Vendor & Counterparty Check: OFAC Sanctions, Company, Domain

Check a vendor, customer or partner before you pay them, onboard them, or sign with them. For each entity you get a verdict (block, review or clear) with the reasons behind it, drawn from:

• OFAC sanctions screening: the name is fuzzy-matched against the US Treasury SDN and Consolidated lists, and a crypto wallet address is checked against OFAC's listed addresses.
• Company records: whether the name or domain matches a company in SEC EDGAR or Wikidata (public status, industry, headquarters, size).
• Domain health: domain age (a newly registered domain is a classic fraud signal), whether the website and email work (MX), and whether DMARC is enforced (if not, its email can be spoofed).

Who it is for

• Finance and procurement teams vetting new vendors and payees.
• Marketplaces and fintechs doing lightweight onboarding checks (KYB screening).
• AI agents that are about to pay, or sign up with, someone they don't know.

Input

Field	Required	What it does
entities	yes	Up to 100 entities per run. Each is an object with any of name, domain (a website, URL or email address) and wallet (an EVM address).

Example:

{ "entities": [
  { "name": "Stripe, Inc.", "domain": "stripe.com" },
  { "domain": "jane@new-supplier-example.com" },
  { "wallet": "0x098B716B8Aaf21512996dC57EB0615e2383E2f96" }
] }

Output

One dataset item per entity. A real result (2026-10-21):

{
  "input": "Stripe, Inc.",
  "verdict": "clear",
  "summary": "Stripe: no flags in the sanctions, company, domain checks.",
  "reasons": [],
  "checks": [ { "check": "sanctions", "status": "ok" }, { "check": "company", "status": "ok" }, { "check": "domain", "status": "ok" }, { "check": "wallet", "status": "skipped" } ],
  "sanctions": { "clear": true, "matches": [] },
  "company": { "name": "Stripe", "is_public": false, "cik": "1691342", "industry": "financial services", "founded": "2010", "employees": 8000, "headquarters": "San Francisco, CA, United States", "website": "https://stripe.com/" },
  "domain": { "domain": "stripe.com", "registered": "1995-09-12", "email_provider": "Google Workspace", "has_mx_records": true, "dmarc_policy": "reject", "website_reachable": true, "https": true },
  "checked_at": "2026-10-21T15:30:55.069Z",
  "disclaimer": "A screening aid, not legal advice. Confirm sanctions matches with OFAC (https://sanctionssearch.ofac.treas.gov) before acting."
}

A block verdict means a strong sanctions match: a listed crypto address, or a name match scoring 95 or higher. review means something needs a human look, such as a weaker name match, a very young domain, or a domain with no website or email.

Pricing

$0.015 per entity checked (pay per event). Entities that couldn't be checked are free. That includes any run where the OFAC lists couldn't be loaded: you never get a "clear" verdict without the sanctions screen. Apify platform usage is included, and Apify adds its standard run-start fee of $0.00005.

Limitations (please read)

• Not a compliance program. This is a screening aid, not legal advice. Confirm any sanctions match with OFAC before acting.
• Sanctions lists: US (OFAC) only, with no EU, UN or UK lists. Name matching is fuzzy, so expect occasional false positives on common names; they come back as review, not block.
• Wallets: wallet addresses are screened against OFAC's published crypto addresses only. There is no on-chain behavior scoring.
• Company records: coverage is best for US public companies and well-known private ones. Small private companies often have no public record, which is reported as information, not as a flag.

Use it from an AI agent (MCP)

This Actor runs with Apify's default limited permissions, so it is available through Apify's MCP server. Add it to Claude, Cursor or any MCP client with:

https://mcp.apify.com?tools=<publisher>/counterparty-check

The agent then calls it with input like {"entities": [{"name": "Acme Inc", "domain": "acme.com"}]}. Results land in the run's dataset; the MCP server's get-dataset-items tool reads them.

Data sources

US Treasury OFAC sanctions lists (public domain), SEC EDGAR (public domain), Wikidata (CC0), Wikipedia summaries (CC BY-SA 4.0: the company.description text comes from Wikipedia, so reuse it with attribution), DNS and RDAP registration data, and the entity's own website.