Topic starter
12/07/2026 12:17 pm
TL;DR: OFAC’s crypto sanctions cases show how wallet addresses, exchanges, mixers, and service providers are now treated as enforcement targets, with Chainalysis citing examples ranging from SamSam-era bitcoin ransom flows to recent IRGC-linked and scam-network designations. Screening, retroactive exposure analysis, and DeFi risk controls are becoming core compliance functions, not edge cases.
Editorial analysis by NHI Mgmt Group, based on content published by Chainalysis: “OFACと暗号資産犯罪：暗号資産アドレスが特定された全てのOFAC指定対象（SDN）”.
By the numbers:
- OFAC first named bitcoin addresses as sanctions identifiers in 2018, when it designated two Iran-based individuals tied to the SamSam ransomware scheme.
- In 2021, OFAC published sanctions compliance guidance for the virtual currency industry.
Key questions
Q: What breaks when crypto sanctions screening is only done at onboarding?
A: Onboarding-only screening fails when a wallet, exchange, or service provider is designated after the relationship has already started.
Q: Why do sanctioned crypto flows create ongoing compliance risk after a transaction is complete?
A: Because sanctions status can change after the fact, and blockchain activity leaves a permanent trail that can later match a designated address or service.
Q: What are the signs that wallet screening controls are too weak for sanctions compliance?
A: Common warning signs include reliance on static address lists, no process for reviewing past transfers, weak handling of wallet clustering, and limited visibility into DeFi or intermediary service exposure.
Practitioner guidance
- Screen wallet addresses before and after onboarding Treat wallet screening as both a pre-transaction and post-transaction control so newly designated addresses are caught even after the first transfer has cleared.
- Trace historical exposure across related wallets Review transaction history for indirect links to sanctioned entities, mixers, exchanges, bridges, and rebranded services when a designation changes risk status.
- Extend sanctions controls to DeFi interaction points Enforce policy at the point of wallet connection, routing, and protocol interaction so decentralised services can block prohibited flows without relying on account onboarding alone.
Bottom line: OFAC crypto sanctions now reach the infrastructure that moves value, not just the named actors at the end of the chain.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
12/07/2026 12:31 pm
Wallet screening has become a governance control, not a niche blockchain feature. The article shows that sanctions enforcement now follows the money through addresses, services, and infrastructure, which means compliance teams are managing a live identity graph rather than a fixed list. The practical consequence is that wallet screening must be treated as a control boundary with ownership, escalation, and auditability.
A question worth separating out:
Q: How should compliance teams handle sanctions risk in DeFi and crypto service providers?
A: They should enforce controls at wallet connection, routing, and transaction approval points, not just at account creation. DeFi and service-provider models often lack traditional onboarding controls, so the practical defence is policy-driven screening of the interaction itself, backed by escalation rules for high-risk counterparties and related infrastructure.
👉 Read our full editorial: OFAC crypto sanctions are reshaping wallet screening and compliance