Russia-Linked Shadow Banking Network Faces U.S. Sanctions After Processing $17B in Illicit Funds

Key Takeaways

Table of Contents

On October 1, U.S. Treasury officials sanctioned the A7 Network, a Russia-connected operation allegedly facilitating financial transactions for sanctioned nations including Russia and Iran.
Between January 2025 and June 2026, A7 Sub-Agents handled over $17 billion in illicit fund transfers, according to FinCEN.
The Office of Foreign Assets Control classified A7 Network as a transnational criminal enterprise, freezing all U.S.-based assets and property.
A ruble-pegged cryptocurrency called A7A5 facilitated more than $179 billion worth of digital asset transactions involving over 180 entities.
A proposed FinCEN regulation would prohibit American financial institutions from handling transactions connected to A7 Sub-Agents.

The U.S. Treasury Department announced enforcement action against the A7 Network on October 1, alleging the organization enabled Russia, Iran, and other sanctioned parties to circumvent international financial restrictions.

Operation Economic Outcast targets the 𝐀𝟕 𝐍𝐞𝐭𝐰𝐨𝐫𝐤, a Russia-linked shadow banking system used by Iran, the IRGC, Hamas, Russian illicit-finance actors, cybercriminals, and sanctions evaders. OFAC designated A7 as a significant transnational criminal organization, while…

— Shin (@hey_itsmyturn) October 1, 2026

According to the Financial Crimes Enforcement Network (FinCEN), investigators documented more than $17 billion in financial transfers associated with the operation. These transactions occurred during an 18-month period spanning January 2025 through June 2026.

The Treasury’s Office of Foreign Assets Control (OFAC) classified the A7 Network as a transnational criminal organization. Under this designation, any assets or property connected to the network under U.S. control or owned by American citizens are now frozen.

Shadow Banking Infrastructure Revealed

Federal authorities characterized A7 as an underground financial system. The operation functioned through intermediary companies known as Sub-Agents located in various nations that handled incoming and outgoing payments.

On the surface, these Sub-Agents resembled legitimate commercial enterprises. However, A7 personnel secretly maintained control over their websites and banking infrastructure.

According to investigators, operatives employed custom virtual private network technology to conceal their actual locations when accessing these financial accounts. The network further masked illicit payments by fabricating trade documentation and using fraudulent product invoices to make transfers appear as legitimate commercial transactions.

FinCEN’s investigation identified Sub-Agent operations in Hong Kong, Indonesia, Kyrgyzstan, Seychelles, Türkiye, and the United Arab Emirates. Treasury officials reported that A7 maintained banking relationships with approximately 435 financial institutions distributed across 83 nations.

Treasury Secretary Scott Bessent emphasized the administration’s commitment to dismantling financial channels exploited by hostile nations. He warned that any party facilitating illicit fund movements for these entities faces exclusion from the American banking system.

Iranian Operations and Cryptocurrency Involvement

Federal authorities traced portions of the network to Iran’s Central Bank and the Islamic Revolutionary Guard Corps. According to Treasury findings, certain A7 Sub-Agents facilitated Iranian petroleum sales and weapons acquisition efforts.

One Sub-Agent and an affiliated entity collected approximately $140 million from organizations involved in Iranian sanctions circumvention schemes. Another Sub-Agent transmitted roughly $1.6 million to a company associated with arms procurement operations.

Digital assets entered the scheme through A7A5, a ruble-denominated cryptocurrency issued by Old Vector LLC, an entity the U.S. sanctioned in August 2025.

FinCEN documented more than 180 organizations that collectively handled at least $179.1 billion in A7A5 cryptocurrency transactions between February 2025 and June 2026. Officials noted this amount cannot be added to the $17 billion Sub-Agent figure because some transactions involved both payment methods.

Treasury officials also identified connections between the network and Nobitex, an Iranian cryptocurrency platform sanctioned in June. Authorities additionally linked the operation to digital asset theft campaigns attributed to North Korean hackers.

The OFAC sanctions became effective immediately upon announcement. FinCEN’s companion proposal to prohibit U.S. banks from processing A7 Sub-Agent transactions remains under consideration.

The proposed regulation will undergo a 30-day public comment period following its publication in the Federal Register. FinCEN has instructed financial institutions to tag relevant suspicious activity reports with the identifier FIN-2026-A7NETWORK.

The United Kingdom issued its own advisory regarding A7 in August, following sanctions against cryptocurrency and financial companies connected to the network operating in the UAE, Georgia, and Kyrgyzstan. Treasury officials stated the October 1 enforcement action expands upon previous international coordination efforts.

✨ Limited Time Offer