Do Banks Need to Screen Vendors Against OFAC and How Often

Yes. Banks are required to screen vendors against OFAC sanctions lists. The legal obligation comes from the Office of Foreign Assets Control's regulations — specifically, 31 CFR Parts 500-598 — which prohibit US persons, including US financial institutions, from engaging in transactions with any entity on the Specially Designated Nationals (SDN) list. This prohibition applies to all business relationships, not only customer transactions. A bank processing payments to a vendor that subsequently appears on the SDN list without the bank's knowledge is at legal and regulatory risk.

OFAC Updates the SDN List Multiple Times Per Week

The practical implication of the OFAC prohibition is that a one-time screening at vendor onboarding is insufficient. The SDN list is updated multiple times per week. An entity that was clean at the time of contract signing may be added to the list months later. A vendor whose beneficial ownership changes and now includes a sanctioned individual will not be identified by a historical screening. Ongoing OFAC screening — ideally daily, at minimum monthly for critical vendors — is the only way to maintain compliance coverage.

What Most Community Banks Currently Do

Most community banks screen customers against OFAC at account opening and through ongoing transaction monitoring. Vendor OFAC screening is significantly less consistent. Many community banks screen vendors at onboarding and then not again until the next annual review. Some do not screen vendors at all. This is a gap that examiners have identified as a pattern and that the interagency guidance specifically addresses.

How to Run OFAC Screening on Your Vendor Portfolio

The OFAC SDN list is available as a free API from the US Treasury's sanctions list service at sanctionslistservice.ofac.treas.gov. Screening a vendor name against the list requires a name match query, which any workflow automation tool can execute. The Banking Vendor Risk AI Agent runs OFAC screening on every vendor in the portfolio daily, logs the results with timestamps, and immediately alerts the compliance officer and BSA officer if any vendor name returns a potential match. The daily log serves as documented evidence of ongoing sanctions screening for exam purposes.