Summary
U.S. sanctions regulations can prohibit lawyers, accountants, and business advisors from providing professional services to restricted recipients, even through virtual meetings. A September 2026 OFAC settlement exceeding $1.4 million highlights the financial consequences of unauthorized cross-border advisory activities. Legal-services exemptions and authorizations are limited, while informal or unpaid consultations may still create sanctions exposure. Professional firms should implement risk-based screening, employee training, meeting controls, and clear compliance procedures to reduce regulatory liability.
Key Takeaways
- Virtual Meetings Can Trigger Sanctions Violations: Providing legal, accounting, financial, or business advice remotely to prohibited recipients can violate U.S. sanctions laws. A September 2026 OFAC enforcement action resulted in a $1.4 million settlement involving, among other activities, advisory services delivered through virtual meetings.
- Legal and Accounting Professionals Face Significant Compliance Risks: Lawyers, accountants, auditors, and consultants cannot assume that remote consultations, informal advice, or unpaid services are exempt from sanctions restrictions. The legality of an engagement depends on the recipient, the nature of the services, the applicable sanctions program, and any available authorization.
- Proactive Compliance Measures Are Essential: Professional firms should strengthen client screening, verify relevant participants and jurisdictions, review meeting agendas, and establish procedures for suspending potentially prohibited discussions. Sanctions compliance must cover both formal engagements and informal professional interactions.
For decades, sanctions compliance has been associated primarily with traditional financial institutions. Banks, clearinghouses, and payment processors have served as heavily regulated gatekeepers of the global financial system and major targets of enforcement by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC).
However, the growing reliance on remote work and digital communication has exposed another group of professionals to significant regulatory risks: lawyers, accountants, auditors, and corporate advisors.
Historically, legal and financial professionals may have regarded their advisory services as less vulnerable to sanctions enforcement than activities involving physical goods or cross-border financial transactions. Yet recent OFAC enforcement actions demonstrate that providing professional advice through a virtual meeting can constitute a prohibited export of services when the recipient is subject to applicable U.S. sanctions.
The implications are substantial. Professionals who fail to incorporate virtual engagements into their sanctions compliance procedures risk significant financial penalties, reputational damage, and potentially serious consequences for their careers.
A $1.4 Million Settlement Highlights the Risks
The dangers associated with virtual advisory services are not merely theoretical. They are illustrated by a September 2026 OFAC enforcement action involving a U.S. individual identified as “U.S. Person-1.”
OFAC announced a $1,427,230 settlement resolving 39 apparent violations of the Iranian Transactions and Sanctions Regulations (ITSR). Although the case also involved the receipt of Iranian-origin dividends, a particularly significant element concerned the provision of management consulting and advisory services through remote communications.
Between 2019 and 2020, the individual participated in 19 virtual meetings with senior personnel of an Iranian software solutions company. The discussions covered subjects commonly addressed by corporate lawyers, accountants, and business consultants, including corporate transactions, asset management, accounting, human resources, corporate governance, and overall business strategy.
During these meetings, the individual provided substantive advice, analysis, and information to the Iranian company.
OFAC treated this conduct as an apparent prohibited export of services to Iran. The fact that the individual participated remotely, rather than traveling to Iran, did not eliminate the sanctions implications.
The central issue was not the physical location of the advisor but the provision of services to a recipient covered by the applicable sanctions restrictions.
The settlement offers an important warning to the professional services industry: digital advisory sessions can create sanctions exposure even when no physical goods are transferred and no traditional cross-border business transaction takes place.
Why Accountants and Financial Advisors Are Particularly Exposed
For accountants, auditors, and financial strategists, the implications are far-reaching.
Accounting professionals routinely examine corporate structures, assess financial performance, advise on asset management, and recommend financial strategies. In an increasingly interconnected economy, these services often involve multinational companies with subsidiaries, affiliates, and stakeholders operating across multiple jurisdictions.
Consider a U.S.-based accountant participating in a Zoom, Microsoft Teams, or Webex meeting involving representatives of an international corporate group. If the discussion includes an entity subject to comprehensive U.S. sanctions, the accountant must determine whether providing substantive financial advice would constitute a prohibited export of services.
The presence of an individual from a sanctioned jurisdiction does not automatically make every discussion unlawful. The relevant considerations include the identity of the service recipient, the nature of the advice, the applicable sanctions program, and whether an exemption or authorization permits the activity.
Nevertheless, an accountant who provides tax structuring, auditing, corporate governance, or asset management advice for the benefit of a prohibited recipient may expose themselves and their firm to enforcement action.
The risks also extend to prohibited facilitation.
Under applicable sanctions regulations, U.S. persons may be prohibited from approving, financing, facilitating, or guaranteeing certain transactions undertaken by foreign persons when those transactions would be prohibited if performed directly by a U.S. person.
For example, an accountant who knowingly assists a foreign subsidiary in structuring a transaction designed to circumvent U.S. sanctions could face serious regulatory consequences.
The September 2026 enforcement action is particularly relevant because the virtual meetings reportedly involved accounting and asset management advice. These are routine professional services, yet their provision to a prohibited recipient can trigger substantial liability.
The lesson for the accounting profession is clear: sanctions compliance must extend beyond payment processing and financial transactions to encompass the advice and expertise delivered to clients.
Lawyers Cannot Assume Legal Representation Is Exempt
Lawyers face similar risks, although the applicable regulatory framework includes important distinctions.
Attorney-client privilege and the professional obligations associated with legal representation do not, by themselves, exempt lawyers from U.S. sanctions requirements.
OFAC regulations provide exemptions and general licenses for certain legal services, including specified forms of legal representation and advice concerning compliance with U.S. sanctions laws. However, the scope of these authorizations varies by sanctions program, and they do not automatically extend to every service performed by an attorney.
General corporate counseling, commercial contract negotiation, mergers and acquisitions advice, and corporate governance consulting may fall outside the scope of an applicable legal-services authorization.
Consequently, a lawyer who participates in a virtual meeting to structure a joint venture, negotiate a commercial transaction, or advise a sanctioned company on its business operations may be providing services prohibited under U.S. law.
The virtual environment can create a misleading sense of distance from the underlying transaction.
An attorney who would hesitate to travel to Tehran to advise an Iranian company might regard an online meeting as a routine professional interaction. Yet the method of communication does not necessarily change the legal character of the service being provided.
A video conference, telephone conversation, or email exchange can constitute the delivery of professional services across a jurisdictional boundary.
Law firms must therefore distinguish between legal activities that are authorized under applicable sanctions regulations and commercial advisory services that may remain prohibited.
The Virtual Meeting as a Regulatory Border
The broader lesson extends beyond the legal and accounting professions.
Professional expertise has economic value. Strategic advice, financial analysis, corporate governance recommendations, and business consulting can provide tangible benefits to their recipients, regardless of how that expertise is delivered.
In the digital economy, those services can cross international borders almost instantaneously.
A professional working from an office in New York, London, or another financial center can provide substantial commercial assistance to an overseas entity without leaving their desk.
For U.S. persons, including U.S. citizens and lawful permanent residents, certain sanctions obligations can apply regardless of where they are physically located. U.S.-organized entities and persons operating within U.S. jurisdiction may also be subject to applicable restrictions.
At the same time, sanctions regimes differ significantly. Iran, Cuba, North Korea, Syria, and Russia are not governed by identical restrictions, and professionals must assess the specific rules applicable to each jurisdiction, entity, and transaction.
OFAC’s civil enforcement framework generally permits liability without proof that a person knew or had reason to know that their conduct violated sanctions. However, knowledge, intent, due diligence, and other circumstances can influence enforcement decisions and the assessment of penalties.
This makes preventive compliance especially important.
The central principle is straightforward: the absence of physical travel does not eliminate the possibility of a prohibited cross-border service.
Four Essential Compliance Measures for Professional Firms
Law firms, accounting practices, and corporate advisory businesses should no longer regard sanctions compliance as a responsibility reserved primarily for banks.
Instead, they should establish procedures that address the risks associated with remote professional services.
1. Strengthen Due Diligence for Virtual Meetings
Traditional Know Your Customer (KYC) procedures should be supplemented by appropriate screening of the parties involved in cross-border advisory engagements.
Before providing substantive advice, firms should identify their clients, relevant counterparties, and the entities that will ultimately benefit from the services.
Where risk indicators warrant additional scrutiny, participants and associated entities should be screened against applicable sanctions lists, including OFAC’s Specially Designated Nationals and Blocked Persons (SDN) List.
Unfamiliar email domains, undisclosed third parties, and unexpected international participants should prompt further verification when they raise legitimate sanctions concerns.
2. Establish Geographic and Jurisdictional Awareness
Professionals should understand where their clients and relevant service recipients are located and whether those locations create sanctions restrictions.
Firms should train employees to recognize geographic warning signs during virtual engagements.
If a participant reveals that they are acting on behalf of an entity in a comprehensively sanctioned jurisdiction, the professional should suspend potentially restricted substantive advice until the relevant legal requirements have been assessed.
Geographic screening should form part of a broader risk-based compliance program rather than serve as the sole basis for determining whether an interaction is prohibited.
3. Introduce Strict Agenda and Discussion Controls
Meeting agendas can play an important role in identifying and preventing sanctions risks.
In the September 2026 enforcement case, the individual’s reported involvement in preparing agendas for the virtual meetings underscored the substantive and organized nature of the advisory relationship.
Lawyers and accountants should establish procedures for reviewing sensitive meeting topics, particularly when discussions concern corporate restructuring, financial management, commercial transactions, or business operations involving sanctioned jurisdictions.
If a discussion moves into potentially prohibited territory, the professional should suspend the relevant advice, seek compliance guidance, and document the steps taken.
Clear internal escalation procedures can help prevent routine business conversations from developing into unauthorized advisory engagements.
4. Eliminate the Myth of the Informal Consultation
A professional service does not necessarily become permissible simply because it is informal, brief, or provided without compensation.
An unbilled consultation, informal conversation, or casual business discussion may still constitute a prohibited service if it delivers substantive assistance to a restricted recipient.
Firms should therefore ensure that sanctions compliance policies cover both formal client engagements and informal professional interactions.
The absence of an invoice does not automatically eliminate sanctions exposure.
Sanctions Compliance Must Adapt to the Digital Economy
The era in which sanctions compliance was regarded primarily as the responsibility of multinational banks and financial institutions is over.
Digital communication has transformed the delivery of professional services, allowing lawyers, accountants, and consultants to provide expertise across borders with unprecedented ease.
That convenience also creates regulatory exposure.
The September 2026 OFAC settlement demonstrates that remote advisory activities can attract substantial enforcement consequences when they involve prohibited recipients or services.
Professional firms must respond by updating their compliance frameworks, strengthening client and counterparty screening, training employees to recognize jurisdictional risks, and establishing clear procedures for virtual engagements.
The critical distinction is not whether advice is delivered in person or through a computer screen. It is whether the service is permitted under the sanctions rules governing the transaction.
For lawyers, accountants, and corporate advisors, a virtual meeting can carry the same regulatory consequences as an in-person consultation.
In the digital economy, professional expertise crosses borders even when the professional does not. Sanctions compliance must recognize that reality.
