What it captures
Sanctions enforcement has two layers. The perimeter-creation layer — new SDN listings, new program regulations, sectoral blocking orders, sanctions packages — is captured by western-russia-sanctions and the Iran/DPRK/Cuba country-program perimeters. This theme captures the enforcement-completion layer: civil monetary penalties and settlement agreements that resolve investigations into willful violations of perimeters that already exist.
Why the distinction matters: perimeter-creating actions answer "what is prohibited"; enforcement-completion actions answer "what does it cost to violate it". The second question drives compliance-program investment decisions across regulated financial intermediaries, virtual-currency platforms, investment advisers, payments processors, and consumer-tech distributors with cross-border transaction flows.
Filings to date
1. 2023-11-21 OFAC $968.6M Binance Holdings settlement (severity 4). Largest civil penalty in OFAC history — resolves 1,667,153 apparent violations of five sanctions programs (Iran, Cuba, DPRK, Syria, Crimea/Russia) by the world's largest virtual-currency exchange. Five-year independent compliance monitor; embedded in $4.3bn aggregate resolution with DOJ, FinCEN, and CFTC. Establishes the empirical ceiling for sanctions-violation civil penalties and the first major OFAC action against an offshore virtual-currency exchange.
2. 2025-06-12 OFAC $216M GVA Capital statutory-maximum penalty (severity 4). First public OFAC enforcement action of the second Trump administration and the largest OFAC civil penalty since the November 2023 Binance settlement. Statutory-maximum $215,988,868 ($214M sanctions + $1.99M RPPR/subpoena) against a Silicon Valley early-stage VC firm for continuing to manage a $20M investment from Kerimov-linked Prosperity Investments LP for ~3 years after Kerimov's April 2018 SDN designation. Establishes that the U.S. venture-capital / investment-adviser sector is squarely within OFAC's enforcement perimeter and reinforces the "any interest whatsoever" property-blocking rule.
3. 2026-03-19 UK OFSI £390k Apple Distribution International penalty (severity 2). First use of OFSI's new settlement mechanism (introduced February 2026), against the Ireland-incorporated Apple subsidiary for 2022 payments to a sanctioned Russian app developer routed via UK banking. Small absolute penalty; precedent value is the procedural template (settlement rather than contested process) and the extraterritorial-jurisdiction theory (Ireland incorporation didn't insulate from UK OFSI reach). Cross-classified under western-russia-sanctions.
Why it matters
The empirical ceiling for sanctions-violation penalties matters for two reasons. (1) Compliance counsel cite Binance as the reference point in any OFAC action against a fintech, payments platform, or virtual-currency exchange of comparable scale — pricing the worst-case downside of inadequate sanctions screening. (2) The compliance-monitor architecture (five-year independent monitor with sanctions-program review, transaction testing, and ongoing reporting) is a reusable remedial structure that subsequent OFAC settlements have inherited; counsel structuring deferred- resolution arrangements treat the Binance monitor as the modal template.
OFSI's settlement mechanism (introduced 2026, first used in the Apple case) is the UK analogue. Whether it becomes the dominant enforcement pathway determines whether UK sanctions enforcement converges with the US settlement-and-monitor model or remains the older contested-process norm.
Pattern to watch
- Whether the post-Binance monitor template gets compressed (shorter
durations, narrower scope) in subsequent OFAC settlements as the enforcement landscape matures, or remains the modal template.
- Whether the investment-adviser sector precedent set by GVA Capital
(June 2025) extends to private-equity / hedge-fund managers with similar pre-designation LP capital from sanctioned-jurisdiction-linked individuals, or whether GVA proves to be a Kerimov-specific outlier.
- Whether decentralised exchanges and DEX protocols are reachable
through enforcement-completion settlements (no central operator to settle with) or only through perimeter-creating designations (Tornado Cash model).