BitPay’s OFAC settlement exposes critical lapses in U.S. crypto compliance, where unchecked bulk settlements funneled $129,000 from sanctioned regimes like Iran and North Korea into American merchant payouts over five years. This illegal facilitation of prohibited transactions—via ignored IP/email data—mirrors money laundering by obfuscating illicit origins, directly threatening U.S. sanctions integrity and national security. Proving regulatory resolve, OFAC’s $507k penalty sets a precedent against digital asset firms enabling adversarial economies.
BitPay, a U.S.-based cryptocurrency payment processor, settled with the Office of Foreign Assets Control (OFAC) for $507,375 in February 2021 over 2,102 apparent violations of U.S. sanctions programs. From June 2013 to September 2018, BitPay processed approximately $129,000 in digital currency transactions—primarily Bitcoin and Ethereum—enabling end-buyers from comprehensively sanctioned jurisdictions like Crimea, Cuba, Iran, North Korea, Sudan, and Syria to pay U.S. and other merchants. Despite screening its merchant clients against OFAC’s SDN List, BitPay failed to apply transaction-level monitoring, ignoring available buyer data such as IP addresses and email domains that indicated sanctioned origins. This bulk settlement model bypassed “due caution,” allowing prohibited economic benefits to flow to restricted parties and undermining U.S. foreign policy goals. OFAC classified the case as non-egregious, citing mitigating factors like BitPay’s subsequent compliance upgrades—including enhanced screening, geolocation blocks, and merchant training—which reduced the penalty from a potential $619 million maximum. As OFAC’s first enforcement against a digital currency service provider, the action highlighted crypto platforms’ vulnerabilities to sanctions evasion, akin to money laundering risks through unmonitored payouts, and reinforced U.S. regulatory scrutiny on the sector.
