OFAC Sanctions List: Crypto Addresses and Sanctioned Entities Explained

When the U.S. government puts a crypto wallet on its sanctions list, it’s not just blocking a bank account-it’s freezing digital assets that can move across borders in seconds. The OFAC sanctions list now includes over 1,200 cryptocurrency addresses as of 2025, targeting everything from North Korean hacking groups to Iranian oil traffickers and AI-driven money laundering bots. This isn’t theoretical. Real wallets with real balances are being frozen. Real exchanges are being shut down. Real people are being arrested.

What Is the OFAC Sanctions List?

The Office of Foreign Assets Control (OFAC), part of the U.S. Department of the Treasury, doesn’t just track traditional bank accounts. Since 2018, it’s been adding cryptocurrency addresses to its Specially Designated Nationals (SDN) list. These aren’t random addresses. Each one is tied to a person, group, or organization involved in terrorism, drug trafficking, cybercrime, or sanctions evasion. Once added, U.S. companies are legally required to block any transaction involving that wallet. That includes exchanges, wallets, DeFi platforms, and even payment processors.

It’s not just about Bitcoin. The list covers 17 different cryptocurrencies, including Bitcoin (XBT), Ethereum (ETH), Monero (XMR), Tether (USDT), USD Coin (USDC), and even newer chains like Arbitrum (ARB) and Binance Smart Chain (BSC). Stablecoins like USDT and USDC are especially targeted because they’re used to move large sums across borders without the volatility of Bitcoin or Ethereum.

How OFAC Tracks Crypto Wallets

Unlike banks, blockchains don’t have names. They have addresses. And every transaction is permanently recorded. OFAC uses blockchain analysis firms like Chainalysis, Elliptic, and Scorechain to trace funds from one wallet to another. When a wallet is flagged-say, because it received funds from a known ransomware group-OFAC adds it to the list. Then, compliance systems at exchanges automatically freeze any incoming or outgoing transfers from that address.

In 2025, OFAC upgraded its system to v2.0, which now includes real-time alerts and support for Layer 2 networks like Polygon and Arbitrum. Before, sanctions only covered main chains. Now, if you move money through a Layer 2 bridge to hide it, OFAC can still catch you. The system updates every 15 minutes. That means if a wallet gets added at 2:03 p.m., most U.S.-based exchanges will block it by 2:18 p.m.

Who’s on the List? Real Cases

Let’s look at actual examples:

• Alireza Derakhshan and Arash Estaki Alivand-Iranian nationals sanctioned in September 2025 for laundering over $600 million from Iranian oil sales. Their wallets used Ethereum and TRON to move funds globally.
• SECONDEYE SOLUTION-linked to the Internet Research Agency LLC, the Russian group tied to election interference. OFAC blocked 12 Bitcoin addresses, including 1NE2NiGhhbkFPSEyNWwj7hKGhGDedBtSrQ and 19D8PHBjZH29uS1uPZ4m3sVyqqfF8UFG9o.
• Garantex-a crypto exchange shut down in March 2025 after being used to launder $26 million. U.S., German, and Finnish authorities seized its assets. Its successor, Grinex, was also sanctioned within weeks.
• The Lazarus Group-North Korea’s hacking unit. In Q1 2025, they stole $200 million in crypto through sanctioned DeFi protocols, using mixers and cross-chain swaps to hide the trail.

These aren’t isolated cases. They’re part of a pattern: sanctioned entities use crypto because it’s fast, global, and hard to trace. But they’re also using it because they underestimate how much data is left on-chain.

How DeFi and Privacy Coins Are Changing the Game

OFAC’s biggest challenge? Decentralized systems. In January 2025, it expanded sanctions to include DAOs (Decentralized Autonomous Organizations) and protocols with no central team. If a DeFi protocol is used to launder money-even if no one owns it-OFAC can sanction the smart contract itself.

Privacy coins like Monero (XMR) and ZCash (ZEC) are still tricky. They’re designed to hide transaction details. But even these aren’t immune. In 2025, OFAC began targeting the gateways-exchanges and services that convert Monero into Bitcoin or USDT. If you can’t cash out, the money is useless.

And then there’s the AI angle. In February 2025, OFAC sanctioned the first AI-powered trading bot used to launder $60 million. The bot didn’t have a person behind it. It was a program that automatically moved funds between wallets. This sets a dangerous precedent: now, software itself can be a sanctioned entity.

What Happens When a Wallet Is Sanctioned?

If your wallet is on the OFAC list:

• Any exchange you use will freeze your funds.
• You can’t send or receive crypto through regulated platforms.
• Even if you move funds to a new wallet, OFAC’s tools will trace the history and flag it.
• If you’re a business, you could face fines, loss of license, or criminal charges.

There’s no appeal process. No public hearing. Once you’re on the list, you’re blocked. The only way off is if OFAC removes you-which almost never happens unless you’re a government or a sanctioned entity that cooperates with U.S. authorities.

Compliance for Businesses

If you run a crypto exchange, wallet service, or DeFi platform, you have no choice: you must screen every transaction against the OFAC list. This isn’t optional. The penalty for non-compliance? Millions in fines. In 2024, one U.S. exchange paid $50 million after letting a sanctioned wallet process $12 million in transactions.

Most platforms now use automated tools that:

• Check every incoming and outgoing transaction in real time.
• Scan across 17+ blockchains.
• Update within 15 minutes of OFAC’s release.
• Block transactions flagged as high-risk-even if the wallet isn’t officially on the list yet.

It’s expensive. Small exchanges spend $200,000-$500,000 a year on compliance tech and staff. But it’s cheaper than shutting down.

What About Regular Users?

If you’re just holding Bitcoin or Ethereum in a personal wallet and didn’t do anything illegal, you’re probably fine. OFAC isn’t targeting everyday users. But if you ever sent funds to a known scammer, darknet market, or sanctioned entity-even once-you could be flagged.

And if you use a centralized exchange like Coinbase or Kraken, they’re already screening for you. You won’t even know it’s happening. But if your wallet gets flagged, your funds disappear overnight. No warning. No explanation.

The Global Push for Crypto Sanctions

The U.S. isn’t alone. In April 2025, OFAC and the Financial Action Task Force (FATF) released a joint directive to standardize crypto sanctions across 40+ countries. Europol and Interpol have launched joint operations targeting crypto laundering hubs in Eastern Europe and Southeast Asia. Six international raids in 2024 led to 22 arrests.

Even countries that don’t follow U.S. sanctions are feeling the pressure. If a Russian hacker sends crypto to a wallet in Turkey, and that wallet is on the OFAC list, Turkish banks can’t process the transaction without risking U.S. penalties. That’s how U.S. sanctions become global.

What’s Next?

OFAC’s next moves are already being planned:

• Sanctioning smart contract developers who build tools designed to evade sanctions.
• Expanding the list to include NFT marketplaces used for money laundering.
• Adding more privacy coin gateways and mixer services.
• Targeting cross-chain bridges that move funds between sanctioned and non-sanctioned chains.

One thing is clear: crypto is no longer a lawless space. The tools to track it are too good. The penalties are too high. And the U.S. government has made it clear: if you use crypto to break the law, you won’t hide behind decentralization.