The sanctioned country list is the operational shorthand for the comprehensive US sanctions programs administered by the Office of Foreign Assets Control (OFAC). It is not a single list but the set of country-based and region-based programs in which OFAC has imposed the most extensive prohibitions on dealings between US persons and persons or property associated with the jurisdiction. For US founders running international contractor and payroll operations, knowing which jurisdictions are comprehensively sanctioned (and which regions within otherwise-permitted countries are off-limits) is a basic onboarding check.
How the Sanctioned Country List Works
OFAC administers a layered set of country and region programs:
- Comprehensive sanctions. Almost all dealings prohibited. As of 2025 to 2026 OFAC publication these include Cuba, Iran, North Korea (DPRK), Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine. Always confirm the current list at OFAC Sanctions Programs and Country Information because the comprehensive set can change quickly (Syria sanctions, for example, have been the subject of significant general licenses since late 2024).
- Sectoral and targeted programs. Reach specific industries, persons, or activities. Russia is the largest current example, with sectoral sanctions on financial services, energy, defense, and metals, plus targeted SDN designations across many sectors.
- List-based programs. Cover specific drug-trafficking organizations (narcotics), foreign terrorist organizations, cyber actors, transnational criminal organizations, and human-rights violators (Global Magnitsky).
- Secondary sanctions programs. Reach non-US persons engaging in specific transactions with Iran, DPRK, or designated Russian actors.
The legal foundations sit in 50 USC 1701 to 1707 (IEEPA), 50 USC App. 1 to 44 (TWEA) for Cuba, and a wide set of program-specific statutes (the Cuban Liberty and Democratic Solidarity (LIBERTAD) Act, the Comprehensive Iran Sanctions, Accountability, and Divestment Act, the Countering America’s Adversaries Through Sanctions Act, and others).
Comprehensive Sanctions Programs (Current Set)
| Jurisdiction | Program | Basis |
|---|
| Cuba | Cuban Assets Control Regulations, 31 CFR Part 515 | TWEA, LIBERTAD Act |
| Iran | Iranian Transactions and Sanctions Regulations, 31 CFR Part 560 | IEEPA, Iran Sanctions Act |
| North Korea (DPRK) | North Korea Sanctions Regulations, 31 CFR Part 510 | IEEPA, NKSPEA |
| Syria | Syrian Sanctions Regulations, 31 CFR Part 542 (subject to recent general licenses) | IEEPA |
| Crimea region of Ukraine | Crimea-specific provisions in Ukraine-/Russia-Related Sanctions Regulations | IEEPA, Executive Orders |
| Donetsk and Luhansk regions of Ukraine | DNR/LNR-specific provisions in Ukraine-/Russia-Related Sanctions Regulations | IEEPA, Executive Orders |
The Syria program changed materially after the December 2024 fall of the Assad regime. OFAC issued General License 24 authorizing certain transactions with new Syrian governing institutions and for reconstruction activities, while keeping the comprehensive framework formally in place. Operational decisions for Syria-related counterparties should be made on current OFAC guidance, not on historical practice.
Who Must Comply
- US persons: Citizens, permanent residents, anyone physically present in the US, and US-organized entities including their foreign branches.
- Foreign subsidiaries of US persons: Cuba and Iran programs reach foreign subsidiaries owned or controlled by US persons.
- Non-US persons via secondary sanctions: Iran, DPRK, and certain Russia provisions impose consequences on non-US persons for specific transactions.
Penalties
- IEEPA civil: Greater of about 377,700 dollars per violation or twice the underlying transaction (figure adjusted annually for inflation).
- IEEPA criminal: Up to 1,000,000 dollars per violation for entities, up to 20 years of imprisonment for individuals, for willful violations.
- TWEA criminal (Cuba): Up to 1,000,000 dollars per violation for entities, up to 100,000 dollars and 10 years of imprisonment for individuals.
- Strict liability for civil violations. Lack of knowledge that a counterparty is in a sanctioned jurisdiction is not a defense, though it is a mitigating factor.
- Secondary consequences. Denied US-dollar clearing, loss of correspondent banking relationships, and reputational damage that often exceeds the cash penalty.
Common Pitfalls
- Country residence vs country presence. A contractor whose passport is Iranian but who has been resident in Germany for years is not automatically a sanctions hit. A contractor whose passport is German but who is resident and working in Iran is.
- Regional sub-units. Crimea, Donetsk, and Luhansk are sanctioned but the rest of Ukraine is not. Geolocation and address verification matter.
- Sectoral targeting masking comprehensive risk. A “Russia is not on the sanctioned country list” mental model underestimates the layered sectoral and targeted programs that effectively prohibit large categories of Russia-related dealings.
- Currency routing. USD payments routed through US correspondent banks can drag a non-US transaction into US jurisdiction.
- Stale references. Sanctioned country status moves. Cuba and Iran have been comprehensive for decades, but the specific licenses, exceptions, and regulations change every year.
- OFAC Sanctions Screening: the operational discipline that includes country and region screening alongside SDN list screening.
- AML: the parallel financial-crime regime under the BSA.
- FATF: the standard-setter whose grey and black lists overlap with but are distinct from OFAC sanctions.
- FCPA: adjacent risk that frequently co-occurs in the same jurisdictions.
Omnivoo Contract Management screens contractor residence, address, IP geolocation, and payment-corridor banking against comprehensive sanctions jurisdictions and sectoral programs at onboarding and on each payout, with documented denial workflows for prohibited countries and regions.