OFACSanctions / OFACSeptember 25, 2026

OFAC Consolidates Sanctions Penalty Rules Into One New Regulation

OFAC is issuing new Sanctions Penalties Regulations that consolidate penalty information from multiple existing sanctions programs into a single, unified regulatory framework. This gives compliance officers a clearer, one-stop reference for understanding the civil and criminal penalty exposure applicable across OFAC's various programs. All firms subject to OFAC jurisdiction — including crypto exchanges, MSBs, and fintechs — should familiarize themselves with the consolidated rules to ensure their penalty-risk disclosures and compliance program documentation remain accurate.

What to do

Obtain and review the new Sanctions Penalties Regulations, then update your OFAC compliance program documentation, board risk disclosures, and staff training materials to reference the consolidated penalty framework.

Who this affects

Crypto ExchangeCrypto CustodianWallet ProviderMoney Services BusinessPayments CompanyFintech / NeobankBank / Credit UnionTrust CompanyBroker-Dealer / RIA

Does this affect your program?

Pick your institution type for an instant read on whether you're in scope — then see exactly which sections of your own policies this changes.

Source

Read the official publication

This radar entry is educational and does not constitute legal advice. Summaries are AI-assisted and grounded in the linked official source; always verify against the primary source and consult qualified legal counsel for jurisdiction-specific guidance.

Related developments

OFAC

OFAC Removes Syria-Specific General License After State Sponsor Rescission

OFAC is amending its Terrorism List Governments Sanctions Regulations to remove a Syria-specific general license that is no longer needed following Syria's removal from the State Sponsor of Terrorism list. Compliance teams should update their sanctions screening configurations and internal policy documents to reflect that Syria's status and the associated authorization have changed. Failure to account for this shift could result in either over-blocking legitimate transactions or misapplying outdated license references.

OFAC

OFAC Adds New Individuals or Entities to the SDN List

OFAC has designated one or more new persons to the SDN List, blocking all property and interests in property subject to U.S. jurisdiction and prohibiting U.S. persons from transacting with them. All crypto, fintech, and financial institutions must update their sanctions screening systems promptly to capture these new designations and avoid violations.

OFAC

OFAC Formally Publishes Iran-Related General Licenses Y and Z

OFAC has published two Iran-related general licenses — GL Y and GL Z — in the Federal Register, formalizing authorizations previously posted on OFAC's website. Given that Iran sanctions are among the highest-risk programs for crypto and fintech firms, compliance officers should carefully review these GLs to understand what transactions are permitted and ensure their screening systems are calibrated accordingly.

OFAC

OFAC Publishes General License 2 Under DRC Sanctions Regulations

OFAC has formally published General License 2 under the Democratic Republic of the Congo Sanctions Regulations in the Federal Register, having previously made it available on its website. Compliance teams should incorporate this GL into their sanctions policies to clarify which DRC-related transactions are permissible.

Stay ahead of every rule change

PliOS monitors FinCEN, OCC, OFAC, the SEC and CFTC and tells you which of your policies each new rule affects — with the edit already drafted. Start free.

Run My Free Assessment