Treasury Declares Russia-Linked A7 Network a Criminal Organization, Blocks $17B Shadow Banking Operation

TLDR

• On October 1, the Treasury Department imposed sanctions on the A7 Network, a Russia-connected operation accused of facilitating illicit financial flows for sanctioned nations.
• Between January 2025 and June 2026, A7 Sub-Agents handled over $17 billion in financial transactions, according to FinCEN data.
• The Treasury’s OFAC division classified A7 Network as a transnational criminal enterprise, freezing all U.S. properties and assets.
• A ruble-pegged digital asset called A7A5 facilitated more than $179 billion in cryptocurrency transfers involving over 180 different entities.
• A proposed FinCEN regulation would prohibit American financial institutions from processing any transactions connected to A7 Sub-Agents.

The U.S. Treasury Department announced sweeping sanctions targeting the A7 Network on October 1. According to government officials, this sophisticated operation enabled Russia, Iran, and other sanctioned entities to circumvent international financial restrictions.

FinCEN, the Treasury’s financial crimes division, documented more than $17 billion in transactions flowing through the network. These financial transfers occurred during an 18-month period spanning January 2025 through June 2026.

OFAC officially categorized the A7 Network as a transnational criminal organization. The designation immediately freezes any assets or property connected to the network that falls under U.S. control or involves American citizens.

Inside the Shadow Financial Infrastructure

Federal investigators characterized A7 as an underground banking operation. The system functioned through intermediary companies known as Sub-Agents located across multiple jurisdictions.

These Sub-Agent entities maintained the appearance of legitimate commercial enterprises. However, A7 operatives secretly managed their online platforms and financial accounts from behind the curtain.

According to investigators, network personnel employed specialized virtual private networks to conceal their true geographic locations when managing these accounts. The operation further disguised illicit payments by fabricating trade documentation and falsifying product descriptions to mimic standard commercial transactions.

FinCEN’s investigation revealed Sub-Agent operations in Hong Kong, Indonesia, Kyrgyzstan, Seychelles, Türkiye, and the United Arab Emirates, among other locations. The network maintained banking relationships with approximately 435 financial institutions operating in 83 different nations.

Treasury Secretary Scott Bessent emphasized the administration’s commitment to dismantling financial channels exploited by hostile nations. He warned that any party facilitating illicit transfers for these actors faces permanent exclusion from American banking systems.

Iranian Links and Digital Currency Scheme

Treasury investigators uncovered connections between portions of the network and Iran’s Central Bank, along with the Islamic Revolutionary Guard Corps. Several A7 Sub-Agents allegedly facilitated Iranian petroleum sales and weapons acquisition efforts.

One Sub-Agent and its affiliated entity processed nearly $140 million from organizations involved in Iranian sanctions circumvention. Another Sub-Agent transferred approximately $1.6 million to an entity associated with weapons procurement operations.

The cryptocurrency component involved a digital token designated A7A5. This ruble-denominated currency was issued by Old Vector LLC, an entity the U.S. government sanctioned in August 2025.

FinCEN’s analysis identified over 180 separate entities that collectively processed at least $179.1 billion worth of A7A5 transactions from February 2025 through June 2026. This cryptocurrency volume represents a distinct metric from the $17 billion Sub-Agent figure, as certain transactions may appear in both categories.

Federal authorities also established links between the network and Nobitex, an Iranian cryptocurrency platform sanctioned in June. Investigators noted additional connections to cryptocurrency theft operations attributed to North Korean hackers.

The OFAC sanctions became enforceable immediately upon announcement. FinCEN’s complementary proposal—which would prohibit U.S. financial institutions from processing transfers involving designated A7 Sub-Agents—remains pending.

The proposed regulation will undergo a mandatory 30-day public comment period following its publication in the Federal Register. FinCEN has directed banking institutions to tag relevant suspicious activity reports with the identifier FIN-2026-A7NETWORK.

The United Kingdom previously issued its own advisory regarding A7 operations in August, following sanctions against cryptocurrency platforms and financial services firms connected to the network in the UAE, Georgia, and Kyrgyzstan. Treasury officials stated that the October 1 enforcement action complements these earlier international coordination efforts.