OFAC Screening for Car Dealers: Rules & Requirements

If you sell cars in the United States, OFAC screening for car dealers isn't optional paperwork. It's a federal obligation, and it applies to every deal you close. Before you hand over keys, you're supposed to check that your buyer isn't on the U.S. Treasury's sanctions list. Here's the plain-English version: what's required, how to actually run the check, and what to do if a name lights up.

Note: This article is general information, not legal advice. Sanctions penalties get adjusted for inflation every year, so confirm current figures and talk to your attorney or state dealer association before you rely on anything here. Last reviewed June 2026.

What OFAC screening is — and why it applies to your dealership

OFAC is the Office of Foreign Assets Control, part of the U.S. Treasury. It keeps the Specially Designated Nationals and Blocked Persons List (SDN List) — a roster of individuals, companies, and organizations the U.S. has sanctioned. Terrorists, narcotics traffickers, sanctioned-country officials, that crowd.

The reason this lands on your desk is simple. OFAC sanctions apply to all U.S. persons. Per OFAC FAQ 11, that's every U.S. citizen and permanent resident, plus any individual or entity located in the United States. Your dealership is a U.S. business, so you're on the hook exactly like a bank, a title company, or any other U.S. company.

There's no auto-dealer-specific OFAC statute and no special "dealer OFAC form." The obligation comes straight from the general rule: U.S. persons are generally prohibited from dealing with anyone on the SDN List and have to block property a sanctioned party has an interest in. Selling a vehicle is a "dealing." So you screen.

The legal basis: strict liability means "I didn't know" won't save you

Most OFAC enforcement runs through the International Emergency Economic Powers Act (IEEPA). The part that ought to get your attention is how liability works.

OFAC can impose civil penalties on a strict-liability basis. The Treasury's own Civil Penalties and Enforcement Information spells it out: a person subject to U.S. jurisdiction can be held civilly liable even if they did not know the transaction was prohibited.

That's the whole reason screening matters. You don't get to plead ignorance after the fact. A good-faith screening process — run before delivery, on every deal — is your protection.

What you're screening against (and the 50% Rule)

The free OFAC search tool covers two lists:

• The SDN List — the core blocked-persons list.
• The Non-SDN Consolidated Sanctions List — additional sanctioned parties that aren't full SDNs.

There's one trap that catches dealers selling to businesses — a fleet buyer, an LLC, some small company. Under OFAC's 50 Percent Rule (FAQ 401), an entity counts as blocked if it's owned 50% or more, directly or indirectly, in the aggregate, by one or more blocked persons — even if that company's name never shows up on the SDN List. So screening just the business name isn't always enough. When a blocked party is behind the entity, ownership matters.

When to screen — and why there's no dollar threshold

Screen the buyer and any co-buyer or guarantor at the point of sale, lease, or financing — before the vehicle goes out the door.

A common assumption, and a dangerous one, is that small or cash deals don't count. They do. OFAC FAQ 44 is blunt about it: there is no minimum or maximum dollar amount subject to OFAC regulations. A $3,500 cash special gets screened the same as a $90,000 financed truck. You can't skip the check because the sale is small or paid in full.

How to run an OFAC check, step by step

You've got two practical paths.

Option 1: The free OFAC Sanctions List Search tool

OFAC publishes a free, public Sanctions List Search tool that runs names against the SDN List and the Consolidated Sanctions List. It uses fuzzy-logic name matching (Jaro-Winkler and Soundex algorithms), so close spellings and phonetic variants get flagged — not just exact matches.

To use it:

1. Open the Sanctions List Search tool.
2. Enter the customer's full legal name.
3. Review every result the tool returns.
4. Repeat for the co-buyer and any guarantor.
5. Save proof of the search (more on that below).

Option 2: Automated screening inside your workflow

Most dealers fold the OFAC check into the moment they run the credit application, since that's when you already have the buyer's full identity in front of you. A lot of DMS and F&I platforms run the SDN check for you automatically, so it doesn't get skipped on a busy Saturday.

That's exactly how AutoDealer.io is built. It screens every deal against the SDN list automatically, so you're not counting on someone remembering to open a government website. You can see the features or start a free trial if you want screening baked into the deal flow.

Either way, the rule is the same: screen every party to the deal — buyer, co-buyer, and guarantor.

You got a potential match. Now what?

First, breathe. A hit is not automatically a real match. The same fuzzy matching that makes the tool useful also kicks out a lot of false positives.

OFAC FAQ 5 tells you to weigh the quality of the hit by comparing every identifier you have against the SDN entry:

• Full name
• Address
• Date and place of birth
• ID numbers
• Nationality
• Known aliases

If only part of the name matches and the other details clearly differ, it's probably a false positive. Here's the critical part: unless you have an exact match, OFAC says do not block or cancel the transaction before contacting OFAC.

OFAC FAQ 48 lays out the order of operations for an interdiction "alert." Do your initial analysis first — confirm it's actually hitting OFAC's SDN or other list, figure out how much of the name matches, and compare all available identifiers. If a lot of the details line up, call OFAC's hotline to verify before you act.

Do not deliver the vehicle while a credible match is unresolved. Hold the deal, finish your analysis, and verify with OFAC before you complete or cancel anything.

You can reach the hotline through OFAC's Contact OFAC page.

If it's a true match: block, hold, and report within 10 days

If verification confirms a real match, the deal stops. You can't sell to an SDN.

When property is actually blocked, the holder has to file a report with OFAC within 10 business days. Rejected transactions get reported to OFAC within 10 business days too. Both deadlines come from OFAC's reporting rules (31 CFR 501.603 and 501.604). Know the difference: blocked property is held and reported; a rejected transaction is one you declined to process, and you report that too.

Recordkeeping: the new 10-year rule

This is the single most outdated number floating around dealer forums. The retention period is no longer five years.

Under 31 CFR 501.601, every person engaging in a transaction subject to OFAC regulations has to keep a full and accurate record and make it available for examination for at least 10 years after the transaction.

OFAC made this change by final rule effective March 21, 2025 (following a September 13, 2024 interim final rule), to line up with the 10-year statute of limitations for IEEPA/TWEA violations created by the 21st Century Peace through Strength Act, signed April 24, 2024.

For each deal, keep proof of the screening:

• What name(s) you searched
• When you searched
• The result (clear, or a hit)
• How you resolved any potential match

Good records aren't just busywork. They're how you show you actually had a compliance program if OFAC ever comes knocking.

Building a simple compliance program for a small store

OFAC treats a documented, risk-based compliance program as a mitigating factor when it evaluates apparent violations. (Think of it as mitigation, not a formal legal "safe harbor.") The agency's Framework for OFAC Compliance Commitments lays out five essential components, and they scale down fine for an independent lot:

1. Management commitment — ownership backs the policy and gives it teeth.
2. Risk assessment — know where your exposure sits (business buyers and the 50% Rule, for instance).
3. Internal controls — a written rule that every buyer, co-buyer, and guarantor gets screened before delivery.
4. Testing and auditing — periodically spot-check that deals were actually screened.
5. Training — make sure F&I and BDC staff know how to screen and what a hit means.

You don't need a compliance department. You need a written process, consistent execution, and saved records.

Don't confuse OFAC with your other dealer obligations

OFAC screening sits next to — but separate from — other rules you already follow. The big one dealers mix it up with is cash reporting.

Motor-vehicle dealers that take in more than $10,000 in cash in one transaction (or related transactions) have to file IRS/FinCEN Form 8300 by the 15th day after the cash comes in, and you can't help a buyer structure payments to dodge that filing. The IRS Motor Vehicle Dealership Q&As cover the details.

The distinction: OFAC screening applies to every deal no matter the payment type; Form 8300 is a separate cash-reporting requirement triggered only by large cash receipts. A compliant store does both.

The penalties for getting it wrong

Civil exposure runs on strict liability, like I said above. Under IEEPA, the statutory maximum civil penalty is the greater of $250,000 or twice the amount of the underlying transaction, with the base figure adjusted for inflation each year. As of the January 15, 2025 inflation adjustment, that per-violation cap is $377,700 (one-half, used in some settlement math, is $188,850). Since this number gets re-indexed every January, treat it as "currently around $377,700, adjusted annually."

Willful violations also carry criminal penalties of up to $1,000,000 and up to 20 years in prison.

Your OFAC screening checklist

• Screen the buyer, co-buyer, and guarantor on every deal — no dollar threshold.
• Use OFAC's free search tool or automated screening built into your workflow.
• For business buyers, remember the 50% Rule — ownership can make an unlisted entity blocked.
• On a hit, evaluate match quality (name, DOB, address, IDs, aliases) before acting; verify with OFAC if it's close.
• Never deliver a vehicle while a credible match is unresolved.
• On a confirmed match, block/hold and report to OFAC within 10 business days.
• Keep screening records for at least 10 years.
• Maintain a short written compliance program (the five-component framework).

Frequently asked questions

Are used-car dealers legally required to screen buyers against the OFAC SDN list?

Yes. OFAC sanctions apply to all U.S. persons, which includes every U.S. business — car dealers aren't exempt. U.S. persons are prohibited from doing business with anyone on OFAC's Specially Designated Nationals (SDN) List, so before completing a sale, lease, or financing a dealer has to check the buyer (and any co-buyer or guarantor) against that list. Because there's no dollar-amount threshold, screening applies to every deal regardless of price.

How do I run an OFAC check on a car buyer?

You can use OFAC's free online Sanctions List Search tool, which runs a name against the SDN List and the Consolidated Sanctions List using fuzzy-logic matching that catches close spellings and phonetic variants. Enter the customer's full name and review any hits. Most dealers screen at the same time they run the credit application; many DMS and F&I platforms run the OFAC check automatically. Screen every party to the deal — buyer, co-buyer, and guarantor.

What should I do if a customer is a potential match on the OFAC list?

A potential match isn't automatically a real one. OFAC says to first weigh the quality of the hit by comparing all identifiers you have — full name, address, date and place of birth, ID numbers, nationality, and known aliases — against the SDN entry. If only part of the name matches and other details differ, it's probably a false positive. Unless you have an exact match, OFAC recommends you don't block or cancel the transaction before contacting OFAC's compliance hotline to verify. Don't deliver the vehicle while a credible match is unresolved.

What happens if I sell a vehicle to someone on the OFAC SDN list?

Dealing with an SDN is prohibited. OFAC enforces civil penalties on a strict-liability basis — you can be penalized even if you genuinely didn't know the buyer was sanctioned. Under IEEPA, the statutory civil maximum is the greater of $250,000 (inflation-adjusted to $377,700 as of January 2025) or twice the transaction amount, per violation, and willful violations carry criminal penalties of up to $1,000,000 and 20 years in prison. If a deal involves a blocked person, you have to hold/block the property and report it to OFAC within 10 business days.

How long do I have to keep OFAC screening records?

At least 10 years. OFAC extended its recordkeeping requirement (31 CFR 501.601) from five years to ten years, effective March 21, 2025, to match the 10-year statute of limitations for sanctions violations created by the 21st Century Peace through Strength Act (signed April 24, 2024). Keep proof of each screening — what was searched, when, the result, and how any potential match was resolved. Good records are central to showing you had a real compliance program if OFAC ever asks.

Is OFAC screening the same as filing IRS Form 8300 for cash deals?

No — they're separate obligations. OFAC screening checks a buyer against the sanctions list and applies to every deal regardless of payment type. Form 8300 is a tax/anti-money-laundering report a dealer has to file with the IRS and FinCEN whenever it receives more than $10,000 in cash in one transaction (or related transactions), due by the 15th day after the cash comes in. A compliant dealer does both: screen every buyer against OFAC, and file Form 8300 on qualifying cash deals (and never help a buyer structure payments to dodge it).

A simple next step

OFAC screening doesn't have to be one more thing your team forgets on a busy weekend. The most reliable approach is to make the SDN check a built-in step of every deal so it just happens. If you'd like to see how that works in practice, see the features or start a free trial — and either way, keep your records for a decade and check the current penalty figures before you rely on them.