SecurePoint USA
SecurePoint USAEnterprise Compliance
Request Demo
February 27, 2026
3 min read
Sanctions Compliance

February 2026 · 6-minute read

OFAC Licensing for Schools:
What To Do When a Student Gets Flagged

OFAC licensing for schools

A practical guide for CFOs and compliance officers navigating sanctions screening flags, OFAC licenses, and keeping students enrolled while staying compliant.

Disclaimer: This content is provided for educational and informational purposes only and does not constitute legal advice. Sanctions regulations are complex. Schools facing a flag should consult with qualified legal counsel.

Your Screening Flagged a Student's Family. Now What?

Your business office runs a sanctions screening on a tuition payment, and a name comes back flagged. Before you panic, remember this: A screening flag is not an automatic bar to enrollment.

It is the starting point of a process with well-established pathways. OFAC (the Office of Foreign Assets Control) maintains a licensing framework specifically designed to authorize otherwise prohibited transactions—including education.

What a Flag Actually Means

A potential match usually means one of three things. As schools screen more candidates following the IMG Academy settlement, these flags are increasingly common.

False Positive

The most common outcome. A shared name or partial match with someone on a sanctions list. Add dates of birth or nationality to quickly clear these.

Inconclusive Match

Enough overlapping data points to warrant an investigation, requiring more information gathering before confirmation.

Confirmed Match

The individual or entity is definitely on a sanctions list. Even so, licensing pathways may still be available.

The Two Types of OFAC Licenses

If the match is confirmed, can the tuition transaction still proceed? It depends on which licensing framework applies.

General License

Automatic Authorization

A broad authorization published by OFAC that allows certain transactions to proceed without requiring an individual application.

  • No application required. It applies automatically if conditions are met.
  • Example: 31 CFR § 515.565 authorizes certain educational activities involving Cuba.
  • Requirement: Maintain records demonstrating compliance for at least 5 years.

Specific License

Formal Application

An individual authorization granted directly by OFAC for a particular transaction when a general license does not cover it.

  • Completely Free. OFAC charges no fees for licensing applications.
  • Timeline: Generally processed within 90-120 days via an online portal.
  • High Success Rate: Applications with documented educational purposes are heavily favored for approval.
Case Studies

Real-World Scenarios

What does this look like in practice? Here are four hypothetical situations heavily mirrored from real-world school interactions.

Iranian Student Family Paying Tuition

Scenario: A student's family resides in Iran. The parent is flagged under the Iranian Transactions and Sanctions Regulations (ITSR).

Path Forward: Specific License Application. OFAC has historically shown willingness to authorize education-related transactions with Iran via counsel documentation.

Grandparent in Crimea Sending Payment

Scenario: A tuition payment originates from a grandparent located in the sanctioned region of Crimea (Ukraine).

Path Forward: Specific License Application. Because the transaction originates from a comprehensively sanctioned territory, a formal request isolating the educational funds is required.

International Donor on the SDN List

Scenario: A major development donation triggers a high-confidence match on the Specially Designated Nationals (SDN) List.

Path Forward: Consult Counsel Immediately. You cannot accept these funds without specific authorization. The transaction must likely be paused or rejected.

Cuban Family Paying Through 3rd Country

Scenario: A Cuban-origin family residing abroad routes a tuition payment through a third-country banking system.

Path Forward: General License Likely. OFAC's 31 CFR § 515.565 authorizes many Cuban educational activities automatically, requiring internal recordkeeping only.

What Schools Must NOT Do

Ignore the Flag

Failing to act on a result is an aggravating factor for OFAC enforcement.

Override Silently

Overriding results without documented rationale breaks the audit trail.

Rely on Banks

Banks do not absorb your liability. Educational institutions own their OFAC risk.

Panic-Disenroll

Adverse enrollment decisions based purely on a flag expose schools to heavy reputational risk.

Action Checklist: What To Do Right Now

1
Preserve the Record

Document the list version, match confidence, and date.

2
Pause the Transaction

Do not process the funds. Place them into a temporary hold state.

3
Initial Assessment

Filter out obvious false positives via Date of Birth or Address.

4
Engage Counsel

Pass the confirmed flag to an attorney experienced in U.S. sanctions law.

5
Evaluate Licensing

Determine if a General License applies or start the Specific License application.

6
Communicate Thoughtfully

Explain diplomatically to the family that a routine compliance review is occurring without causing alarm.

Adjudicate with Confidence

SecurePoint USA gives your business office and legal team a shared, auditable workspace to manage flags, capture decisions, and prove compliance.

Visitor Compliance Checklist

  • ITAR/EAR and CMMC L2 requirements
  • Audit-ready evidence collection
  • AI assists, humans approve
Download PDF

Stay ahead of compliance changes

Get weekly insights on sanctions, export controls, and visitor compliance delivered to your inbox.

No spam. Unsubscribe anytime.