OFAC Sanctions and CBI Clients in 2026: What Every Adviser Must Screen For
The US Office of Foreign Assets Control (OFAC) administers one of the most far-reaching sanctions regimes in the world, and its reach extends well beyond transactions that touch the US financial system. For citizenship and residency advisers handling international clients, OFAC sanctions represent a significant compliance risk that is often underestimated. An adviser who processes a transaction involving a sanctioned person — including a citizenship application fee, a real estate purchase, or a fund transfer — can be exposed to OFAC civil and criminal liability, even if neither the adviser nor the client is based in the United States. Understanding the basic framework is no longer optional for compliance-conscious practice.
What OFAC Sanctions Are and Who They Reach
OFAC administers a series of sanctions programs — geographic sanctions (targeting countries like Iran, North Korea, Cuba, Syria, and Russia) and list-based sanctions (targeting designated individuals and entities regardless of nationality). The primary list-based tool is the Specially Designated Nationals and Blocked Persons List (SDN List), which names individuals and entities whose assets are blocked and with whom US persons are prohibited from transacting. In addition, OFAC's "50 Percent Rule" automatically extends blocking to any entity in which a listed SDN holds a 50% or greater ownership interest, even if that entity is not itself on the SDN List.
OFAC's jurisdiction extends to "US persons" — US citizens and permanent residents, wherever located; entities organized under US law; and any person or entity within the United States. It also extends to transactions that occur through the US financial system (dollar-clearing transactions pass through US correspondent banks) and, in some programs, to non-US persons through secondary sanctions. Secondary sanctions — most notably in the Russia, Iran, and Venezuela programs — can designate foreign companies and individuals who engage in certain transactions with sanctioned parties, even with no US nexus.
SDN Screening: The Non-Negotiable First Step
Before accepting any CBI client, advisers must screen the client — and all beneficial owners and immediate family members who are part of the application — against the OFAC SDN List and Consolidated Sanctions List. OFAC provides a free search tool at its website (ofac.treas.gov) and publishes the full list for download. Third-party compliance tools (World-Check, Refinitiv, Dow Jones Risk & Compliance, and others) provide automated screening with fuzzy-name matching that reduces false negatives from name transliteration variations. Manual OFAC searches are insufficient for professional practice given transliteration issues with names from Arabic, Russian, Chinese, and other scripts — advisers should use a tool with native-language search capability or a specialist compliance vendor.
Screening against the SDN List alone is not sufficient — advisers should also screen against: the EU consolidated sanctions list (for European-based advisers); the UN Security Council sanctions lists; national sanctions lists (UK OFSI, Australian DFAT, Canadian OSFI, as applicable); and PEP databases. The overlap between sanctioned persons and politically exposed persons (PEPs) is significant, and PEP status — while not itself disqualifying — requires enhanced due diligence under most CBI program rules and anti-money laundering regulations.
The 50 Percent Rule: Screening Beneficial Owners
OFAC's 50 Percent Rule means that an entity owned 50% or more by a listed SDN is automatically blocked, even without being listed. For CBI advisers, this creates obligations around beneficial ownership verification: if a corporate client is applying for citizenship as a vehicle for investment (where permitted), all beneficial owners above the 50% threshold must be screened. For clients who own complex holding structures — offshore trusts, layered companies, nominee arrangements — the beneficial ownership analysis requires legal work to trace through to the natural persons with controlling ownership. Some CBI programs (Caribbean programs, Vanuatu DSP) require individual applicants only and do not permit corporate applications, simplifying the beneficial ownership question, but investment transactions (real estate purchases, fund contributions) may still involve entities that require screening.
Russia Sanctions and CBI Applications in 2026
The expansion of Russia-related sanctions following February 2022 has created the most significant sanctions screening challenge for CBI advisers. OFAC's Russia-related sanctions programs now cover thousands of individuals and entities, and the categories of restricted persons extend well beyond the oligarch tier that dominated initial attention. Business owners with contracts with sanctioned Russian state entities, financial institutions that have processed transactions for sanctioned persons, and individuals who facilitated circumvention of other sanctions can all appear on lists without being prominent public figures. Russian nationals applying for CBI programs — which remains lawful in most programs for non-designated individuals — require particularly careful sanctions screening, enhanced source-of-funds documentation, and assessment of secondary sanctions exposure if the source of investment funds has any connection to sanctioned sectors or entities.
Caribbean CBI programs have themselves faced regulatory pressure on Russian nationals: St. Kitts and Nevis, Dominica, and other programs suspended applications from Russian and Belarusian nationals in 2022, though some have since reopened under enhanced due diligence requirements. Advisers should verify the current status of each program for Russian national applicants before initiating applications.
For advisers with Russia-nexus clients: Even where a client is not themselves listed, transactions financed through Russian state banks, payments processed in rubles through certain correspondent banking channels, or investments in Russian real estate or securities may trigger secondary sanctions concerns independent of the client's personal SDN status.
What Happens When an OFAC Issue Is Identified
If screening reveals a potential OFAC match or raises concerns about a client's source of funds or connections to sanctioned parties, the adviser's obligations are clear: do not proceed with the transaction; seek legal advice from sanctions counsel; and in some jurisdictions, file a suspicious activity report under applicable AML obligations. OFAC has a specific license application process for transactions that would otherwise be prohibited — where a client has a legitimate basis for seeking a license (for example, to unblock assets for humanitarian purposes), this is a distinct legal process that requires sanctions counsel. In CBI cases, it is generally not appropriate to proceed with a citizenship application where a confirmed OFAC match exists — the applicant's presence on the SDN List would disqualify them from applications that require US correspondent banking for the investment transaction in any event.
For clients who are not themselves sanctioned but who have been the subject of Interpol Red Notices or other international enforcement actions, the interaction between those proceedings and CBI eligibility is a separate analysis requiring legal counsel experienced in both sanctions and international criminal law. Specialized guidance is available from lawyers who handle Red Notice cases in conjunction with residency and citizenship applications, particularly for clients whose legal situation spans multiple jurisdictions and enforcement regimes.
Frequently Asked Questions
Does OFAC apply to a UK-based CBI adviser with no US clients?
OFAC's primary jurisdiction covers US persons and US-nexus transactions. A UK adviser with no US clients and no transactions denominated in US dollars processed through US banks would have limited direct OFAC exposure. However, most significant financial transactions — including investment transfers for CBI programs in the Caribbean — clear through US correspondent banks, creating US nexus. Additionally, EU sanctions, UK OFSI sanctions, and UN Security Council sanctions apply independently, and a UK adviser is bound by those regimes regardless of OFAC. In practice, a comprehensive sanctions compliance programme covers all applicable regimes.
What is the 50 Percent Rule and why does it matter for CBI due diligence?
OFAC's 50 Percent Rule automatically treats any entity owned 50% or more by an SDN-listed person as itself blocked, even if the entity is not on the SDN List. For CBI advisers, this means screening a corporate applicant's named beneficial owners is not sufficient — the ownership chain must be traced to the underlying natural persons who hold controlling interests. If any such person is listed, transactions with the entity are prohibited regardless of whether the entity appears on any list.
How should advisers handle Russian clients in 2026?
Russian nationals who are not themselves listed on OFAC's SDN List or equivalent lists remain legally eligible to apply for CBI programs in jurisdictions that permit their applications. However, advisers should apply enhanced due diligence, including detailed source-of-funds tracing to verify that the investment funds do not originate from sanctioned Russian entities or sectors. Secondary sanctions risks — even for unlisted clients — require assessment if the source of funds has connections to sanctioned banks, companies, or sectors. Advisers should also verify whether the target CBI program currently accepts Russian national applications.
What documentation should advisers collect to demonstrate OFAC compliance?
A defensible OFAC compliance record includes: documented SDN List screening results (with date-stamped search records showing name variants searched); screening results against EU, UN, and relevant national lists; source-of-funds documentation sufficient to trace the investment to its ultimate origin; beneficial ownership analysis for corporate applicants; a record of any escalation decisions; and, where a potential match was identified and resolved, legal analysis supporting the conclusion that the match was not a true hit. All records should be retained for at least five years.