What is an OFAC check? Meaning, results, and next steps

On this page

An OFAC check is a screening comparison

An OFAC check usually means comparing a person or business with selected sanctions data published by the U.S. Treasury’s Office of Foreign Assets Control. The phrase is commonly used during onboarding, supplier review, lending, and payment-party checks. The important question is which lists and which identifying details were actually checked.

It is not an identity-verification service or a general criminal background check. A result should identify the selected sources rather than implying that every government watchlist was searched. Start with the OFAC coverage explanation.

What information is useful?

Use the real name and entity type, plus reliable additional information that the applicable source and service can compare. For people, that may include a date of birth at its known precision. For companies, an identifier needs its registry or issuer as well as its value. Do not manufacture a birth date or substitute an email address for a verified legal name.

Collect information through an authorized process and retain only what the workflow needs. More personal data is not automatically better evidence, especially when it cannot be compared to anything in the source.

Interpret three paths, not two

A completed check can identify a potential match or report no match within the selected coverage. A technical failure, unavailable source, or invalid request is a different path. A business should never receive an apparently reassuring “clear” label because the screening system timed out.

OFAC’s match guidance explains why a possible hit must be investigated using the actual list record and identifying details. A score can help order candidates; it does not express the probability that the customer is sanctioned.

Potential match: preserve the result and send the candidate to identity review.
No match: retain the scope and follow the organization’s remaining decision process.
Incomplete check: resolve the failure or follow an authorized exception process; do not label it no match.

Synthetic example: a vendor onboarding check

An invented supplier, Juniper Slate Services, is checked before onboarding. A candidate is returned through a similar trading name. The reviewer compares the legal entity, registration jurisdiction, and documented identifier, then explains whether the evidence supports, conflicts with, or leaves the identity question open.

The procurement decision remains separate. A dismissed name match does not prove beneficial ownership, validate the bank account, or approve the supplier’s services. This separation makes the result useful without asking it to answer questions it did not test.

What should be kept after the check?

Keep the screening reference, submitted identity version, selected coverage, source versions, completion time, original outcome, and later review rationale under the approved retention policy. A screenshot of a green tick without the underlying scope is weak evidence of what happened.

SanctionsKit evidence exports and case review support retained result history. External identity documents remain in the approved repository when the case contains a document reference; a reference is not a stored copy.

Does an OFAC check expire?

A result describes a particular check at a particular time. Its usefulness can change when source data, the customer’s identity, the relationship, or the screening policy changes. There is no product-generated certificate that guarantees future eligibility.

Use a documented screening frequency policy and clear event triggers. Monitoring helps find later changes, but does not replace review or ensure every restriction is represented in a list.