OFAC sanctions are the single most powerful force in crypto compliance. A single entry on the SDN list — or even a false-positive match — can freeze your assets across every major exchange simultaneously. This guide explains how OFAC sanctions work in crypto, why false positives happen, and what to do if you have been incorrectly flagged.

As a former Financial Intelligence Unit investigator, I dealt with sanctions screening on a daily basis. I know how the systems work, where they fail, and how to challenge a false positive. Here is the practical guide.

How OFAC sanctions apply to crypto

The US Treasury's Office of Foreign Assets Control (OFAC) maintains the Specially Designated Nationals (SDN) list — a comprehensive sanctions list that includes individuals, entities, and, since 2022, specific crypto wallet addresses. If your wallet address, name, or nationality appears on the SDN list, exchanges worldwide will freeze your account.

OFAC sanctions apply extraterritorially. This means:

Why false positives happen

Sanctions screening is automated. Exchanges use software that compares your name, nationality, and wallet address against the SDN list and other sanctions databases. The software uses fuzzy matching — it flags not just exact matches but similar names. This leads to false positives:

The most common false positive: dual citizens

The most common false positive we see is dual citizens — people who hold citizenship of both a non-sanctioned country (EU, UK, Switzerland) and a sanctioned country (Iran, Russia, Syria). They are legitimate residents of the non-sanctioned country, with legitimate income, but the sanctions screening system flags them because of their birth nationality.

See our sanctioned nationality guide for the specific legal argument we use to resolve these cases.

How to check if you are on a sanctions list

You can check your name and wallet address against the following databases:

If you search and do not find yourself, you are not on the list — which means the exchange's flag is a false positive. If you do find yourself, you need legal counsel immediately, as the situation is more serious.

What to do if you are falsely flagged

Step 1: Confirm you are not on any sanctions list

Search all the databases listed above. If you are not on any list, the exchange's flag is a false positive. Document your search results — this is evidence that the flag is incorrect.

Step 2: Document your legitimate status

Prepare documentation that proves you are who you say you are and that your funds are legitimate:

Step 3: Legal challenge

Submit a formal legal challenge to the exchange's compliance team. The challenge must include:

We prepare and submit this challenge. In our experience, false-positive sanctions flags are resolved in approximately 85% of cases when presented with proper legal documentation.

If your wallet address is flagged by association

A more complex situation: your wallet is not on the SDN list, but it has interacted with an address that is. For example, someone sent you crypto, and that person's address was later sanctioned. Your address is flagged by association.

In these cases, the argument is different. We need to demonstrate that:

This requires blockchain forensics to trace the specific transaction and establish the timeline.

The OFAC delisting process (for those actually on the list)

If you are actually on the SDN list and believe the designation is unjust, OFAC has a formal delisting process. You submit a request to OFAC's Office of the Director, providing evidence that the designation was based on incorrect information or that circumstances have changed. This is a complex legal process that typically requires US legal counsel. We coordinate with US sanctions lawyers for these cases.

Stablecoin-specific sanctions risk

USDC and USDT are particularly vulnerable to OFAC sanctions because their issuers (Circle and Tether) are US-aligned. If your address is on the SDN list, Circle and Tether will freeze your stablecoins directly — see our USDC freezing guide and USDT blacklist guide.

The technology behind sanctions screening

Exchanges do not manually check every customer against the OFAC SDN list. They use automated sanctions screening software — typically provided by vendors like Chainalysis, Elliptic, Sumsub, ComplyAdvantage, or Refinitiv World-Check. These systems scan customer names, dates of birth, nationalities, wallet addresses, and transaction counterparties against consolidated lists that include OFAC's SDN list, the EU consolidated list, UN sanctions, and national watch lists from dozens of jurisdictions.

The screening is not a simple exact-match operation. It uses fuzzy matching algorithms that calculate similarity scores between your name and every entry on the sanctions list. If your name is "Ahmed Ali" and there is a sanctioned entity named "Ahmad Ali," the system will flag you because the names are phonetically similar — even though they are spelled differently and belong to entirely different people. The system does not know if you are the same person; it simply produces a match score and defers to the exchange's compliance team.

Wallet address screening adds another layer. Every time you send or receive crypto, the exchange screens the counterparty address against databases of known illicit addresses maintained by Chainalysis, Elliptic, and Crystal. If you received crypto from an address that was previously connected to a sanctioned entity — even if you had no idea — your account may be flagged as a "connected address," triggering a freeze while the exchange investigates the link.

The false positive rate in these systems is notoriously high. A 2023 study by the European Central Bank found that over 95% of automated sanctions screening alerts are false positives that require manual review. Compliance teams at major exchanges handle hundreds of these alerts daily, which means your case may sit in a queue for days or weeks before anyone reviews it — and when they do, the reviewer may not have the context to distinguish you from the actual sanctioned individual.

Case study: a dual-citizen false positive

A client we will call "M.R." held dual citizenship — one European, one from a country that appeared on an enhanced screening list. When M.R. attempted to withdraw a six-figure sum from a major exchange, the withdrawal was blocked and the account was placed under review. The exchange's screening system had matched M.R.'s second nationality to a sanctions screening category and froze the account automatically.

M.R. had done nothing wrong. The funds were legitimate, earned through employment at a European technology company. But the exchange demanded proof that M.R. was not a sanctioned person, and the standard KYC documents already on file were deemed insufficient because the screening system had triggered an alert that could only be cleared through a manual compliance review.

The resolution required three things: (1) a formal legal letter explaining that M.R.'s second nationality did not place them on any sanctions list and that holding dual citizenship is not a sanctions trigger; (2) supplementary documentation proving the source of the funds through employment records and bank statements; and (3) direct communication with the exchange's compliance team to escalate the case out of the automated queue. The account was unfrozen within nine days of our involvement — but M.R. had already spent three weeks trying to resolve it independently through support tickets that went unanswered.

This case illustrates the core problem: sanctions screening systems are designed to over-flag rather than under-flag. A compliance officer who unfreezes an account that later turns out to be connected to a sanctioned entity faces personal liability. The safe career move is to leave accounts frozen and require the customer to prove their innocence — which is effectively what happens.

Your legal rights when falsely flagged

If a crypto exchange freezes your account based on a sanctions false positive, you have legal rights — but exercising them requires understanding the regulatory framework. The key distinction is between a government-issued sanctions designation (where you are actually on the SDN list) and a private exchange's sanctions screening alert (where the exchange's software flagged you as a potential match). In the latter case, the exchange is not required by OFAC to freeze your account; it is choosing to do so as a risk-management measure under its own compliance program.

OFAC's Framework for Compliance Commitments states that financial institutions should have procedures for handling false positives — but it does not mandate a specific timeline or process for unfreezing accounts. This means exchanges have broad discretion to hold accounts while they investigate, and there is no external ombudsman to appeal to. The exchange's compliance team is judge, jury, and executioner.

Under EU law, the situation is somewhat different. The General Data Protection Regulation (GDPR) gives you the right to know what personal data is being processed about you and why. If an exchange is processing your data as part of a sanctions screening investigation, you can submit a Subject Access Request (SAR) demanding to know what data they hold, what screening triggered the alert, and on what basis they are restricting your account. While exchanges may invoke exemptions for ongoing investigations, the SAR process forces them to document their reasoning — which can be valuable if you need to escalate the matter legally.

In Switzerland, the Federal Act on the Implementation of International Sanctions (EmbG) requires that sanctions be applied only to designated persons. If you are not on the sanctions list, Swiss law does not require the exchange to freeze your account — though the exchange may still do so under its own terms of service. This is where legal representation matters: a Swiss lawyer can formally argue that the freeze lacks legal basis under Swiss law if you are not a designated person.

The practical reality is that most false positives are resolved through documentation and legal correspondence, not litigation. But having a lawyer changes the dynamic. When a compliance team receives a letter from a Swiss law firm explaining why the freeze is unjustified and what legal consequences may follow, the case moves from the automated screening queue to a senior compliance officer's desk — and that is where decisions actually get made.

Preventing future false positives

Once your account has been unfrozen, the sanctions screening system that flagged you originally will not necessarily be updated. Your name, nationality, or wallet address may still generate a match score above the exchange's threshold — which means the same freeze can happen again. This is particularly common for people with names that are phonetically similar to sanctioned individuals, or who hold citizenship from countries on enhanced screening lists.

There are steps you can take to reduce the risk of recurrence. First, ensure that your KYC documentation is fully up to date and consistent across all exchanges you use. If your name is spelled differently on different documents, the screening system may treat each variant as a separate entity and generate a match for one but not the other. Second, if your wallet address was flagged by association (because you received crypto from a tainted address), consider generating a fresh wallet address for future transactions and documenting the clean source of incoming funds. Third, maintain a file of source-of-funds documentation that you can provide immediately if questioned — the faster you respond, the shorter the freeze.

For high-risk profiles — dual citizens, people with common names, or those who frequently transact internationally — it may be worth establishing a relationship with a compliance officer at your primary exchange before any freeze occurs. This is not always possible as an individual customer, but through legal representation, we can introduce you to the compliance team and pre-clear your profile, which reduces the likelihood of an automated freeze being triggered by a future transaction.

Finally, diversify your exchange exposure. If your funds are concentrated on a single exchange and that exchange freezes your account, you lose access to everything. Splitting assets across two or three exchanges — and keeping a hardware wallet for long-term storage — ensures that a false positive on one platform does not lock you out of your entire crypto portfolio.

It is also worth noting that sanctions screening is an evolving field. OFAC updates the SDN list regularly — sometimes adding hundreds of entries in a single designation — and blockchain analytics firms update their address databases continuously. An address that is clean today may be flagged tomorrow if it is linked to a newly designated entity. This means that sanctions false positives are not a one-time risk; they are an ongoing operational reality of using crypto. Building habits around documentation, address hygiene, and exchange diversification is the most effective long-term strategy for minimizing their impact on your financial life.

The bottom line

OFAC sanctions false positives are common, unfair, and resolvable. If you have been flagged incorrectly, do not ignore it — and do not try to "work around" it by creating a new account (this makes it look like you are trying to evade sanctions, which is itself a crime). Contact us — we prepare the legal challenge and work with the exchange to resolve the false positive.

N. Silinevics
Nils Silinevics · Crypto Compliance Counsel · Former FIU Investigator · Valken Legal AG