Recent settlement highlights need for OFAC diligence