Cyber-Related Sanctions | Office of Foreign Assets Control

IMPORTANT ADVISORIES AND INFORMATION

Sanctions Compliance Guidance for the Virtual Currency Industry (October 15, 2021)
Advisory on Potential Sanctions Risks for Facilitating Ransomware Payments (Updated September 21, 2021)
North Korea Cyber Threat Advisory (April 15, 2020)
- Non-English Translations of the North Korea Cyber Threat Advisory

Sanctions Brochures

Sanctions Brochures are an overview of OFAC's regulations with regard to Cyber-related Sanctions. They are useful quick reference tools.

Overview of Sanctions

Frequently Asked Questions

OFAC has compiled hundreds of frequently asked questions (FAQs) about its sanctions programs and related policies. The links below send the user to OFAC's FAQ pages.

Interpretive Guidance

OFAC issues interpretive guidance on specific issues related to the sanctions programs it administers. These interpretations of OFAC policy are sometimes published in response to a public request for guidance or may be released proactively by OFAC in order to address a complex topic.

Applying for a Specific OFAC License

It may be in your and the U.S. government's interest to authorize particular economic activity related to the Cyber-related sanctions. Certain activities related to the Cyber-related sanctions may be allowed if they are licensed by OFAC. Visit the link below to apply for an OFAC license.

Apply for an OFAC License Online - Authorization from OFAC to engage in a transaction that otherwise would be prohibited.

Guidance on OFAC Licensing Policy

Certain activities related to the Cyber-related sanctions may be allowed if they are licensed by OFAC. Below OFAC has issued guidance and statements on specific licensing policies.

Licenses for Legal Fees and Costs - Guidance on the Release of Limited Amounts of Blocked Funds for Payment of Legal Fees and Costs Incurred in Challenging the Blocking of U.S. Persons in Administrative or Civil Proceedings
Entities Owned By Blocked Persons - Guidance On Entities Owned By Persons Whose Property And Interests In Property Are Blocked

General Licenses

OFAC issues general licenses in order to authorize activities that would otherwise be prohibited with regard to the Cyber-related Sanctions. General licenses allow all US persons to engage in the activity described in the general license without needing to apply for a specific license.

Cyber General License 1C - Authorizing Certain Transactions with the Federal Security Service (April 27, 2023)
Archive of Expired General Licenses

The Cyber-related Sanctions program represents the implementation of multiple legal authorities. Some of these authorities are in the form of an executive order issued by the President. Other authorities are public laws (statutes) passed by The Congress. These authorities are further codified by OFAC in its regulations which are published in the Code of Federal Regulations (CFR). Modifications to these regulations are posted in the Federal Register.

Executive Orders

Executive Order - Strengthening and Promoting Innovation in the Nation's Cybersecurity (January 16, 2025)
13757 - Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities (December 28, 2016)
13694 - Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities (April 01, 2015)
14067 - Ensuring Responsible Development of Digital Assets (March 09, 2022)

Statutes

Code of Federal Regulations

31 CFR Part 578 - Cyber-Related Sanctions Regulations

Federal Register Notices

88 FR 34443-23 - Publication of Cyber-Related Sanctions Regulations Web General License 1 and Subsequent Iterations
87 FR 78484-22 - Publication of Humanitarian Sanctions Regulations Amendment and General Licenses (Nongovernmental Organizations, Agricultural, and Medicine)
87 FR 54373-22 - Cyber-Related Sanctions Regulations
80 FR 81752-15 - Issuance of Cyber-Related Sanctions Regulations to implement Executive Order 13694

Cyber-Related Sanctions | Office of Foreign Assets Control (original) (raw)