what are ofac requirements

See more

What are the 5 essential components of OFAC?

In the guidelines, OFAC identifies five key components that are not unlike the BSA program requirements that financial institutions have been implementing for years.Management commitment. ... Risk assessment. ... Internal controls. ... Testing and auditing. ... Training.

What is OFAC compliance policy?

Effective OFAC compliance programs generally include internal controls, including policies and procedures, in order to identify, interdict, escalate, report (as appropriate), and keep records pertaining to activity that is prohibited by the sanctions programs administered by OFAC.

What does OFAC check for?

OFAC screening involves checking entities against the denied party lists maintained by the United States Treasury Department's Office of Foreign Assets Control (OFAC). Additionally, OFAC compliance can also include identifying sanctions and embargoes placed on nations and political jurisdictions.

Is OFAC check mandatory?

Do I need to check their names against all of OFAC's other sanctions lists? Every transaction that a U.S. financial institution engages in is subject to OFAC regulations. If a bank knows or has reason to know that a target is party to a transaction, the bank's processing of the transaction would be unlawful.

What are OFAC violations?

OFAC Sanctions Violation Penalties OFAC considers non-compliance with sanctions to be a serious threat to national security and foreign relations and therefore an OFAC sanctions violation. Consequently, those who breach OFAC sanctions without obtaining the proper license can face severe legal repercussions.

Who has to do OFAC checks?

An OFAC check is the right way to go when hiring anyone in the financial, export/import, money services or insurance industries. Other businesses that engage in international work would benefit in the comfort of knowing your vendors and employees all have passed the OFAC background check as well.

What triggers OFAC investigation?

An OFAC investigation may result from (1) a voluntary self-disclosure on sanctions violations (2) reports of blocked property or transactions rejected due to sanctions regulations; (3) a referral from U.S. law enforcement agencies or foreign governments cooperating to enforce U.S. sanctions; (4) information publicly ...

What are the three reports that must be submitted to OFAC?

the requirements have now become more stringent in context of rejecting. The amendments in the blocking context include a revision that specifies the specific types of information submitters must include in initial blocking reports, annual reports on blocked property, and reports on property that is unblocked.

Who is responsible for ensuring OFAC compliance?

Financial Institution OFAC Compliance and Bank Regulatory Agencies. While OFAC is responsible for promulgating, developing, and administering sanctions for the U.S. Secretary of the Treasury, bank regulatory agencies cooperate in ensuring OFAC financial institution compliance.

What is OFAC in money laundering?

The Office of Foreign Assets and Control (OFAC) administers and enforces the economic sanctions programs and requirements of the United States that are based on U.S. foreign policy, national security, and/or economic goals and primarily target countries and groups of individuals such as terrorists and narcotics ...

What does OFAC regulation state?

OFAC administers and enforces economic sanctions programs against countries, businesses or groups of individuals, using the blocking of assets and trade restrictions to accomplish foreign policy and national security goals. See United States embargoes for a list of affected countries.

Who must comply with OFAC regulations?

All U.S. persons, 150 All U.S. persons must comply with OFAC regulations, including all U.S. citizens and permanent resident aliens regardless of where they are located, all persons and entities within the United States, all U.S. incorporated entities and their foreign branches.

What is OFAC compliance?

OFAC encourages banks to take a risk-based approach to designing and implementing an OFAC compliance program. In general, the regulations that OFAC administers require banks to do the following: Block accounts and other property of specified countries, entities, and individuals.

How long do banks keep OFAC licenses?

This will allow the bank to verify whether a customer is initiating a legal transaction. Banks should also be aware of the expiration date on the OFAC license. If it is unclear whether a particular transaction would be authorized under the terms of the license, the bank should contact OFAC. Maintaining copies of OFAC licenses will also be useful if another bank in the payment chain requests verification of a license's validity. Copies of OFAC licenses should be maintained for five years, following the most recent transaction conducted in accordance with the license.

When did OFAC issue economic sanctions?

On November 9, 2009, OFAC issued a final rule entitled "Economic Sanctions Enforcement Guidelines" in order to provide guidance to persons subject to its regulations. The document explains the procedures that OFAC follows in determining the appropriate enforcement response to apparent violations of its regulations.

Who is responsible for compliance with OFAC sanctions?

In the case of inbound IATs, and regardless of whether the OFAC flag in the IAT is set, an RDFI is responsible for compliance with OFAC sanctions programs. For outbound IATs, however, the ODFI cannot rely on OFAC screening by an RDFI outside of the United States.

Who is responsible for OFAC checks?

If a bank uses a third party, such as an agent or service provider, to perform OFAC checks on its behalf, as with any other responsibility performed by a third party, the bank is ultimately responsible for that third party’s compliance with the OFAC requirements. As a result, banks should have a written agreement in place and establish adequate controls and review procedures for such relationships.

Do foreign banks have to comply with OFAC?

origin goods to comply. including U.S. banks, bank holding companies, and nonbank subsidiaries, must comply with OFAC's regulations. 151 Additional information is provided in Foreign Assets Control Regulations for the Financial Community, which is available on the OFAC Web site.

How many parties does OFAC add to the sanctions list?

OFAC typically adds up to a thousand or more parties to the sanctions lists each year and more are being added every day - these requirements create huge compliance challenges for U.S. companies conducting international business transactions.

What steps should your company take for compliance under the sanctions laws?

What steps should your company take for compliance under the sanctions laws? OFAC recommends that companies adopt written compliance programs for sanctions law compliance. The type of compliance policies and procedures for an individual company will vary depending upon the company’s size, products/industry, countries of operation and other factors. OFAC recommends that companies conduct a risk-based analysis of their operations to identify the areas of greatest sanctions requirements and compliance risk and adopt policies and procedures focused on these risks. While every company is different and a “one-size-fits-all” approach does not work for every company, the following are a number of compliance issues for U.S. companies to consider in dealing with OFAC sanctions requirements.

Who initiates sanctions?

Sanctions are typically initiated by the President issuing an Executive Order declaring a national emergency under the International Emergency Economic Powers Act (“IEEPA”), the National Emergencies Act or similar authority and designating the parties targeted for sanctions.

What are sanctions prohibitions?

Sanctions prohibitions include not just engaging in activities that directly violate the sanctions requirements, but also engaging in acts that “evade” or “avoid” these restrictions, and aiding, abetting and conspiracy with others to do so. Of particular note, assisting or providing material support to foreign parties in engaging in sanctions violations or evading sanctions (“facilitation”) can be a violation – facilitation in this context is defined as assisting a foreign person in engaging in activities that would violate the sanctions laws if performed by a U.S. person. [18] Thus, even banks, accounting firms, law firms and other service providers that assist or provide resources, services or financial support to foreign parties that violate sanctions requirements or are designated as SDNs can be liable themselves for sanctions violations.

What is the extent to which other parties should be included in OFAC checks or reviews?

The FFIEC BSA/AML Examination Manual states that the extent to which other parties should be included in OFAC checks or reviews will be a risk-based decision : “ [T]he extent to which the bank includes account parties other than accountholders (e.g., beneficiaries, guarantors, principals, beneficial owners, nominee shareholders, directors, signatories, and powers of attorney) in the initial OFAC review during the account opening process, and during subsequent database reviews of existing accounts, will depend on the bank’s risk profile and available technology.”

Why do credit unions need to run OFAC checks?

Credit unions will need to make a risk-based decision as to when to run OFAC checks to mitigate the risk of engaging in prohibited transactions. Additionally, how to conduct the check – such as manually checking OFAC’s Specially Designated Nationals (SDN) list or simply hiring a vendor to run OFAC checks – will be a business decision for the credit union to make.

What types of transactions should be reviewed for compliance?

The guidance also states that all types of member transactions should be reviewed for compliance, including: “share accounts, loans and loan payments, credit cards, letters of credit, lines of credit, safety deposit boxes, wire and ACH transfers, currency exchanges, depositing and cashing checks, money orders or traveler’s checks, and trust accounts.”

Is OFAC required by OFAC?

While OFAC checks are not required by OFAC regulations, the National Credit Union Administration (NCUA) has supervisory authority to examine federally insured credit unions for OFAC compliance. Thus, the NCUA guidance on this topic will also be an important resource for credit unions when crafting a risk-based OFAC compliance program. As explained below, NCUA tends to suggest OFAC checks should be conducted in most situations.

Is OFAC a strict liability offense?

Violations of OFAC sanctions are a strict liability offense – meaning that a violation occurs even if it was unintentional or if the credit union operated in good faith. In addition, there is no way to “cure” an OFAC violation. Given the relatively high stakes involved, it is not surprising that a credit union may want to mitigate its OFAC compliance risk as much as possible.

Does the NCUA require a credit union to run the OFAC check before opening an account?

While that may seem like the NCUA requires a credit union to run the OFAC check before the account is opened, the questionnaire includes a note from NCUA that says: