OFAC Sanctions vs FATF Travel Rule
The two crypto-compliance frameworks most commonly confused. OFAC is the US sanctions list (triggering = felony). FATF Travel Rule is AML-KYC info transmission (everyday friction). The two cover completely different risk types.
10-dimension comparison
| Dimension | OFAC Sanctions | FATF Travel Rule |
|---|---|---|
| Issuing body | US Treasury Office of Foreign Assets Control | Financial Action Task Force (39-government inter-gov organization) |
| Legal force | US law / extraterritorial (USD + US-connected) | Inter-gov recommendation / transposed by each country into local law |
| Main objective | Sanction specific individuals / entities / countries | Anti-money-laundering / anti-terror financing / KYC info collection |
| Crypto coverage | SDN list includes crypto wallet addresses + smart contracts (2022 Tornado Cash) | Recommendation 16: VASPs must transmit customer info ("Travel Rule") |
| Trigger condition | Transaction with SDN-listed party / sanctioned-region transaction | VASP-to-VASP transfer ≥$1,000 |
| Violation consequences | Massive fines / criminal prosecution / asset freeze | Loss of VASP license / regulatory penalty (locally enforced) |
| Notable cases | Tornado Cash sanction / Garantex sanction / North Korean addresses in SDN | Sumsub / Notabene rise + countries roll out Travel Rule platforms |
| Impact on crypto exchanges | Must block SDN addresses + refuse sanctioned countries | Transfers $1000+ must collect sender+receiver KYC info |
| Impact on USDT card users | Specific wallet addresses listed = topup blocked / card frozen | Topup / withdrawal at threshold triggers additional KYC |
| Compliance tool market | Chainalysis Reactor / TRM Forensics | Sumsub Travel Rule / Notabene / Veriscope |
FAQ
OFAC or FATF Travel Rule — which is harder to comply with?
OFAC has more severe trigger consequences (massive fines + criminal prosecution), but only triggers when transacting with SDN. FATF Travel Rule is more everyday — every $1,000+ crypto transfer triggers, and the implementation is complex (requires trusted communication between global VASPs). For retail users: OFAC is the black swan, FATF is the daily friction.
After OFAC sanctioned Tornado Cash, can users still use it?
No. After OFAC sanctioned the Tornado Cash smart contract addresses on 2022-08, any US person or US-affiliated entity interacting with the contract faces criminal prosecution. 2024 US Fifth Circuit partly overturned the smart-contract sanction, but in practice all licensed VASPs still block.
How is Travel Rule enforced in Asia?
Inconsistently. Japan FSA / Korea FIU / Singapore MAS have all legislated Travel Rule, large Asian exchanges (Bybit / OKX / Bitflyer) must collect KYC info on $1,000+ transfers. Hong Kong HMA has enforced since 2023. China + Indonesia and others have not yet legislated.
Will using a USDT card get me OFAC-sanctioned?
Normal use will not. OFAC sanctions target SDN-listed addresses / individuals / countries. Regular USDT card users using licensed issuer (licensed structure) cards for daily spending do not trigger OFAC attention. Concerns: 1) Topup address from SDN list (theoretically possible but rare); 2) Transactions with sanctioned-region merchants (Iran / N. Korea / Cuba / Syria etc.).