Sanctions Screening

What Is Sanctions Screening?

Sanctions screening is the compliance process of comparing customers, counterparties, and transactions against government-issued lists of sanctioned individuals, entities, and countries. The goal is to prevent prohibited parties from accessing the financial system and to ensure that regulated institutions do not facilitate transactions that violate economic sanctions programs.

In traditional finance, banks and payment processors have performed sanctions screening for decades. With the growth of cryptocurrency, the same requirements now extend to crypto exchanges, stablecoin issuers, money services businesses, and any entity classified as a financial institution under the Bank Secrecy Act. The GENIUS Act, enacted in July 2025, formalized these obligations for stablecoin issuers specifically.

How It Works

Sanctions screening operates as a multi-stage matching pipeline that runs before and during customer relationships and transactions. The process typically follows these steps:

1. Collect identifying information: names, addresses, dates of birth, identification numbers, and (in crypto) wallet addresses
2. Compare this data against all applicable sanctions lists
3. Flag potential matches for review
4. Investigate flagged matches to determine if they are true positives or false positives
5. Block confirmed matches and report to the relevant authority (OFAC requires reporting within 10 business days)

Screening is not a one-time event. Institutions must re-screen their entire customer base whenever sanctions lists are updated, which can happen multiple times per week during active enforcement periods.

Name Matching Techniques

Because sanctioned individuals use aliases, transliterations, and spelling variations, screening systems employ multiple matching algorithms:

• Exact matching: direct string comparison for definitive matches
• Fuzzy matching: algorithms that use edit distance and character similarity to catch typos, misspellings, and close variations
• Phonetic matching: algorithms like Soundex and Double Metaphone that convert names to codes based on pronunciation, catching names that sound alike but are spelled differently

OFAC's own Sanctions List Search tool uses a combination of all three approaches. Industry-standard screening systems can process matches in under 200 milliseconds, but the tradeoff is a high false positive rate: studies consistently report that 90 to 95 percent of all sanctions alerts are false positives. For name-based screening alone, false positive rates can reach 99 percent due to common names and transliteration ambiguity.

Key Sanctions Lists

Regulated institutions must screen against multiple lists depending on their jurisdiction and the jurisdictions of their customers:

OFAC's 50 percent rule adds complexity: entities owned 50 percent or more (in aggregate) by one or more sanctioned persons are considered blocked by operation of law, even if they do not appear on any sanctions list. This means screening solely against published lists is insufficient for full compliance.

Sanctions Screening in Crypto

Cryptocurrency presents unique challenges for sanctions screening. In traditional finance, screening revolves around identity: names, addresses, and government IDs. In crypto, wallet addresses are pseudonymous, transactions are borderless, and privacy tools can obscure the flow of funds.

On-Chain Analytics

Regulated crypto platforms rely on chain analytics firms to screen wallet addresses and trace transaction histories. The major providers include:

• Chainalysis: the largest provider with over 1,500 organizational clients, deployed as a Know Your Transaction (KYT) layer for continuous transaction monitoring and pre-transaction address screening
• TRM Labs: scans 191+ networks and 720+ bridges with sub-second API response times and over 150 configurable risk rules
• Elliptic: covers 99 percent of the crypto market by capitalization with over 100 billion data points for cross-chain tracing

Most large exchanges run two providers in parallel to maximize detection coverage. OFAC has added crypto wallet addresses directly to the SDN list since 2018, including 134 wallet addresses tied to ISIS-K in July 2026 and addresses linked to the Sinaloa Cartel in May 2026.

Tracing through privacy tools remains a challenge. Mixers, tumblers, and CoinJoin implementations aggregate and redistribute funds to break transaction trails. Bad actors also chain-hop between blockchains to evade single-chain screening. Despite these obstacles, analytics firms have successfully traced funds through centralized mixers and smart contract-based mixing protocols.

Stablecoin Blacklisting

Unlike decentralized cryptocurrencies like Bitcoin, centralized stablecoins have built-in mechanisms for sanctions enforcement. Issuers can blacklist specific addresses, freezing tokens and preventing transfers.

The scale of enforcement is significant. Tether has blacklisted over 7,200 addresses with more than $3.29 billion frozen between 2023 and 2025, cooperating with 275+ law enforcement agencies across 59 jurisdictions. Circle has blacklisted approximately 370 addresses with around $109 million frozen, including over 75,000 USDC in Tornado Cash-associated addresses following OFAC's 2022 designation of that protocol.

The Tornado Cash case illustrated both the power and limits of sanctions enforcement in crypto. OFAC sanctioned the mixing protocol in August 2022, citing over $7 billion laundered since 2019. However, in November 2024, the Fifth Circuit reversed the designation, ruling that immutable smart contracts cannot be classified as "property" under the International Emergency Economic Powers Act. Treasury delisted Tornado Cash in March 2025 rather than appeal.

For a deeper analysis of how stablecoin freezing works at the smart contract level, see the research article on stablecoin blacklisting and sanctions mechanics.

Why It Matters

Sanctions screening is not optional. The penalties for violations are severe: OFAC civil penalties can reach $377,700 per violation under the International Emergency Economic Powers Act (or twice the transaction value, whichever is greater), while criminal penalties include up to $1 million per violation and 20 years imprisonment. BNP Paribas paid $8.9 billion in 2014 for processing transactions on behalf of sanctioned countries, demonstrating the scale of potential liability.

For crypto-native businesses, the regulatory landscape continues to tighten. The GENIUS Act treats stablecoin issuers as financial institutions under the Bank Secrecy Act, and a joint FinCEN/OFAC proposed rule from April 2026 would require stablecoin issuers to maintain formal sanctions compliance programs with five core components: senior management commitment, risk assessments, internal controls, independent testing, and staff training.

The integration of sanctions screening into KYC/AML programs is essential for any platform handling digital assets. Self-custodial protocols like Spark operate differently from centralized exchanges, but businesses building on top of such protocols must still implement appropriate screening where they act as regulated intermediaries. Understanding the travel rule and its interaction with sanctions obligations is critical for compliance architecture.

Screening Workflow Example

A simplified sanctions screening check for a crypto transaction might follow this pattern:

// Simplified sanctions screening flow
async function screenTransaction(tx) {
  // 1. Screen sender and receiver addresses
  const senderRisk = await chainAnalytics.checkAddress(tx.sender);
  const receiverRisk = await chainAnalytics.checkAddress(tx.receiver);

  // 2. Check against OFAC SDN list
  const sdnMatch = await ofacScreening.checkAddress(tx.receiver);

  // 3. Evaluate exposure through transaction history
  const exposureScore = await chainAnalytics.traceExposure({
    address: tx.receiver,
    hops: 3,  // Check 3 hops for indirect sanctions exposure
  });

  // 4. Decision
  if (sdnMatch.isMatch || exposureScore > THRESHOLD) {
    await blockTransaction(tx);
    await fileReport(tx, "OFAC_MATCH");
    return { status: "BLOCKED" };
  }

  return { status: "APPROVED", riskScore: exposureScore };
}

In practice, screening systems are far more complex, incorporating fuzzy name matching, jurisdiction-specific list checks, ongoing monitoring, and alert management workflows to handle the high volume of false positives.

Risks and Considerations

False Positives and Overblocking

With false positive rates between 90 and 95 percent, sanctions screening generates enormous volumes of alerts that require manual review. This creates two risks: compliance teams overwhelmed by alert fatigue may miss genuine matches, and legitimate users may have transactions delayed or blocked incorrectly. In crypto, where transactions are often irreversible and addresses can be blacklisted permanently, a false positive can result in permanent loss of funds.

Privacy and Censorship Concerns

The ability of stablecoin issuers to freeze addresses raises questions about censorship resistance and financial sovereignty. Unlike traditional bank account freezes that involve judicial oversight, stablecoin blacklisting can happen unilaterally at the smart contract level. This tension between regulatory compliance and censorship resistance is a defining challenge for the stablecoin ecosystem.

Jurisdictional Complexity

Crypto transactions are borderless, but sanctions programs are jurisdiction-specific. A transaction that is compliant under US sanctions may violate EU sanctions, or vice versa. Global platforms must screen against multiple lists simultaneously and navigate conflicting requirements across jurisdictions.

Evolving Threat Landscape

According to Chainalysis, total illicit crypto transaction volume reached $154 billion in 2025, with sanctioned entities receiving $104 billion. State-sponsored actors continue to develop sophisticated evasion techniques, including privacy protocols, chain-hopping, and dormant wallet rotation. Screening tools must evolve continuously to keep pace. For a broader view of how regulation is shaping the stablecoin industry, see the global stablecoin regulation tracker.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.