When a company receives an administrative subpoena from the Office of Foreign Assets Control (OFAC), the instinct is to focus entirely on the merits: did a violation happen or not? That instinct is understandable, but incomplete. A subpoena is not only a demand to explain the past; it is an independent source of new liability, one that arises not from what happened before the subpoena, but from how the company responded to it.

This article is not about how to avoid an OFAC subpoena. It is about what happens after one arrives: why delay, inaccuracy, and concealment are three distinct sources of risk, each capable of operating independently of how the underlying matter is ultimately resolved.

Why OFAC Sends a Subpoena in the First Place

The authority to compel documents and sworn written answers sits in the Reporting, Procedures and Penalties Regulations (31 C.F.R. § 501.602). Receiving a subpoena more often signals that OFAC wants to find out whether a violation occurred, not that one has already been established. That legal basis exists separately from the substantive sanctions prohibitions, and the distinction matters: it creates a freestanding obligation to respond completely and accurately within the deadline set, regardless of whether the original suspicion is ultimately confirmed.

That independence is exactly what creates the risk this article is about: a company that is entirely in the clear on the merits can still incur its own, separate penalty for how it conducted itself during the inquiry.

Why Delay Is Not Just a Scheduling Problem

Delay has a dynamic of its own that is easy to underestimate at the outset. OFAC treats a failure to furnish requested information as a continuing violation: exposure accrues month by month, for each period of noncompliance separately, rather than as a single event (see Appendix A to 31 C.F.R. Part 501, the Economic Sanctions Enforcement Guidelines). That sets this kind of liability apart from most others: the longer a response takes to prepare, the more separate periods accumulate, regardless of how complicated the underlying request was.

In practice, this means that internal reasons for delay (a stretched legal department, documents scattered across business units, pending internal sign-off) do not stop the clock. An organizational rather than deliberate cause of delay can soften the assessment of the company’s good faith, but it does not undo the exposure that has already accrued.

Why Inaccuracy Costs More Than the Truth Would Have

A mistake in a subpoena response is not a stylistic detail; it is a factor OFAC weighs directly in gauging how serious a case is. Good-faith cooperation is one of the most heavily weighted mitigating factors under the Enforcement Guidelines, alongside the other General Factors: awareness, nature and scope of the conduct, whether a compliance program was in place, and any history of prior violations. A response that misleads the regulator does not merely fail to help; it actively forfeits access to that mitigation.

Worse, an inaccurate response can itself be read as evidence of willfulness, a factor that, on its own, can push a case into the ‘egregious’ category, where the starting point for calculating liability is the statutory maximum rather than a reduced base amount. In other words, a single inaccurate sentence in a written response can move the economics of a case more than most of the facts that led to it.

Why Concealment Changes the Entire Frame

A separate, and the most serious, category of risk involves the loss, unavailability, or outright withholding of data that was the subject of the request. The agency does not treat this as an administrative hiccup. Missing records, unexplained discrepancies between different versions of the same data, or documents that ‘no longer exist’ for precisely the relevant period – all of this reads to OFAC as circumstantial evidence that the company had something to hide.

In practice, an episode like this reframes the entire matter. The question stops being whether a violation occurred and becomes what the company was trying to hide and why. The exposure that follows extends well beyond the sanctions penalty itself.

How These Factors Add Up in OFAC’s Enforcement Analysis

OFAC does not assess cases on a single dimension; it weighs the full set of General Factors set out in the Enforcement Guidelines: voluntary disclosure, willfulness, harm caused, the existence and quality of a compliance program, the degree of cooperation with the investigation, and any history of prior violations. A late, inaccurate, or incomplete subpoena response touches several of those factors at once (chiefly willfulness and cooperation), which is exactly why it can affect the outcome out of proportion to the underlying conduct.

Tellingly, a case that might otherwise have been treated as minor or borderline can slide into the ‘egregious’ category purely because of the quality of the subpoena response; a reason that has nothing to do with the severity of the original violation. The reverse is equally true: a timely, complete, and accurate response, even where the facts are unfavorable, preserves access to meaningful mitigation, including a later voluntary self-disclosure.

An Illustration: A Composite Scenario

To tie this together, consider a composite situation, not tied to any specific matter. A company receives a subpoena over an issue that, at its core, amounts to a good-faith compliance error. Hoping to avoid inviting further questions, the legal team drafts a response that describes certain facts more gently than they actually were and withholds a portion of internal correspondence that would have clarified the picture. Sometime later, the regulator obtains the same underlying data from an independent source, and the discrepancy becomes a separate subject of inquiry, more serious than the original error ever was.

That pattern is not an outlier; it is the typical logic of escalation. What could have remained a minor episode becomes a case carrying maximum liability precisely because the subpoena response did not hold up under later scrutiny.

Practical Steps for Companies

• Bring in sanctions counsel before drafting begins, not after an internal team has already produced a first draft;
• put a litigation hold in place immediately, covering correspondence and drafts as well as final records that could conceivably relate to the request;
• verify every statement in the response against underlying documents, not against internal assumptions about ‘how it went’;
• answer completely and accurately even where the truth is unfavorable; softening inconvenient facts creates risks far greater than the facts themselves;
• if preparing the response surfaces additional, previously undisclosed issues, weigh a supplemental voluntary self-disclosure before the response is finalized, not after.

The Bottom Line

An OFAC subpoena is not the end of a matter; it is the beginning of one, and how a company responds becomes part of what gets evaluated. A timely, accurate, and complete response does not guarantee a favorable outcome, but it preserves access to the tools that can meaningfully soften the consequences. The reverse holds equally true: a mediocre response can turn a borderline case into one carrying maximum liability, regardless of how serious the original conduct was.

The attorneys at Fesenko, P.C. Law Offices guide companies through every stage of an OFAC inquiry: from the first response to a subpoena through defending the company’s position if the matter escalates.