OFAC Fines FTI Consulting $1.05M for Indirect Sanctions Violations, Issues Broad Warning to Global Businesses

OFAC's Stance on Indirect Sanctions Evasion

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) recently imposed a significant $1.05 million fine on FTI Consulting for sanctions violations related to its dealings with VTB Bank, a sanctioned Russian entity. This penalty, double the base amount, underscores OFAC's firm stance against attempts to circumvent sanctions through indirect relationships. The core of the violation stemmed from FTI providing consulting services to VTB Bank via a global law firm, where FTI invoiced the law firm, which in turn was to be paid by VTB. OFAC explicitly stated that transacting indirectly through a third party does not make an otherwise prohibited action permissible, emphasizing that such arrangements risk being seen as evasion rather than compliance.

The Perils of Delayed Payments and Hidden Debt

A critical aspect of FTI's violation was VTB Bank's failure to pay invoices in a timely manner. OFAC considers unpaid invoices beyond a 14-day window as the extension of new debt to a sanctioned entity, which is a direct violation of U.S. sanctions law. This highlights a often-overlooked risk for companies: even if an initial indirect arrangement seems compliant, subsequent payment delays can inadvertently transform a service agreement into a prohibited debt instrument. Internal audit and compliance teams must therefore not only scrutinize contractual relationships but also monitor payment performance, particularly when dealing with entities that might have indirect ties to sanctioned parties.

Implications for Internal Audit and Compliance

This enforcement action serves as a stark warning for internal audit and assurance professionals. It necessitates a proactive review of all business contracts, extending beyond the named counterparty to identify ultimate beneficiaries or clients, especially those in high-risk jurisdictions. Traditional sanctions screening tools may not be sufficient for this level of indirect scrutiny, suggesting a need for more sophisticated analytical tools, potentially AI-driven, combined with human oversight. The message from OFAC is clear: companies cannot structure around sanctions prohibitions by using intermediaries. Audit functions should prioritize assessing the effectiveness of controls designed to detect and prevent indirect dealings with sanctioned entities and ensure that payment terms and practices do not inadvertently create sanctions liabilities.

• Review all contracts for indirect relationships with sanctioned entities.
• Implement enhanced due diligence beyond direct counterparties.
• Monitor payment timeliness to prevent inadvertent debt extension to sanctioned parties.
• Educate legal, procurement, and sales teams on the risks of indirect dealings.
• Consider advanced analytics and AI tools for identifying hidden sanctions risks in complex contractual arrangements.