Key takeaways:
- OFAC’s SDN list of November 9, 2026 holds 1,080 crypto address listings, 1,064 unique addresses spread over 113 entries. We dated each one from the OFAC action page that first published it.
- 2026 is already the record year, with 322 listings by November 9 against 251 in 2022, and 2025 and 2026 together account for 47% of everything ever listed.
- TRON has taken over. Bitcoin made up 90% of the 2022 listings, while 75% of the 2026 listings use OFAC’s TRX ticker.
The Office of Foreign Assets Control (OFAC), part of the US Treasury, started adding cryptocurrency addresses to its Specially Designated Nationals (SDN) list in November 2018. The list says who is sanctioned, but it doesn’t say when each address joined it. We rebuilt that history for all the OFAC crypto addresses from the agency’s own action pages, address by address, and published the result as a dataset.
How many OFAC crypto addresses are on the list
On the list dated November 9, 2026, 1,080 crypto address listings sit on 113 SDN entries, 76 of them individuals and 37 entities. A listing is one address on one entry under one ticker. Some addresses appear more than once, on two entries or under two tickers, which leaves 1,064 unique addresses.
OFAC files each address under a ticker. Bitcoin’s XBT leads with 533 listings, followed by TRX with 272, ETH with 124 and USDT with 94. Sixteen other tickers share the rest, from litecoin and monero to a single XRP address.
The yearly totals are below for anyone who wants the figures behind the bars.
| Year | Listings added | Unique addresses first listed |
|---|---|---|
| 2018 | 2 | 2 |
| 2019 | 12 | 12 |
| 2020 | 55 | 54 |
| 2021 | 100 | 93 |
| 2022 | 251 | 250 |
| 2023 | 66 | 60 |
| 2024 | 86 | 86 |
| 2025 | 186 | 186 |
| 2026, to November 9 | 322 | 321 |
The count covers only addresses still on the list. Addresses OFAC has since removed are kept apart in our data, and the largest group went in a single action on March 21, 2025, when OFAC delisted Tornado Cash and 90 of its addresses.
TRON has replaced bitcoin
The first listings, on November 28, 2018, were two bitcoin addresses belonging to two Iranian men named in a cyber-related designation. Bitcoin stayed dominant for years: in 2022, 226 of the 251 new listings used the XBT ticker, most of them from the April 5 action against the Russian darknet market Hydra.
In 2026 the picture flipped. Of 322 listings so far, 243 use TRX and only 16 use XBT. Part of that comes from one action, but even without the 134 listings added to ISIL Khorasan on July 1, TRX still accounts for 112 of the remaining 188.
The ticker isn’t always the chain. OFAC files some addresses under the token rather than the network, so of the 352 addresses in TRON’s format, 272 are listed under TRX, 79 under USDT and one, oddly, under XBT. If you screen by chain, read the address itself, not just the label in front of it.
Who is on the list
OFAC tags each entry with one or more sanctions programs. Grouped by the labels OFAC publishes for those tags, cyber-related programs cover 471 of the 1,080 listings, terrorism 213, narcotics 168 and North Korea 134. An entry can carry several labels, so these shares overlap.
| SDN entry | Listings | Program label | First on the list | Addresses added |
|---|---|---|---|---|
| ISIL Khorasan | 134 | Terrorism | September 29, 2015 | July 1, 2026 |
| Hydra Market | 117 | Cyber | April 5, 2022 | April 5, 2022 |
| Cheil Credit Bank | 53 | North Korea | September 26, 2017 | November 4, 2025 |
| Xinbi Guarantee | 52 | Criminal organizations | September 9, 2026 | September 9, 2026 |
| Wang, Yunhe | 49 | Cyber | May 28, 2024 | May 28, 2024 |
| Parsarad, Behrouz | 49 | Narcotics | March 4, 2025 | March 4, 2025 |
The list is concentrated. The ten largest entries hold 597 listings, 55% of the total, while 34 of the 113 entries carry a single address.
In 2026, terrorism programs drove the growth, with 182 of the 322 new listings. Criminal organizations followed with 59 and cyber programs with 50.
The five biggest single actions
Most of the list arrived in a handful of days. The five largest OFAC actions added 425 listings between them, nearly 40% of today’s total.
| Action date | Listings added | SDN entry | Tickers |
|---|---|---|---|
| July 1, 2026 | 134 | ISIL Khorasan, an existing entry | 131 TRX, 3 XMR |
| April 5, 2022 | 120 | Hydra Market (117) and Garantex Europe (3) | 118 XBT, 1 ETH, 1 USDT |
| November 9, 2022 | 66 | Two individuals designated under narcotics programs | 54 XBT, 9 ETH, 3 BCH |
| November 4, 2025 | 53 | Cheil Credit Bank, an existing entry | 53 USDT |
| September 9, 2026 | 52 | Xinbi Guarantee | 52 TRX |
Two of the five added addresses to names already on the list, which is why an entry’s designation date tells you little about when its addresses appeared.
Addresses that arrive years after the name
A designation date can mislead you about an address. We found 250 listings added at least a year after their entry first appeared on the list, so dating them by the entry would put them years too early.
The gaps can be long. ISIL Khorasan was designated in 2015 and received its 134 addresses in 2026, and the North Korean bank Cheil Credit Bank, on the list since 2017, got 53 USDT addresses in November 2025. Iran’s central bank, Bank Markazi, has been an SDN entry since 2010 and had six addresses added in April and July 2026.
OFAC also corrects what it publishes. One ether address appeared a digit short in September 2020 and was fixed in November 2021, and a monero address listed on July 1, 2026 carried a lowercase “l” where a “1” belonged until a correction on September 9.
What it means if you check addresses
An address that isn’t among the sanctioned crypto addresses on the SDN list isn’t necessarily safe. OFAC’s own FAQ 562 says its digital currency address listings “are not likely to be exhaustive”, and the list grows in bursts, so a check run last month can miss an address added this week.
Some restrictions never reach the list at all. FinCEN’s order against the exchange MEXC, which takes effect on December 10, 2026, bars US banks and exchanges from dealing with it without putting a single MEXC address on the SDN list, as our MEXC report explains.
How we built the dataset
We started from OFAC’s SDN list in its advanced XML format, dated November 9, 2026, and extracted every digital currency address with its entry, ticker, program and country. To date each of the OFAC crypto addresses, we read all 905 “Sanctions List Updates” pages OFAC has published since November 1, 2018. Seventy-nine of them contain crypto addresses, the same 79 that OFAC’s own search returns for that phrase.
Each address is dated by the first action page that lists it. We traced 13 addresses by hand from the XML to the page that added them, and we checked the July 1, 2026 action, the largest, against the page itself: it lists 134 addresses, 131 under TRX and 3 under XMR, matching our records. Programs, entity types and countries are as of November 9, 2026, not as of each address’s date.
Our free Address Check carries the same SDN list crypto addresses and matched this dataset address for address on the November 2026 list.
The full dataset, one row per listing with the date and the source page, is available as a CSV file. We plan to update it after each OFAC action that adds crypto addresses.
Frequently asked questions
How many crypto addresses are on the OFAC sanctions list?
As of the SDN list dated November 9, 2026, there are 1,080 crypto address listings, covering 1,064 unique addresses on 113 entries. The total counts only addresses still on the list, since OFAC has removed others over the years, including 90 Tornado Cash addresses in March 2025.
When did OFAC first sanction a crypto address?
On November 28, 2018. That action added two bitcoin addresses to the entries of two Iranian individuals under a cyber-related program.
Which blockchain has the most sanctioned addresses?
Bitcoin, across all years, with 533 listings under the XBT ticker. In 2026, though, TRON led by far, with 243 of the year’s 322 listings under TRX, and USDT addresses on TRON add to that total under their own ticker.
Does OFAC list USDT and USDC addresses?
Yes. There are 94 listings under USDT and 2 under USDC, and OFAC files many stablecoin addresses under the token’s ticker even when the address sits on TRON or Ethereum. Stablecoin issuers can also freeze addresses on their own, which is a separate step from an OFAC listing.
How do I check if a crypto address is sanctioned?
Search the address in OFAC’s Sanctions List Search, entering it in the ID field, or paste it into a tool that carries the current list. Repeat the check before each large payment, because the list changes, and remember that a clean result only covers the SDN list.
