What Happens When the U.S. Sanctions You?

Many people have an intuition about “being sanctioned by the U.S.”: I live in China, I have no overseas assets, I don’t deal with American companies — so sanctions have nothing to do with me. In September 2025, a Shanghai engineer who had been added to a U.S. sanctions list wrote up his experience online, and his conclusion was exactly the opposite. The day after the designation was announced (U.S. time), his WeChat Pay was cut off, multiple Chinese banks froze or closed his personal and corporate accounts, and even scanning a QR code to pay for parking or grabbing a WeChat red packet returned “service terminated”[17]. The U.S. government carried out no enforcement on Chinese soil — Chinese commercial institutions did all the “enforcing” themselves, within 24 hours.

This is the most counterintuitive and most important thing about U.S. sanctions: what actually makes a sanction bite is usually not direct enforcement by the U.S. government, but the collective avoidance of banks, brokers, suppliers and charterers worldwide acting in self-protection. The root cause is that almost all USD clearing passes through the U.S. banking system — the dollar is roughly 48% of SWIFT messaging, and the U.S. CHIPS system handles about 95% of cross-border USD clearing[17]. If you touch dollars, you are in principle within reach — this is the origin of so-called “long-arm jurisdiction.”

This article has three parts. Part one lays out the intensity ladder — what each tier of sanction is, what it does to you, and representative cases. Part two looks at three archetypal sanctioned countries (Iran, North Korea, Russia) and how ordinary people, officials and merchants fare in each. Part three walks through 11 China-related cases to see what these tools look like when they land on Chinese targets. All “grounds for sanction” below are unilateral U.S. assertions; China has consistently objected and some firms and individuals publicly deny the allegations. This article only maps the mechanics and the facts.

The Intensity Ladder — what happens at each tier

First, separate two systems, or you’ll conflate completely different tools. U.S. sanctions run along two tracks: financial sanctions govern “money and transactions,” run by OFAC (Office of Foreign Assets Control) within the Treasury[1] — freezing assets, banning USD clearing, prohibiting U.S. persons from transacting with a target; export controls govern “goods and technology,” run by BIS (Bureau of Industry and Security) within the Commerce Department[2] — whether American chips, software or equipment may be exported to a given company. Beyond these, Homeland Security and Customs (DHS / CBP) govern imports, and the Defense and State Department lists are more political signal.

Mnemonic: when you see an unfamiliar list, first ask which department issued it.

OFAC (Treasury) = money; BIS (Commerce) = goods & tech; DHS / Customs = imports; DoD / State = signal. That tells you which link in the chain it hits, nine times out of ten.

Ranked by actual applicability to Chinese entities, from highest to lowest — overview table first, then tier by tier:

Comprehensive Embargo ★★★★★ — an entire country blacklisted

The top tier targets not a person or company but an entire jurisdiction: Iran, North Korea, Cuba, Syria, Crimea. U.S. financial institutions are barred from serving every resident of these jurisdictions — no USD bank accounts, no brokerage accounts, no U.S. stocks, with no need to name anyone individually. The test is primarily where you live, not just nationality: someone living in Tehran or Pyongyang cannot be served by a U.S. broker or bank, whatever identity papers they hold.

How strictly is it enforced? In July 2025, Interactive Brokers paid OFAC a ~$11.83M settlement for providing brokerage services during 2016–2024 to 200+ users located in Iran, Cuba, Syria and Crimea[18]. Those users’ KYC documents all showed non-sanctioned addresses — but the broker later identified their real locations through IP and other data. Even if you get past onboarding with third-country papers, discovery of your real residence means account closure — and the broker itself gets fined. This tier does not apply to China.

The SDN List ★★★★★ — the “financial death penalty”

The highest-intensity tool against specific persons / entities: the Specially Designated Nationals and Blocked Persons List. Note that “Nationals” does not mean U.S. nationals — it’s a Cold War-era term for “specially designated (foreign) nationals.” Today the list holds individuals, companies, ships, aircraft, even crypto wallet addresses[4].

What happens when you’re designated:

• All your U.S. assets are immediately blocked — they cannot be transferred or disposed of;
• No U.S. person and no USD clearing may transact with you — meaning no bank anywhere that wants to keep its dollar business dares touch you;
• The 50% rule sweeps in subsidiaries: a company owned ≥ 50% in aggregate by SDNs is treated as listed even if unnamed[3];
• Entries flagged with Secondary Sanctions Risk can pull in even third-country counterparties — the core mechanism by which the U.S. spills sanctions across the globe.

Representative cases: Carrie Lam, unable to use a bank account after designation, paid in cash (Part 3); COSCO Shipping Tanker (Dalian), shunned by charterers worldwide within days, with VLCC rates multiplying; Shanghai Heiying’s Zhou Shuai, whose WeChat Pay and domestic bank accounts were locked the day after designation. The biggest violation penalty in history also came from this line: BNP Paribas was fined nearly $9B in 2014 for clearing dollars for Sudan, Iran and Cuba[19].

Denial Order ★★★★☆ — all U.S.-technology transactions zeroed out

BIS’s heaviest weapon: the Denial Order / Denied Persons List. A denied party is barred from any transaction involving items subject to the Export Administration Regulations (EAR) — not just buying from the U.S., but even touching American components passed through third parties. Near-fatal for any tech company dependent on U.S. chips or operating systems.

Representative case: ZTE — when its suspended Denial Order was activated in 2018, core operations halted almost immediately and the stock was suspended; lifting it cost another $1.4B, a management purge, and ten years of compliance monitoring (Part 3).

Entity List + Enhanced FDPR ★★★★☆ — a global technology blockade

The standard Entity List (next section) covers only U.S.-origin items. Stacking the Foreign Direct Product Rule (FDPR) on top extends the ban to anything made anywhere using U.S. technology, software or equipment — TSMC’s fabs use American equipment, so TSMC-fabbed chips fall under the ban too.

Representative case: Huawei. The two 2020 FDPR tightenings cut off TSMC fabrication; Kirin chips were starved, phone revenue halved, Honor was sold. The first custom-built global technology blockade against a single company — later copied into Russia sanctions and China semiconductor controls (Part 3).

Entity List (standard) ★★★☆☆ — cut off from U.S. tech, money untouched

BIS’s workhorse: exporting or re-exporting U.S.-controlled items to a listed entity requires a license, mostly under a “presumption of denial.” Note that it freezes no assets and bans no dollars — which is why companies like Hikvision and DJI kept operating after listing, merely forced to de-Americanize their supply chains.

There are internal grades within the same list: Huawei’s review standard (essentially never approved) is far stricter than some universities’ (case-by-case). As of March 2025, 1,065 of the Entity List’s 3,351 entries — nearly a third — were headquartered in China[2].

Representative cases: SMIC (2020), Hikvision / Dahua / SenseTime / Megvii (from 2019), DJI, YMTC, SMEE, plus universities like NUDT and Harbin Institute of Technology; Fujian Jinhua is the archetypal “preemptive strike” — listed and cut off from equipment while still under construction (Part 3).

CAPTA / SSI ★★★☆☆ — USD clearing cut, assets not frozen

Financial tools one notch below SDN. CAPTA (Correspondent Account or Payable-Through Account Sanctions): U.S. banks may not open or maintain correspondent accounts for the target — severing the USD clearing channel without freezing assets or banning other dealings. SSI (Sectoral Sanctions Identifications): restricts the tenor of new debt / equity financing, used mainly against large Russian banks and energy companies.

Representative cases: Bank of Kunlun, cut off from correspondent accounts under CISADA in 2012 (often misreported as SDN — it’s this tier), thereafter the dedicated settlement channel for China-Iran trade (Part 3); Russia’s Sberbank and Gazprombank went onto SSI after Crimea in 2014, escalating to SDN only in 2022.

NS-CMIC Investment Ban ★★☆☆☆ — financing cut, business untouched

The Non-SDN Chinese Military-Industrial Complex Companies List, under E.O. 13959 / 14032. One effect only: U.S. persons may not buy or sell its publicly traded securities and derivatives. No asset freeze, no business restrictions — the target is valuation and access to international capital.

Representative cases: China Mobile, China Telecom and China Unicom, delisted by the NYSE in 2021; SenseTime, added on the eve of its Hong Kong IPO pricing and forced to postpone (Part 3); CNOOC, Hikvision and DJI are also on it.

UFLPA Import Ban ★★☆☆☆ — products barred from the U.S.

The Uyghur Forced Labor Prevention Act (UFLPA, 2021) Entity List, enforced by DHS / Customs. Goods from listed firms are “rebuttably presumed” products of forced labor — detained at the border and barred from entry. The direction is the reverse of every tool above: it governs “imports into the U.S.,” not “exports from the U.S.”

Representative cases: Xinjiang’s cotton, polysilicon and tomato supply chains. The solar industry was hit hardest — polysilicon is the core input for panels, and large volumes of goods were detained at U.S. ports.

Signal Lists ★☆☆☆☆ — no teeth, but predictive value

The lowest tier: the DoD’s 1260H “Chinese Military Companies” list (NDAA §1260H), BIS’s Unverified List (UVL), and State Department visa restrictions. Almost no direct transaction bans of their own, but the market prices them as “escalation warnings” — the typical path being: 1260H or UVL first → then the Entity List → and in serious cases, SDN.

Representative cases: Tencent and CATL, whose shares dropped sharply on their January 2025 addition to 1260H; WuXi Biologics was once on the UVL. Note that 1260H’s teeth are hardening: from June 30, 2026 the DoD is barred from contracting directly with listed firms (Part 3).

Bottom Line · Rankings depend on the scenario, and lists stack.

For a company doing foreign-trade settlement, SDN is most lethal; but for a firm like Huawei — not very dependent on USD financing, but heavily dependent on chips — “Entity List + FDPR” bites no less than SDN. Lists stack: Hikvision is on both the Entity List and the investment ban; Huawei got the Entity List plus criminal prosecution. To read the true severity of a company’s situation, ask which lists it is on and which link each one hits.

Archetypal Sanctioned Countries — ordinary people, officials, merchants

Many assume the lists are mostly senior officials. They’re the most visible, but in the SDN List’s actual makeup (17,000+ entries) individual officials are a small slice; the bulk is companies, banks, ships, crypto wallets — and the fastest-growing category, third-country middlemen who help sanctioned states evade[4]. What sanctions mean for an ordinary person depends on whether their country faces a comprehensive or a targeted program — the key to the three countries below.

Iran — four decades of comprehensive embargo

Iran is the archetype of a “comprehensively sanctioned jurisdiction,” under the Iranian Transactions and Sanctions Regulations (ITSR)[20].

• Ordinary people: no USD accounts, no U.S. brokerage accounts, no U.S. stocks — no list needed; “living in Iran” is the entire condition. Routing around onboarding with third-country papers doesn’t work either: in the Interactive Brokers case, the broker had to close accounts once IP and other data revealed users were actually in Iran — and was itself fined $11.83M[18]. The only way out is genuine emigration: an Iranian who has lawfully settled in Canada or the UAE and actually lives there can usually invest in U.S. stocks (the sanction targets “persons located in” the jurisdiction) — though in practice Iranian nationality alone often triggers extra bank scrutiny or outright refusals, because institutions fear stepping on a mine.
• Officials: IRGC leadership and senior officials get SDN designations stacked on top of the embargo — assets frozen, banks worldwide steering clear.
• Merchants: Iran’s oil-export network is one of the fastest-growing SDN segments — the national oil company selling, “shadow fleet” tankers shipping, third-country traders and refineries buying, named layer by layer. In 2025 sanctions even sank to the buyer level: Shandong “teapot” refineries purchasing Iranian oil were designated for the first time (Part 3)[15].

North Korea — the most complete financial isolation

North Korea shares the comprehensive-embargo tier with Iran, with a twist: its domestic financial system was already largely cut off from the world, so the main battlefield is not residents at home but the overseas revenue network[21].

• Ordinary people: as with Iranian residents, living in North Korea itself means no access to the U.S. financial system — but for most North Koreans that was already reality; what sanctions add is the blocking of overseas-worker remittance channels.
• Officials: Workers’ Party and military leadership listed wholesale on the SDN List; regime-serving financial institutions (like Korea Kwangson Banking Corp) doubly sanctioned by the U.S. and the UN.
• “Merchants”: the distinctive feature of the North Korea case — its “merchants” are mostly proxy networks abroad: Dandong traders settling payments for Pyongyang (the Dandong Hongxiang case, Part 3)[12], hacking groups accused of earning hard currency for the regime (Lazarus Group, designated by OFAC in 2019), and IT-worker networks posing as third-country freelancers. Sanctioning these middlemen does more real damage than sanctioning anything inside North Korea.

Russia — targeted sanctions, but the roads are mostly blocked

Russia differs fundamentally from the other two: the U.S. program is targeted plus sectoral, not a comprehensive embargo[22]. Legally, an ordinary Russian citizen not on the SDN List is not barred from holding USD assets or U.S. stocks. In practice:

• Ordinary people: the problem isn’t “I’m on the list” but “my bank is on the list.” Russia’s major banks are SDN-designated and expelled from SWIFT, so money can hardly move out or back compliantly; mainstream brokers have collectively offboarded residents of Russia for compliance risk (Interactive Brokers closed accounts of Russia-based clients; Coinbase and Kraken won’t take Russian residents), and after the October 2024 expansion IBKR even began giving deadline notices to some Russian clients holding EU residence permits. Existing positions can generally be sold but not added to, with funds required to move out — while compliant channels back to Russia are scarce. The way out is mostly a change of residence: establishing genuine residency in the UAE, Kazakhstan, Armenia, Georgia or Turkey makes re-entering U.S. markets far more feasible — the key being real residence, not a mailing address.
• Officials: Putin himself, Foreign Minister Lavrov, the Duma virtually wholesale — but this part is largely symbolic; freezing a minister’s assets matters far less than cutting a major bank’s dollar clearing.
• Oligarchs and merchants: designations sweep in spouses, children, asset-holding proxies and shell companies to block evasion-by-transfer; yachts and jets are named and seized one by one; “shadow fleet” tankers listed in batches. In late 2023 the U.S. also authorized secondary sanctions on foreign financial institutions facilitating transactions for sanctioned Russian parties — which is why banks in third countries now widely refuse Russia-related transfers. That is the deterrent spillover of secondary sanctions.

Bottom Line · The three-country contrast: your situation is set by the program type, not by who you are.

Iranian and North Korean residents: a legal bright line — living there means no access to the U.S. system, and workarounds get discovered and closed. Russian residents: no blanket legal ban, but with bank channels severed and brokers offboarding, living inside Russia means de facto no normal access to USD assets; only genuine relocation to a third country opens a compliant path. Comprehensive sanctions hit a place; targeted sanctions hit people and institutions — ordinary people are covered directly by the former, collaterally by the latter.

China-Related Cases — 11 representative samples

China is not under a comprehensive embargo; individual designations cluster among Hong Kong / Xinjiang officials and merchants in Iran / North Korea / Russia trade networks, and no prominent mainstream-business entrepreneur is currently on the SDN List. A rough pattern: big companies go on the Entity List, small companies go on the SDN List — giants like Huawei and SMIC were cut off from technology but not expelled from the dollar system; those “financially executed” are mostly small and mid-sized traders in three-country business. As of March 2025, about 890 of the SDN List’s 17,712 entries had Chinese addresses — overwhelmingly obscure trading / logistics / chemical firms[4].

ZTE — the shock of a Denial Order

A textbook case. The U.S. alleged ZTE sold equipment containing U.S. components to Iran and shipped equipment to North Korea while concealing it. In March 2017 ZTE settled with BIS, agreeing to a then-record civil penalty; together with the criminal portion, about $1.19B (including $300M suspended)[6]. In April 2018, BIS activated the previously suspended Denial Order — citing ZTE’s false statements about disciplining employees (the staff who should have been penalized got bonuses instead) — barring all U.S. companies from supplying it.

Because ZTE’s chips and operating systems depended heavily on U.S. suppliers, its core operations halted almost immediately and its stock was suspended. ZTE ultimately paid another $1.4B ($1B penalty + $400M escrow), replaced its board and management, and accepted a BIS-selected compliance team for ten years to get the order lifted — roughly $2.29B in total penalties across both rounds[6].

Why it matters: the first time Chinese firms saw, vividly, the bite of export controls — and a direct trigger for the later “de-Americanize the supply chain” debate.

Huawei and Meng Wanzhou — a combination punch of stacked tools

The highest-intensity, most-complete case. In late 2018, Meng Wanzhou was arrested in Canada (a criminal-justice tool, over bank fraud tied to Iran business; released after a deferred prosecution agreement in September 2021)[8]; in May 2019 Huawei was added to the Entity List[7]; and in May and August 2020 the U.S. twice tightened the FDPR, extending the ban from “U.S. products” to “anything made anywhere using U.S. technology and equipment”[7].

That step cut off TSMC fabrication, starved Huawei’s Kirin chips, halved its phone revenue, and forced the sale of Honor. It was the first time the U.S. custom-built a global technology blockade for a single company — and FDPR was later copied into Russia sanctions and China semiconductor controls.

Why it matters: the toolkit evolved from a single fine to a combination of “criminal prosecution + Entity List + global tech blockade,” proving BIS can bite as hard as OFAC.

Fujian Jinhua — the Entity List as a preemptive strike

Micron accused Jinhua of stealing its DRAM technology. Beyond civil and criminal litigation, in October 2018 the U.S. added the still-under-construction Jinhua to the Entity List and cut off semiconductor equipment, stalling its mass-production plans for years[9].

A key sequel worth adding: in February 2024, a federal court in San Francisco, after a bench trial, found the trade-secret theft charge not proven (Micron and Jinhua had earlier settled and dropped claims against each other)[9]. But the failure of the criminal case did not lift the Entity List designation — Jinhua remains listed to this day.

Why it matters: two things. First, sanctions can target not an accomplished act but “capacity about to form” — widely seen as export controls serving industrial competition. Second, export control is an administrative action that does not require a criminal conviction — the criminal track lost, the administrative track still stands.

COSCO Shipping Tanker (Dalian) — SDN’s instant shock to shipping

On September 25, 2019, OFAC designated two Dalian subsidiaries of COSCO as SDNs under E.O. 13846 for transporting Iranian crude[10]. Charterers worldwide instantly shunned its tankers (at least 26 directly linked vessels; ~60 across the implicated companies), and VLCC rates multiplied within days, roiling the global tanker market. On January 31, 2020, OFAC removed COSCO Shipping Tanker (Dalian) and others (around the U.S.-China Phase One trade deal), though another subsidiary stayed listed[10].

Why it matters: the market effect of an SDN is instant and global — and a listing can be withdrawn as a bargaining chip.

Bank of Kunlun — a Chinese bank as “firewall”

A common misconception to correct: Bank of Kunlun was not hit with an SDN asset freeze. On July 31, 2012, Treasury sanctioned the PetroChina-affiliated Bank of Kunlun under CISADA, for knowingly providing significant financial services to sanctioned Iranian banks; the effect was that U.S. financial institutions may not open or maintain correspondent / payable-through accounts for it, with existing accounts closed within 10 days — i.e. cutting USD clearing (the CAPTA tier from Part 1), but not freezing its assets within U.S. jurisdiction[11].

Precisely because of that, Kunlun went on to serve for years as the dedicated settlement channel for China-Iran trade — because it was already sanctioned, with no USD business left to lose.

Why it matters: it shows a coping pattern — use one “sacrificial” ring-fenced institution to absorb high-risk business and protect the USD-clearing access of other large banks. It’s also a reminder that the tools are finely layered: “cutting correspondent accounts” and “freezing assets” are two different things.

Dandong Hongxiang and Ma Xiaohong — individual risk in North Korea trade

In 2016, OFAC sanctioned Liaoning’s Dandong Hongxiang Industrial and four individuals including Ma Xiaohong under E.O. 13382 (WMD proliferation), for acting on behalf of North Korea’s already-sanctioned Korea Kwangson Banking Corp; the DOJ unsealed criminal charges the same day and brought civil forfeiture against funds in 25 bank accounts of Hongxiang and its shell companies[12].

Why it matters: the first clear demonstration of how “long-arm jurisdiction” reaches into a mainland Chinese private firm and individual — and the extreme risk of North Korea-related business, with OFAC asset blocking and DOJ civil forfeiture running in parallel.

Carrie Lam — what SDN does to a person’s daily life

In August 2020, over the Hong Kong national security law, the U.S. placed 11 mainland and Hong Kong officials on the SDN List, including then-Chief Executive Carrie Lam and Xia Baolong[13]. Lam later said in a TV interview that she could not use a bank account, that the government paid her salary in cash, and that she had “piles of cash” at home[13].

Why it matters: even an official holding no U.S. assets gets cut off, because any bank (Chinese ones included) that wants to keep its USD-clearing access dares not serve an SDN individual. It’s the clearest sample of sanctions self-enforced through commercial banks — with zero enforcement cost to the U.S. government.

The three telecoms delisting and SenseTime — capital-market sanctions

Trump’s November 2020 E.O. 13959 barred U.S. persons from investing in “Chinese military-linked” securities. The NYSE accordingly delisted China Mobile, China Telecom and China Unicom in January 2021; SenseTime was added to the same (NS-CMIC) list on the eve of its December 2021 Hong Kong IPO pricing, forcing it to postpone and re-launch, completing the listing only after excluding U.S. investors[14].

Why it matters: this kind of sanction touches not the business but the financing — its target is valuation and access to international capital. Operations continue; the funding tap is shut.

Shandong “teapot” refineries and Iranian oil — secondary sanctions reach the buyer

In 2025, U.S. sanctions on Iranian oil took an important turn: for the first time, the targets expanded to third-country refineries that buy Iranian oil. Many traders, terminal operators, ship managers and Shandong “teapot” independent refineries were added to the SDN List — 159 Chinese individuals and entities over the year (140 entities, 19 individuals)[15].

Why it matters: sanctions extended from the “seller and transporter” to the buyer — purely domestic actors like Shandong teapots and port terminals began getting named, riding precisely the “secondary sanctions” mechanism from Part 1.

Tencent and CATL on the 1260H list — a signal list’s market power, and hardening teeth

In January 2025, the Defense Department updated its 1260H “Chinese Military Companies” list to 134 firms, with Tencent and CATL on it. Both shares dropped sharply (Tencent’s H-shares fell over 7% at one point, CATL about 5%); both denied military ties and sought removal[16].

This list is often described as “almost no legal force,” but that needs updating: the teeth are hardening. From June 30, 2026, the DoD is barred from directly contracting or renewing with listed firms; from June 2027 a broader indirect ban (covering goods and services that contain their products) takes effect[16]. In October 2025, the Pentagon further determined Alibaba, Baidu and BYD should be added.

Why it matters: even the lowest-tier list gets priced by the market as an “escalation warning” — the deterrent of sanctions is largely self-enforced by financial institutions and investors.

Zhou Shuai and Shanghai Heiying — SDN’s reach into a domestic individual’s daily life

Back to the opening case. On March 5, 2025, OFAC sanctioned Shanghai’s Zhou Shuai and his company Shanghai Heiying Information Technology (under E.O. 13694 for malicious cyber activity; OFAC release sb0042), alleging that since 2018 he had acted as a “data broker” selling illegally exfiltrated data and access to compromised networks; the DOJ unsealed criminal charges the same day and the State Department announced a reward of up to $2M[17]. Zhou’s handle is “Coldface,” and the U.S. says he is linked to the APT27 hacking group — he and the company deny the allegations.

His September 2025 account of the sanctions experience went viral on Zhihu and WeChat: announced March 5 U.S. time, by 2:30 p.m. Beijing time on March 6 Tencent notified him of payment-service termination, QQ Pay followed, and Bank of China, ICBC, China Merchants Bank and others froze or closed his personal and corporate accounts; even paying parking by QR code or grabbing a WeChat red packet returned “service terminated”; his securities account was frozen, with bank loan-recall risk on top[17]. He cited China’s Anti-Foreign Sanctions Law in a letter demanding the institutions stop “assisting U.S. discriminatory restrictions” and apologize.

Why it matters: this is the most detailed first-person account so far of “life after an SDN designation for an ordinary individual inside China,” with three layers of significance —

1. It turns an abstract mechanism into daily detail. Carrie Lam’s “cash salary” was already vivid; Zhou’s case goes further: even the most mundane scenes — WeChat red packets, parking fees — were cut off, showing SDN’s bite requires no overseas assets at all.
2. It empirically confirms “self-enforcement.” The U.S. government did nothing on Chinese soil; Chinese banks and Tencent did all the “enforcing” within 24 hours under compliance pressure. As a top Zhihu answer put it: “Blaming ICBC and Tencent is blaming the wrong target” — what locks the account is the mechanics of the USD-clearing system.
3. It exposes the practical bind of the Anti-Foreign Sanctions Law. Banks are caught between China’s counter-sanctions law and survival in the dollar system — exactly why the case sparked so much debate.

A caveat: the account-freeze details are the individual’s own account, without official confirmation from any bank or regulator, and should be cited as such; but the fact and grounds of his designation are documented by Treasury, State and DOJ. Note too that Zhou’s case is the combination “SDN + criminal prosecution + reward,” the highest intensity tier for an individual.

All “grounds for sanction” in this article are unilateral U.S. assertions; China has consistently objected and some named firms and individuals publicly deny the allegations. Sanctions lists change frequently (additions and removals alike); for the current status of any specific company or person, rely on the live records on the OFAC and BIS websites.

References — official documents and authoritative reporting

Agencies and legal framework

• [1] U.S. Department of the Treasury — Office of Foreign Assets Control (OFAC). The U.S. financial-sanctions authority; maker and enforcer of the SDN / NS-CMIC / CAPTA lists. ofac.treasury.gov
• [2] U.S. Department of Commerce — Bureau of Industry and Security (BIS). The export-control authority; maker of the Entity List / Denial Orders / UVL. bis.gov
• [3] OFAC. The “50 Percent Rule” guidance: entities owned ≥ 50% in aggregate by SDNs are treated as sanctioned. ofac.treasury.gov/faqs
• [4] OFAC Specially Designated Nationals and Blocked Persons List (SDN List). Searchable sanctions list and historical records. sanctionssearch.ofac.treas.gov
• [5] International Emergency Economic Powers Act (IEEPA) and the executive-order system (E.O. 14024 Russia, 13382 proliferation, 13694 cyber, 13959 / 14032 investment, etc.). The Congressional authorization and executive-order chain. federalregister.gov

Country programs

• [20] OFAC — Iran Sanctions. The Iranian Transactions and Sanctions Regulations (ITSR) and the comprehensive embargo — official program page. ofac.treasury.gov · Iran Sanctions
• [21] OFAC — North Korea Sanctions. The comprehensive North Korea program; Lazarus Group and other hacking groups designated in 2019. ofac.treasury.gov · North Korea Sanctions
• [22] OFAC — Russia-related Sanctions. The targeted / sectoral Russia program (E.O. 14024 etc.), including the Dec-2023 secondary-sanctions authority over foreign financial institutions. ofac.treasury.gov · Russia Sanctions

Case sources

• [6] ZTE. 2017 record BIS civil-penalty settlement; 2018 activation of the Denial Order and a further $1.4B settlement. U.S. Commerce Department press releases and the Federal Register. commerce.gov
• [7] Huawei. 2019 Entity List addition; two 2020 tightenings of the Foreign Direct Product Rule (FDPR). BIS press releases; FDPR rule text in the Federal Register. federalregister.gov
• [8] Meng Wanzhou. 2018 arrest in Canada; 2021 deferred prosecution agreement (DPA) with the DOJ. U.S. Department of Justice press releases. justice.gov
• [9] Fujian Jinhua. 2018 Entity List addition; February 2024 San Francisco federal court finds the trade-secret theft charge not proven, but the Entity List designation remains. Bloomberg / WSJ / SCMP (Feb 2024) reporting. bloomberg.com
• [10] COSCO Shipping Tanker (Dalian). 2019-09-25 SDN designation under E.O. 13846; partial removal 2020-01-31. OFAC notices, Reuters, law-firm briefings (Steptoe / Holland & Knight). ofac.treasury.gov/recent-actions
• [11] Bank of Kunlun. 2012-07-31 correspondent-account sanction under CISADA (cuts USD clearing, not an SDN asset freeze); Treasury press release tg1661. U.S. Treasury; GAO report. home.treasury.gov/news/press-releases
• [12] Dandong Hongxiang / Ma Xiaohong. 2016 SDN designation under E.O. 13382; same-day DOJ criminal charges and civil forfeiture of 25 accounts; Treasury press release jl5059. U.S. Treasury, DOJ, BBC. home.treasury.gov/news/press-releases
• [13] Carrie Lam and other Hong Kong / mainland officials. 2020-08 SDN designation of 11 officials under the Hong Kong executive order; Lam’s interview describing her cash salary. OFAC notices, BBC / CNN / Washington Post. ofac.treasury.gov/recent-actions
• [14] China Mobile / Telecom / Unicom delisting and SenseTime. E.O. 13959 (NS-CMIC); 2021-01 NYSE delisting of the three telecoms; 2021-12 SenseTime listing and delayed IPO. Reuters / FT / Bloomberg, HKEX disclosures. reuters.com
• [15] Shandong “teapot” refineries and Iranian oil (2025). First U.S. sanctions on third-country refineries buying Iranian oil; 159 Chinese individuals / entities added to the SDN List over the year (140 entities, 19 individuals). King & Wood Mallesons year-end review; OFAC Recent Actions. ofac.treasury.gov/recent-actions
• [16] Tencent, CATL and the 1260H list. 2025-01 DoD “Chinese Military Companies” list updated to 134 firms; direct-contracting ban from 2026-06-30, indirect ban from 2027-06; Alibaba / Baidu / BYD proposed for addition in 2025-10. U.S. Department of Defense, NDAA §1260H, Reuters. defense.gov
• [17] Zhou Shuai / Shanghai Heiying Information Technology. 2025-03-05 OFAC designation under E.O. 13694 (release sb0042), same-day DOJ charges and $2M State Department reward; individual’s 2025-09 account of frozen domestic accounts (his own statement, unconfirmed by regulators). U.S. Treasury / DOJ / State; the individual’s WeChat account “coldface”; Zhihu discussion. ofac.treasury.gov/recent-actions

Enforcement and penalties (evidence for “self-enforcement”)

• [18] Interactive Brokers. 2025-07 ~$11.83M settlement with OFAC for serving 200+ users located in Iran / Cuba / Syria / Crimea during 2016–2024. OFAC Enforcement. ofac.treasury.gov/recent-actions
• [19] BNP Paribas. 2014 ~$9B penalty for USD clearing on behalf of Sudan / Iran / Cuba — the largest sanctions penalty in history. U.S. Department of Justice. justice.gov