How OFAC sanctions screening works on crypto platforms
Sanctions screening on crypto platforms is a real-time compliance process that happens in milliseconds. The goal is to stop a transaction before it confirms.
When a user initiates a withdrawal to a wallet address, the platform checks that address against the U.S. Treasury's Specially Designated Nationals (SDN) list, which contains entities and individuals blocked from transacting with U.S. persons. Three major analytics firms provide the infrastructure: Chainalysis, Elliptic, and TRM Labs.
Each of these firms maintains its own database of flagged addresses, combining the SDN list with proprietary analysis. The firms also track addresses that have interacted with sanctioned entities, expanding the net beyond the official list.
The screening is not a one-time check. It happens for every transaction. Addresses can be re-screened retroactively, and new designations can render a previously clean address toxic.
Chainalysis, Elliptic, and TRM Labs sell their screening tools as API integrations. A platform submits the recipient address and receives a risk score or a binary block/allow decision; the response time is sub-second. The platform then decides whether to reject or flag the transaction.
Landmark crypto sanctions actions
The Office of Foreign Assets Control (OFAC) has designated specific crypto services. Two cases are widely cited as turning points.
The first was Blender.io. OFAC sanctioned this crypto mixer in May 2022. It was the first mixer to receive an SDN designation. OFAC alleged the service had laundered proceeds from North Korean-linked hacks.
The second was Tornado Cash. OFAC designated this Ethereum-based mixer in August 2022. This was the first time OFAC sanctioned a piece of immutable code, affecting smart contract addresses rather than just a company. It sparked significant debate about the limits of sanctions power over open-source software.
Both designations remain in effect. Any platform screening against the SDN list will block transactions to or from addresses associated with these services. The impact is global: any platform with U.S. customers or U.S. dollar clearing must comply.
What the user sees
When a transaction is blocked, the user typically sees a generic error. Common messages include "Transaction rejected" or "Address not supported." The platform rarely explains why, and this is intentional. Revealing that an address is on the SDN list could tip off a sanctioned actor.
The user cannot override the block. Customer support may offer no explanation at all; compliance teams are trained to avoid discussing specific sanctions triggers. The block is final.
Some platforms display a "funds frozen" notice if the blocked asset was a deposit. In that case, the assets remain on the platform but cannot be withdrawn, and the user may be asked to complete additional identity verification to claim them. This process can take weeks.
Strict Liability Risk
The compliance burden is asymmetric. Platforms face strict liability for any sanctions violation, with no intent requirement. If a transaction touches a sanctioned address, even through a series of intermediate hops, the platform can be penalized.
OFAC has levied multi-million-dollar fines against crypto firms. In some cases, the violation was a single missed screening, and the penalty can reach over $1 million per transaction. There is no "good faith" exception for software bugs.
This risk drives the aggressiveness of screening. Platforms often over-block rather than chance a violation, and legitimate users sometimes see transactions rejected for opaque reasons. The user has minimal recourse.
The screening process is invisible to most law-abiding users, but it shapes every withdrawal. The technical infrastructure from Chainalysis, Elliptic, or TRM Labs has become a mandatory component of any compliant crypto platform. The authorities do not publish the exact list of flagged addresses; the private firms have effectively become gatekeepers for global crypto settlement.
No blockchain is anonymous to these tools. A user who sends funds to a mixer today may find their address flagged tomorrow. The screening happens every time, and the block is permanent.
Not financial advice. thomasdank.xyz publishes market data and general information about digital assets. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.