 Million – $12 Million):11 actions (79%).
        • Detail: This was the dominant tier for 2025, comprising nearly 80% of all cases. Unlike previous years which saw many small settlements, 2025 saw a high floor for penalties.
        • Matching Actions: Interactive Brokers ($11.8M), IPI Partners ($11.5M), Gracetown ($7.1M), Individual($4.7M), Unicat ($3.9M), Exodus ($3.1M), Fracht ($1.6M), Harman ($1.45M), Individual ($1.1M), Family Realty ($1.1M), Haas ($1.0M).
      • Small Penalties (< $1 Million):2 actions (14%).
        • Detail: Only two cases fell below the million-dollar mark, a significant decrease in the frequency of “slap on the wrist” settlements compared to prior years.
        • Matching Actions: ShapeShift AG ($750k), Key Holding ($608k).
    • c) Industries Involved:
      • Investment/Wealth Management: 5 actions (36%) (VC, PE, Holding).
      • Tech/Fintech/Crypto: 3 actions (21%).
      • Manufacturing/Logistics: 3 actions (21%) (Haas, Harman, Unicat).
    • d) Egregiousness & VSD:
      • High Severity: While exact determinations vary, the high proportion of penalties exceeding $1 million (93% of cases) suggests a trend toward viewing 2025 violations as substantive rather than merely procedural.
    • e) Aggravating Factors:
      • Individual Recklessness: Explicitly noted in 3 actions (21%) where individuals were personally fined.
      • Reason to Know: Cited in 3 actions (21%) (Tech/Crypto) where the firm possessed IP data but failed to utilize it for screening.
    • f) Timeframe of Violations:
      • Pre-2022 Conduct: 12 of 14 actions (86%) involved conduct that began before or during 2022. This reinforces the 3–5 year lag between violation and enforcement.
    • g) Inferred Patterns:
      • Whistleblower Driven: The enforcement against small private firms and individuals (approx. 20–30% of cases) strongly implies reliance on whistleblower tips or specific intelligence, as these entities lack the transaction volume to trigger automated bank filters.

    Interesting insights… did you notice anything else? I asked for those percentages because Gemini originally over-emphasized that one really large settlement, giving it a lot more significance than perhaps it deserved. 7 percent, sure… but still only one action. A single data point does not make a trend.

    And, due to the generally low number of enforcement actions, total, take this with a grain of salt. You’ll notice how Gemini highlighted the rise of Russia-related actions after 2022 – thanks, Captain Obvious! Sure, there were the Ukaine/Russia-related sanctions after 2014, but…

    Nonetheless, there are insights to be cognizant of, that perhaps should be given more consideration.

    —

    , ,