OFAC encourages firms operating in the securities industry, including securities intermediaries and custodians, to implement measures that mitigate the risk of providing services to, or dealing in property in which there is an ownership or other interest of, parties subject to U.S. sanctions. Such measures should be tailored to and commensurate with the sanctions risk posed by a firm’s business activities. Best practices include:
Making customers aware of the firm’s U.S. sanctions compliance obligations and having customers agree in writing not to use their account(s) with the firm in a manner that could cause a violation of OFAC sanctions. Sanctions may be implicated when the United States is the jurisdiction of issuance or custody of an underlying security or when a U.S. person acts as a custodian or other service provider.
Conducting due diligence, including through the use of questionnaires and certifications, to identify customers who do business in or with countries or persons subject to U.S. sanctions. Such customers may warrant enhanced due diligence because of an increased risk that they will use their accounts to hold assets or conduct transactions for third parties subject to sanctions.
Imposing restrictions and heightened due diligence requirements on the use of certain products or services by customers who are judged to present a high risk from an OFAC sanctions perspective. Restrictions might include limitations on the use of omnibus accounts, where a lack of transparency can be exploited in order to circumvent OFAC regulations.
Making efforts to understand the nature and purpose of non-proprietary accounts, including requiring information regarding third parties whose assets may be held in the accounts. Red flags may arise relating to geographic areas or the nesting of third-party assets.
Monitoring accounts to detect unusual or suspicious activity – for example, unexplained significant changes in the value, volume, and types of assets within an account. These types of changes may indicate that a customer is facilitating new business for third parties that has not been vetted for possible sanctions implications.
