Menu
MCAP $2.76T ▼-3.75%
BTC $81,561 ▼-0.70%
ETH $2,421 ▼-0.72%
BNB $721.37 ▼-0.80%
XRP $1.310 ▼-1.68%
SOL $104.21 ▼-1.03%
DOGE $0.0808 ▼-0.27%
ADA $0.226 ▼-1.68%
TRX $0.3349 ▲+0.86%
LINK $12.33 ▼-0.90%
AVAX $9.95 ▼-0.67%
HYPE $80.21 ▼-1.78%
DOT $1.170 ▲+2.42%

Sanctions Evasion

Every Crypto Coin Show story tagged Sanctions Evasion, newest first, alongside the guides and interviews that give it context.

Guide: What is a stablecoin and howNewsletter
Russian finance minister and two deputies join sanctioned A7 payments board
Legal & Crime

Russian finance minister and two deputies join sanctioned A7 payments board

, , , , , , , , ,

Legal & CrimeCrypto Coin Show News Team·October 16, 2026·4 min read

Three Russian cabinet ministers have joined the board of A7, a payments network the U.S. Treasury designated a transnational criminal organization just two weeks earlier, signaling Moscow’s commitment to sustaining trade flows despite Western sanctions. The move exposes the scale of Russian reliance on shadow banking infrastructure and the limits of U.S. enforcement against state-backed financial architecture.

  • Finance Minister Anton Siluanov, Energy Minister Sergei Tsivilev, and First Deputy Prime Minister Denis Manturov joined A7’s board on October 15 (Thursday)
  • A7 processed more than 2,000 transactions daily as of January 2026, totaling $91.5 billion or roughly 13% of Russia’s 2025 foreign trade flows
  • The U.S. Treasury’s Financial Crimes Enforcement Network proposed blocking all A7 transactions across roughly 348,000 institutions, including crypto exchanges, effective immediately
  • $91.5 billion A7’s annual transaction value compared to 13% of Russia’s 2025 foreign trade
  • $179.1 billion Cumulative crypto moved through A7A5 token between February 2025 and June 2026
  • October 1 U.S. Treasury sanctions date versus October 15 board appointments, 14 days apart

Russia’s three most senior economic officials joined the board of A7, a payments firm that routes cross-border transactions through networks in Kyrgyzstan, Nigeria and Zimbabwe, according to the government’s press office announced Thursday. The appointments come exactly two weeks after the U.S. Office of Foreign Assets Control, according to the U.S. Treasury, designated A7 as a transnational criminal organization used by Iran to evade sanctions and disguise illicit payments as ordinary trade. The board expansion underscores Moscow’s explicit reliance on the network as Western sanctions have severed traditional banking channels, particularly affecting trade with China, Russia’s largest partner.

Three cabinet ministers assume board seats two weeks after U.S. Treasury sanctions designation

Finance Minister Anton Siluanov, Energy Minister Sergei Tsivilev and First Deputy Prime Minister Denis Manturov have joined A7’s board, the government’s press office confirmed Thursday. The appointments represent an explicit political endorsement of a network that U.S. Treasury Secretary Scott Bessent has described as infrastructure enabling “Iran and other adversaries to evade sanctions, move illicit funds, and undermine the integrity of the global financial system.”

Treasury is dismantling the financial infrastructure that allows Iran and other adversaries to evade sanctions, move illicit funds, and undermine the integrity of the global financial system. Today’s action targeting A7 continues Treasury’s unprecedented efforts to isolate Iran and its financial enablers.

Scott Bessent, U.S. Treasury Secretary

A7 was established in 2024 by Promsvyazbank, a state-owned Russian bank focused on defense sector lending that retains a 49% stake, together with Moldovan businessman Ilan Shor, whom the Treasury has identified as a “sanctioned and convicted criminal fraudster.”

A7 processes $91.5 billion annually through stablecoin and sub-agent networks evading detection

As of January 2026, A7 was processing more than 2,000 transactions daily, collectively representing approximately $91.5 billion in annual flow, or roughly 13% of Russia’s total 2025 foreign trade, according to the Treasury.

The network operates by routing payments through sub-agents in third-party jurisdictions that falsify trade documents and import-export records to disguise sanctioned transactions as ordinary commerce.

A7 relies on the A7A5 ruble-backed stablecoin, launched in Kyrgyzstan in 2025 and collateralized by deposits held at Promsvyazbank, which the Treasury says has processed $179.1 billion in crypto activity since February 2025.

The Treasury estimates cumulative stablecoin turnover has reached $140 billion, making A7A5 one of the largest ruble-denominated digital assets outside official Russian channels.

FinCEN’s proposed rule would bind 348,000 institutions to block A7 transactions across fiat and crypto

The Financial Crimes Enforcement Network, an arm of the Treasury Department, has proposed a rule that would require approximately 348,000 institutions, including cryptocurrency exchanges, traditional banks and payment platforms, to block transfers involving A7’s network of sub-agents.

The measure, if finalized, would apply to both fiat and cryptocurrency transfers and represents an unprecedented attempt to enforce sanctions at the rails level across dual-track financial systems.

The rule leaves a material enforcement gap unresolved: how exchanges and financial institutions will identify A7 sub-agents operating under shell company names across multiple jurisdictions, particularly when those entities continuously rebrand and migrate across regulatory borders.

Crypto exchanges have demonstrated inconsistent compliance with similar measures; the recent designation of Iran’s central bank as a sanctions target, announced in the Treasury’s Operation Economic Outcast campaign, still showed continued activity in decentralized finance protocols beyond traditional exchange rails.

The UK announced sanctions against 38 targets on October 8, including three crypto exchanges and two payment platforms, with two of those platforms having processed transactions through A7 networks.

The CCS read. We read the institutional crypto angle: custodians and prime brokers will face acute compliance costs as compliance teams manually identify sub-agents, and those costs will cascade to institutional desks funding emerging market trade. A7’s board appointments signal that Moscow sees this network as irreplaceable infrastructure rather than a temporary workaround, meaning enforcement will require either technological detection at the wallet level or political pressure that shifts Russian calculation on what trade flows are worth losing access to.

The Treasury has not disclosed a timeline for finalizing FinCEN’s proposed rule, and the effectiveness of the measure will depend on whether exchanges and financial institutions can operationalize identification of A7 sub-agents faster than the network can establish new shell entities and migrate payment flows to undesignated jurisdictions, a test that will clarify whether dual-track finance systems can be enforced against at scale or whether they have already become too distributed for traditional sanctions tools to reach.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Treasury designates Russia-linked A7 criminal organization for Iran sanctions evasion
Legal & Crime

Treasury designates Russia-linked A7 criminal organization for Iran sanctions evasion

, , , , , , ,

Legal & CrimeCrypto Coin Show News Team·October 2, 2026·3 min read

The U.S. Treasury Department sanctioned Russia-linked fintech A7 on Thursday, designating it a “significant transnational criminal organization” for helping Iran evade Western financial restrictions. The action freezes any A7 assets under U.S. jurisdiction and bars American citizens and firms from transacting with the network or its affiliates, cutting off a payment system Treasury says moved sums equal to 13% of Russia’s 2025 foreign trade.

  • Treasury’s Office of Foreign Assets Control designated A7 a significant transnational criminal organization on Thursday.
  • FinCEN proposed a rule banning transfers tied to transactions involving A7’s subagents and issued a special alert to banks.
  • A7 is majority owned by fugitive Moldovan oligarch Ilan Shor and co-owned by Russia’s state-controlled PSB, both already under Western sanctions.
  • $7B moved through global banking via forged documents, per FT
  • 13% of Russia’s entire 2025 foreign trade volume, Treasury says
  • $90B in ruble transactions processed by A7 in 10 months

Washington’s action targets A7, a fintech and cryptocurrency platform that Treasury says operates as a shadow banking network built to help Russia and its partners dodge sanctions tied to the war in Ukraine. The Thursday designation extends that effort to Iran, with Treasury stating the network has been “used by the Iranian regime to evade sanctions,” according to a report from Cryptopolitan. The move is part of Operation Economic Outcast, an Iran sanctions campaign President Donald Trump ordered in late August and framed as “an economic onslaught against Iran’s financial connections around the globe.”

FinCEN Moves to Cut Off A7’s Subagent Network

Treasury’s Financial Crimes Enforcement Network proposed a rule that would prohibit transfers linked to transactions run through A7’s subagents, the entities Treasury calls the network’s operational backbone. FinCEN paired the proposal with a special alert instructing U.S. banks on how to detect and report activity tied to A7 and its affiliates, according to the press release.

Treasury says those subagents “form a core layer of the A7 Network’s operational architecture,” used for both sanctions evasion and money laundering. The department links the mechanism, which includes cryptocurrency rails, to Russian illicit finance as well as Iran’s Islamic Revolutionary Guard Corps, proxy groups including Hamas, and the sanctioned Iranian exchange Nobitex.

Financial Times Investigation Found $7 Billion in Flows

An investigation by the Financial Times found that A7 moved nearly $7 billion through the international banking system using forged documents and front companies. Reporters identified roughly 200 such entities registered in the United Arab Emirates, Hong Kong, Indonesia and Kyrgyzstan, a footprint that let the network reach banks far outside Russia’s immediate sanctions perimeter.

A7 is majority owned by Ilan Shor, a fugitive Moldovan oligarch holding a Russian passport, and co-owned by Russia’s state-controlled PSB, formerly Promsvyazbank. Both Shor and PSB already sit on Western sanctions lists, which Treasury argues makes A7 an extension of sanctioned Russian interests rather than an independent platform.

The company also issues A7A5, described as the largest non-dollar stablecoin on the market, run by a Kyrgyzstan-registered entity and reportedly backed by ruble deposits at PSB.

Bessent Warns Facilitators They Will Lose U.S. Market Access

Treasury Secretary Scott Bessent said this week his department is dismantling the financial infrastructure that lets Iran and its partners move illicit funds and undermine the global financial system.

Today’s action targeting A7 … sends a clear message that if you facilitate illicit finance for America’s adversaries, you will lose access to the U.S. financial system.

Scott Bessent, U.S. Treasury Secretary

Shor has publicly touted A7’s scale rather than denied it, claiming the platform processes up to 2,000 transactions daily and handled 7.5 trillion rubles, about $90 billion, over 10 months.

Treasury’s own filing puts that volume at roughly 13% of Russia’s entire 2025 foreign trade, a figure that explains why the network is marketed inside Russia as an alternative to Western-controlled payment rails.

The CCS read. This designation is a stablecoin story as much as a sanctions story. A7A5 was built to prove a ruble-backed token could rival dollar stablecoins at scale, and Treasury’s filing effectively tells every bank and exchange handling it to walk away now. Expect compliance teams at exchanges and custodians, not just Russian or Iranian counterparties, to start screening for A7A5 wallet exposure.

FinCEN’s proposed subagent rule now moves to public comment, and Treasury has not set a deadline for finalizing it, leaving banks to apply Thursday’s special alert in the meantime. The open question is whether exchanges that have handled A7A5 volume, including platforms already under scrutiny following episodes like the Bitget hot wallet breach, face parallel enforcement as Operation Economic Outcast widens.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

UK sanctions A7 network that moved $90 billion for Russian military spending
Regulation & Policy

UK sanctions A7 network that moved $90 billion for Russian military spending

, , , , , ,

InstitutionalCrypto Coin Show News Team·September 23, 2026·4 min read

The UK has sanctioned the A7 network, a Kremlin-backed payments system that moved $90 billion last year, half of Russia’s military spending, by routing funds through forged documents and both traditional banking and crypto channels. For institutional investors, the case reveals how sanctions evasion networks now exploit gateways between fiat rails and blockchains, forcing platforms and issuers to adopt stricter screening even as the ruble stablecoin A7A5 collapses.

  • A7 moved $90 billion in the prior year, roughly half of Russia’s annual military spending, using forged shipping documents and shell companies.
  • On-chain A7 activity exceeded $166 billion according to TRM Labs, while the ruble stablecoin A7A5 saw average daily turnover collapse 96% from July 2025 to June 2026.
  • The network funneled $6.9 billion through international banks unaware of A7’s identity, then converted proceeds into Tether and the A7A5 stablecoin to obscure the chain of custody.
  • $90B A7 network’s claimed annual transfers, roughly half Russia’s military budget
  • 96% Collapse in A7A5 daily volume from peak July 2025 to June 2026
  • $6.9B Bank-rail flows through A7 using forged documents, per leaked files

On May 26, the UK announced 18 designations targeting the A7 network, a Kremlin-backed system designed to bypass Western sanctions and finance military procurement. According to reporting by the Financial Times (FT), leaked documents show the network funneled $6.9 billion through international banks using forged shipping documents and shell companies, while simultaneously routing funds through Tether’s USDT and a sanctioned ruble stablecoin called A7A5. The dual-channel approach, mixing traditional correspondent banking with crypto intermediaries, marks a shift in how state-backed sanctions evasion operates: the weak point is no longer banking or crypto alone, but the conversion gateways where the two intersect.

International banks processed $6.9 billion without knowing A7’s identity

The leaked documents reveal that correspondent banks in multiple jurisdictions executed A7 transactions using forged paperwork, unaware of the network’s Kremlin links or sanctions designation. The Russian defense finance institution Promsvyazbank (PSB) and Moldovan businessman Ilan Shor created A7 to serve Russian companies cut off from regular cross-border finance channels.

The $6.9 billion figure represents bank-rail flows alone and excludes the much larger volumes that moved on-chain once proceeds reached crypto intermediaries.

UK Foreign Secretary Yvette Cooper stated in the government announcement that A7 claimed to have moved over $90 billion in the previous year, equivalent to roughly half of Russia’s yearly military expenditure. The network also involved a Kyrgyzstan-registered bank and a major global cryptocurrency exchange suspected of channeling over $1.5 billion to Moscow, both now designated.

A7A5 stablecoin collapses as sanctions freezes conversion routes

The ruble-pegged A7A5 token, designed to reduce dependence on issuer-level freezes, initially transferred $102 billion in its first year of operation across 251,000 transactions. However, international sanctions have strangled its utility: average daily turnover fell to just $24.3 million in June 2026, a 96% decline from the July 2025 peak.

PSB chairman Pyotr Fradkov disclosed in August that A7A5 had recorded cumulative turnover of approximately $140 billion since launch, but the currency became difficult to convert into liquid stablecoins once the network faced restrictions.

Every transaction settles on a public blockchain, traceable and permanent.

Ari Redbord, TRM Labs, writing for ACAMS

The distinction between on-chain metrics matters here. TRM Labs found A7-related on-chain volume exceeded $166 billion, but roughly $35 billion represented circular transactions between A7 and related actors evading sanctions, rather than genuine settlements. This inflates the apparent size of the actual sanctions-busting operation.

TRM traced $65 million to Iran’s Islamic Revolutionary Guard Corps, $5 million to Hamas

Blockchain investigators traced at least $65 million in a single A7 address to Iran’s Islamic Revolutionary Guard Corps, and approximately $5 million to Hamas, showing the network’s role in funding designated entities beyond Russia.

TRM also identified at least $590,000 in proceeds from the BTCTurk and Woo X cryptocurrency exchange hacks, stolen by North Korean state hackers, flowing into A7-controlled wallets through intermediaries. These findings underscore how sanctions-evasion networks aggregate illicit flows from multiple state actors and criminal sources.

Regulators tighten stablecoin controls while mainstream issuers retain freeze capability

The Financial Action Task Force (FATF) flagged ruble-pegged and jurisdiction-resistant stablecoins as a “significant and emerging risk” in July, prompting regulators to demand stronger wallet screening and blockchain analytics.

However, mainstream stablecoins remain traceable and subject to issuer controls: Tether froze $344.2 million in USDT linked to Iran’s central bank in April, and less than 0.5% of all stablecoin transactions in 2025 were tied to illicit activity. A7A5, by contrast, was explicitly designed to minimize issuer-level freezes, making it harder to halt funds once they entered the network.

The UK’s approach targets not the stablecoin asset class as a whole, but the infrastructure gateways where fiat and crypto channels connect.

The unresolved question is whether offshore cryptocurrency exchanges, particularly those operating from jurisdictions like Kyrgyzstan or Georgia, will implement the screening standards needed to close these conversion points, or whether Russian-linked entities will simply migrate to other platforms.

The CCS read. We see A7 not as a crypto problem but as a hybrid finance problem: sanctions work only when both rails are blocked. Mainstream stablecoin issuers can freeze on command, but unregulated off-ramps and peer-to-peer conversion networks do not. The real risk for institutional holdings is not the token itself, but whether regulators will force custody and exchange platforms to block inflows from designated networks in real time, effectively treating on-chain analytics as a pre-transaction compliance requirement rather than a post-hoc forensic tool.

The UK designated 18 entities on May 26, and the European Union already targeted A7A5 and the digital ruble in its 20th sanctions package, and the U.S. Treasury’s sanctions have included A7 as well as Old Vector. Watch whether U.S. regulators will impose blanket restrictions on A7-linked wallet addresses on major exchanges, or whether they will focus enforcement on the Kyrgyz bank and offshore crypto exchange operators themselves, a narrower approach that could allow smaller or decentralized platforms to remain conduits.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Treasury designates BitBank for moving hundreds of millions in Bitcoin to Iranian military unit
Bitcoin

Treasury designates BitBank for moving hundreds of millions in Bitcoin to Iranian military unit

, , , , , , ,

Exchange NewsCrypto Coin Show News Team·September 19, 2026·3 min read

The U.S. Treasury has sanctioned BitBank, an Iranian digital asset exchange, and its developer for facilitating hundreds of millions of dollars in Bitcoin transfers to Iran’s Islamic Revolutionary Guard Corps. The action signals that regulators now treat cryptocurrency infrastructure with the same sanctions enforcement rigor as traditional banks and payment processors.

  • Treasury sanctioned BitBank and developer Pishtaz Simorgh Electronic Trade Company for moving hundreds of millions in Bitcoin to the IRGC between June and July.
  • OFAC linked BitBank to financier Babak Zanjani, whose network allegedly used the exchange to circumvent U.S. sanctions on Iran.
  • The designation extends sanctions compliance obligations across the crypto industry, forcing exchanges and institutions to screen connected wallets and counterparties.
  • Hundreds of millions in Bitcoin allegedly moved through BitBank to Iran’s Revolutionary Guard Corps
  • June, July timeframe when Treasury says Zanjani used BitBank for sanctions evasion
  • Multiple entities sanctioned including the exchange, its developer, and linked individuals

The Office of Foreign Assets Control designated BitBank and software developer Pishtaz Simorgh Electronic Trade Company as part of a sanctions-evasion network run by Iranian financier Babak Zanjani, according to reporting first published by News BTC. Treasury alleges the infrastructure facilitated the movement of hundreds of millions of dollars’ worth of Bitcoin to Iran’s Islamic Revolutionary Guard Corps during June and July. The designation also targeted several individuals tied to Zanjani’s broader business operations.

Treasury Treats Crypto Infrastructure Like Banks and Payment Processors

The enforcement action marks an escalation in how U.S. regulators approach digital asset businesses that facilitate sanctions violations.

Rather than simply identifying and blocking specific wallet addresses, Treasury sanctioned an entire operating exchange and the company that developed it, a posture typically reserved for banks, payment networks or front companies suspected of enabling financial crime.

This approach reflects a fundamental shift in regulatory philosophy toward crypto infrastructure.

Regulators increasingly expect digital asset firms to apply the same sanctions controls to cryptocurrency transactions as they do to wire transfers or correspondent banking relationships. The public, traceable nature of blockchain ledgers does not eliminate compliance obligations; if anything, it makes those obligations clearer to regulators who can audit transaction flows themselves.

OFAC Sanctions Ripple Across Compliance Systems Industry-Wide

Once OFAC designates an entity, U.S. persons are generally prohibited from conducting any transactions with it. Compliance teams at exchanges, custodians, and institutional crypto firms must screen for connections to BitBank, its addresses, and linked counterparties.

The practical effect is that a single Treasury announcement can cascade into operational disruptions far beyond the sanctioned entity itself.

The crypto industry has spent years developing blockchain analytics tools and wallet-screening systems precisely for moments like this.

Public ledgers allow regulators to trace movement in ways that traditional cash transfers do not, but traceability alone does not substitute for the institutional compliance infrastructure that Treasury now expects all crypto businesses to maintain as a baseline operational requirement.

The CCS read. We read this as institutional compliance maturation, not crypto exceptionalism: Treasury is extending to digital assets the same infrastructure-level enforcement it applies to traditional finance. Exchanges and custodians holding institutional capital must now price in sanctions screening and wallet-level due diligence as permanent operational costs, not edge cases. This tilts the competitive advantage toward firms with mature compliance functions.

Watch for announcements from major U.S. exchanges confirming that they have screened their user bases and transaction histories for BitBank connections and linked addresses, and whether any existing customer accounts face restrictions or account reviews as a result of the designation.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

UK Sanctions 18 Crypto Firms Tied to Russia’s $90B War Network
Regulation & Policy

UK Sanctions 18 Crypto Firms Tied to Russia’s $90B War Network

, , , , , , ,

Exchange NewsMay 30, 2026·5 min read

The UK has sanctioned 18 crypto platforms and financial networks connected to Russia’s A7 payment system, which processed over $90 billion in 2025 to fund the invasion of Ukraine. For institutional investors, this signals intensifying regulatory enforcement against crypto infrastructure facilitating sanctions evasion and raises compliance risks for platforms handling Russia-linked flows.

  • UK sanctioned 18 crypto firms tied to A7 network processing $90 billion in 2025 for Russian war funding
  • Huobi transferred $4.9 billion to sanctioned entities since 2021, with $1.13 billion occurring after Garantex’s March 2025 takedown
  • Illicit crypto activity surged in 2024, with A7’s A7A5 token alone representing $72 billion in trading volume
  • $90B Total processed by A7 network in 2025 versus prior underground payment channels
  • $4.9B Huobi’s cumulative transfers to sanctioned entities and A7 since 2021
  • $72B Trading volume in A7A5 token alone, exceeding many nation-state crypto treasuries

The UK Foreign Office has moved to disrupt a sophisticated sanctions evasion network by adding 18 crypto exchanges, banks, and payment platforms to its consolidated sanctions list, effective immediately. The action targets entities accused of processing more than $90 billion in 2025 through the Kremlin-backed A7 payment network to finance Russia’s military operations in Ukraine.

According to analysis by blockchain intelligence firm TRM Labs, the sanctioned platforms deliberately migrated Russian illicit flows away from takedown targets like Garantex, which the UK shut down in March 2025, to successor exchanges including Rapira, Aifory Pro, Grinex.io, and ABCex.

The designation requires all UK-registered businesses to freeze any assets held by these entities and block all transactions involving them, a measure designed to choke off financial pathways that have grown increasingly sophisticated since Russia’s 2022 invasion.

Huobi Emerges as Largest Single Facilitator of Sanctioned Russian Transfers

TRM Labs research identifies Huobi, a major global crypto exchange, as the single largest conduit for moving funds to UK-sanctioned entities, having transferred $4.9 billion in on-chain transactions to sanctioned accounts and the A7 network since 2021.

The scale of Huobi’s involvement underscores how mainstream crypto platforms became embedded in Russia’s sanctions evasion infrastructure over a four-year period.

Most striking is the timing: $1.13 billion of Huobi’s transfers to sanctioned entities occurred in the 14 months following Garantex’s March 2025 takedown, indicating that Huobi absorbed significant flow volume as successor platforms came online.

Exmo Exchange processed $19.5 million in direct transactions with sanctioned firms including Garantex and Chatex, while BitPapa transferred millions to the same entities.

The pattern suggests a network of exchanges functioning as intermediaries rather than independent platforms, when one node was removed, flows redistributed across remaining counterparties without disruption to the underlying A7 system.

Second-tier platforms demonstrated the depth of the network’s redundancy. Rapira moved $543 million through sanctioned channels, Aifory Pro transferred $189 million, and ABCex recorded $355 million across restricted firms.

The interlocking nature of these transfers, Aifory Pro sending $175.2 million to ABCex, ABCex routing $133.4 million back to Garantex, reveals a deliberate design to obfuscate beneficial ownership and create plausible deniability for individual platform operators.

A7’s A7A5 Token Generated $72 Billion in Trading Volume Despite Sanctions Pressure

Analysis of A7 network activity reveals that illicit crypto trading related to Russia surged in 2024 rather than declining. The A7A5 token alone accounted for $72 billion in trading volume, while A7’s own wallets generated an additional $39 billion, a combined $111 billion in activity concentrated within a single sanctions evasion network.

These figures dwarf the transaction volumes of many legitimate crypto projects and institutional on-chain activities, indicating that A7 functions not as a niche shadow system but as a primary financial channel for Kremlin-linked actors.

A TRM Labs investigation identified that most of this activity flowed through Garantex and Grinex.io, two platforms that now sit atop the UK’s sanctions list. The persistence of high-volume trading even as regulatory pressure mounted suggests either inadequate detection by compliance teams at major exchanges or deliberate tolerance of flows by platform operators aware of their provenance.

The involvement of a major global crypto exchange backing A7, which TRM reports transferred over $1.5 billion into Kremlin-linked financial channels, points to institutional-grade participation rather than isolated bad actors within individual platforms.

The scale of A7A5 trading volume also raises questions about whether detection systems at compliant exchanges adequately identify token-based evasion schemes.

Unlike peer-to-peer cash transfers or mixing services, tokenized payment networks create on-chain audit trails while relying on opacity around beneficial ownership and end-use intent, a structural vulnerability that regulators now clearly recognize.

Kyrgyz Bank and Major Exchange Named as A7’s Core Infrastructure Partners

The UK government’s investigation identified two critical A7 network partners: a Kyrgyz bank suspected of processing payments within the A7 system and a major global crypto exchange believed to have transferred $1.5 billion back into Kremlin-linked financial channels.

The Kyrgyz bank connection reveals geographic diversification of A7’s infrastructure, by embedding payment processing in Central Asia, the network exploited jurisdictional gaps between Western sanctions regimes and countries with weaker compliance enforcement.

The role of a “major global crypto exchange” in the A7 ecosystem is particularly significant for institutional investors. While the UK announcement does not name this exchange, the scale of $1.5 billion in outbound transfers suggests it is one of the world’s top 20 platforms by trading volume.

This implicates not only operational controls but potentially board-level decision-making about acceptable counterparty risk and customer due diligence standards.

For institutional investors and asset managers, the involvement of a major global exchange in A7 creates legal and reputational exposure. Any fund holding assets on that exchange faces indirect association with sanctions evasion infrastructure.

Conversely, exchanges enforcing rigorous geographic controls and transaction monitoring now have a competitive advantage in attracting institutional capital that demands sanctions compliance certainty.

UK Sanctions Designation Closes the Garantex Loophole That Crypto Networks Exploited

The March 2025 takedown of Garantex created the conditions for the current expansion of A7 successor platforms. In the 14 months following that action, Huobi alone moved $1.13 billion to sanctioned entities, while Rapira, Aifory Pro, Grinex.io, and ABCex collectively absorbed the redistribution of flows that Garantex previously handled.

The UK’s decision to sanction all 18 entities simultaneously, rather than sequentially, signals an attempt to close this loophole and prevent a third migration.

The designation also extends to individuals linked to the A7 network, adding a criminal dimension beyond asset freezes. This suggests that ongoing investigations may lead to extradition requests or interpol notices, creating personal liability for platform operators and compliance officers who knowingly facilitated the network’s operations.

For exchanges and platforms, the timing of sanctions announcements matters enormously. Institutional investors now track the lag between intelligence gathering and public designation.

TRM Labs’ March 2025 analysis of successor platform flows enabled the July 2025 sanctions action, a four-month window during which platforms operating in the UK could have exited Russian-linked relationships before designation became effective.

The fact that the UK moved comprehensively against 18 entities simultaneously suggests confidence in forensic evidence and likely precedes additional enforcement actions in allied jurisdictions.

Foreign Secretary Yvette Cooper stated: “If the Kremlin thinks it can evade our sanctions by hiding behind crypto networks and shadow financial systems,

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

The U.S. Department of Justice has filed a civil forfeiture complaint against $7.74 million in crypto
AI News

The U.S. Department of Justice has filed a civil forfeiture complaint against $7.74 million in crypto

, , , , , , , , ,

The U.S. Department of Justice (DOJ) issued a statement Thursday announcing forfeiture action against $7.74 million in cryptocurrency. The funds are allegedly tied to North Korean IT workers fraudulently infiltrating U.S. companies.

The civil forfeiture complaint, filed on June 5, says the state was able to “freeze and seize” over $7.74 million in cryptocurrency, originally tied to North Korean Foreign Trade Bank representative Sim Hyon Sop. Now D.C. is moving to take ownership of the funds via the suit.

Fake IT workers allegedly sending crypto to North Korea

“For years, North Korea has exploited global remote IT contracting and cryptocurrency ecosystems to evade U.S. sanctions and bankroll its weapons programs,” Sue J. Bai, head of the DOJ’s National Security Division, is quoted as saying in the government press release.

According to the DOJ, an FBI investigation is said to have revealed a “massive campaign” involving remote IT workers infiltrating U.S. businesses with fraudulent identities, or identities stolen from American citizens. “These tactics hid the North Koreans’ true location and identities, causing unwitting employers to hire them and pay them a salary, often in stablecoins, such as USDC and USDT,” the release notes.

To obfuscate the money and send funds back to North Korea, workers allegedly used the following tactics:

  • Fake accounts
  • Micro-transactions
  • Chain-hopping/Token-swapping
  • Hiding value in NFTs (non-fungible tokens)
  • Using U.S.-based accounts to “legitimize” activity
  • Crypto mixing

US government use of crypto, fiat also criticized

U.S. Attorney Jeanine Ferris Pirro said of the forfeiture action: “Crime may pay in other countries but that’s not how it works here,” noting that “We will halt your progress, strike back, and take hold of any proceeds you obtained illegally.”

Some might take issue with Pirro about that. And with Sue J. Bai about the bankrolling of weapons programs. In recent years, hundreds of millions of dollars in cryptocurrency have been funneled to “socially acceptable” U.S.-backed military initiatives in Ukraine, including for “lethal equipment.”

DOJ aims to confiscate $7.7M in crypto allegedly tied to fraudulent North Korean IT workers
Elliptic data on Ukraine government’s cryptocurrency expenditures from 2022. Source: Elliptic.

Billions in fiat currency have been sent to the Israeli military, as Gazans are killed and ousted from their homes, while the U.S. president backing this bankroll has a controversial, influence-cashgrab memecoin released while in office. Anyway one slices it, it is a messy situation, where “licit” uses of crypto seem to depend more on the power and geopolitical standing of the user, than they do ethics. None of this justifying any ostensible North Korean terror.

Regardless, the DOJ release summarizes: “Today’s forfeiture action follows the Department’s announcement of two federal indictments charging Sim for allegedly conspiring (1) with North Korean IT workers to generate revenue through illegal employment at companies in the United States and abroad; and (2) with over-the-counter cryptocurrency traders to use stolen funds to buy goods for North Korea.”

KEY Difference Wire helps crypto brands break through and dominate headlines fast