I have been told that if your customer uses their debit card to purchase something outside of the USA that will be considered an IAT, is that correct? If so, who is responsible for monitoring for OFAC, the bank or the third party provider? Any guidance on this issue will be greatly appreciated. Thank you