Skip to content
OfacScanner

OFAC SDN List Updates and Why Onboarding Checks Fall Behind

October 8, 2026

Operations desk at night with monitors showing live alerts

OFAC SDN list updates don't follow a calendar. The Office of Foreign Assets Control adds, removes and edits entries whenever a designation or delisting is ready, which can mean several actions in one week and then a quiet stretch. If you only screen a customer once at onboarding, your result is accurate for that day and nothing more.

This guide explains how the list changes, what each kind of change means for your existing customers and how ongoing monitoring keeps your whole book current after every update.

How often the SDN list changes

There is no fixed schedule. OFAC publishes each change as a Recent Action on its website, dated and described, and updates the list files that screening tools download. Some actions touch a single name. Others add dozens of individuals, companies, vessels and aircraft at once, for example when a new sanctions program starts or an existing one expands.

Because the timing is driven by policy and enforcement work rather than a release cycle, nobody outside OFAC can predict when the next update lands. The practical consequence is simple: your screening has to react to the list, not to a date you picked in advance.

Three kinds of change, three different risks

Not every update looks the same. Each type affects your existing customers in a different way.

ChangeWhat happensRisk for your book
AdditionA new person, entity, vessel or aircraft is designatedA customer you cleared months ago can now be a true match
RemovalOFAC delists an entry, for example after a successful petitionA customer you blocked or flagged may now be clear to deal with
Change to an entryNew aliases, addresses, dates of birth, ID numbers or program tagsA new alias can match a customer who never matched before

Changes to existing entries are the easiest to overlook. When OFAC adds an alias or a transliterated spelling to a long standing entry, the name itself was already on the list, but your customer record may only start matching now. A process that only watches for brand new names misses this.

Additions can also reach companies that never appear on the list by name. Under the OFAC 50 percent rule, an entity owned 50 percent or more by blocked persons is itself blocked, so a new designation of an owner can change the status of a customer whose name you screened as clean.

Why a one time check at onboarding is not enough

An OFAC check at onboarding answers one question: was this person or company listed on the day you checked? It says nothing about tomorrow. A customer who passed screening in January can be designated in March, and from that moment U.S. persons are generally required to block their property and stop dealing with them.

OFAC enforces its rules on a strict liability basis, so not knowing about a new designation does not remove the violation. What it does affect is how OFAC weighs a case. Its Framework for OFAC Compliance Commitments expects a risk based program with internal controls that keep up with list changes, and a team that rescreens after updates is in a far better position than one that checked once and moved on.

There is also a practical cost. Rescreening by hand means exporting your customer list, uploading it, reviewing every possible match again and recording the outcome. Doing that after every Recent Action is rarely realistic, so manual programs tend to fall behind exactly when the list is most active.

How ongoing monitoring works

Ongoing sanctions monitoring turns rescreening into an automatic step. Instead of you deciding when to check again, each list update triggers a fresh screen of every record you have saved.

  1. The list refreshes. When OFAC publishes an update, the new SDN and Consolidated list data is loaded and stamped with its version, so every later result shows which list it used.
  2. The whole book is rescreened. Every monitored customer, vendor and counterparty is screened again against the updated list, using the same fuzzy matching on aliases and transliterations as the original check.
  3. Only what changed raises an alert. If a record now matches an entry it did not match before, or a match it had gets stronger, you get an alert. Records with the same result as last time stay quiet, so your team isn't reviewing the same false positives again.
  4. Removals show up too. If a match you previously flagged disappears because the entry was delisted, the change is visible, so you can review whether a block or restriction still applies under your own procedures.
  5. Every decision is recorded. The reviewer's decision, the reason and the list version are saved in the evidence record and audit trail.

The result supports your compliance decision. The decision itself stays with your team.

Checklist for keeping up with SDN list updates

  • Screen every new customer, vendor and counterparty before the relationship starts.
  • Keep each screened record saved so it can be rescreened later.
  • Rescreen the whole book after every list update, not on a monthly or quarterly timer.
  • Match on aliases and spelling variants, not only the primary name.
  • Review new and stronger matches first, using date of birth, nationality, address and ID numbers to separate real hits from false positives.
  • Record which list version each result came from.
  • Keep decisions and evidence for the required period. Since March 2025, OFAC recordkeeping under 31 CFR 501.601 runs for ten years, up from five.
  • Know your reporting duties. Blocked property and rejected transactions are generally reported to OFAC within 10 business days.

Common questions

Does OFAC send notifications when the SDN list changes

OFAC posts each change on its Recent Actions page and offers email updates for people who subscribe. Those notices tell you that something changed. They do not tell you which of your customers are affected, which is the part monitoring handles.

How fast should we rescreen after an update

OFAC does not set a fixed number of hours, and the right timing depends on your risk assessment. Because a designation takes effect when it is published, most teams aim to rescreen as soon as the new list is available rather than waiting for a scheduled batch.

What about customers we screened in bulk

Records you screen through a CSV batch upload can be kept for monitoring, so a one off import becomes part of the book that is rescreened after each update.

Do other sanctions lists change the same way

Yes. UN, EU, UK, Canadian and Australian lists also change on their own timelines. Screening starts with the OFAC SDN and Consolidated lists, and the same rescreen and alert approach applies to other lists as they are added.

Stay current without rechecking by hand

The SDN list will keep changing without notice, and a clean result from last quarter does not protect you today. If you want every list update to trigger a rescreen of your customers with alerts only on what changed, see how continuous monitoring of your customer base works. Monitoring is included from the Growth plan, and every plan is listed on the pricing page with no overage fees.

Want to see a result before anything else? Screen one name now with the OFAC search on our home page and look at the matches, scores and list date it returns.