Get Started With Tatum
Run your blockchain app more reliably - and affordably - with Tatum's RPCs, APIs and notifications.
This tool is built by Tatum to help track and monitor crypto addresses from the official OFAC SDN list. Data sourced from the U.S. Department of the Treasury - Office of Foreign Assets Control.
The wallets shown above belong to individuals and entities sanctioned by the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC). These addresses are identified in official sanctions programs (such as CYBER2, NPWMD, or RUSSIA‑EO14024) and are associated with activities like cybercrime, terrorism financing, narcotics trafficking, proliferation of weapons of mass destruction, or other national security threats. Financial institutions and crypto businesses are expected to block or reject transactions involving these addresses to comply with U.S. sanctions law.
OFAC publishes sanctioned crypto identifiers as part of its SDN (Specially Designated Nationals) list. Each listing typically includes the sanctioned party's name, one or more wallet addresses, and the programs under which they are designated. The dataset powering this page is built directly from those OFAC publications and is refreshed regularly so that newly listed addresses, assets, and programs are reflected as they appear in official releases.
Unlike traditional bank accounts, sanctioned activity in crypto can span multiple blockchains and asset types. A single sanctioned entity may control dozens of addresses across Bitcoin, Ethereum, Tron, Litecoin, Solana and various EVM chains, including stablecoins like USDT and USDC. This page normalizes those addresses across chains and surfaces the latest balances so investigators, compliance teams, and other stakeholders can quickly identify where funds currently reside and which assets are being used.
Many sanctioned wallets will eventually show a zero or near‑zero balance. This can happen because funds were frozen, seized by authorities, moved before designation, or drained by counterparties once an address became publicly radioactive. Even when balances are zero, the historical association remains important: these addresses often form part of larger laundering networks, mixing patterns, or infrastructure (exchanges, OTC brokers, service providers) that are relevant for ongoing monitoring and risk assessment.
For some chains—particularly UTXO‑based networks like Litecoin—the dataset tracks cumulative incoming and outgoing volume on the address. Large inflows may indicate deposit or funding points, while sizable outflows can highlight cash‑out events, layering behavior, or links to other high‑risk services. In other environments where granular flow data isn't available or meaningful, the page focuses on current balance as the primary indicator of residual exposure.
Sanctions‑screening systems, blockchain analytics tools, and VASPs (Virtual Asset Service Providers) use OFAC's wallet list as a hard blocklist. When a customer attempts to deposit from, withdraw to, or interact with one of these addresses, the transaction is typically halted and escalated for review. By combining OFAC's identifiers with on‑chain balances and multi‑chain mappings, teams can assess the real financial footprint of sanctioned actors, prioritize investigations, and demonstrate that they are actively monitoring for sanctions risk in crypto.
Not all high‑risk wallets are explicitly named by OFAC. Sanctioned actors frequently create new addresses, use mixers, bridges, and privacy tools, or route funds through intermediaries that are not yet designated. The addresses listed here should therefore be treated as a minimum known set, not a complete graph of their activity. Effective sanctions compliance and investigations combine this authoritative list with behavioral analytics, clustering heuristics, and continuous monitoring to keep pace with how these actors adapt over time.
Run your blockchain app more reliably - and affordably - with Tatum's RPCs, APIs and notifications.
