Advanced

OFAC, EU, and UN Sanctions and Stablecoins

How EU, OFAC, and UN sanctions interact with stablecoin blacklists, MiCA, and issuer enforcement

9 min read Regulatory

When the US Treasury moved against Tornado Cash in 2022, it sent shockwaves through crypto. For a period, smart-contract addresses appeared on the OFAC SDN list before Treasury later removed those addresses on March 21, 2025. Understanding that full arc—and how sanctions interact with stablecoin blacklists—helps users separate current legal status from historical issuer actions.

Sanctions overview

International sanctions are economic restrictions imposed by governments to achieve foreign policy goals. They can target countries, organizations, or individuals, and they restrict what financial dealings are permitted.

🇺🇸

OFAC (US)

Office of Foreign Assets Control
Part of the US Treasury. Administers the SDN (Specially Designated Nationals) list. Applies to US persons and others subject to US jurisdiction. Some non-US activity with a US nexus can also be covered; using a USD-pegged token alone does not decide jurisdiction. Source

🇪🇺

EU Sanctions

European Union
EU regulations apply within EU territory, to EU nationals wherever located, to EU-incorporated entities, and to business conducted in the EU. EU sanctions are distinct from OFAC rules. Source

🇺🇳

UN Sanctions

United Nations Security Council
Binding on all UN member states. Generally focused on terrorism, nuclear proliferation, and human rights. Often the baseline for national sanctions. Source

Multiple jurisdictions apply

You may be subject to sanctions from multiple jurisdictions simultaneously. A European exchange must follow applicable EU sanctions. OFAC requirements also apply if it is a US person or otherwise subject to US jurisdiction, or if a transaction has a relevant US nexus under the applicable program. Merely using a USD-denominated stablecoin does not by itself establish that nexus.

OFAC and the SDN list

OFAC maintains the SDN (Specially Designated Nationals) list of blocked persons. It can include cryptocurrency addresses as identifiers for listed persons. US persons generally may not transact with blocked persons and must block their property and interests in property when required by applicable OFAC rules.

What's on the SDN list?

Individuals

Named persons associated with sanctioned regimes, terrorism, or organized crime.

Entities

Companies, organizations, government bodies that are sanctioned.

Vessels & Aircraft

Ships and planes used for sanctions evasion or by sanctioned parties.

Crypto Addresses

Since 2018, OFAC has included cryptocurrency wallet addresses directly on the SDN list. Source

Who must comply?

The exact scope depends on the sanctions program and the facts. In general, OFAC rules apply to:

  • US persons - US citizens and lawful permanent residents wherever located, people and entities in the United States, and entities organized under US law, including their foreign branches
  • Other activity with a US nexus - Depending on the program, non-US activity involving the United States, US persons, or goods or services exported from the United States can be covered
  • Causing or facilitating a violation - A non-US person cannot cause a US person to violate OFAC rules, and some programs restrict US persons from facilitating conduct they could not undertake directly
  • Program-specific and secondary sanctions - Some programs extend particular rules or sanctions exposure to specified non-US persons or entities
Stablecoin implications: US persons must comply with applicable OFAC rules. Non-US firms should evaluate the actual US nexus, program-specific prohibitions, correspondent-banking relationships, counterparties, and secondary-sanctions risk. A token being linked to the US dollar does not by itself decide whether OFAC applies.

The Tornado Cash precedent

In August 2022, OFAC designated Tornado Cash, an Ethereum mixing protocol. The action was novel because smart-contract addresses appeared on the SDN list, and market participants treated interactions with those addresses as a sanctions issue.

August 8, 2022

OFAC designates Tornado Cash

Treasury adds Tornado Cash addresses to the SDN list and cites laundering tied to North Korean actors, including funds from the Axie Infinity / Ronin hack. Source

August 2022

Immediate market reaction

Circle blacklists USDC already held in Tornado-related addresses, GitHub removes repositories, and many DeFi front ends and service providers block associated wallets.

November 2024

Fifth Circuit narrows OFAC's theory

The court holds that OFAC exceeded its authority as to immutable Tornado Cash smart contracts, reshaping the legal analysis around code-based sanctions. Source

March 21, 2025

Treasury removes Tornado Cash addresses

Treasury delists the Tornado Cash addresses. That means Tornado Cash is not accurately described today as an active SDN designation, even though the episode still matters historically. Source

What the Tornado Cash record establishes

The official and on-chain records show a sequence of distinct events. They should not be collapsed into a current designation or a verdict about every address that interacted with the protocol:

The official sanctions status changed

Treasury designated Tornado Cash addresses in August 2022 and removed them from the SDN list in March 2025. A current sanctions check must use the current official source.

Circle took separate on-chain actions

Circle blacklist records appeared for USDC at Tornado-related addresses in 2022. Those token-control records are separate from Treasury's designation and delisting records.

A mixer interaction still needs context

A recorded interaction can be useful review information, but it does not by itself prove who controlled an address, why the service was used, or that a deposit and withdrawal belonged to the same person.

EU and UN sanctions

While OFAC gets the most attention in crypto, EU and UN sanctions also matter:

EU Sanctions

The EU maintains its own consolidated sanctions list, which often—but not always— aligns with US sanctions. Key differences:

Scope Applies in EU territory, to EU nationals wherever located, to EU-incorporated entities, and to business conducted in the EU
Enforcement Each member state responsible for enforcement; penalties vary by country
Crypto stance Less explicit crypto guidance than OFAC, but Russia sanctions explicitly cover crypto

The EU's Markets in Crypto-Assets Regulation (MiCA) sets authorization, disclosure, reserve, redemption, governance, and conduct rules for relevant token issuers and crypto-asset service providers. Sanctions and anti-money-laundering duties also arise under separate EU rules; MiCA is not the sole source of those duties.

UN Sanctions

UN Security Council sanctions are binding on all UN member states and often form the foundation for national sanctions programs:

Focus Terrorism (ISIS, Al-Qaeda), nuclear proliferation (North Korea, Iran)
Implementation Requires national implementation; varies by country
Crypto UN lists identify sanctioned individuals and entities; member states implement the applicable measures through national law
Russia sanctions and crypto: Following Russia's 2022 invasion of Ukraine, US and EU restrictions can apply to transactions involving virtual currency when the governing rule covers the parties, services, or conduct at issue. Crypto does not create an exception to otherwise applicable sanctions.

How stablecoin issuers respond

Stablecoin issuers have adopted different approaches to sanctions compliance:

Tether (USDT)
  • Has frozen addresses tied to sanctions, law-enforcement investigations, and sanctioned jurisdictions
  • Cooperates with law enforcement agencies on sanctions evasion investigations
  • Certain reviewed USDT contracts can burn a currently blocked address's full USDT balance, reducing supply
  • Publishes announcements about sanctions cooperation and address-restriction actions
Circle (USDC)
  • USDC terms reserve the right to block addresses and restrict associated USDC
  • Recorded USDC blacklist actions at Tornado-related addresses in August 2022
  • US entity regulated as a money transmitter; Circle SAS is a French-authorized electronic money institution, and USDC is offered in the EEA as a MiCA-compliant e-money token
  • Publishes reserve reports, token terms, and an EEA USDC whitepaper

Sanctions and token controls remain separate

A business's sanctions obligations depend on applicable law, jurisdiction, and its own facts. A stablecoin company's on-chain control action is a separate record, and one token's collateral or backing relationship does not automatically copy an address-level designation or restriction to another token. Circle's USDC terms and MiCA USDC whitepaper are primary references for Circle's stated structure and policies.

Protecting yourself

Whether you're an individual user or running a business, here's how to manage sanctions exposure:

Screen counterparties

Before large transactions, check addresses against OFAC SDN list and stablecoin blacklists. Tools like Eagle Virtual aggregate this data.

Review mixer interactions in context

Record the service, direction, timing, and amounts your evidence supports. An interaction alone does not prove intent or wrongdoing; apply your organization's own procedure.

Document transactions

Keep records of counterparty information, transaction purposes, and any screening you performed. This helps if questions arise later.

Monitor ongoing exposure

For ongoing relationships or property you still hold, risk-based monitoring can identify a new designation or change in official status that may require review.

Understand your jurisdiction

Different sanctions apply in different circumstances. Assess citizenship or nationality, location, business organization, transaction nexus, and program-specific rules.

Seek legal advice

For business operations, consult with lawyers who understand both crypto and sanctions law. This area is complex and evolving rapidly.

Key takeaways

1
OFAC can apply beyond activity conducted in the US. US persons must comply, and some non-US activity is covered based on the program, facts, or a relevant US nexus.
2
Tornado Cash has a dated legal history. Treasury's 2022 action, the 2024 Fifth Circuit ruling, and the March 21, 2025 delisting are separate events. Current status comes from the current official sanctions source.
3
Sanctions and token controls are separate records. Tether and Circle may restrict their tokens under applicable obligations and company policy, but an interaction or designation does not itself execute an on-chain freeze.
4
Screen before you transact. Checking addresses against sanctions lists and blacklists gives a reviewer both records before a decision.

Frequently asked questions

Do OFAC sanctions apply to non-US crypto users?

OFAC rules apply to US persons and others subject to US jurisdiction. A non-US person's activity can also be covered when it involves the United States or US persons, causes a US person to violate sanctions, or falls under a program-specific rule. Using a USD-pegged token alone does not establish OFAC jurisdiction. Non-US firms should assess any US nexus and applicable secondary-sanctions risk.

Can stablecoin companies freeze tokens without my approval?

Tether and Circle can use controls on covered token deployments without the wallet holder's approval. The action restricts only that company's token on the specific deployment; it does not freeze every asset at the address. On Solana the target is a token account. Exact mechanics vary by token and network.

Is Tornado Cash still sanctioned?

No. The Fifth Circuit issued its ruling in November 2024, and Treasury removed the Tornado Cash addresses from the SDN list on March 21, 2025. A historical interaction remains a dated on-chain fact, but it does not by itself establish a current sanctions match, purpose, or wrongdoing.

How does MiCA affect stablecoin sanctions screening in the EU?

MiCA sets authorization, disclosure, reserve, redemption, governance, and conduct rules for relevant token issuers and crypto-asset service providers in the EU. Sanctions and anti-money-laundering duties also arise under separate EU rules; MiCA is not the sole source of those duties.

Primary sources