TL;DR: Receiving crypto from an address that was clean at the time but later sanctioned does not automatically make you a violator, but those funds become blocked property once the designation publishes, so stop moving them and screen your exposure.
The situation is stressful and increasingly common: months ago a payment or withdrawal landed in your wallet from a counterparty that looked ordinary, and now that same address, or the service behind it, shows up on the OFAC Specially Designated Nationals list. The transaction was fine when it happened; the designation came later. Below is what that means under US sanctions law and the concrete steps that protect you.
What does "later sanctioned" actually mean for my wallet?
Sanctions designations are not retroactive in the sense of rewriting history: the transfer you received was legal on the day it settled. What changes is the status of the property going forward. The moment the US Treasury adds an address, mixer, or exchange to the SDN list, any crypto traceable to that designated party becomes blocked property in the hands of a US person. You did not do anything new, but the coins in your wallet are now subject to a freeze-and-report obligation the day after the designation, not the day you received them.
The most common triggers are a counterparty exchange getting designated, like Garantex; a mixer being sanctioned, like Tornado Cash; or a specific wallet tied to a hack or a ransomware operator being added by name. If your funds trace directly to one of those, the exposure is direct. If they passed through one or two intermediaries first, the exposure is indirect, and how far the taint reaches depends on the screening model each institution uses.
Does OFAC's strict-liability rule mean I broke the law?
OFAC enforces sanctions on a strict-liability basis for civil penalties, which means an institution can be penalized even if it had no knowledge or reason to know it was dealing with a sanctioned party. That sounds alarming for an individual, but two things matter. First, strict liability is aimed squarely at businesses that handle other people's funds - exchanges, brokers, payment processors - and their obligation to screen customers and counterparties on an ongoing basis. Second, criminal penalties, the ones that carry real jail exposure, require willfulness: you knew, and you did it anyway.
An ordinary person who unwittingly received funds from an address that was designated afterward is not the target of a criminal case. What you do have is a forward-looking obligation once the designation is public: do not knowingly move, spend, or launder blocked property. OFAC's own guidance recognizes the innocent-third-party situation and provides a specific-license process to authorize otherwise-prohibited actions case by case. The violation is not the passive receipt months ago; it would be the knowing transfer now.
Do sanctions apply retroactively to crypto I already received?
Effectively, yes, for the purpose of the blocking obligation. The clearest precedent is the mixer Blender.io, which OFAC designated in May 2022 as the first crypto mixer added to the SDN list. After that designation, anyone subject to US jurisdiction who held or subsequently received digital assets traceable to Blender-linked addresses was required to block them and report them to OFAC, regardless of when the underlying transfer occurred. The designation date is the line in the sand: transfers before it were lawful, but the property does not get grandfathered in.
This is exactly why the "I already received it" case is different from the "should I send to this address" case that most guides cover. You cannot un-receive the funds, and sending them back to the sanctioned address is itself a prohibited transaction with a blocked person. The correct posture is to freeze your own behavior: hold, document, and report if required, rather than trying to make the problem disappear by moving the coins.
What does an exchange see when those funds hit a deposit?
Exchanges run continuous transaction monitoring, not a one-time check. They screen deposit addresses against the SDN list and against commercial risk databases at onboarding, at deposit, and on an ongoing basis as new designations publish. So even if your deposit cleared cleanly last year, a later designation of an upstream counterparty can retroactively raise the risk score attached to your address in their system. When you next deposit, the funds can be held for an AML review, and you may be asked for a source-of-funds explanation.
The good news is that a clean, documented timeline is exactly what resolves these reviews. If you can show that the transfer predated the designation, that you are an innocent recipient, and that you did not continue transacting with the sanctioned party, most compliance teams can clear the deposit. What sinks people is a messy history: rapid movement of the funds after the designation, chain-hopping, or running them through another mixer, all of which look like an attempt to obscure the trail.
How do I check whether an address I dealt with is now sanctioned?
You can pull your own transaction history from a block explorer like Etherscan and cross-reference each counterparty against the public OFAC SDN list, but doing that by hand across multiple chains, and catching indirect exposure two or three hops deep, is slow and error-prone. Screen your wallet with Plastron to see direct and indirect sanctions exposure across Ethereum and six other EVM chains in one pass, including funds that reached you through an intermediary rather than straight from the designated address. Knowing the shape of your exposure before an exchange asks is the difference between answering a source-of-funds request in a paragraph and reconstructing a timeline under pressure.
What should you do if you received funds from a now-sanctioned address?
- Stop moving the funds. Do not spend, swap, bridge, or send them back to the sanctioned address - any of those can be a prohibited transaction with a blocked person.
- Document the timeline. Record the transaction hash, the date you received the funds, and the date the counterparty was designated, proving the transfer predated the designation.
- Screen the wallet. Map both direct and indirect exposure so you know exactly which coins are affected and how they reached you.
- Preserve the evidence. Keep screenshots of the on-chain history and the SDN entry with its designation date, in case you need to respond to an exchange or file a report.
- Get advice before acting on large or clearly-tainted amounts. For material exposure, a sanctions attorney can advise on OFAC's reporting and specific-license process before you touch the funds.
FAQ
Am I automatically in violation if I received crypto from an address that was later sanctioned?
No. The receipt was lawful when it happened, and civil strict liability is aimed at institutions, while criminal liability requires willfulness. Your obligation is forward-looking: do not knowingly move or spend the blocked funds once the designation is public.
Do OFAC sanctions apply retroactively to crypto I already hold?
The transfer stays lawful, but the property becomes blocked from the designation date forward. The Blender.io case in 2022 established that recipients had to block funds traceable to the designated mixer regardless of when they received them.
Should I just send the funds back to the sanctioned address?
No. Sending crypto to a sanctioned address is itself a prohibited transaction with a blocked person. Hold the funds, document the timeline, and report or seek a specific license rather than trying to return them.
Will my exchange freeze my account over this?
It can hold the specific deposit for an AML review and ask for a source-of-funds explanation. A documented timeline showing the transfer predated the designation, plus no further contact with the sanctioned party, is usually enough to clear it.
How can I tell if a counterparty I transacted with has since been sanctioned?
Cross-reference each counterparty against the OFAC SDN list, or screen the whole wallet at once to catch both direct and indirect exposure across chains without checking addresses one by one.