OFAC Sanctions List: Crypto Addresses and Sanctioned Entities Explained

Imagine sending Bitcoin to a friend, only to have your transaction frozen because their wallet address accidentally matched one on a government blacklist. This isn't a hypothetical scenario for crypto users; it’s a daily reality enforced by the Office of Foreign Assets Control (OFAC). Operating under the U.S. Department of Treasury, OFAC maintains the Specially Designated Nationals (SDN) list, which now includes over 1,200 specific cryptocurrency wallet addresses as of late 2025. If you hold digital assets or run an exchange, ignoring this list is like driving blindfolded through a minefield.

The stakes are high. In March 2025 alone, Tether was forced to freeze $450 million in USDT linked to sanctioned Iranian entities. Meanwhile, the seizure of $26 million from Garantex showed that law enforcement can pierce the veil of anonymity. But how does OFAC actually track these digital ghosts? And what does the expansion of sanctions into Decentralized Autonomous Organizations (DAOs) mean for your portfolio? Let’s break down the mechanics of the OFAC sanctions list, the technology behind it, and the real-world impact on the crypto ecosystem.

The Evolution of OFAC’s Digital Reach

For decades, sanctions targeted banks and physical goods. Then came blockchain. Initially, regulators struggled to apply traditional rules to decentralized ledgers. That changed dramatically between 2023 and 2025. OFAC didn’t just add a few addresses; they fundamentally shifted their strategy from blocking institutions to targeting specific on-chain identities.

The Crypto Compliance Guidance 2025, launched earlier this year, mandates real-time monitoring for all U.S.-based exchanges. This wasn’t a suggestion-it was a requirement. By January 2025, OFAC expanded its criteria to include DAOs and decentralized protocols lacking formal governance. This was a massive regulatory pivot. Previously, if a protocol had no CEO, it was hard to sanction. Now, if a smart contract interacts with a blacklisted address, the developers themselves could face liability.

The technical infrastructure supporting this shift is robust. The sanctions database is maintained in XML format via the `sdn_advanced.xml` file. For developers and compliance officers, this means automated tools can parse these files into TXT or JSON formats for integration into screening systems. Platforms like Scorechain have set the industry standard by updating their monitoring systems within 15 minutes of an OFAC release. If your system takes longer than that, you’re already out of sync.

Which Cryptocurrencies Are Affected?

A common misconception is that sanctions only apply to Bitcoin. In reality, OFAC’s reach covers 17 different cryptocurrency types. This comprehensive approach prevents sanctioned entities from simply hopping from BTC to ETH to evade detection. The list includes major assets like Bitcoin (XBT), Ethereum (ETH), and stablecoins like USDT and USDC.

It also extends to privacy coins and alternative chains. Monero (XMR), ZCash (ZEC), and Dash are included, acknowledging that privacy-focused tokens are often used for obfuscation. Furthermore, the inclusion of Layer 2 networks like Arbitrum (ARB) and Binance Smart Chain (BSC) in recent updates shows that OFAC is keeping pace with scaling solutions. As users migrate off mainnets to save on fees, sanctions follow them.

• Major L1s: Bitcoin, Ethereum, Tron (TRX), Ripple (XRP)
• Stablecoins: USD Coin (USDC), USD Tether (USDT)
• Privacy Coins: Monero (XMR), ZCash (ZEC), DASH
• Layer 2s & Alt-L1s: Arbitrum (ARB), Binance Smart Chain (BSC), Polygon (implied via EVM compatibility)

This breadth creates a complex web for compliance teams. A single user might hold assets across five different chains, each requiring separate screening against the updated OFAC list. Missing one chain means missing a potential violation.

Case Studies: How Sanctions Play Out On-Chain

Theory is fine, but let’s look at actual events. The case of SECONDEYE SOLUTION, linked to Russia’s Internet Research Agency, illustrates how political interference intersects with crypto finance. OFAC designated multiple Bitcoin addresses associated with this entity, including specific wallets like `1NE2NiGhhbkFPSEyNWwj7hKGhGDedBtSrQ`. These weren’t just random addresses; they were part of a coordinated effort to fund operations using cryptocurrency.

Another striking example involves Iranian nationals Alireza Derakhshan and Arash Estaki Alivand, designated in September 2025. They processed over $100 million in proceeds from Iranian oil sales using Ethereum and TRON wallets. Their total inflows exceeded $600 million, showing the scale of illicit flows OFAC aims to curb. When OFAC designates these individuals, every exchange must block transactions involving their known addresses immediately.

The Lazarus Group, a North Korean state-sponsored hacking collective, remains a persistent threat. In Q1 2025, they moved $200 million in stolen assets through sanctioned DeFi protocols. This highlights a critical vulnerability: even if an exchange blocks a direct deposit, hackers can use decentralized exchanges (DEXs) to mix funds. However, new regulations proposed in May 2025 aim to hold smart contract developers liable if their protocols enable such evasion. While still pending approval, this move signals that the "decentralization defense" may soon crumble.

Technical Challenges and Enforcement Tools

Enforcing sanctions on a decentralized network is technically difficult. Unlike a bank account, a crypto wallet doesn’t have a name attached to it. It’s pseudonymous. To bridge this gap, OFAC relies on sophisticated blockchain analytics firms. These companies cluster addresses based on transaction patterns, identifying when a new address belongs to a known sanctioned entity.

However, evasion tactics evolve too. Sanctioned entities often use "peeling chains," where large amounts are split into tiny transactions sent to hundreds of new addresses. They also leverage privacy coins like Monero to break the trail. To counter this, OFAC endorsed three new wallet screening technologies in March 2025, specifically designed for DeFi platforms. These tools analyze interaction history rather than just static addresses, allowing them to flag risky interactions even if the destination address is new.

Moreover, the rise of AI in crypto has introduced new variables. In February 2025, OFAC sanctioned an AI-powered autonomous trading bot used by a sanctioned entity to launder $60 million. This was the first time an algorithm itself was treated as a sanctioned actor. It raises a profound question: If an AI makes a bad trade, who is responsible? The developer? The user? Or the code?

Compliance for Exchanges and Users

If you run a centralized exchange (CEX), compliance is non-negotiable. You must integrate OFAC’s XML data feeds into your transaction monitoring systems. The learning curve for developing comprehensive screening systems typically ranges from 3 to 6 months. This requires hiring specialized compliance personnel and investing in blockchain analysis software.

For individual users, the situation is less technical but equally important. Most people don’t check the OFAC list before sending funds. They rely on their exchange to do it. But if you send crypto directly to a peer-to-peer wallet, you bear the risk. If you accidentally send funds to a sanctioned address, recovery is nearly impossible. The transaction is irreversible, and the recipient is legally barred from returning the funds without violating sanctions.

Here is a quick checklist for staying compliant:

1. Check Your Wallet History: Use tools like Blockchair or Etherscan to see if any past transactions involved flagged addresses.
2. Use Reputable Exchanges: Ensure your platform uses real-time OFAC screening (e.g., those integrated with Scorechain or Chainalysis).
3. Avoid Privacy Coin Mixing: Be cautious when swapping privacy coins back into regulated fiat currencies.
4. Monitor News: Follow OFAC announcements closely. New designations happen frequently.

The Future of Crypto Sanctions

Where is this heading? The trend is clear: tighter regulation and deeper technological integration. The collaboration between OFAC and international agencies like Interpol and Europol has intensified. Six international raids on sanctioned crypto infrastructure hubs occurred in 2024, proving that borders won’t stop enforcement.

Looking ahead, expect more focus on state-sponsored activities and cross-border evasion schemes. The joint directive released by OFAC and the Financial Action Task Force (FATF) in April 2025 is a step toward global standardization. If other countries adopt similar frameworks, the "sanctions haven"-jurisdictions with lax crypto rules-will shrink.

Ultimately, the OFAC sanctions list is becoming a fundamental layer of the crypto financial system. It’s no longer an afterthought. For investors, traders, and developers, understanding which addresses are sanctioned is as crucial as checking gas fees. Ignorance is no longer a valid excuse in the eyes of the U.S. Treasury.