Sanctions Compliance: OFAC's $9.4 Million Penalty Against a Pump Exporter Shows How Third-Country Distributors Become Russia Violations

WASHINGTON — The Treasury Department's sanctions office announced a $9.4 million settlement on Thursday with a Houston manufacturer of industrial pumps whose products, sold to a distributor in Turkey, were resold to a Russian shipbuilder controlled by a company on the sanctions list. The Commerce Department's export control bureau added a $2.1 million penalty for the same shipments. The case against Halcyon Industrial Pumps is the largest sanctions penalty against a non-financial exporter this year and the clearest statement yet of the principle that has driven enforcement since 2022: screening the name on the invoice is not compliance if the goods are going somewhere else.

"The company checked a list. It did not check the facts in front of it," the director of OFAC said in the enforcement release.

What happened

According to the release, Halcyon had sold pumps to a Turkish industrial distributor since 2019. After Russia's full-scale invasion of Ukraine in February 2022, and the expansion of US sanctions and export controls that followed, the distributor's orders doubled within a year, and its specifications changed: the pumps it ordered conformed to a Russian maritime standard, were ordered in configurations suited to naval vessels, and were shipped with documentation in Russian at the distributor's request. Internal emails showed a Halcyon sales manager referring to "the end customer in St. Petersburg" and a logistics clerk asking whether the shipments needed "the Russia paperwork." No one escalated. The Russian end user, a shipbuilder, was not on any sanctions list; it was 70 percent owned by a state-controlled conglomerate that was, which made it a blocked person under OFAC's 50 percent rule. The pumps also required a license for export to Russia under the Export Administration Regulations.

How OFAC calculated the penalty

Factor	Finding	Effect
Voluntary self-disclosure	None; the case began with an OFAC administrative subpoena after a tip from a freight forwarder	Base penalty at the full statutory amount per violation rather than half
Egregiousness	Not egregious: no senior management knowledge, but reckless disregard of red flags by employees with compliance responsibilities	Base penalty set at the non-egregious tier
Reason to know	The specification changes, Russian documentation and emails put the company on notice	Aggravating
Compliance program	List screening only; no risk assessment, no end-use inquiry for distributors, no training for sales staff	Aggravating
Remediation	Terminated the distributor, hired a trade compliance officer, adopted ownership screening and end-use certification, retrained staff	Mitigating
Cooperation	Substantial; produced records and employee interviews promptly	Mitigating

The pattern in recent cases

The Halcyon settlement follows a line of 2025 cases built on the same facts. A machine-tool maker, Haas Automation, settled with both OFAC and BIS over sales through a Chinese distributor that reached Russian end users; a chemical catalyst company settled over sales to Iran and other sanctioned destinations routed through intermediaries; and OFAC's largest penalty of 2025, against an investment firm, concerned the management of a blocked oligarch's assets through nominees. Across them, the agencies have made four points: the 50 percent rule means list screening is insufficient; distributors in transshipment hubs — Turkey, the UAE, China, Kazakhstan, Armenia, Kyrgyzstan — are a known diversion channel for which the agencies have published red-flag guidance; employees' emails are the evidence; and self-disclosure is the single largest lever on the penalty.

The company checked a list. It did not check the facts in front of it.

Director of OFAC, in the enforcement release

The compliance program OFAC expects

OFAC's 2019 Framework for Compliance Commitments sets out five elements, and its enforcement releases now read against them:

1. Management commitment. A named officer with authority and budget; Halcyon had none until after the subpoena.
2. Risk assessment. An analysis of products, customers, geographies and channels. An exporter of dual-use industrial goods selling through distributors in transshipment hubs is high-risk by definition.
3. Internal controls. Screening of names and ownership; end-use and end-user certification for distributors; escalation of red flags; contractual rights to audit distributors and to terminate on diversion.
4. Testing and auditing. Periodic review of whether the controls operate — Halcyon's screening tool was never updated with the 2022 designations.
5. Training. For sales and logistics staff, who see the red flags first.

A screening checklist for exporters

• Screen counterparties, their owners and their beneficial owners against OFAC, BIS and State Department lists, and rescreen on every list update.
• For distributors, obtain and verify ownership; apply the 50 percent rule; require end-use statements identifying downstream customers.
• Watch for the published red flags: order volumes or specifications inconsistent with the distributor's business; requests for Russian or Iranian documentation; shipping routes through hubs; newly formed intermediaries; payment from third parties.
• Classify products under the EAR and check license requirements for the destination and end user, not only the buyer.
• Escalate anything a salesperson cannot explain; the Halcyon emails are the template for what not to do.
• If a violation is found, consider voluntary self-disclosure to OFAC and BIS before anyone else reports it; the penalty halves.

What happens next

Halcyon's settlement includes a three-year compliance commitment with annual certifications to OFAC. The Turkish distributor was designated on the sanctions list the same day. The Justice Department has not announced charges; the enforcement release notes that the investigation into individuals is ongoing.

The Counsel will report any individual charges. Exporters selling through distributors in the hubs named in the agencies' guidance should review ownership and end-use documentation now; the Halcyon release makes clear that the next subpoena will ask for both.

This report is for general information only and is not legal advice. Readers should consult a licensed attorney about their own circumstances. Penalty amounts are inflation-adjusted annually.