SDN List: Legal Definition and Meaning

The SDN List - the Specially Designated Nationals and Blocked Persons List - is a publicly available register maintained by the U.S. Department of the Treasury';s Office of Foreign Assets Control (OFAC). It identifies individuals, entities, vessels and aircraft with whom U.S. persons are generally prohibited from doing business. Understanding the SDN List is essential for any company engaged in cross-border trade, international finance or global supply chains, because a single transaction with a listed party can trigger severe civil and criminal penalties under U.S. law. This guide covers the legal definition of the SDN List, how it works in practice, the consequences of non-compliance, and what businesses should do to manage the risk.

The SDN List is a sanctions enforcement instrument rooted in several layers of U.S. federal law. Its primary statutory foundations include the International Emergency Economic Powers Act (IEEPA), the Trading with the Enemy Act (TWEA), and various country-specific or thematic sanctions programmes enacted by Congress or implemented through executive orders. OFAC administers these programmes and publishes the SDN List as the operational output of its designation decisions.

When OFAC designates a person or entity, it adds that party to the SDN List along with identifying information - names, aliases, dates of birth, addresses, identification numbers and, where relevant, vessel or aircraft registration details. The legal effect of designation is immediate. U.S. persons - defined broadly to include U.S. citizens, permanent residents, entities organised under U.S. law, and anyone physically present in the United States - must freeze any assets of the designated party that come within their possession or control, and must refrain from any transaction with that party unless OFAC grants a specific licence.

The SDN List is not a static document. OFAC updates it continuously, sometimes multiple times per week. Additions, removals and amendments are published in the Federal Register and on the OFAC website. Businesses that rely on a one-time check are exposed to the risk that a counterparty';s status changes between checks. In practice, compliance programmes require automated, real-time or near-real-time screening against the current version of the list.

A non-obvious requirement is that the SDN List must be read together with OFAC';s "50 Percent Rule." Under this rule, any entity that is owned 50 percent or more - directly or indirectly - by one or more SDN-listed parties is itself treated as blocked, even if it does not appear on the list by name. This dramatically expands the practical scope of the SDN List beyond its published entries.

OFAC';s designation process is administrative rather than judicial. The agency does not need a court order to add a party to the SDN List. Designations are made on the basis of evidence gathered by OFAC, often in coordination with other U.S. government agencies including the Department of State, the Department of Justice and intelligence bodies. The evidentiary standard applied is a reasonable belief that the party meets the criteria of the relevant sanctions programme.

Designation criteria vary by programme. Some programmes target parties associated with specific countries or regions. Others are thematic, covering areas such as narcotics trafficking, weapons proliferation, cybercrime, human rights abuses or corruption. Each programme is governed by its own executive order or statutory authority, and OFAC publishes programme-specific regulations in the Code of Federal Regulations (CFR), Title 31, Parts 500-599.

Once designated, a party has limited avenues for challenge. OFAC';s regulations provide a process for submitting a request for reconsideration, known as a petition for delisting. The party must present evidence demonstrating that the basis for designation no longer exists or was factually incorrect. This process can take months or years, and the party remains on the SDN List - with all legal consequences - throughout the review period. U.S. courts have generally afforded OFAC considerable deference in designation decisions, though constitutional due process challenges have occasionally succeeded in narrow circumstances.

A common mistake made by foreign companies is assuming that designation affects only U.S. counterparties. In practice, the extraterritorial reach of U.S. sanctions means that non-U.S. entities can face secondary sanctions exposure if they engage in significant transactions with SDN-listed parties. Secondary sanctions do not impose the same blanket prohibition as primary sanctions, but they create a credible risk of being cut off from the U.S. financial system - a consequence that most internationally active businesses cannot afford.

Transacting with an SDN-listed party without an OFAC licence is a strict liability offence under U.S. law. This means that intent is not required for civil liability. A company that unknowingly processes a payment to a blocked party can still face a civil monetary penalty, even if it had no reason to suspect the connection. Civil penalties can reach the greater of a statutory maximum per violation or twice the value of the transaction involved - amounts that can be substantial for large commercial deals.

Criminal liability requires knowledge or wilful blindness. Individuals and entities that knowingly violate OFAC regulations face criminal fines and, for individuals, potential imprisonment. The U.S. Department of Justice prosecutes the most serious cases, often in conjunction with charges under the Bank Secrecy Act or anti-money laundering statutes.

Beyond direct penalties, the reputational consequences of an OFAC enforcement action are significant. OFAC publishes enforcement actions, including the names of the parties, the nature of the violation and the penalty imposed. For financial institutions, a public enforcement action can trigger regulatory scrutiny from prudential supervisors and damage correspondent banking relationships. For non-financial businesses, the reputational impact can affect customer and investor confidence.

In practice, founders and compliance officers should consider the following when assessing SDN List exposure:

• A transaction does not need to be denominated in U.S. dollars to trigger U.S. sanctions liability if a U.S. person or U.S. financial institution is involved at any point.
• Indirect exposure through intermediaries - banks, freight forwarders, insurers - can create liability even when the primary commercial relationship appears clean.
• The SDN List must be screened not only against counterparties but also against beneficial owners, directors, key personnel and, in some sectors, end users of goods or services.
• OFAC';s voluntary self-disclosure programme offers meaningful penalty mitigation for companies that identify and report their own violations promptly.

If your business operates across multiple jurisdictions and you are uncertain whether a counterparty or transaction structure creates SDN List exposure, contact info@vlolawfirm.com. We can assist with screening protocols, licence applications and compliance programme design.

The SDN List is the most prominent but not the only sanctions list that internationally active businesses must monitor. OFAC also maintains several other lists, including the Sectoral Sanctions Identifications (SSI) List, which restricts specific types of transactions with designated parties rather than imposing a blanket prohibition, and the Foreign Sanctions Evaders (FSE) List. Understanding the interaction between these lists is essential for accurate compliance.

Outside the United States, parallel sanctions regimes maintain their own designation lists. The European Union publishes a Consolidated List of persons, groups and entities subject to EU financial sanctions. The United Kingdom maintains its own Consolidated List following its departure from the EU. The United Nations Security Council publishes consolidated lists under various resolutions. Many jurisdictions require compliance with their domestic lists as a matter of local law, independently of U.S. requirements.

For multinational businesses, this creates a layered compliance obligation. A party may not appear on the OFAC SDN List but may be designated under EU or UK sanctions, or vice versa. Effective compliance programmes screen against all relevant lists simultaneously and are calibrated to the specific jurisdictions in which the business operates, the currencies it uses and the nationalities of its personnel and shareholders.

Many underestimate the compliance burden associated with maintaining current, multi-list screening. The lists change frequently, the quality of identifying information varies, and name-matching algorithms must be tuned to catch transliterations, aliases and partial matches without generating an unmanageable volume of false positives. Specialist compliance technology and legal advice are typically required for businesses above a modest transaction volume.

A practical scenario: a European trading company sources goods from a supplier in a third country. The supplier';s ultimate beneficial owner was recently added to the SDN List. The European company';s bank - a global institution with U.S. dollar clearing operations - flags the payment and freezes the transaction. The European company had no direct knowledge of the ownership change. Under U.S. primary sanctions, the bank';s action is legally required. The European company now faces a delayed transaction, potential loss of the commercial relationship and a need to conduct enhanced due diligence on its entire supplier base.

A second scenario: a technology startup based outside the United States sells software-as-a-service to business customers globally. One customer';s parent company is on the SDN List. The startup';s payment processor - a U.S. entity - is required to block the transaction. The startup may also face secondary sanctions exposure depending on the programme involved and the nature of the software. The startup';s founders, who had not implemented any sanctions screening, must now conduct a retrospective review of their customer base and consider whether voluntary self-disclosure to OFAC is appropriate.

Not all dealings with SDN-listed parties are absolutely prohibited. OFAC has authority to issue licences that authorise specific transactions that would otherwise be prohibited. Licences come in two forms: general licences, which are published in programme regulations and authorise categories of transactions for all eligible parties without requiring individual application; and specific licences, which are granted on a case-by-case basis following a written application to OFAC.

General licences typically cover humanitarian transactions, personal remittances, certain journalistic activities, legal services to designated parties, and transactions related to the official business of international organisations. The scope of available general licences varies significantly by sanctions programme. Parties relying on a general licence must ensure that all conditions of the licence are strictly met, because a transaction that falls outside the licence';s scope remains prohibited.

Specific licence applications require a detailed written submission to OFAC explaining the nature of the transaction, the parties involved, the legal basis for the request and the policy reasons why the licence should be granted. OFAC has broad discretion to grant, deny or condition specific licences. Processing times vary considerably depending on the complexity of the request and the programme involved - straightforward applications may be resolved in weeks, while complex cases can take many months.

A common mistake is treating a licence application as a routine administrative step. OFAC scrutinises applications carefully, and a poorly prepared submission can result in denial or in conditions that make the transaction commercially impractical. Legal counsel with specific OFAC experience is advisable for any significant licence application.

What is the legal effect of appearing on the SDN List?

Appearing on the SDN List means that all property and interests in property of the designated party that are within U.S. jurisdiction, or that come within the possession or control of a U.S. person, must be blocked and reported to OFAC. U.S. persons are prohibited from engaging in any transaction with the designated party unless OFAC grants a licence. The designation does not constitute a criminal conviction and does not by itself impose a fine, but it effectively cuts the designated party off from the U.S. financial system and from dealings with U.S. persons. Non-U.S. parties that transact with SDN-listed entities may face secondary sanctions consequences, including being denied access to U.S. markets or correspondent banking relationships.

How quickly can a business determine whether a counterparty is on the SDN List, and how often should screening be repeated?

OFAC publishes the SDN List in machine-readable formats that can be integrated into compliance screening systems, allowing near-real-time checks. For businesses with high transaction volumes, automated screening at the point of onboarding and at each transaction is standard practice. For lower-volume businesses, periodic batch screening - at minimum monthly, and more frequently for higher-risk counterparties - is a reasonable baseline. The key risk is that a counterparty';s status can change between checks: a party that was clean at onboarding may be designated later. Compliance programmes should also re-screen existing customer and supplier bases whenever OFAC makes significant updates to relevant programmes.

Does the SDN List apply to non-U.S. companies that have no operations in the United States?

The SDN List directly binds U.S. persons and entities. However, non-U.S. companies are not entirely outside its reach. First, if a non-U.S. company processes transactions through U.S. financial institutions or in U.S. dollars, those transactions are subject to U.S. jurisdiction and the participating U.S. institutions are required to comply with OFAC rules. Second, secondary sanctions programmes create a risk that non-U.S. entities engaging in significant transactions with SDN-listed parties may themselves be designated or denied access to the U.S. financial system. Third, many non-U.S. jurisdictions have enacted their own sanctions regimes that mirror or complement U.S. measures, creating independent local compliance obligations. In practice, most internationally active businesses treat SDN List compliance as a global requirement regardless of their home jurisdiction.

The SDN List is a foundational instrument of international sanctions law with direct and indirect consequences for businesses operating across borders. Compliance requires continuous screening, a clear understanding of the 50 Percent Rule, and awareness of the interaction between U.S. sanctions and parallel regimes in other jurisdictions. The cost of non-compliance - financial penalties, reputational damage and loss of banking access - far exceeds the investment required to build a sound compliance programme.

VLO Law Firms advises international clients on SDN List compliance, sanctions screening programmes and OFAC licence applications. We can assist with counterparty due diligence, compliance programme design, voluntary self-disclosure and specific licence submissions. To request a consultation, contact: info@vlolawfirm.com