Table of Contents
OFAC vs UN vs EU sanctions: What is the difference between them? Which sanctions list should financial institutions screen against? If you’re an AML compliance professional, those are among the most common and most important questions you’ll face.
OFAC, UN, and EU sanctions are separate regimes with different legal authorities, scope, and enforcement: OFAC sanctions are U.S. measures that apply to U.S. persons and can reach foreign firms through dollar clearing and other U.S. touchpoints, EU sanctions are bloc-wide restrictive measures adopted by consensus and binding across member states, and UN sanctions are multilateral obligations that bind all member states but rely on national implementation. For compliance teams, risk officers, AML professionals, and legal departments at financial institutions, fintechs, crypto platforms, and other regulated firms, those differences are not academic—they shape who must be screened, which transactions must be blocked, and where exposure can arise.
This guide compares how each regime is implemented and enforced, how sanctions lists and screening obligations differ, what types of measures each authority uses, and what a workable compliance program needs to get right across jurisdictions. In a market where one customer, payment route, or counterparty can trigger overlapping sanctions risk, understanding OFAC vs UN vs EU sanctions is essential to avoid costly penalties, meet multi-jurisdiction compliance obligations, and manage financial crime risk with confidence.
OFAC vs UN vs EU sanctions: a quick snapshot for compliance teams
If you’re building or auditing a sanctions screening process, the first thing to understand is that no single regime covers everything. Three distinct frameworks operate in parallel, each with its own legal authority, scope, and enforcement mechanism. Here’s the essential breakdown:
OFAC sanctions (U.S.) are administered by the Office of Foreign Assets Control within the U.S. Department of the Treasury. These are unilateral measures driven by U.S. foreign policy priorities. Sanctions are used to penalize bad actors and compel changes in behavior, from state-level adversaries to individual terrorism financiers.
EU sanctions (European Union) are supranational restrictive measures adopted under the Common Foreign and Security Policy. They require political consensus across 27 member states and often complement or expand upon UN sanctions, showcasing their broader reach.
UN sanctions (United Nations Security Council) are multilateral measures imposed through Security Council resolutions. They bind all UN member states but depend entirely on national implementation for enforcement.
Any robust compliance framework must cover all three regimes in its sanctions list search and screening procedures. Missing one creates exposure that no risk appetite statement can justify.
What is the difference between OFAC, UN and EU sanctions?
OFAC sanctions are unilateral U.S. sanctions administered by the Treasury. EU sanctions are regional measures binding across EU member states. UN sanctions are multilateral obligations adopted by the UN Security Council and implemented by individual countries.
A practical example: Consider a Russian bank designated after the 2022 invasion of Ukraine. That bank may appear on the OFAC SDN list (blocking all transactions involving U.S. persons or the U.S. financial system), the EU consolidated list (freezing assets within EU territory and prohibiting EU persons from making funds available), and potentially on the UN consolidated sanctions list if a Security Council resolution covers it. Sanctioned individuals associated with that bank may have their assets blocked or frozen, prohibiting transactions across all three regimes, but the specific legal effects, scope of prohibitions, and enforcement mechanisms differ for each. Your compliance team needs to understand those differences to respond correctly.
The following sections break down each regime’s role, sanctions lists, and impact on due diligence programs.
What are OFAC sanctions? (U.S. sanctions programs)
OFAC – the Office of Foreign Assets Control – sits within the U.S. Department of the Treasury and serves as the primary administrator and enforcer of U.S. economic sanctions. Its primary purpose is to advance U.S. national security and foreign policy objectives by restricting transactions with designated targets. OFAC administers both comprehensive and targeted sanctions against countries and individuals.
Core sanctions programs include:
Country-based programs covering Iran, North Korea, Cuba, and Russia/Ukraine-related sanctions that expanded significantly after February 2022.
List-based programs targeting terrorism, narcotics trafficking, proliferation of weapons of mass destruction, cybercrime, and human rights violations.
Key OFAC sanctions lists that financial institutions must screen:
The Specially Designated Nationals and Blocked Persons List (SDN List) is the primary blocking list. U.S. persons are prohibited from conducting business with anyone on this list, and all assets must be blocked.
Consolidated Non-SDN lists including the Sectoral Sanctions Identifications List, the Foreign Sanctions Evaders List, the Non-SDN Menu-Based Sanctions List, and the Non-SDN Chinese Military-Industrial Complex Companies List. These impose narrower restrictions rather than full blocking.
The 50% ownership rule: entities more than 50% owned by blocked parties are treated as blocked, even if not explicitly named on any list.
Jurisdiction and reach:
“U.S. persons” includes U.S. citizens, permanent residents, U.S.-incorporated entities and their foreign branches, and anyone physically in the United States. But OFAC’s reach extends far beyond U.S. borders. OFAC sanctions include primary and secondary sanctions types. Secondary sanctions can affect non-US entities – OFAC sanctions can apply extraterritorially by influencing foreign companies dealing with the U.S. A foreign financial institution processing significant transactions with Iranian or Russian SDNs risks being cut off from U.S. dollar clearing and correspondent account access, even without any direct U.S. involvement in the transaction.
OFAC’s extraterritorial reach makes it aggressive in enforcement. OFAC sanctions may carry significant penalties for non-compliance, affecting global financial operations. In 2023, OFAC levied 17 public enforcement actions totaling over $1.5 billion in penalties, including the landmark ~$968 million settlement with Binance. In 2024, OFAC issued 12 enforcement actions totaling ~$48.8 million. Civil penalties under IEEPA can reach approximately $377,700 per violation (inflation-adjusted) or twice the transaction value. Willful violations carry criminal penalties, including imprisonment.
The dominance of the U.S. dollar in global trade and the centrality of correspondent banking mean that virtually every global bank must maintain OFAC compliance, regardless of where it is headquartered. Any name screening solution used by banks and fintechs must handle complex OFAC list structures, aliases, transliterations, and program codes.
What are EU sanctions? (European Union restrictive measures)
The European Union imposes sanctions – officially termed “restrictive measures” – through its Common Foreign and Security Policy. These measures are binding across all 27 member states once adopted via Council Decisions and implemented through Council Regulations.
Governance and legal basis:
The European Council and the High Representative for Foreign Affairs and Security Policy drive proposals.
EU sanctions require consensus among 27 member states, making the process more deliberative than OFAC’s unilateral approach.
Main instruments:
Country/region-based sanctions targeting Russia, Belarus, Syria, Iran, and Myanmar, among others.
Thematic regimes including the EU Global Human Rights Sanctions Regime (established in 2020, currently covering 135 persons and 37 entities), terrorism-related measures often aligned with UN designations, and cyber-attack sanctions.
The EU consolidated list:
The EU Consolidated Financial Sanctions List combines all persons, groups, and entities subject to EU financial sanctions – asset freezes, prohibitions on making funds available, and travel bans. EU-based financial institutions and European companies use this list for automated sanctions list search and screening.
Russia example: In 2022, the EU sanctioned Russian banks after the Ukraine invasion through multiple sanctions packages that restricted Russian banks’ access to SWIFT, imposed asset freezes on oligarchs, and limited exports of key technologies. However, EU sanctions may diverge from OFAC – not all U.S. designations are mirrored on the EU list, and vice versa. EU sanctions target individuals and entities to safeguard international law and can strengthen UN sanctions or create autonomous sanctions regimes where the Security Council cannot act.
The EU Blocking Statute:
The EU Blocking Statute protects EU companies from U.S. sanctions that have extraterritorial effect. It prohibits EU operators from complying with certain listed foreign laws (notably U.S. secondary sanctions on Iran), creating a practical conflict for multinational compliance programs. An EU bank facing OFAC secondary sanctions pressure on one side and the Blocking Statute on the other must navigate carefully with legal counsel.
What are UN sanctions? (UN Security Council measures and consolidated list)
UN sanctions are measures imposed by the United Nations Security Council under Chapter VII of the UN Charter. They represent the highest level of international consensus on threats to peace and security and are binding on all 193 UN member states.
How UN sanctions are created:
The Security Council adopts resolutions establishing sanctions regimes, supported by dedicated Sanctions Committees for each regime.
Resolutions require affirmative votes from at least nine of fifteen members and no veto from the five permanent members (U.S., U.K., France, Russia, China). This political constraint means UN sanctions tend to be narrower and more carefully negotiated.
The UN consolidated sanctions list:
The United Nations Security Council Consolidated Sanctions List aggregates individuals and entities across all active regimes. It currently lists approximately 730 individuals and 272 entities subject to measures imposed, including travel bans, arms embargoes, and asset freezes. Identifiers include names, aliases, dates of birth, passport numbers, and permanent reference codes.
Key regime examples:
North Korea (DPRK): strict arms and financial restrictions tied to nuclear and missile programs. UN sanctions on North Korea restrict its access to international banking.
Al-Qaida/ISIL sanctions regime: travel bans and asset freezes on individuals and entities designated for terrorism financing.
Implementation reality:
UN sanctions must be implemented into national law. Actual enforcement depends on how each country transposes UN measures into domestic sanctions lists and regulations. UN sanctions require global cooperation for effective enforcement, but capacity and legal systems vary enormously across member states. UN sanctions often suffer from inconsistent enforcement as a result.
Most global financial institutions treat UN sanctions as a minimum baseline, then layer stricter OFAC and EU controls on top.
OFAC vs UN vs EU Sanctions Regime: Key Differences Explained
Understanding how these three regimes differ structurally is essential for building a compliance and due diligence program that actually works across multiple jurisdictions.
Who decides and how:
OFAC: The U.S. executive branch and Treasury act unilaterally, often rapidly, through executive orders and regulatory actions.
EU: consensus-driven among 27 member states, with sanctions packages requiring negotiation and political alignment.
UN: the Security Council with P5 veto power, producing fewer and more politically balanced measures.
Legal scope and binding effect:
OFAC: applies to U.S. persons directly, with secondary sanctions impacting non-U.S. entities indirectly. Any entity within us jurisdiction or touching the U.S. financial system is pulled in.
EU: binding on EU entities and persons within EU territory, including EU nationals abroad. Limited extraterritorial reach, but strong internal effect.
UN: formally binding on all member states, but only through domestic legal implementation. Companies and financial institutions are affected only once national authorities transpose the obligations.
Coverage and granularity:
OFAC lists are often more detailed, with extensive aliases, program tags, and sectoral sanctions identifiers. The OFAC list landscape includes multiple list types with different legal consequences.
EU lists focus on asset freezes and sector restrictions tied to specific CFSP regulations.
The UN list is generally narrower. Some targets appear only at the national or regional level (OFAC or EU) and not on the UN consolidated list.
Practical example: A compliance team might find an entity on the OFAC SDN list that does not appear on the UN sanctions list. If their institution has U.S. exposure – through dollar clearing, U.S. customers, or correspondent banking – they must still block transactions. Multinational businesses adopt the strictest sanctions to avoid violations of intersecting jurisdictions.
Secondary differences: implementation, enforcement, and risk for financial institutions
Beyond structural differences, the three regimes diverge sharply in how aggressively they are enforced – and that enforcement reality should shape your sanctions screening process strategy.
OFAC implementation and enforcement:
OFAC has strong investigative powers, issues high-profile penalties, and publishes public enforcement actions. The emphasis is on risk-based sanctions compliance programs with robust internal controls and audit trails. Historic multi-billion-dollar settlements with major European banks between 2014 and 2019 set the tone for the entire industry.
EU implementation:
EU sanctions are implemented through EU regulations and enforced by national competent authorities in each member state. There is meaningful variation in enforcement intensity between countries, though the trend is toward stronger supervision, especially after the 2022 Russia sanctions packages. The EU is also working to harmonize penalties through a Directive on violation of Union restrictive measures.
UN implementation:
Enforcement depends on national laws and capabilities and can vary considerably between regions. For many global banks, UN measures are integrated as baseline rules in group-wide policies but are rarely the binding constraint – OFAC or EU measures are almost always stricter.
Risk exposure by institution type:
Global banks: exposed to all three regimes simultaneously through operations, dollar clearing, and correspondent banking.
Regional banks and fintechs may face less direct U.S. exposure but can be pulled in via downstream counterparties or payment rails.
Crypto platforms: increasingly subject to OFAC enforcement when dealing with U.S. clients or dollar transactions.
Entities with U.S. dollar clearing or EU operations are effectively pulled into OFAC and EU compliance regardless of their base jurisdiction. Effective sanctions list search, monitoring, and governance must be calibrated to these enforcement realities, not just legal theory.
Types and domains of sanctions: from asset freezes to trade and travel bans
Sanctions are not monolithic. OFAC, the EU, and the UN deploy different tools depending on the objective. Sanctions often include asset freezes, travel bans, and arms embargoes. Here are the core domains:
Financial sanctions and asset freezes: blocking funds and economic resources of sanctioned entities and individuals. This is the most common measure across all three regimes.
Trade and export controls: restrictions on specific goods, technologies, or sectors (e.g., energy, defense, dual-use items).
Travel bans: prohibiting entry or transit through a jurisdiction for designated individuals.
Arms embargoes: prohibiting trade in weapons, military goods, and related materials.
These measures apply differently depending on the target:
Individuals such as political leaders, terrorist financiers, and oligarchs face travel bans and asset freezes.
Entities, including banks, energy companies, shipping lines, and crypto exchanges, face trade restrictions and financial prohibitions.
Sectors or entire economies may be targeted – for example, Russian energy, defense manufacturing, or high-tech components.
Not every type of sanction triggers the same compliance action. Asset freezes require blocking or rejecting transactions. Trade restrictions require coordination between compliance, legal, and logistics teams. Robust sanctions screening solutions must link list entries to their underlying sanctions programs so compliance teams understand which prohibitions apply to each potential match.
Legal implications and sanctions compliance obligations
Sanctions compliance is crucial for financial crime risk management in regulated industries. Regulators across jurisdictions expect financial institutions and regulated businesses to maintain controls that prevent prohibited transactions and illegal activities.
Consequences of violations:
Civil and criminal penalties – ignoring sanctions lists can lead to heavy fines or imprisonment. Under IEEPA, civil penalties can exceed $377,700 per violation; criminal exposure includes up to 20 years’ imprisonment for willful violations.
Revocation of licenses and loss of access to correspondent banking.
Reputational damage and increased supervisory scrutiny. The £29M FCA fine against Starling Bank for sanctions screening failures is a recent reminder.
Core components of an effective program:
Governance and documented policies covering OFAC, EU, and UN sanctions.
Risk assessment for products, customers, geographies, and delivery channels.
Sanctions list search and ongoing monitoring are integrated with onboarding and transaction flows.
Record-keeping: due diligence checks should be logged for compliance purposes, with detailed records of list searches, potential matches, decisions, and escalations. Authorities expect organizations to demonstrate that international sanction lists were current at the time decisions were made.
Financial institutions must screen for sanctioned individuals and freeze assets as required by regulations. Companies must check sanctions lists to avoid legal consequences, and sanctions list checks are essential for ongoing business relationships.
Note that politically exposed persons are not always sanctioned, but organizations often integrate PEP screening with sanctions and adverse media monitoring as part of enhanced due diligence. Due diligence is essential for managing financial crime risks across anti-money laundering and sanctions programs.
Multi-jurisdictional businesses need a harmonized sanctions policy that resolves conflicts – particularly the tension between OFAC secondary sanctions and the EU Blocking Statute – with clear legal guidance and board-approved risk positions.
OFAC vs UN vs EU Sanctions Lists Compared
Working with sanctions lists is where policy meets operations. Here’s how the three main lists function in practice.
The OFAC list landscape:
The SDN list is the primary blocking list. Entities and individuals on it face full asset blocking and transaction prohibition.
Non-SDN lists contain entities subject to narrower, program-specific restrictions – from the sectoral sanctions identifications list to the payable through account sanctions list.
Accurate list search requires handling alias names, transliterations (Latin vs. Cyrillic, Arabic, etc.), and program tags.
The EU consolidated list:
The consolidated list of persons, groups and entities subject to EU financial sanctions is available via the EU’s official portal. The consolidated list includes all measures from multiple CFSP decisions and regulations, aggregated into a single searchable database.
The UN consolidated list:
Covers multiple sanctions regimes (DPRK, ISIL/Al-Qaida, Mali, Libya, Central African Republic, and others).
Uses identifiers including names, dates of birth, passport numbers, and permanent reference codes.
Additional lists:
Financial institutions additionally monitor national lists – the U.K. sanctions list post-Brexit, Canadian, Swiss, and other national lists. Some firms expand screening to law enforcement and regulatory enforcement watchlists from leading AML watchlist providers for deeper risk coverage.
Operational challenges:
Sanctions lists are updated frequently, requiring constant monitoring of amendments and new designations. Partial matches, transliteration issues, and common names generate false positives that slow case review. Compliance teams need intelligent matching that can reduce false positives without missing true hits.
Sanctions and AML compliance: integrating screening, monitoring, and due diligence
Sanctions controls don’t operate in isolation – they intersect with broader anti money laundering and financial crime compliance obligations. Compliance with sanctions requires firms to regularly update monitoring systems and screening procedures as part of an integrated approach.
How sanctions intersect with AML:
Customer onboarding and KYC processes must include a basic sanctions list search for all customers.
Ongoing monitoring of customer profiles, beneficial owners, and counterparties must capture new designations.
Transaction monitoring must identify sanctions-related typologies, including evasion via intermediaries, trade-based money laundering, and structuring around restrictions.
Due diligence expectations:
Standard due diligence for all customers prior to onboarding, including sanctions and PEP screening.
Enhanced due diligence for high-risk customers, politically exposed persons, and entities subject to or involving high-risk jurisdictions. Companies must perform ongoing due diligence on existing relationships to ensure ongoing compliance.
Navigating conflicting regimes:
The tension between the EU Blocking Statute and OFAC secondary sanctions is real, especially for EU banks with U.S. operations or dollar clearing. Organizations need consistent global risk policies, escalations to legal, and board-approved positions to identify and resolve these conflicts.
The role of RegTech:
Advanced AML software enables automated name screening, transaction monitoring, and adverse media tools with real-time or near real-time updates of OFAC, EU, UN, and other sanctions lists. Effective integration of sanctions, PEP, and adverse media data sets reduces gaps and delivers a more holistic view of customer and counterparty risk – helping organizations ensure compliance and support global compliance objectives.
How ZIGRAM supports compliance with OFAC, EU, and UN sanctions
ZIGRAM is a RegTech partner helping regulated organizations operationalize sanctions requirements across multiple jurisdictions. Its Complete AML System is designed as a unified, modular platform that covers the full compliance lifecycle.
The Complete AML System includes:
PreScreening.io for name screening, sanctions list search, and PEP/adverse media checks against OFAC, EU, UN, and other global watchlists. It handles alias matching, transliterations, and program code tagging to surface accurate potential matches.
Transact Comply for real-time and batch transaction monitoring aligned with sanctions programs and AML typologies – flagging payments involving U.S. dollar clearing, sanctioned parties, restricted sectors, and evasion patterns.
Entity Hero for entity risk assessment and management, including ownership mapping (critical for OFAC’s 50% rule) and consolidated risk scoring across sanctions, PEP, adverse media, and jurisdictional factors.
How ZIGRAM helps ensure compliance:
Automated screening against global sanctions lists, including the OFAC SDN list, the EU consolidated list, and the UN consolidated list, with configurable risk thresholds tailored to each institution’s risk appetite and jurisdictional footprint.
Reduced false positives via AI-enhanced matching, enabling faster case review and more efficient allocation of analyst resources.
Centralized audit trails capturing all list searches, hits, and analyst decisions – supporting regulatory expectations for record-keeping and demonstrable compliance.
Integration of politically exposed persons datasets, adverse media, and other watchlists to support enhanced due diligence across all business activities and customer relationships.
Getting OFAC, EU, and UN sanctions right isn’t optional – it’s the price of conducting business in global financial markets. A unified compliance approach, powered by the right technology, turns a regulatory burden into operational confidence.
Ready to modernize your sanctions and AML compliance workflows? Book a demo with ZIGRAM to see how the Complete AML System can help your organization stay ahead of evolving sanctions requirements.
