OFAC's wallet search is not a sanctions clearance for firms

By Tom Whitfield

What changed on October 28?

OFAC added eight Ethereum and TRON addresses on October 28, 2026, when it sanctioned a network of North Korean IT workers associated with Russia. The U.S. Treasury's Office of Foreign Assets Control reported roughly 1,075 digital-currency addresses across 109 entries on its Specially Designated Nationals (SDN) List.

The action extended a dataset that began in November 2018 with two Bitcoin addresses tied to Iranian ransomware activity. Its chain mix has widened from those Bitcoin-only entries to additions on Ethereum and TRON, reflecting sanctions designations across multiple networks.

What does the search actually establish?

OFAC's free, official Sanctions List Search, first established in May 2021, serves as the agency's primary lookup for the SDN roster of people, companies and entities that U.S. persons generally cannot deal with. Users can enter a name or paste a digital-currency address, while address queries run on exact matches.

A positive result does not establish that the user has identified the intended party because names can overlap. The listed party must still be confirmed through identity checks before a business treats the match as its counterparty.

A negative result remains inconclusive. OFAC guidance says an address's absence does not show that its wallet is free of sanctions risk, because wallets cost little to create and sanctioned actors need not keep using addresses the government already knows.

Can an unlisted company still face blocking rules?

An unlisted company can still face blocking rules. Under OFAC's so-called 50% rule, ownership stakes tied to sanctioned parties can trigger compliance obligations even when an entity never appears on the list by name. A company can therefore return no name match and still face blocking requirements because of who owns it.

Corporate due diligence therefore sits alongside address and transaction screening. Trading firms, payment processors, market makers, exchanges, custodians and OTC desks must examine counterparties and ownership, rather than treat an empty database response as approval.

How large is the address dataset?

The SDN List's crypto records grew from two addresses in November 2018 to approximately 1,075 on October 28, 2026. That works out to an average of nearly 10 addresses per entry across 109 entries, although the distribution is unlikely to be even.

Some sanctioned actors have only one or two published wallets. Others have sprawling address sets spread across multiple blockchains, making the total address count a broader measure than the number of designated actors.

Why can one onboarding check not settle compliance?

Exact-match screening must continue throughout a counterparty relationship. An address that returns no result today can be designated tomorrow, as the October 28 action demonstrates, while an onboarding check captures only one moment in that relationship.

OFAC's list also carries a structural lag: each designation adds known addresses, but the people behind them can generate new ones in seconds. The list therefore trails the activity it seeks to capture, which is why the agency treats a non-match as inconclusive.

Exchanges, custodians, OTC desks and other cross-border digital-asset businesses need to combine repeated address screening with identity resolution and ownership checks. The official tool supports that process but does not replace those controls.

What changes for institutions?

Digital assets have become a routine part of how Treasury identifies and targets illicit networks. The sanctions record spans ransomware operators, North Korean IT worker schemes tied to Russia, and wallet activity across Bitcoin, Ethereum and TRON.

For institutions entering or operating in crypto, the compliance bar keeps rising. Firms handling large transaction volumes or operating across international jurisdictions face the greatest exposure because one-time address checks do not resolve counterparties or ownership.

The search tool therefore functions as a minimum control rather than a complete sanctions analysis. Its exact-match design and the 50% ownership rule leave work outside the database result.

OFAC's next list update remains the practical enforcement trigger: any new designation can immediately turn a previously unlisted wallet into a compliance issue and require live institutions to rerun screening.