Sanctuary Compliance Team

The Office of Foreign Assets Control (OFAC) is a division of the U.S. Treasury Department that administers and enforces economic sanctions. Since 2018, OFAC has increasingly added cryptocurrency addresses to its Specially Designated Nationals (SDN) list.
As of Q1 2025, the SDN list contains 1,245 unique cryptocurrency wallet addresses. Approximately $1.8 billion in crypto assets have been frozen or seized under OFAC sanctions. These numbers are growing: in 2025, illicit cryptocurrency addresses received approximately $154 billion, a 162% increase from 2024.
The pace of OFAC enforcement in crypto has accelerated:
• March 2025: OFAC delisted Tornado Cash from the SDN list following a court ruling that autonomous smart contracts cannot be treated as sanctionable "property." This was a landmark reversal.
• August 2025: OFAC and UK OFSI designated entities tied to A7A5, a Russian ruble-backed token that processed $93.3 billion within 10 months to facilitate sanctions evasion. The EU followed with a transaction ban in October.
• September 2025: ShapeShift settled with OFAC for $750,000 over 17,183 apparent violations dating back to 2016–2018, stemming from failure to implement a sanctions compliance program.
• December 2025: Exodus Movement, a non-custodial wallet provider, settled for $3.1 million over sanctions violations linked to customer support practices — even though Exodus did not directly process transactions.
• January 2026: OFAC took its first-ever action targeting digital asset firms operating within Iran's financial sector.
• March 2026: Six individuals and two entities sanctioned for North Korean IT worker fraud schemes that generated $800 million. 21 crypto addresses designated.
You don't need to be a sanctioned entity to face consequences. Consider these scenarios:
• You receive USDT from a counterparty whose wallet is 1 hop from a sanctioned address. Your exchange flags the incoming deposit and freezes your account during compliance review.
• You process a P2P trade with a wallet that was clean at the time but gets sanctioned 30 days later. The retroactive association triggers a flag on your withdrawal.
• A mixing service you used 2 years ago gets sanctioned. Your historical interaction now creates a compliance footprint.
OFAC has stated that compliance obligations for digital currency transactions are identical to fiat. Financial institutions and crypto businesses are expected to block or reject transactions involving sanctioned addresses. Ignorance is not a defense.
Sanctuary screens sanctions evidence from major authorities, including:
• OFAC SDN (U.S.) • EU Consolidated Sanctions List • UN Security Council Sanctions • UK HMT (His Majesty's Treasury)
When a match is found, you receive a critical sanctions posture with review-ready authority context. Secondary exposure is presented as customer-safe evidence categories rather than public hop-distance recipes.
For P2P merchants: running a wallet check before every material trade is the minimum viable compliance action. The alternative — a frozen exchange account or a regulatory inquiry — costs weeks of lost revenue and legal fees.
The GENIUS Act, signed into law on July 18, 2025, introduced federal licenses for stablecoin issuers. Key provisions for crypto operators:
• Hard reserve requirements for stablecoin issuers (1:1 backing with high-quality liquid assets) • Explicit sanctions compliance obligations for Permitted Payment Stablecoin Issuers (PPSIs) • Clarified SEC vs. CFTC jurisdiction • New reporting requirements for digital asset transactions
For P2P operators and exchanges, this means the regulatory framework is now codified, not just guidance. Compliance is transitioning from "best practice" to "legal requirement."
Scam alerts, new sanctions, and investigation techniques. One email per week. Unsubscribe anytime.