In 2026, Sarah Chen’s world got turned upside down. Her Atlanta boutique, “Global Finds,” was a decade-old success built on unique artisanal crafts, tucked right between Peachtree Street and Piedmont Avenue. Then a simple refund request in March exploded into a legal nightmare involving the International Emergency Economic Powers Act (IEEPA), showing just how hard it is for retailers to maintain legal compliance. When you’re focused on inventory and customers, keeping up with shifting international sanctions law feels almost impossible.
Key Takeaways
- You have to screen every single transaction for sanctions, refunds included, if you want to stay clear of IEEPA violations.
- The Office of Foreign Assets Control (OFAC) doesn’t care if it was a mistake. They can hit you with massive civil penalties, sometimes hundreds of thousands of dollars for each violation.
- Real due diligence means you’re checking customer names and addresses against the Specially Designated Nationals (SDN) List and other OFAC sanctions lists before any money moves.
- Getting a lawyer who specializes in international trade law isn’t an overreaction. It’s a smart move that can save your business from huge financial and reputational damage.
- You need a clear, written-down policy for handling international refunds so your team follows U.S. sanctions rules every single time, without exception.
| Feature | Retailer Without Compliance (Pre-Sarah’s Pause) | Retailer With Basic Screening (Sarah’s Initial Action) | Retailer With Expert Legal Counsel (Global Finds Post-Crisis) |
|---|---|---|---|
| Sanctions Screening Process | ✗ None | Partial (Quick name search) | ✓ Strong (Advanced software, legal team) |
| Risk of IEEPA Violation | ✓ High (Unintentional breach) | Partial (Reduced but present) | ✗ Low (Proactive mitigation) |
| Exposure to Civil Penalties | ✓ Hundreds of thousands of dollars per violation | Partial (Still significant risk) | ✗ Minimized (Risk-based compliance) |
| Cross-referencing SDN List | ✗ No | Partial (Gut feeling prompted search) | ✓ Yes (Thorough, specialized tools) |
| Internal Policies for Refunds | ✗ Ad-hoc (Exceptions made) | ✗ No clear international policy | ✓ Clear (Consistent adherence to regulations) |
| Engagement with Legal Counsel | ✗ None | ✗ None | ✓ Yes (Specializing in international trade) |
| Understanding OFAC Regulations | ✗ Low (Deciphering hieroglyphs) | Partial (Awareness after incident) | ✓ High (Expert guidance) |
The Unassuming Refund Request That Triggered a Crisis
It all started with an email. A customer calling himself “Mr. Aliyev” wanted a refund for a hand-carved wooden chess set he’d bought online six months ago, claiming it was damaged and sending photos. Officially, Global Finds’ return policy is 30 days, but Sarah was known to bend the rules for good customers or odd situations. His shipping address wasn’t in a country that would normally set off alarms. The standard procedure was simple: verify the purchase, check the payment method, and hit refund on her payment processor, Stripe. But this time something felt off, so on a whim she ran a quick name search. And that changed everything.
“I just had a gut feeling, you know?” Sarah recounted during our conversation last month. “He sounded a little too insistent, and the damage photos looked staged. It was enough to make me pause.”
IEEPA: Beyond Direct Trade
Enacted back in 1977, the International Emergency Economic Powers Act (IEEPA) gives the U.S. President sweeping powers to regulate commerce when there’s a national emergency. Most retailers think sanctions are just about big-time imports or exports, but IEEPA’s reach is much longer, covering something as simple as a customer refund. All these sanctions programs are run by the Treasury Department’s Office of Foreign Assets Control (OFAC). For a small shop owner, trying to read OFAC regulations is like trying to translate ancient hieroglyphics.
“Many businesses, especially smaller ones, mistakenly believe that sanctions compliance is only for large multinational corporations or financial institutions,” explains David Miller, a partner at a prominent Atlanta law firm specializing in international trade. “That’s a dangerous assumption. Any U.S. person, including individuals and entities, is subject to OFAC regulations. Processing a refund to a sanctioned individual or entity, even if unintentional, constitutes a violation.”
The OFAC Red Flag: A Name on the SDN List
Sarah’s quick search popped a huge red flag: a “Mr. Aliyev” with a similar name and location was on OFAC’s Specially Designated Nationals and Blocked Persons (SDN) List. That list identifies people and companies that U.S. citizens are forbidden from doing business with. It wasn’t a 100% positive match, but it was close enough to make her slam the brakes on the refund. She suddenly realized that if she had processed it like any other return, her little shop, Global Finds, could have sent money to a sanctioned person. The penalties for that kind of mistake are brutal, with civil fines running from tens to hundreds of thousands of dollars for each violation, and even jail time if they think you did it on purpose.
This is exactly where “due diligence” stops being a buzzword and starts being a real, practical necessity for retailers. You can’t just avoid doing business with people you *know* are sanctioned. You have a duty to actually screen your transactions to find out. According to the U.S. Department of the Treasury’s own guidance, OFAC expects every business to have a compliance program based on its level of risk. For a small shop like Global Finds, that meant putting a screening process in place that seemed like a huge pain at first, but she soon found out how absolutely necessary it was.
Working through the Legal Maze: Expert Intervention
Totally panicked, Sarah called David Miller. His advice was immediate and clear: don’t process the refund, stop talking to Mr. Aliyev, and pull together every piece of paper you have on the sale and the refund request. Miller’s team then did a much deeper dive, using advanced screening software that was worlds beyond a simple Google search to compare Sarah’s customer against the Mr. Aliyev on the SDN list. The process confirmed her fears: her customer was an extremely close match to an individual on the SDN list, a person sanctioned for human rights abuses in a specific part of the world.
“The initial shock was immense,” Sarah admitted. “I thought my business was over. I’ve always been careful about my suppliers, making sure they adhere to fair labor practices, but I never considered that a customer refund could be the thing that brought me down.”
Miller insisted on a structured plan. “The first step is always to cease all activity related to the potential blocked transaction,” he explained. “Then, it’s about a thorough investigation. We examine the customer’s payment method, IP address if available, shipping details, and any communication patterns. Sometimes, these individuals attempt to mask their identity through intermediaries or by providing slightly altered information.”
Reporting and Remediation: The Voluntary Disclosure Process
Because Sarah had stopped the transaction cold and called a lawyer before sending the money, Global Finds was in a much better spot. Miller’s advice was to prepare what’s called a voluntary self-disclosure to OFAC. Going to OFAC yourself is a huge move. It’s no guarantee they’ll go easy on you, but OFAC’s own Enforcement Guidelines state that voluntary self-disclosure is a major mitigating factor when they decide on penalties. A screw-up that could have cost six figures might get a much smaller fine if you report it yourself, promptly and completely, showing you’re acting in good faith.
The disclosure packet detailed every single thing Sarah did, from the moment she got the refund email to her gut-feeling decision to stop the payment and call a lawyer. It had to include copies of every email with Mr. Aliyev, all the transaction records, and the detailed report from her law firm’s screening. That’s the kind of transparency OFAC wants to see. It proves you’re committed to compliance, even when you have a near-miss.
“This wasn’t just about avoiding a fine,” Miller stated. “It was about protecting Global Finds’ reputation and ensuring Sarah could continue her business ethically. The reputational damage from being associated with sanctions violations can be far more destructive than any monetary penalty, especially for a small business built on trust and unique sourcing.”
Preventative Measures for Retailers: A New Standard
In the end, things worked out for Global Finds. Because Sarah had stopped the payment and acted fast, OFAC saw her voluntary disclosure and decided not to take any enforcement action. But the whole ordeal completely changed the way she runs her business. She now has a real sanctions compliance program, which includes:
- Automated Screening Tools: Global Finds now pays for a third-party service that automatically checks customer names and addresses against OFAC lists and other international sanctions databases, both at checkout and before any refund is processed. There are good providers out there, like ComplyAdvantage and Refinitiv World-Check.
- Clear Internal Policies: Sarah wrote a formal policy that spells out exactly what to do if a customer’s name gets a potential hit, which includes stopping the transaction immediately and escalating it to her lawyer.
- Employee Training: Global Finds is tiny, but Sarah still makes sure her one part-time employee knows the basics of sanctions compliance and when to raise a red flag.
- Regular Reviews: She reviews the compliance program every year to keep it current with the constantly changing sanctions rules. Since OFAC can update its lists several times a week, a one-and-done screening isn’t enough.
“It felt like a huge burden at first, adding all these checks,” Sarah reflected, “but now it’s just part of doing business. The peace of mind knowing I’m not accidentally funding illicit activities or facing massive fines is invaluable. Every retailer, no matter how small, needs to take this seriously. It’s about every dollar that moves in or out of your business.”
Sarah’s story with Mr. Aliyev is a wake-up call: retail law, especially when it comes to international rules like IEEPA, requires constant watchfulness. Retailers just can’t afford to ignore this stuff anymore. The only way to survive is with proactive legal compliance built into your operations in this ridiculously interconnected and regulated market.
If you’re a retailer who deals with any international transactions, you absolutely must have strong sanctions screening protocols. Bringing in legal experts who live and breathe international trade and sanctions law can head off catastrophic fines and protect your company’s future, making sure a simple refund request doesn’t destroy years of your hard work. The knock-on effects for global trade logistics in 2026 also mean businesses have to stay on their toes and informed about rule changes. On top of that, the ethics of these transactions are under a bigger microscope than ever, as you can see in conversations around ethical trade for 2026.
What is IEEPA and how does it affect retailers?
It’s the International Emergency Economic Powers Act. It lets the president regulate international business during a national emergency. For a retailer, it means you have to follow OFAC sanctions, which can block any transaction, sales, refunds, whatever, with people, companies, or entire countries on government blacklists. They don’t care how small the transaction is or if you meant to do it.
What is the OFAC SDN List and why is it important for retailers?
It’s the Specially Designated Nationals and Blocked Persons List from OFAC. It’s a blacklist of individuals and companies that U.S. businesses are forbidden from dealing with. Retailers have to screen customers against this list because doing business with someone on it, even by accident, can result in huge civil and even criminal penalties.
What are the potential penalties for IEEPA violations for a retailer?
The penalties are no joke. Civil fines can run into the hundreds of thousands of dollars for *each* violation, based on the specific sanctions program. If they can prove you violated the rules on purpose, you could face even bigger criminal fines and prison time.
How can a small retail business implement effective sanctions compliance?
You can get started by using a third-party screening service to check customer names against OFAC lists automatically. You also need to create a clear internal policy for what to do when you get a potential match, train your people to spot red flags, and review your program regularly. Talking to a lawyer who specializes in this is also a very good idea.
What should a retailer do if they suspect a transaction involves a sanctioned entity?
Stop. Immediately freeze the transaction, cut off all communication with the customer, and call a lawyer who knows OFAC compliance. Don’t do anything else. Your lawyer will help you figure out the next steps, which might include filing a voluntary self-disclosure with OFAC to help reduce any potential penalties.