Understanding USA Sanctions Compliance for Indian Companies

US sanctions are economic and trade restrictions imposed by the Office of Foreign Assets Control (OFAC) of the US Department of the Treasury. They target specific countries, entities, or individuals to achieve foreign policy and national security goals. An Indian company must care because US sanctions have extraterritorial reach. If your business deals in US dollars, uses US-origin software or goods, or transacts with US persons, you are directly subject to OFAC jurisdiction.

Even if your company has no US presence, secondary sanctions can apply. For example, if you knowingly facilitate a significant transaction for a sanctioned person, your own access to the US financial system can be cut off. Indian banks that process US dollar clearing through correspondent banks in New York are also required to screen transactions against OFAC's Specially Designated Nationals (SDN) list. Non-compliance can result in hefty fines, loss of correspondent banking relationships, and reputational damage.

Any Indian business that engages in international trade, cross-border payments, or works with foreign partners is exposed. The highest-risk sectors include:

• Exporters and importers dealing with dual-use goods (items with both civilian and military applications), defence equipment, or technology.
• Shipping and logistics companies that handle cargo to or from sanctioned regions such as Iran, North Korea, Syria, Crimea, and certain parts of Ukraine.
• Financial institutions and fintech firms that process international wire transfers, especially in US dollars.
• IT and software companies that export encryption software or provide cloud services to entities in sanctioned countries.
• Pharmaceutical and chemical companies that trade in controlled substances or precursor chemicals.

A common violation occurs when an Indian exporter sells goods to a buyer in a third country, but the ultimate destination is a sanctioned jurisdiction. OFAC looks at the "end-user" and "end-use," not just the immediate buyer.

Indian companies must screen their customers, vendors, and counterparties against several OFAC-maintained lists. The most critical are:

1. Specially Designated Nationals and Blocked Persons List (SDN List): This is the primary list. Assets of SDNs must be blocked, and transactions with them are generally prohibited. It includes terrorists, drug traffickers, and entities from sanctioned countries.
2. Sectoral Sanctions Identifications List (SSI List): This list targets specific sectors of the Russian economy (energy, financial services, defence). Transactions with SSI entities are restricted but not entirely blocked—for example, you may not provide new debt beyond a certain maturity.
3. Non-SDN Menu-Based Sanctions List (NS-MBS List): A newer list that imposes targeted restrictions (e.g., prohibiting certain types of transactions) without full asset blocking.
4. Consolidated Sanctions List: A combined list maintained by OFAC for easier screening.

Screening should be done at onboarding and periodically thereafter. Free OFAC search tools exist, but for high-volume or high-risk businesses, commercial screening software is recommended.

A compliance programme should be proportionate to your risk profile. For most Indian SMEs, a basic programme includes these elements:

• Written Policy: A one-page document stating your company's commitment to comply with applicable sanctions laws. It should name a responsible person (e.g., a compliance officer).
• Screening Process: Before entering any contract or processing a payment, screen the counterparty's name, address, and ownership against the SDN list and other relevant lists. Document the screening result.
• Payment Screening: If you process US dollar payments, your bank will screen them. But you should also screen your own outgoing payments for red flags (e.g., payment to a shell company in a high-risk jurisdiction).
• Training: Train your sales and finance teams to recognise red flags: unusual payment routing, requests to misdescribe goods on invoices, or reluctance to provide end-user details.
• Record Keeping: Maintain records of all screening results and compliance decisions for at least five years.

For companies with US parent entities or US investors, the compliance requirements are stricter. You may need to implement an OFAC-specific compliance programme with annual audits.

Penalties can be severe and are enforced by OFAC. For Indian companies, the most common consequence is not a direct fine, but the loss of access to the US financial system. This happens when your Indian bank's US correspondent bank terminates the relationship because your transactions triggered sanctions alerts.

Direct civil penalties from OFAC can range from a few thousand dollars to over USD 1 million per violation, depending on whether the violation was "voluntarily disclosed" and whether it was "egregious." Criminal penalties can include imprisonment for individuals involved. OFAC also publishes enforcement actions, which can damage your company's reputation and make it difficult to open bank accounts elsewhere.

Indian companies should note that the Reserve Bank of India (RBI) does not enforce US sanctions. However, RBI requires Indian banks to comply with all applicable laws, including foreign laws that affect their operations. Therefore, an Indian bank may freeze your account if it receives a request from a US correspondent bank regarding a sanctions concern.

If your company engages in cross-border trade or handles US dollar transactions, conduct a risk assessment immediately. Start by screening your current customer and vendor list against the OFAC SDN list. If you find a match or have any doubt about a transaction, do not proceed. Consult a qualified legal professional who specialises in international trade sanctions to review your compliance programme.

---

This page provides preliminary information. It is not legal advice. For your matter, consult a qualified professional.