The sanctions technically only forbid future interactions with Tornado Cash contracts. However the compliance employees would get a note from Chainalysis saying that this guy received a bunch of ETH that was indirectly sourced from Tornado Cash and potentially do something about it (Kucoin Bitfinex et al would probably do nothing).