A company can screen its counterparties, review shipping documents, check vessels, and still face a major sanctions enforcement action. That is the lesson from a recent Office of Foreign Assets Control (OFAC) case against a diversified multinational company that allegedly violated U.S. Iran sanctions through liquefied petroleum gas (LPG) transactions. 

Between November 2023 and June 2025, the company purchased LPG presented as Omani or Iraqi in origin that was actually Iranian. A Dubai-based intermediary helped conceal the true source of the cargo, while third-party wire transfers blurred the link to sanctioned parties. Because nothing in the company’s existing compliance processes forced further investigation or a hold on transactions, the prohibited activity continued across 32 shipments, leading to U.S. dollar payments of approximately $192 million. 

The resulting $275 million settlement, which is 43% more than the transaction value, reflects OFAC’s view that numerous risk signals should have alerted the company of a possible Iranian connection and prompted early action. A Salesforce-integrated screening solution could have connected those signals across counterparties, transactions, and approvals, ensuring that unresolved sanctions risks were cleared before deals moved forward. 

Regulators increasingly expect companies to prove that screening controls are operationalized inside business systems, making Salesforce an easy option because customer onboarding, trading activity, and supplier relationships are often managed there. 

Key Takeaways 

  • The $275 million settlement shows that OFAC enforcement risk is high for sophisticated global companies, and they cannot rely on basic checks or informal review. 
  • OFAC compliance isn’t just about matching names to government watchlists, denied party screening needs to catch broader sanctions exposure like ownership and affiliate risks. 
  • A trade compliance program fails when warning signs are apparent, but the program cannot stop risky transactions. Compliance needs to be embedded in systems like Salesforce where commercial activity happens. 
  • Integrated Salesforce screening creates a unified control environment that enables teams to see sanctions risk across the pipeline, consolidate warning signals from multiple sources, and force consistent, timely responses. 
  • Salesforce screening is critical for organizations operating across multiple jurisdictions, managing complex ownership structures, or processing large volumes of transactions subject to sanctions and export control regulations 

The Real Failure: A Disconnected View of Trade Compliance Risk  

Treating trade compliance as only a screening event is a narrow approach that leads to costly sanctions violations. In this case, the apparent failure was a static and disconnected compliance system that looked for explicit references to sanctioned parties or Iranian origin. However, the broader facts looked suspicious and should have warranted more scrutiny. Supplier documentation and assurances were accepted without strong evidence, while different parts of the organization saw different pieces of the story: 

  • Trading teams saw pricing and supplier terms but dismissed warning signs related to third-party apprehensions. Assessing the economic and operational reality of trade deals can surface sanctions risk especially for regulated hydrocarbon products. 
  • Logistics tracked vessel movements but did not act on suspicious routing behavior, implausible cargo origin claims, or Automatic Identification System (AIS) spoofing. These classic sanctions evasion tactics were accepted when explained away by the supplier. 
  • Finance managed payments and banking issues but did not question unusually low pricing or payment disruptions that raised sanctions-related concerns. Opaque commercial structures and pricing that is ‘too good to be true’ is usually a compliance trigger. 
  • Compliance reviewed documentation and screening results but only looked for exact matches to sanctioned parties without checking for hidden ownership risks. The compliance program lacked the rigor needed to address sector-specific compliance requirements. 

Each function operated within its own process, completing tasks without centralized control connecting their concerns into a single, risk-driven decision. Additionally, there was no meaningful escalation process or control forced action when irregularities arose, so business kept moving with repeat exposure accumulating in 32 apparent violations of U.S. sanctions. 

Where Salesforce Sits in the Compliance Risk Landscape 

When screening runs separately from business data, it weakens compliance management in three key ways: 

  • Sanctions exposure grows before compliance sees the full picture 
  • Alerts live outside the systems where work happens 
  • Action depends on someone manually connecting the warning signs to the business process  

Salesforce, meanwhile, sits at the center of revenue processes and controls activities that are exposed to sanctions risk: prospects, customers, vendors, partners, addresses, and transactions. This makes Salesforce one of the earliest points where potential violations can be detected and controlled.  

Integrated Salesforce Screening Model that Turns Signals into Action 

Salesforce-integrated screening solutions fundamentally change trade compliance management. It creates a unified control environment where risk cannot be ignored. When Salesforce is embedded with comprehensive trade compliance software, the CRM helps govern whether revenue activities are safe, thereby lowering the chances of preventable compliance failures. 

Here are the key features in Salesforce-integrated screening that may have prevented or significantly reduced this failure: 

Real-Time Screening and Continuous Monitoring  

Modern compliance programs ensure screening happens in real time, as soon as a lead is created, a contact is added, or a vendor is onboarded. Also, because sanctions risk evolves rapidly, especially for maritime hydrocarbon goods, automated rescreening is initiated once government lists are updated or data changes in Salesforce. 

Automated Red Flag Escalation  

Advanced Salesforce screening solutions provide a structured way to act on warning signs. They provide flexible controls for compliance to set up mandatory due diligence triggers when any red flag appears. This includes formal requirements to: 

  • Pause transactions until sanctions risk are cleared 
  • Escalate to compliance/legal  
  • Investigate independently (versus relying on supplier explanations) 

Sanctioned Party Ownership Visibility  

Enhanced third-party screening goes beyond basic KYC and denied party screening to check for broader risk in adverse media, PEP, as well as analyze ownership structures that may conceal sanctions exposure. Ownership analysis applies the OFAC 50% Rule, BIS affiliate rule, and EU ownership and control requirements. These features would have provided a deeper understanding of the Dubai supplier and intermediaries that provided opaque wire transfers. 

Auditability and Recordkeeping  

Screening and escalation were absent from support workflows: OFAC identified the lack of screening, escalation, and documented review as a systemic weakness. Without denied party screening, structured escalation paths, or a reliable OFAC search tool, sanctions-related decisions were handled inconsistently and without audit-ready records. 

Consolidated Risk View  

One of the biggest advantages of Salesforce-integrated screening is how it brings together customer data, transactions, and third-party relationships to establish a comprehensive source of truth for risk. It breaks down the silos that enable red flags to slip through the business unnoticed. 

Compliance Questions Every Salesforce-Driven Company Should Ask Right Now 

If your organization relies heavily on Salesforce, ask: 

  1. Are sanctions checks automated or manual? 
  1. Are existing customers continuously rescreened? 
  1. Can high-risk records be automatically locked? 
  1. Are vendors screened with the same rigor as customers? 
  1. Do you screen ownership structures? 
  1. Can you demonstrate audit-ready workflows? 
  1. Are international sanctions rules incorporated? 
  1. Can compliance workflows scale globally? 
  1. Does your compliance process depend on users remembering to act? 

If answers to any of these questions are unclear, risk may already be larger than leadership realizes. 

Unify Compliance Control with Descartes Denied Party Screening for Salesforce 

For organizations operating globally, sanctions compliance works best as a layered approach. Government watchlists provide a foundation, compliance intelligence adds context, and Descartes Salesforce integration helps ensure that potential issues are reviewed, documented, and addressed before transactions move forward. 

Descartes helps organizations strengthen sanctions compliance through: 

Book a demo to see how Descartes helps organizations operating in high-risk and highly regulated industries embed sanctions controls directly into Salesforce workflows. 

Additionally, you can read this essential buyer’s guide to denied party screening to help you select a solution that fits your needs.