OFAC Network Control Requirements

In response to Russia invasion of Ukraine, the U.S. The Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed expansive economic measures, in partnership with allies and partners, that target the core infrastructure of the Russian financial system and further bars Russia from the global financial system. All major card brands also implemented similar restrictions to suspend their respective Russia operations.

While Payrix has firewall-based controls in place to block traffic from sanctioned and high risk countries, Partners must also implement controls to block any traffic from sanctioned and high risk countries across applicable payment-related technology sets. We strongly encourage Partners to implement similar controls for other technology sets, such as blocking email communications from sanctioned and high risk countries, given the elevated threat levels associated with these locations. 

If you are using your own PayFrame and/or PayField or our API, we advise you to evaluate your organization's ability to block traffic from sanctioned and high-risk companies and implement immediate controls to block this type of traffic related to payment technologies and email communications if deficiencies exist. Please reference the materials linked below for additional information.

Additional Resource

• Check out here for US Department of Treasury Russian/Ukraine Related Sanctions  

• Check out here for Mastercard Statement on Suspension of Russian Operations 

• Check out here for VISA statements relating to Russia Operations 

• Check out here for Payrix Web Application Firewall Considerations

• Check out here for Payrix PCI Compliance & Information Security, including OFAC Compliance