Published 2026 | TIKC NewsWire
There is a list of people and entities that U.S. businesses simply cannot do business with, and the government expects you to check it. Administered by the Treasury Department’s Office of Foreign Assets Control, or OFAC, U.S. economic sanctions prohibit transactions with blocked persons, certain countries, and designated bad actors. What makes this area so dangerous for contractors is that OFAC liability is strict: you can violate the rules without meaning to, and without knowing the other party was blocked. In a global supply chain, that is a real and growing risk.
What OFAC sanctions prohibit
OFAC maintains the Specially Designated Nationals and Blocked Persons List (the SDN List), along with country-based and sector-based sanctions programs. Generally, U.S. persons may not engage in transactions with SDNs or with comprehensively sanctioned jurisdictions, and must block (freeze) property in which a sanctioned party has an interest. The prohibition reaches far beyond selling to a sanctioned country. It can capture paying a supplier, a sub-tier vendor, a freight forwarder, or an individual who turns out to be on the list, often through ownership links you did not see.
Strict liability is the part that stings
Most of the enforcement topics contractors worry about require some level of knowledge or intent. OFAC is different. Its civil penalties operate on a strict liability standard, which means a company can be liable for a prohibited transaction even if it had no idea the counterparty was sanctioned. Good faith is relevant to how OFAC exercises its discretion and sets penalties, but it is not a complete shield. That is precisely why a documented screening process matters so much: it is both your prevention and your mitigation.
Where contractors get exposed
The risk usually enters through the supply chain and payments. A lower-tier supplier owned by a sanctioned entity, a logistics partner routing goods through a prohibited jurisdiction, a vendor whose beneficial owner appears on the SDN List, or a payment that passes through a blocked party can all create exposure. Newer sanctions also reach virtual currency, so a firm that accepts or sends crypto has to screen those counterparties too. For a contractor certifying compliance with applicable laws, an undetected sanctions hit can also become a false-certification and False Claims Act problem.
Build a screening program
The defense is a real, documented sanctions-compliance program scaled to your risk. That means screening your customers, suppliers, partners, and payees against the SDN and consolidated lists, and rescreening when relationships change. It means understanding beneficial ownership, because a party can be blocked through its owners even if it is not listed by name. It means knowing the country-based programs that touch your supply chain. And it means having a procedure to stop, block, and report when you get a hit, including voluntary self-disclosure when appropriate, which OFAC treats as a significant mitigating factor.
What to do now
- Screen everyone you pay or buy from. Check customers, suppliers, partners, and payees against the SDN and consolidated sanctions lists.
- Look through to ownership. A vendor can be blocked through its owners even if its own name is not listed.
- Cover your whole chain. Lower-tier suppliers, logistics routes, and even crypto payments can create exposure.
- Have a hit procedure. Know how to stop a transaction, block property, and report, and consider voluntary self-disclosure.
- Document the program. Strict liability means your records of diligence are both prevention and mitigation.
Sanctions compliance is one of the few places where you can do everything right and still get caught by a hidden link, so the screening you build is your real protection. Check the list, know your partners, and keep the record. Brick by brick.
FAQ
What is the SDN List?
The Specially Designated Nationals and Blocked Persons List, maintained by OFAC. U.S. persons generally may not transact with parties on it and must block property in which they have an interest.
What does strict liability mean here?
OFAC civil penalties can apply even if you did not know the counterparty was sanctioned. Good faith affects penalties and discretion but is not a complete defense.
How does sanctions risk reach a contractor?
Usually through the supply chain and payments: a sanctioned sub-tier supplier, a blocked beneficial owner, a prohibited shipping route, or a payment passing through a blocked party, including virtual currency.
What should my compliance program include?
Screening of customers, suppliers, partners, and payees against sanctions lists, beneficial-ownership checks, a procedure to stop, block, and report hits, and documentation of your diligence.
Sources
U.S. Department of the Treasury, Office of Foreign Assets Control. (2026). Sanctions programs and the Specially Designated Nationals (SDN) List.
U.S. Department of the Treasury. (2026). A Framework for OFAC Compliance Commitments.
This article is general information, not legal advice.
About the Author
Melanie Patterson
Founder and CEO of Team Integrity Knowledge Center and creator of GovCon iSource. Former nurse turned entrepreneur with over 10 years guiding small, women-owned, and minority-owned businesses to over $10 million in government awards. Build, grow, scale, brick by brick. Contact
