Hormuz sanctions risk starts before payment — the OFAC warning every operator needs to understand

The compliance question most shipping companies have been asking about Hormuz is: will we face sanctions exposure if we pay for safe passage? It is the right question. But it starts too late.

On 1 May 2026, OFAC issued a warning that US and non-US persons could face sanctions risk if they make payments to, or seek guarantees from, the Iranian regime for safe passage through the Strait of Hormuz. The advisory confirmed that the payment form is irrelevant –cash, cryptocurrency, informal swaps, in-kind transfers and payments structured as charitable donations all carry the same exposure.

That warning has focused industry attention on the payment decision. But OFAC's framing makes clear that the risk does not begin when money changes hands. It can begin at the point of engagement — when a vessel operator shares ship details, requests clearance, coordinates with Iranian authorities, or accepts an escort linked to sanctioned parties.

For operators with vessels currently transiting or waiting near the Strait, the exposure clock may already be running.

‍

Why the IRGC designation matters

The sanctions architecture underpinning Hormuz risk is not new, but its application in this context is sharper than many compliance teams have accounted for.

The IRGC has been designated by the US State Department as a Foreign Terrorist Organization since April 2019, with parallel OFAC sanctions in place. That dual designation means any transaction involving an IRGC-linked entity triggers secondary sanctions exposure for non-US persons, regardless of where they are incorporated, what currency they transact in, or what their intent was at the time.

Secondary sanctions do not require a US nexus in the transaction itself. A European shipowner, an Asian charterer, a non-US bank financing the voyage — all can face exposure if the transaction involves a designated party, even if no US persons, US dollars or US financial institutions are involved.

In the context of Hormuz, the relevant question is not whether the Iranian entity requesting clearance or providing escort is formally identified as IRGC-linked. The relevant question is whether there is sufficient basis to conclude that it is not, and whether that conclusion is documented and defensible.

‍

The pre-payment exposure chain

The compliance community has largely focused on the binary of paying or not paying for passage. The OFAC advisory, read carefully, describes a broader exposure chain.

Consider the sequence of events for a vessel approaching the Strait in the current environment. Before any payment decision is made, the operator may have:

• Submitted vessel details, cargo information, ownership structure and insurance data to Iranian port or maritime authorities as part of a clearance or notification process
• Received or acknowledged guidance from Iranian authorities about routing requirements or escort arrangements
• Accepted or followed a transit instruction that moved the vessel through waters under Iranian operational control or into an escort formation linked to IRGC-adjacent entities
• Communicated through local agents or intermediaries who subsequently passed information or payments to Iranian-linked parties

Each of these steps carries potential compliance implications, not because they constitute sanctions violations in themselves, but because they create a record, an exposure and a set of questions that banks, insurers, P&I clubs and counterparties will ask when they review the voyage.

The compliance exposure that follows is not only legal. It is also practical. Banks that identify Hormuz passage-related submissions to Iranian authorities in a vessel's voyage record may decline to finance subsequent transactions. Insurers may treat the record of clearance coordination as a material fact in claims reviews. Charterparties with OFAC clauses may give charterers grounds to object to a transit that created undisclosed exposure.