Starting an OFAC Compliance Program

No. There is no single compliance program suitable for every financial institution. OFAC is not itself a bank regulator; its basic requirement is that financial institutions not violate the laws that it administers. Financial institutions should check with their regulators regarding the suitability of specific programs to their unique situations.

This is primarily a question for your regulator. What constitutes an adequate compliance program depends in large part on who your customers are and what kinds of business you do. Certain areas of bank operations, such as international wire transfers and trade finance, are at a higher risk than others. There are numerous interdiction software packages that are commercially available. They vary considerably in cost and capabilities. If your bank feels it needs to invest in software in its attempt to comply with OFAC regulations, OFAC recommends that you talk to your counterparts in other banks about the systems they have in place and contact vendors for an assessment of your needs. It should be noted that *.TXT and *.PDF versions of all of OFAC's sanctions lists can be manually scanned; OFAC also offers a free, online search engine at the following URL: Sanctions List Search (treas.gov)

The frequency of running an OFAC scan must be guided by your organization's internal policies and procedures. Keep in mind, however, that if your organization fails to identify and block a target account (of a terrorist, for example), there could be serious consequences such as a transfer of funds or other valuable property to an Specially Designated National, an enforcement action against your organization, and negative publicity.

There is no prepackaged compliance program that fits the needs of every bank. Banks, obviously, range in size from small to some of the largest institutions in the world. A good starting point is to go to the OFAC website and look under "Regulations by Industry." Then read the brochure for the Financial Community. This brochure provides insight as to how your particular bank could set up a compliance program. There are also a number of articles written for banking industry publications available on OFAC's website. Banks should also review OFAC's Frequently Asked Questions, its SDN and other sanctions list pages and finally, OFAC's dedicated sanctions program pages. It may be helpful to contact your counterparts in other banks to see what they are doing and talk to your regulator.

The following information will provide you with areas to consider as you review your OFAC procedures.

There are a wide variety of software packages available to the financial community. The size and needs of each institution help to determine what to look for in a package. Some packages are used to interdict sanctioned countries and names on the Specially Designated Nationals or other sanctions lists in wire transfers. Others are used to check the names of new customers or to routinely filter the names of all account holders. One suggestion for finding the right software for your bank is to research what your peer banks are using and determine if the software package is working for them. Your bank also could talk to a variety of software vendors who can easily be located by doing an Internet search.

A number of members of the Taliban and/or the Haqqani Network are explicitly included on OFAC’s List of Specially Designated Nationals and Blocked Persons (SDN List).  Persons operating in Afghanistan can use OFAC’s SDN List Search Tool to identify such members of the Taliban or the Haqqani Networks explicitly included on the SDN List, as well as other individuals or entities explicitly subject to U.S. sanctions.  For more information on using OFAC’s SDN List Search Tool and assessing OFAC Name Matches, please see OFAC FAQs 5, 82, 246-253, 287, 369, 467, and 892.  

OFAC would encourage any person operating in Afghanistan to use all information at their disposal when assessing their risk for sanctions exposure.  Supplementing internal due diligence information with an array of open-source material can be an effective compliance practice to aid in identifying risky counterparties involved in any in-country activity.  For more information on OFAC due diligence expectations and compliance programs, please see FAQs 25, 27-31 and A Framework for OFAC Compliance Commitments.

Date Updated: February 25, 2022

No.  U.S. sanctions on the Taliban and the Haqqani Network do not prohibit the movement of funds into or out of Afghanistan, provided that the transactions do not involve blocked individuals or entities, or property in which a blocked person has an interest.  

In addition, OFAC has issued General Licenses (GLs) 14, 15, 16, 17, 18, 19 and 20 under the Global Terrorism Sanctions Regulations, 31 CFR part 594 (GTSR), the Foreign Terrorist Organizations Sanctions Regulations, 31 CFR part 597 (FTOSR), and Executive Order (E.O.) 13224, as amended.  For a consolidated list of all relevant General Licenses and FAQs, please see OFAC’s humanitarian Fact Sheet, “Provision of Humanitarian Assistance to Afghanistan and Support for the Afghan People” (this content was updated on April 13, 2022), that provides an overview of the relevant authorizations and guidance related to U.S. sanctions on the Taliban and the Haqqani Network. 

U.S. sanctions on the Taliban and the Haqqani Network do not prohibit — and GLs 14, 15, 16, 17, 18, 19, and 20 do not require — any particular method for moving or sending money into or out of Afghanistan.  When selecting a method of payment — including electronic transfer or hand carrying of funds — OFAC urges due diligence tailored to the particular sanctions risks to ensure that payments do not involve individuals or entities identified on OFAC’s List of Specially Designated Nationals and Blocked Persons (SDN List) or whose property and interests in property are otherwise blocked, unless exempt from regulation or authorized by OFAC.  For more information on OFAC due diligence expectations and compliance programs, please see FAQs 25, 27-31 and A Framework for OFAC Compliance Commitments.

Date Updated: February 25, 2022