Compliance

Sanctioned Country List

The sanctioned country list refers to the jurisdictions under comprehensive US embargoes (Cuba, Iran, North Korea, Syria, and the occupied Crimea, Donetsk, and Luhansk regions of Ukraine) plus the broader set of countries that are subject to targeted or sectoral OFAC sanctions programs.

The sanctioned country list is the operational shorthand for the comprehensive US sanctions programs administered by the Office of Foreign Assets Control (OFAC). It is not a single list but the set of country-based and region-based programs in which OFAC has imposed the most extensive prohibitions on dealings between US persons and persons or property associated with the jurisdiction. For US founders running international contractor and payroll operations, knowing which jurisdictions are comprehensively sanctioned (and which regions within otherwise-permitted countries are off-limits) is a basic onboarding check.

How the Sanctioned Country List Works

OFAC administers a layered set of country and region programs:

  • Comprehensive sanctions. Almost all dealings prohibited. As of 2025 to 2026 OFAC publication these include Cuba, Iran, North Korea (DPRK), Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine. Always confirm the current list at OFAC Sanctions Programs and Country Information because the comprehensive set can change quickly (Syria sanctions, for example, have been the subject of significant general licenses since late 2024).
  • Sectoral and targeted programs. Reach specific industries, persons, or activities. Russia is the largest current example, with sectoral sanctions on financial services, energy, defense, and metals, plus targeted SDN designations across many sectors.
  • List-based programs. Cover specific drug-trafficking organizations (narcotics), foreign terrorist organizations, cyber actors, transnational criminal organizations, and human-rights violators (Global Magnitsky).
  • Secondary sanctions programs. Reach non-US persons engaging in specific transactions with Iran, DPRK, or designated Russian actors.

The legal foundations sit in 50 USC 1701 to 1707 (IEEPA), 50 USC App. 1 to 44 (TWEA) for Cuba, and a wide set of program-specific statutes (the Cuban Liberty and Democratic Solidarity (LIBERTAD) Act, the Comprehensive Iran Sanctions, Accountability, and Divestment Act, the Countering America’s Adversaries Through Sanctions Act, and others).

Comprehensive Sanctions Programs (Current Set)

JurisdictionProgramBasis
CubaCuban Assets Control Regulations, 31 CFR Part 515TWEA, LIBERTAD Act
IranIranian Transactions and Sanctions Regulations, 31 CFR Part 560IEEPA, Iran Sanctions Act
North Korea (DPRK)North Korea Sanctions Regulations, 31 CFR Part 510IEEPA, NKSPEA
SyriaSyrian Sanctions Regulations, 31 CFR Part 542 (subject to recent general licenses)IEEPA
Crimea region of UkraineCrimea-specific provisions in Ukraine-/Russia-Related Sanctions RegulationsIEEPA, Executive Orders
Donetsk and Luhansk regions of UkraineDNR/LNR-specific provisions in Ukraine-/Russia-Related Sanctions RegulationsIEEPA, Executive Orders

The Syria program changed materially after the December 2024 fall of the Assad regime. OFAC issued General License 24 authorizing certain transactions with new Syrian governing institutions and for reconstruction activities, while keeping the comprehensive framework formally in place. Operational decisions for Syria-related counterparties should be made on current OFAC guidance, not on historical practice.

Who Must Comply

  • US persons: Citizens, permanent residents, anyone physically present in the US, and US-organized entities including their foreign branches.
  • Foreign subsidiaries of US persons: Cuba and Iran programs reach foreign subsidiaries owned or controlled by US persons.
  • Non-US persons via secondary sanctions: Iran, DPRK, and certain Russia provisions impose consequences on non-US persons for specific transactions.

Penalties

  • IEEPA civil: Greater of about 377,700 dollars per violation or twice the underlying transaction (figure adjusted annually for inflation).
  • IEEPA criminal: Up to 1,000,000 dollars per violation for entities, up to 20 years of imprisonment for individuals, for willful violations.
  • TWEA criminal (Cuba): Up to 1,000,000 dollars per violation for entities, up to 100,000 dollars and 10 years of imprisonment for individuals.
  • Strict liability for civil violations. Lack of knowledge that a counterparty is in a sanctioned jurisdiction is not a defense, though it is a mitigating factor.
  • Secondary consequences. Denied US-dollar clearing, loss of correspondent banking relationships, and reputational damage that often exceeds the cash penalty.

Common Pitfalls

  • Country residence vs country presence. A contractor whose passport is Iranian but who has been resident in Germany for years is not automatically a sanctions hit. A contractor whose passport is German but who is resident and working in Iran is.
  • Regional sub-units. Crimea, Donetsk, and Luhansk are sanctioned but the rest of Ukraine is not. Geolocation and address verification matter.
  • Sectoral targeting masking comprehensive risk. A “Russia is not on the sanctioned country list” mental model underestimates the layered sectoral and targeted programs that effectively prohibit large categories of Russia-related dealings.
  • Currency routing. USD payments routed through US correspondent banks can drag a non-US transaction into US jurisdiction.
  • Stale references. Sanctioned country status moves. Cuba and Iran have been comprehensive for decades, but the specific licenses, exceptions, and regulations change every year.
  • OFAC Sanctions Screening: the operational discipline that includes country and region screening alongside SDN list screening.
  • AML: the parallel financial-crime regime under the BSA.
  • FATF: the standard-setter whose grey and black lists overlap with but are distinct from OFAC sanctions.
  • FCPA: adjacent risk that frequently co-occurs in the same jurisdictions.

Omnivoo Contract Management screens contractor residence, address, IP geolocation, and payment-corridor banking against comprehensive sanctions jurisdictions and sectoral programs at onboarding and on each payout, with documented denial workflows for prohibited countries and regions.

Frequently asked questions

Which countries are under comprehensive US sanctions?
OFAC currently administers comprehensive sanctions against Cuba, Iran, North Korea (DPRK), and Syria, plus the occupied Crimea, Donetsk, and Luhansk regions of Ukraine. Comprehensive means almost all transactions, services, and exports between US persons and persons or property in those jurisdictions are prohibited, unless a specific OFAC license or general license authorizes them. The list can change. Always check the current OFAC sanctions-programs page before relying on this.
What is the difference between comprehensive and targeted sanctions?
Comprehensive sanctions prohibit virtually all dealings with a country, region, or its government, subject to humanitarian and specific licensed exceptions. Targeted sanctions block dealings only with named individuals, entities, or sectors of an economy (such as the Russian financial-services or military-industrial sectors), while permitting other commerce. Most modern OFAC programs are targeted. Comprehensive programs are reserved for the most severe foreign-policy and national-security concerns.
Does the 50 Percent Rule apply to country sanctions?
The 50 Percent Rule technically applies to SDN list entities, not directly to country sanctions. However, the practical effect is similar. An entity that is 50 percent or more owned by the Government of Cuba, or by an SDN linked to a sanctioned country, is itself blocked even if not separately listed. Comprehensive country sanctions also reach the government of the country, its agencies, and entities owned or controlled by that government.
What are secondary sanctions?
Secondary sanctions are sanctions that target non-US persons for engaging in certain transactions with primary-sanctioned jurisdictions or persons. They impose consequences (typically denial of access to the US financial system or the US market) on non-US persons even when no US person is involved in the underlying transaction. Iran, North Korea, and Russia programs include significant secondary-sanctions exposure for foreign financial institutions and other non-US actors.
Can a US person ever pay a contractor in a sanctioned country?
Almost never. Under comprehensive sanctions, a US person cannot provide services to or receive services from a person in the sanctioned jurisdiction without a specific OFAC license. There are narrow general licenses for humanitarian-aid workers, some news organizations, and similar narrow categories. There is no general license for paying a software developer in Iran or a designer in North Korea. Doing so is a violation regardless of intent.

Related articles

Omnivoo handles this for you

Stop worrying about Indian payroll and compliance terms. Omnivoo manages everything (PF, ESI, TDS, professional tax, and more) across all 28 states.

Get started