OFAC Sanctions Enforcement Hits Record Pace in 2026

OFAC's enforcement activity in 2026 is sending a clear message: sanctions compliance is not just for banks anymore.

In a development that caught many off guard, OFAC announced a $1.7 million settlement with IMG Academy, a Florida-based school and training facility, for receiving tuition payments from parties linked to Mexican cartels through third-party intermediaries. OFAC specifically noted that this case "highlights the pervasiveness of sanctions risk across a wide variety of sectors and institutions," even for entities "operating largely domestically."

Record-Setting Designations

In the first year of the second Trump Administration, Treasury's Office of Foreign Assets Control imposed sanctions on over 1,300 individuals and entities, with enforcement priorities focused on:

• Cartels and counternarcotics: Aggressive targeting of drug trafficking networks and their financial infrastructure
• Southeast Asia scam networks: New designations targeting operations behind pig-butchering and cryptocurrency fraud schemes
• Iran's shadow fleet: Sanctions on vessels and entities involved in evading Iranian oil export restrictions
• Iran's shadow banking networks: Targeting financial intermediaries facilitating sanctioned transactions
• China: Expanded designations across technology, military, and human rights concerns

This pace of new designations means compliance teams need to update their screening databases more frequently than ever.

New BSA Requirements for Investment Advisers

As of January 1, 2026, FinCEN's final rule extending Bank Secrecy Act requirements to Registered Investment Advisers (RIAs) and Exempt Reporting Advisers (ERAs) creates new obligations. These entities must now implement:

• AML/CFT programs including customer due diligence
• Sanctions screening for all clients and counterparties
• Suspicious activity reporting (SARs) for transactions flagging potential money laundering
• Record-keeping requirements consistent with BSA standards

This expansion brings thousands of investment firms under sanctions screening requirements for the first time, many of which lack the infrastructure to perform real-time screening.

The "Pervasiveness of Sanctions Risk"

The IMG Academy case is worth examining in detail because it illustrates how sanctions risk has expanded beyond traditional financial institutions:

1. The school didn't transact directly with sanctioned parties. Payments came through third-party intermediaries, making detection more difficult.
2. The sector was unexpected: A domestic educational institution, not a bank or trading company, faced enforcement action.
3. The fine was significant: $1.7 million for an educational facility demonstrates OFAC's willingness to enforce across all sectors.

For organizations that interact with international parties through APIs, whether processing payments, onboarding customers, or managing supply chains, this case underscores the need for automated screening at every transaction point.

What Modern Sanctions Screening Looks Like

The compliance technology landscape has evolved to match the pace of OFAC enforcement. According to OFAC API documentation, modern sanctions screening APIs offer:

• Near real-time list updates: Lists refreshed every 2-5 minutes to capture new designations as they're published
• Fuzzy matching logic: Identifying matches even when names are transliterated differently, misspelled, or use alternate formats
• Batch and single screening: Processing both individual lookups and bulk screening through the same API endpoint
• Comprehensive coverage: Screening against OFAC SDN, consolidated non-SDN lists, EU sanctions, UN sanctions, and other international designations

Building Sanctions Compliance Into Your API Infrastructure

For teams building compliance into their applications, the integration points are clear:

Customer Onboarding

Screen every new customer against sanctions lists before account creation. SanctionShield AI provides real-time OFAC, UN, and EU sanctions screening through a single API call.

Transaction Monitoring

Screen counterparties on every transaction, not just at onboarding. Sanctions lists change daily, and a customer who was clean last month may appear on a new designation today.

Vendor and Partner Screening

Extend screening to your supply chain. The IMG Academy case shows that even indirect exposure to sanctioned parties can result in enforcement action.

Periodic Rescreening

Run batch rescreening of your entire customer and vendor database on a regular schedule. New designations can affect existing relationships at any time.

The Bottom Line

OFAC's 2026 enforcement pace, combined with expanded BSA requirements and the willingness to pursue cases across all industry sectors, makes sanctions screening a universal compliance requirement. Organizations that rely on manual processes or periodic batch checks are operating with significant risk exposure.

Real-time, API-based sanctions screening is the standard that regulators expect. Learn how SanctionShield AI can help your team meet that standard, or explore our full Compliance Suite for end-to-end regulatory compliance.