FEBRUARY 2026 ENFORCEMENT Action
The $1.72 Million lesson boarding schools are learning the hard way. Why relying on your payment processor for OFAC screening leaves your school strictly liable for international sanctions violations.
IMG Academy, LLC: fined $1,720,000 by OFAC on February 12, 2026.
This is not a hypothetical scenario involving an obscure defense contractor in a faraway country. IMG Academy is an elite private sports academy in Bradenton, Florida, one of the most internationally recognized prep schools in the United States.
OFAC fined them $1.72 million just months ago. The penalty is published directly on OFAC's civil penalties page. This happened to a school serving the exact same demographic profile as your international applicants.
Schools with healthy international enrollments often believe they are OFAC-compliant because their payment processor (like Flywire or Stripe) "screens transactions."
They are wrong. Let’s look at how Flywire’s compliance actually works, directly from their own security documentation:
“Flywire also maintains robust anti-financial crimes compliance programs as required by our global regulators to ensure our business complies with regulations where we operate.”
Read that phrase carefully: "to ensure our business complies." Not your school's business. Flywire's money transmission license is what they are protecting.
Where the processor's legal liability ends, the school's strict liability begins.
| The Compliance Gap | Why it creates liability for your school |
|---|---|
| Student Identity vs. Payer Identity | The student attending the school is the relationship. The payer is just the wire sender. Processors only screen the sender, leaving the core relationship unchecked. |
| The 50 Percent Rule | Entities 50%+ owned by sanctioned persons are also sanctioned by law, even if they are never published on a list. Basic wire checks do not traverse complex corporate family structures. |
| Ongoing Monitoring | Sanctions lists change. A student who arrives clean in year 1 may be connected to an entity sanctioned in year 3. A one-time payment check captures no ongoing updates. |
| Institutional Audit Trail | If OFAC reviews a payment, the question is what your school checked. Pointing at a Flywire receipt does not constitute an institutional OFAC program. |
| Broader Sanctions Programs | The SDN list is only one list. OFAC enforces sweeping country-based embargoes, sectoral sanctions, and non-SDN restricted lists that simple bank screening misses. |
OFAC is unequivocally clear on who holds the liability. From their official guidance:
"All U.S. persons must comply with OFAC sanctions, including all individuals and entities within the United States..."
Private schools are U.S. entities. There is no legal exception for "we thought our payment processor handled it." Liability for a prohibited transaction stays with the school, even when a vendor screens the payment.
OFAC sanctions violations operate under strict liability. Intent does not matter. You do not have to "knowingly" enroll a sanctioned student or accept dirty money. If the transaction occurs, you are liable. The $1.72M settlement against IMG Academy is the terrifying proof point for schools offering international services.
Get occasional notes on sanctions, export controls, and visitor compliance when we publish them.
No spam. Unsubscribe anytime.
Related posts
More guidance on sanctions, export controls, and visitor management for regulated facilities.
DDTC's October 1, 2026 proposed rule would shrink four U.S. Munitions List entries, add two new specially designed releases, create a new section listing items excluded from the USML and add a repair exemption. What would change, what would not, why items that leave the ITAR still face deemed-export rules under the EAR, and what to do before comments close November 30.
OFAC suspended Iran General License G and four related authorizations on August 24, 2026. The wind-down ended September 8, and on September 10 OFAC said it will presume denial of Iran license requests. What General License G covered for admissions, tuition, online courses and exchanges, what was left in place, and what a school's process needs now.
The Departments of Education and State opened Section 117 foreign-funding investigations into Duke and UND on September 16, 2026, and gave both universities 30 days to produce records. The records list, not the $250,000 threshold, is the real story: it is a blueprint for what a research-security review actually has to connect.
