Blocking sanctions are a form of economic restriction used by governments, especially the U.S. Treasury through OFAC, to freeze property and prohibit U.S. persons from dealing with designated individuals, companies, or networks. In practice, a blocked party’s assets may be locked, and financial institutions must stop processing transactions for them.
In cyber security, blocking sanctions matter because many attacks depend on more than malware: they rely on money movement, infrastructure, and facilitators. Sanctions can disrupt those support chains by isolating payment channels, front companies, and laundering routes. They do not stop malware directly, but they can make it harder for operators to collect, move, or spend profits. Defenders should treat sanctions as one layer of pressure, alongside device hardening, logging, and fraud detection, not as a replacement for technical controls.