Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To check whether a U.S. sanctions rule applies, identify the people and entities involved, examine ownership and the transaction’s purpose and geography, then check the current Office of Foreign Assets Control (OFAC) programs, lists, exemptions, and licenses. A name-screening result alone cannot settle every case: restrictions may apply because of ownership, a country or sector rule, a blocked person’s interest in property, or the activity itself. Online and digital-currency payments are not exempt.

This is a practical screening sequence, not a legal determination that a particular transaction is permitted. OFAC administers multiple programs with different rules; check the current program regulations and authorization text for the facts at hand.

How to check whether U.S. sanctions apply

Work through these checks before accepting, processing, releasing, or returning funds. Keep a record of the facts reviewed and the decision, especially when a potential match or ownership concern needs investigation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Map the transaction and its U.S. connection. Record the customer, counterparty, beneficial owners, beneficiaries, signatories, intermediaries, payment providers, and relevant locations. Note what goods, services, funds, or other property are involved and what each party does. Identify any U.S. person, U.S. business activity, U.S.-based financial institution, or other U.S. jurisdictional connection that may bring the transaction within a program’s reach.
  2. Identify the potentially relevant sanctions program. Check the current OFAC programs and their regulations for restrictions involving the parties’ locations, the activity, or the property. There is no single country list or name-search result that resolves every sanctions question; restrictions may target particular people, governments, sectors, services, or transactions.
  3. Screen relevant names against current OFAC lists. Screen the parties and other relevant names using current official list information and your organization’s documented procedures. Treat a possible match as a lead to investigate, not as an automatic final answer. Compare identifying details and transaction context. OFAC says it does not confirm potential matches or false positives for organizations.
  4. Check direct and indirect ownership. Determine whether any blocked person owns an interest in an entity, including through intermediate entities. Under OFAC’s 50 Percent Rule, an entity is treated as blocked if one or more blocked persons own, directly or indirectly, 50 percent or more of it in aggregate. The entity may be blocked even if its own name does not appear on the SDN List.
  5. Assess the activity, geography, and payment details. A restriction may apply even if no named-list match is found. Review where the parties and services are located, what the payment is for, and which intermediaries and payment rails handle it. For online or digital-currency transactions, assess the information available about end users as well as direct customers when relevant to the service.
  6. Check for an exemption or authorization. Determine whether an exemption applies or whether the transaction is authorized by a general or specific license under the relevant program. Follow every condition and limit in the applicable text; do not treat a license as permission for activity beyond its scope.
  7. Choose the required action and document it. If a sanctions rule requires blocking, freeze the property and follow the applicable blocked-account requirements. If the activity is prohibited but there is no property interest to block, the transaction may instead need to be rejected or stopped. Record the facts, investigation, decision, and action taken.

What a list match does—and does not—tell you

A potential match requires investigation under your own procedures. Compare available identifiers such as names, addresses, locations, dates or other identifying details, and assess whether the transaction facts fit. OFAC FAQ 5, updated September 9, 2026, says organizations should preserve complete records of the investigation and decision and make a risk-based determination. OFAC does not confirm potential matches or false positives for a company.

#1 Best Overall
Thetis FIDO2 Security Key (USB-A, 2-Pack) - Hardware MFA & Passkey Access for Business, School ERP & Employee Accounts | Compatible with Windows, Google Workspace, Apple ID, Coinbase, Salesforce
  • FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
  • Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
  • Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
  • Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
  • Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.

A possible match is not the only way a restriction can apply. An entity may be blocked through the 50 Percent Rule even if its name is absent from the list. A country or sector restriction may prohibit particular activity without a named SDN being involved. Conversely, a name resemblance alone does not establish that a person is the listed party. Resolve the facts against the applicable program before deciding what to do.

How ownership can change the result

The 50 Percent Rule is based on ownership, not merely control. If one or more blocked persons own at least 50 percent of an entity in aggregate, directly or indirectly, OFAC treats that entity as blocked. Add blocked owners’ shares together; an entity can meet the threshold through ownership chains involving intermediate entities that also meet the rule.

Rank #2
KYODOLED Metal Cash Box for Farm Stand, Money Drop Box with Lock & Slot
  • 【Leave Cash Securely When You're Not There】Ideal for farm stands, porch pickup orders, roadside stands, and small self-service setups. Customers can easily drop cash, notes, or payments even when no one is on site, helping you collect payments without staying around all day.
  • 【Locked Design with 2 Keys for Controlled Access】Built-in lock system keeps collected cash protected. Comes with 2 keys for owner or manager use, making it suitable for unattended payment collection where access needs to stay controlled.
  • 【Built for Farm Stands, Porch Pickup & Local Collections】Works well in real daily use cases like farm stands, egg stands, produce stalls, porch pickup payments, donation boxes, rent collection, and small office cash handling. Suitable for indoor setups and semi-sheltered outdoor locations such as porches and entryways with overhead cover.
  • 【Compact Slot Helps Prevent Fishing Attempts】Measuring 10.24"H x 5.7"W x 2.95"D inches (Drop Slot: 3.15"L x 0.3937"W). Designed for folded bills, receipts, and small payment notes. The narrow opening also helps reduce the risk of reaching inside with tools or hooks, making it more secure for unattended setups.
  • 【Wall Mount Setup Saves Space & Stays Stable】Mount it on walls, wooden posts, porches, kiosks, or counters to create a fixed payment point. Pre-drilled holes make installation simple, and all necessary mounting hardware is included for quick setup. Helps keep surfaces clear while ensuring the box stays securely in place, suitable for indoor use and covered outdoor environments.

Control alone, without at least 50 percent aggregate ownership, does not automatically block an entity under this rule. That is not a blanket safe harbor: dealing directly with a blocked person may still be prohibited, and a program may separately cover certain governments or classes of people. OFAC urges caution where a blocked person has significant minority ownership or control.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Also look beyond paperwork when an ownership change appears designed to remove a sanctions concern. In its March 31, 2026 sham-transactions advisory, OFAC says it considers practical and economic reality, including possible use of trusts, proxies, straw owners, or front companies, when assessing whether a blocked person’s interest continues. The advisory is explanatory and does not itself have the force of law; assess the facts under the governing rule.

Rank #3
Volcora Key Drop Box with Lock, Drop Slot Depository Safe Box Digital Keypad, Money Drop Safe for Business, Wall Mount Mailbox, Cash Drop Box, Electronic Programmable Lock with Key Indoor Use
  • HIGH QUALITY DROP SAFE BOX: Volcora's top quality durable wall mounted drop box with lock for business is perfect for indoor office, shops, automotive, convenience stores, and various functions.
  • SECURE ELECTRONIC COMBINATION LOCK with KEY: Top security wall mount locking drop box has key lock and electronic combination lock with dual lock and unlock capabilities. 2x AAA Batteries not included.
  • PERFECT DIMENSIONS: Large sized cash drop box 15" x 12" x 4.25" perfect dimensions with multiple use for money, cash, payment, deposit, letter, document and various important items.
  • QUICK and EASY INSTALLATION: Volcora's wall safe drop box is easy to install with pre drilled holes, mounting screws and simple easy to follow instructions.
  • SAFE LOCK BOX with SLOT: Our key lock box wall mount provides a secure and safe hinge door slot with only one-way access and provides full protection from thieves with high quality metal.

Online payments and digital currency still require sanctions checks

OFAC’s FAQ 560 says obligations for digital currency are the same as for fiat currency. A merchant, payment processor, or other firm facilitating online commerce must not process unauthorized dealings simply because a payment is remote, fast, or digital.

OFAC’s internet remittance guidance, published April 13, 2004, describes the challenges of remote onboarding and customer anonymity. It says IP-address blocking does not fully address risk because IP geography can be dynamic. The guidance recommends authentic customer identification before account opening or transactions and recording payment purpose to improve screening. It also says a company cannot rely on another firm’s compliance program to mitigate its own risk. Apply this older internet-specific guidance alongside current program rules and a risk assessment suited to your service.

Rank #4
Thetis Pro For Business - FIDO2 Security Key L1 MFA & NFC Passkey Access For School ERP, Employee Online Account, Compatible with Coinbase Google Workspace Apple ID Window Salesforce,Dual USB A +USB C
  • FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
  • Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
  • Universal Connectivity (USB-C, USB-A, & NFC): Designed for PCs, Macs, iPhones, and Android. For mobile use, simply unfold the key, align it with your phone’s NFC antenna, and hold for a few seconds to authenticate.
  • Enhanced MFA (FIDO2 & TOTP/HOTP): Strengthen your security with flexible options. Use the Manager App to access TOTP/HOTP features for accounts that do not yet support FIDO2.
  • Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID. NFC is supported only through mobile authentication, Not MacOS/windows.

For virtual-currency businesses, OFAC’s industry guidance recommends a routine, tailored risk assessment covering customers, products, services, supply chains, counterparties, transactions, and locations. The parties to assess depend on what information and service the business handles. OFAC’s guidance illustrates this with a payment provider that screened merchant customers but failed to screen available information about end users buying through its platform.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

OFAC’s September 2022 instant-payment guidance is directed to financial institutions, not a blanket rule that every domestic business payment is low risk. It says financial institutions should tailor controls to their own risk assessments, considering factors such as geographic footprint, customer and counterparty locations and history, products and services, and institutional size and sophistication. Domestic systems limited to U.S. bank accounts may present lower relative exposure than cross-border systems, but OFAC says a payment of any amount could violate its regulations.

Best Value
Yaocom Key Lock Mailboxes for Outside Locking Wall Mount Mailbox Security Key Drop Collection Boxes for Home Business Rent Payments, Mail, Keys, Cash, Checks 15 x 12 x 4 Inches(Black)
  • Secure and Reliable: ensure your mail's safety with our lockable mailbox; It comes equipped with 2 durable keys that are difficult to duplicate, adding an layer of security; The top entrance is designed with a sturdy structure, which does an ideal job deterring theft, making sure your mail is secure and reliable
  • Suitable Size and Aesthetically Pleasing: with exterior dimensions of about 15 x 12 x 4 In and a top entry opening of about 10 x 2.4in, our mailbox accommodates most mail sizes; Besides being practical, the mailbox sports a beautifully crafted exterior, adding an elegant touch to your front porch or gate
  • Robust and Durable: crafted with dense metal material, this mailbox is not only sturdy but also wind and rain resistant; Rust is barely a concern, ensuring that your mailbox remains in pristine condition for many years; With our mailbox, your mail is well-protected even in harsh weather conditions
  • Convenient Installation: our mailbox is designed with convenience in mind; The back includes 4 mounting holes, making it easy to install on walls, main doors, fences, and more; Plus, it comes with plenty of installation screws to ease the mounting process; Say goodbye to complicated installations
  • Versatile Use: our mailbox is more than just a place for mail; Mounted by your front door, it can serve as a safe place for newspapers, small packages, coins, and various other items; The design and size make it suitable for multiple uses, adding to its overall charm and utility
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Blocking and rejecting are different actions

When a sanctions restriction applies, determine whether the facts require blocking property or rejecting a prohibited transaction. In general, blocking means freezing property in which a blocked person has an interest; rejecting means declining or stopping a prohibited transaction when there is no property interest requiring a block. The applicable program and facts control, so do not choose between these outcomes solely from a name-screening result.

OFAC FAQ 5, updated September 9, 2026, says sanctions-related blocking and rejection actions must be reported to OFAC within 10 business days. Retain records under the applicable regulatory requirements. Confirm current reporting procedures and recordkeeping rules for the relevant program.

Compare common screening situations

Situation What to examine Why a name search is not enough
A possible match to a named person Identifiers, transaction context, the person’s role, any property interest, and applicable authorization. A possible match must be investigated; OFAC does not resolve company false positives for it.
A company partly owned by blocked persons Each blocked owner’s direct and indirect share, aggregated across owners and ownership chains; also assess control and dealings with blocked persons. The company may be blocked by operation of the 50 Percent Rule even if it is not named on the SDN List. Control alone does not automatically trigger that rule.
A country- or sector-restricted transaction Locations, activity, goods or services, parties, intermediaries, payment purpose, and any applicable exemption or license. A restriction can apply without a named SDN match, depending on the program and transaction.

Build a repeatable decision record

For each review, preserve enough information to explain what was checked and why the transaction proceeded, was blocked, or was rejected. A useful record includes:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • The transaction date, parties, beneficial ownership information, locations, payment route, and purpose.
  • The lists, program regulations, and license or exemption text consulted, with the version or date checked.
  • The identifiers and contextual facts used to assess any potential match, plus the reason for the decision.
  • The action taken, any required OFAC report, and the records retained under applicable requirements.

OFAC FAQ 560 states: “There is no single compliance program or solution suitable for every circumstance.” The FAQ is dated March 19, 2018; use it as a general principle, alongside current program-specific rules and guidance.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.