OFAC Sanctions and Monero: What Users Actually Risk

In August 2022 the U.S. Treasury's Office of Foreign Assets Control (OFAC) added a piece of open-source software to its sanctions list for the first time, blacklisting the Tornado Cash smart-contract addresses and roughly 40 associated Ethereum wallets. Overnight, interacting with code became a potential sanctions violation. Monero holders watched closely, because the obvious next question was: if a transparent Ethereum mixer can be sanctioned, what happens to a coin whose entire protocol is built to hide sender, receiver, and amount? Three years later the answer is more nuanced — and in some ways more reassuring — than the headlines suggested. This guide walks through what OFAC can and cannot do, why privacy coins attract enforcement attention, and the concrete steps that keep ordinary Monero users on the right side of the line. If you reach the point of needing a no-account way to move funds, services like MoneroSwapper sit squarely inside this debate, so understanding the rules matters before you ever click "swap."

What OFAC Actually Sanctions — and What It Doesn't

OFAC is the Treasury agency that administers and enforces U.S. economic sanctions. Its primary instrument is the Specially Designated Nationals and Blocked Persons List, the SDN List. When a person, entity, vessel, or — controversially — a crypto address lands on the SDN List, U.S. persons are prohibited from transacting with it, and any property in their control must be blocked.

Two facts surprise most users. First, OFAC sanctions operate on strict liability: you can violate them without intent and without knowing the counterparty was listed. Civil penalties can reach the greater of roughly $377,700 per violation (the 2025 inflation-adjusted figure) or twice the value of the transaction. Second, OFAC has never sanctioned Monero itself, nor any Monero address. It sanctions people and the specific addresses they control.

• The protocol is not banned: Running a Monero node, holding XMR, or sending a private transaction is not a sanctions violation in any jurisdiction. OFAC targets designated persons, not cryptographic techniques.
• The risk is the counterparty: The violation occurs when you transact with someone on the SDN List. With a transparent chain like Bitcoin, OFAC can publish the offending address so you can screen it. With Monero, that screening is technically impossible.
• Strict liability cuts both ways: You cannot accidentally see who you are paying on Monero — but neither can a regulator trace your transfer to a blocked wallet, because no public address graph exists to subpoena.

This is the central paradox of privacy-coin sanctions exposure. On a transparent ledger, compliance is theoretically possible (screen every address) but surveillance is total. On Monero, screening is impossible, yet so is the after-the-fact tracing that turns a screening failure into an enforceable case.

Why Privacy Coins Draw Regulatory Fire

Monero's design is the reason regulators single it out. Every transaction blends the real sender among decoys using ring signature technology and the modern CLSAG construction, hides the recipient behind a one-time stealth address, and conceals the amount with RingCT and Bulletproofs+ range proofs. The result is fungibility: one XMR is cryptographically indistinguishable from any other, with no "tainted" coin history to trace.

For an OFAC analyst, fungibility is precisely the problem. The blockchain-forensics model that powers most sanctions enforcement — clustering addresses, following coins, flagging exposure to a blocked wallet — simply does not function against Monero. There is no key image reuse to exploit, no public amount to follow, no mempool linkage that survives Dandelion++ propagation.

The Delisting Wave

Regulatory pressure rarely arrives as an outright ban. It arrives as exchanges quietly removing the asset to avoid compliance headaches. The pattern accelerated through 2024:

• Binance delisted Monero spot trading on 20 February 2024, citing its inability to meet listing standards for monitored assets.
• Kraken removed XMR for users in the UK and parts of the EEA ahead of MiCA implementation.
• OKX dropped several privacy tokens in early 2024, and the EU's Anti-Money-Laundering Regulation (AMLR) will bar regulated providers from handling anonymity-enhancing coins from July 2027.

None of these are OFAC actions. They are the downstream chilling effect — institutions de-risking faster than the law strictly requires. The practical consequence for users is fewer KYC on-ramps, which pushes more activity toward peer-to-peer and atomic swap channels.

Sanctions Exposure Compared Across Methods

Not every way of acquiring or moving Monero carries the same regulatory profile. The table below compares the realistic sanctions and compliance exposure of common approaches for a U.S. or EU resident in 2026.

The takeaway is that the method, not the coin, drives exposure. A clean swap from Bitcoin to XMR through a reputable service is legally distinct from routing funds through a designated mixer. A non-custodial swap provider such as MoneroSwapper performs the conversion without holding your funds or asking for identity documents, while still maintaining a documented policy against serving sanctioned jurisdictions.

How to Reduce Your Legal Exposure as a Monero User

You cannot screen a Monero counterparty the way you would screen a Bitcoin address — the data does not exist. But you can build a defensible compliance posture with a handful of habits.

1. Keep clean records. Document where your XMR came from and where it went, with dates and counterparties you do know. Tax authorities (the IRS, HMRC) treat privacy coins as ordinary taxable property; opacity to the chain is not opacity to your obligations.
2. Avoid sanctioned tools and jurisdictions. Do not interact with any service or address on the SDN List, and do not transact with counterparties in comprehensively sanctioned regions. This is where strict liability actually bites.
3. Use providers with a stated compliance policy. Prefer swap services that publish a sanctions and prohibited-jurisdiction policy. Their screening becomes part of your own good-faith defense.
4. Report and pay taxes on gains. The single most common way privacy-coin users get into trouble is tax non-compliance, not sanctions. File accurately.
5. Separate lawful privacy from evasion. Wanting financial privacy is legal; structuring transactions to defeat a known legal obligation is not. Keep your intent clearly on the lawful side.

Using a privacy coin is not a crime; transacting with a sanctioned person is — and on Monero you carry that responsibility yourself because no third party can screen the counterparty for you.

The Tornado Cash Precedent and What It Means for Monero

The most important development for privacy users did not involve Monero at all. After OFAC sanctioned Tornado Cash in 2022, a group of users backed by Coinbase sued in Van Loon v. Department of the Treasury. In November 2024 the Fifth Circuit Court of Appeals ruled that immutable smart contracts are not "property" of any foreign national and that OFAC had exceeded its statutory authority by sanctioning the code itself. In March 2025 the Treasury formally removed Tornado Cash from the SDN List.

The lesson is consequential for Monero. A protocol — a set of autonomous, ownerless cryptographic rules — is legally distinct from a person who misuses it. Monero has no company, no smart contract owner, and no controllable address to designate. The same reasoning that freed Tornado Cash's code suggests OFAC would struggle to sanction "Monero" as such. Enforcement remains targeted at individuals: the 2024 indictment of the Samourai Wallet founders, for example, charged the operators with running an unlicensed money-transmitting business, not the act of using privacy software.

For the everyday user, this means the realistic threat model is narrow. You are not at risk for holding XMR or for valuing privacy. You are at risk only if you knowingly serve a sanctioned party, operate an unlicensed money business, or ignore your tax filings. Choosing a non-custodial swap like MoneroSwapper for a private conversion keeps you in the lowest-risk category — no money transmission on your part, no custody, no identity database to be breached or subpoenaed.

Beyond OFAC: The Wider Compliance Picture

OFAC is only one agency, and sanctions are only one slice of the rulebook. Two adjacent regimes shape a Monero user's real-world risk just as much, and conflating them with sanctions causes a lot of needless worry.

The first is FinCEN, the Treasury's financial-crimes bureau. In October 2023 FinCEN proposed a rule under Section 311 of the USA PATRIOT Act that would designate convertible-virtual-currency mixing as a "class of transactions of primary money laundering concern." That proposal targets mixing services and the businesses that handle their output — not individuals who hold a privacy coin. It matters to users mainly because it raises the compliance cost for exchanges, accelerating the delisting trend described above.

The second is the FATF Travel Rule, the global standard requiring regulated providers to pass sender and receiver information alongside transfers above a threshold. Monero's stealth address and RingCT design make travel-rule data collection structurally impossible, which is the technical root cause of exchange reluctance. Again, the obligation lands on regulated intermediaries, not on the person spending XMR from their own wallet.

• Sanctions (OFAC): strict-liability prohibition on transacting with designated persons. Applies to everyone.
• AML (FinCEN/FATF): recordkeeping and reporting duties that fall on money-services businesses, not on ordinary holders.
• Tax (IRS/HMRC): the most commonly enforced obligation against individual crypto users by a wide margin.

Keeping these three buckets separate is the clearest way to reason about your actual exposure. The vast majority of private users only ever touch the third one.

FAQ

Is it illegal to use Monero in the United States?

No. Owning, sending, and receiving Monero is legal across the U.S. and the EU. No statute or OFAC designation bans the protocol. The legal lines are the same as for any asset: do not transact with sanctioned persons, do not run an unlicensed money-transmitting business, and report your taxes.

Can OFAC put a Monero address on the SDN List?

It is technically possible but practically useless. Monero uses one-time stealth addresses, so a published address would never appear on-chain again and could not be screened against future transactions. To date OFAC has listed Bitcoin and Ethereum addresses, but no Monero address, precisely because the design defeats address-based blocking.

If I can't screen my Monero counterparty, am I automatically violating sanctions?

No. Strict liability means you can be liable without intent, but a violation still requires an actual transaction with a designated person. Because Monero offers no public address graph, there is also no forensic trail to prove such a transaction occurred. The practical risk centers on tools and jurisdictions you choose, not on the coin's privacy itself.

Did the Tornado Cash ruling make privacy coins safer?

It strengthened the legal argument that ownerless code and protocols cannot be sanctioned the way a person can. The Fifth Circuit's 2024 decision and the 2025 delisting set a precedent that helps Monero, which has no owner or controllable contract. It does not, however, change your personal obligations regarding sanctioned counterparties and taxes.

Why are exchanges delisting Monero if it's legal?

Delisting is a business risk decision, not a legal mandate. Compliance with travel-rule and monitoring requirements is hard for an asset that cannot be traced, so many exchanges remove XMR rather than build the controls. This is why no-account swap services have become the main liquidity route for privacy-minded users.

Conclusion

The fear that OFAC will one day "ban Monero" misreads how sanctions work. Designations target people and the property they control, not autonomous cryptography — and the Tornado Cash saga has only sharpened that distinction. For a normal user, the real obligations are mundane: avoid sanctioned parties and tools, steer clear of unlicensed money transmission, keep records, and pay your taxes. Within those lines, financial privacy remains entirely lawful. When you do need to convert funds privately, a non-custodial, no-KYC swap keeps you in the lowest-exposure category, and you can start a Bitcoin-to-Monero conversion through MoneroSwapper without an account or an identity database that could ever be subpoenaed. Privacy is a right, not a red flag — understanding the rules is what keeps it that way.