Customers can sort in a reputation or paste a digital foreign money tackle. For addresses, the instrument runs an exact-match search.
A constructive result’s a place to begin, not a verdict. Names can overlap, and a match on a reputation nonetheless requires confirming you’re really coping with the listed get together.
A adverse result’s arguably the trickier one. OFAC’s steerage makes clear that an tackle not showing within the search doesn’t imply it carries no danger. Wallets are low cost to create, and a sanctioned actor isn’t obligated to maintain utilizing the addresses the federal government already is aware of about.
Then there’s possession. Below OFAC’s so-called 50% rule, possession stakes tied to sanctioned events can set off compliance obligations even for an entity that by no means seems on the checklist by identify. So an organization might be absent from the search outcomes and nonetheless be topic to blocking guidelines.
From two Bitcoin addresses to roughly 1,075
The size of crypto information on the SDN Record has modified dramatically. In November 2018, OFAC printed its first two digital foreign money addresses, each Bitcoin wallets related to Iranian ransomware exercise.
As of October 28, 2026, the SDN Record contained roughly 1,075 digital foreign money addresses. These addresses are tied to 109 entries on the checklist.
That works out to a mean of practically 10 addresses per entry, although the distribution is unlikely to be even. Some sanctioned actors have one or two printed wallets. Others have sprawling tackle units unfold throughout a number of blockchains.
The latest instance landed the identical day. On October 28, 2026, OFAC sanctioned a community of North Korean IT staff related to Russia. That motion added eight new Ethereum and TRON addresses to the checklist.
The chain combine is value noting. The primary entries in 2018 had been Bitcoin-only. The latest additions sit on Ethereum and TRON, displaying that sanctions designations now observe exercise throughout a number of networks relatively than a single dominant chain.
Why compliance groups ought to care
For crypto companies, the sensible takeaway is that the OFAC search is a ground, not a ceiling. The precise-match limitation means screening needs to be ongoing. An tackle that returns nothing in the present day may very well be designated tomorrow, because the October 28 motion demonstrates. A one-time test at onboarding captures a single second, not a relationship.
The possession situation raises the stakes for anybody doing enterprise with counterparties relatively than simply particular person wallets. A buying and selling agency, fee processor or market maker can look clear within the search and nonetheless carry publicity by who owns it. That pushes compliance work past tackle lookups and into company due diligence.
There’s additionally an asymmetry baked into how the checklist grows. Each new designation provides identified addresses, however the folks behind them can generate contemporary ones in seconds. The checklist will all the time path the exercise it’s making an attempt to seize, which is exactly why OFAC frames a non-match as inconclusive.
What this implies for the market
The expansion from two addresses to roughly 1,075 tells a transparent story about the place sanctions enforcement is heading. Digital belongings are actually a routine a part of how Treasury maps and targets illicit networks, from ransomware operators to state-linked IT employee schemes.
For establishments coming into crypto, the bar retains rising. Corporations working throughout worldwide jurisdictions or dealing with massive transaction volumes face probably the most publicity.
The North Korean angle additionally bears watching. The October 28 designations tied DPRK IT staff to Russia and put Ethereum and TRON addresses on the checklist.
The instrument itself is helpful, free and official. Its limits are spelled out by OFAC. The corporations that get into bother will seemingly be those that learn the search end result and skip the tremendous print.
