Cost of Non-Compliance
The price of getting export controls wrong, in public dollars.
A live dataset of public enforcement actions across BIS, DDTC, OFAC and DOJ — drawn from official agency releases. Filter by agency, year, or conduct; click any row for the underlying source. This page rebuilds whenever the dataset moves.
Assessed in agency settlements
…
Mean penalty
…
per agency settlement
Largest action on record
…
Voluntary disclosure savings
~50%
OFAC base-penalty reduction (typical, public guidance)
Trend
Penalties by year, stacked by agency.
Bars show the sum of agency-specific settlements per calendar year. Multi-agency consolidations (e.g. the Binance $4.3B settlement) are annotated separately to avoid double-counting the BIS / OFAC / DOJ rows that already feed those totals.
Loading enforcement data…
Settlements
Every action, on the record.
Use the toggle in each row to expand the conduct summary and the source document. Filters update the URL — share a view by copying the address bar.
0 actions matching
Loading…
It isn't just the fine
The bill the headline number doesn't show.
Every settlement above is the visible part of the cost. The obligations that ride with it usually outlive the cash payment and shape how a company sells, hires, and reports for years.
3–5 years
Mandatory external audits
Most consent agreements require an Internal Special Compliance Officer or third-party Special Compliance Official to sit on the program for three to five years. Their reports go directly to the agency. Their fees — typically seven figures annually — sit on the company's balance sheet whether the program improves or not. Self-disclosure can shorten this term, but it almost never disappears.
Statutory debarment
Loss of export privileges
A criminal AECA conviction triggers automatic statutory debarment under the ITAR — three years minimum, no defense exports of any kind. BIS denial orders revoke EAR privileges with similar effect. For prime contractors, the downstream cost is the loss of TAA agreements, foreign sales authorizations, and the customers that depend on them. Reinstatement is discretionary, slow, and conditional.
Public record
The reputational tail
Every consent agreement is published in full on the agency's website, naming officers and conduct. Procurement teams at primes search those agreements before awarding. Underwriters factor them into D&O premiums. Banks reprice credit. Five years on, the action is still the first result for a company name on Google — long after the audit period closes.
Now do the math
A — median fine. Or a HEXDI seat.
The cheapest hour you'll spend this quarter is the one that tells you which of the rows above describes your program. Run the free scorecard or open a trial to map your exposure against the same standards the agencies above enforce.