What happened

OFAC is shifting enforcement upstream. The agency’s 2026 posture, detailed in a Holland & Knight analysis, targets professional service providers — attorneys, accountants, financial advisors, and institutions — who enable sanctions evasion even when they aren’t the ultimate beneficiaries.

The signal case: a February 2026 enforcement action against a Florida school that accepted tuition payments from entities tied to a sanctioned Mexican cartel. The payments moved through third parties. The school didn’t directly transact with the cartel. OFAC didn’t care. The intermediary relationship was enough.

The message is deliberate. OFAC is closing the gap between sanctioned actors and the professional infrastructure that, knowingly or not, services them.

Why it matters

Sanctions regimes have always had a secondary-market problem. A sanctioned entity can’t wire money directly to a U.S. law firm. But it can move money through layered structures — shell companies, nominees, family members — until it reaches an otherwise-legitimate counterparty who never runs the right checks.

OFAC has tolerated this slippage for years. Enforcement was concentrated on the primary violators — the sanctioned parties themselves or the banks that moved their funds. Professional service providers operated in a gray zone, claiming ignorance as a defense.

That gray zone is being eliminated. The Florida school case establishes that receiving funds with tainted upstream origins — even through intermediaries — can constitute a violation. This isn’t an isolated action. It’s a doctrine.

The compliance burden cascading down from this shift is significant. Law firms, accounting practices, wealth managers, and educational institutions now face pressure to perform sanctions screening not just on their direct clients but on the funding sources behind those clients. Practically speaking, that’s a KYC/AML regime that extends several steps up the chain.

What to watch

• Additional OFAC enforcement actions against professional services in 2026, particularly in legal and accounting sectors
• Treasury guidance on how far upstream due diligence obligations extend
• Whether the doctrine spreads to EU, UK, and allied jurisdictions coordinating on sanctions enforcement
• Lobbying resistance from professional associations (bar associations, accounting bodies) to compliance burden expansion
• Court challenges testing OFAC’s legal theory on indirect receipt liability

Bitcoin relevance

Every ratchet of the traditional compliance apparatus creates pressure in the other direction.

The logic is simple: when the regulated financial system becomes more surveilled, more costly to navigate, and more legally dangerous for intermediaries, demand increases for settlement infrastructure that doesn’t depend on intermediaries at all.

Bitcoin doesn’t require a law firm to move value. It doesn’t require a bank to process a wire. There’s no accountant who can be made liable for a transaction that passed through their books. The settlement layer is physics, not policy — the blockchain will confirm a valid transaction regardless of what OFAC thinks about the counterparties.

This is the sovereign stress asset thesis in action. Bitcoin isn’t compelling because it’s a better payment system for everyday use. It’s compelling because every expansion of state enforcement capability over traditional financial infrastructure reveals what that infrastructure’s weaknesses always were: centralized choke points, dependent on human intermediaries, subject to legal liability.

Sanctions pressure doesn’t create Bitcoin demand in a clean, predictable way. But it does clarify the value proposition. The compliance burden on professional service providers is, from Bitcoin’s perspective, an advertisement.

Bottom line

OFAC is making gatekeepers responsible for what passes through their gates — including flows they never directly controlled. The compliance radius is expanding. The professional services industry is being conscripted into enforcement. And every layer of friction added to the traditional system is a data point in the argument for settlement infrastructure that has no gatekeepers to conscript.