- The U.S. Office of Foreign Assets Control (OFAC) has expanded the digital currency addresses on its Specially Designated Nationals (SDN) List from just two Bitcoin wallets in 2018 to roughly 1,075 across 109 entries as of October 28, 2026.
- A recent enforcement action targeted a Russia-associated network of North Korean IT workers, incorporating eight new Ethereum and TRON addresses onto the sanctions registry.
- OFAC emphasizes that exact-match wallet screening is a regulatory floor, noting that unlisted addresses and corporate entities subject to the 50 Percent Rule can still carry severe compliance obligations.
The Evolution of Blockchain Sanctions: From Two Wallets to Over a Thousand
The operational landscape of digital asset sanctions has shifted radically over the past decade. When the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) initially incorporated crypto data into its Specially Designated Nationals and Blocked Persons (SDN) List in November 2018, the update contained just two digital currency addresses. Both were Bitcoin wallets tied to Iranian ransomware campaigns. By October 28, 2026, the registry had escalated significantly, containing approximately 1,075 digital currency addresses linked across 109 individual entries on the list.
This inventory calculates to an average of nearly 10 digital currency addresses per listed entry, though the distribution remains highly varied. While certain sanctioned individuals or organizations are linked to only one or two public addresses, other targets command sprawling clusters spanning numerous independent blockchains. OFAC’s methodology has concurrently transitioned from solely monitoring Bitcoin to executing cross-chain tracking. A designation announced on October 28, 2026, targeted a network of Democratic People’s Republic of Korea (DPRK) IT workers linked to Russia, directly adding eight new Ethereum and TRON addresses to the list.
Navigating the OFAC Search Tool: Exact Matches and Inherent Blind Spots
Market participants utilizing the official OFAC screening tool are able to enter an entity name or paste a digital asset address to perform an exact-match query. However, regulatory guidance indicates that search outcomes require careful contextual analysis rather than immediate assumptions of safety. A positive match acts merely as a starting point, demanding that compliance personnel confirm whether the transacting entity is truly identical to the named sanctioned actor, given that personal and corporate names frequently overlap.
Conversely, negative results present distinct operational hazards. OFAC guidance clarifies that an address omitted from search results is not automatically free of compliance risk. Because creating new digital wallets incurs virtually zero cost, sanctioned actors regularly abandon exposed addresses in favor of fresh wallets. Furthermore, the structural asymmetry between government designation and wallet creation means the public ledger will inherently lag behind illicit on-chain maneuvers. Coupled with OFAC’s established 50 Percent Rule—which states that property and interests in property of entities owned 50 percent or more in the aggregate by one or more blocked persons are themselves blocked—counterparties like market makers, trading desks, and payment processors can trigger strict liability sanctions violations even if their specific public addresses never appear on the SDN List.
Why This Matters
The surge to approximately 1,075 sanctioned addresses underscores that the U.S. Treasury now views digital assets as an integral component of illicit finance mapping, spanning state-backed cyber schemes to complex transnational labor operations. For digital asset service providers, institutional trading firms, and global exchanges, relying strictly on static onboarding checks is no longer adequate. Because wallet screening relies on exact-match data that captures only a single moment in time, firms must implement continuous transaction monitoring and in-depth corporate due diligence to evaluate beneficial ownership beyond on-chain identifiers alone.
Frequently Asked Questions
Does a negative search result on the OFAC tool ensure an address is safe to transact with?
No. OFAC explicitly warns that an address’s absence from search results does not mean it carries no sanctions risk. Bad actors can effortlessly generate new wallets that have not yet been identified by authorities, and the tool only tracks addresses already formally designated.
How does OFAC’s 50 Percent Rule apply to crypto firms and transactions?
Under the 50 Percent Rule, any entity owned 50 percent or more, directly or indirectly, by one or more sanctioned parties is automatically blocked, regardless of whether that entity or its crypto wallet addresses are explicitly named on the SDN List. This requires institutions to perform corporate entity diligence alongside blockchain address matching.
Which blockchains are currently included on the OFAC SDN List?
While the first additions in November 2018 were limited to Bitcoin, OFAC’s sanctions designations now encompass multiple networks. For instance, the October 28, 2026, actions addressing North Korean IT worker networks operating in connection with Russia placed addresses from both the Ethereum and TRON blockchains onto the registry.
