OFAC Drops the A7 Hammer: 348,000 Banks Get a New Homework Assignment 🧾

The U.S. Treasury on Thursday designated the A7 Network as a significant transnational criminal organization, accusing the Russian shadow banking operation of helping Iran and the Islamic Revolutionary Guard Corps evade sanctions, and proposed a rule that would sever its front companies from the American financial system, including crypto firms. The Office of Foreign Assets Control listed the entity with nodes in Russia, Kyrgyzstan, Nigeria and Zimbabwe, while the Financial Crimes Enforcement Network proposed prohibiting transmittals of funds involving what it calls the network's Sub-Agents, the companies A7 uses to launder sanctioned payments as ordinary trade. "Today, Treasury took unprecedented action against the A7 Network, a shadow banking network with ties to Russia used by the Iranian regime to evade sanctions as part of Operation Economic Outcast," Treasury said in an Oct. 1, 2026 statement.

FinCEN is invoking section 9714 of the Combating Russian Money Laundering Act and selected the sixth of six special measures, a transmittal-of-funds prohibition. TRM Labs noted that the fifth measure, which restricts correspondent accounts, would have left a gap because A7A5 transactions move outside correspondent banking entirely. The sixth measure instead binds roughly 348,000 institutions, crypto exchanges among them, and covers both fiat and digital assets.

A7A5 is a ruble-backed token issued by Kyrgyz-registered Old Vector, operating on Tron and Ethereum, with deposits held at Promsvyazbank, Russia's state-owned defense bank. FinCEN describes a mirror architecture in which tokens move between addresses inside Russia to represent payments abroad, while Sub-Agents execute the matching fiat transfers in dollars, yuan, dirhams and euros, with the two sides firewalled from one another. More than 180 entities processed at least $179.1 billion in A7A5 between February 2025 and June 2026, with the flow historically routed almost entirely through the sanctioned exchanges Garantex and Grinex. The token is most often used as a non-freezable bridge into USDT and then into fiat.

Russian crypto exchange Grinex said Thursday that it was hacked for more than 1 billion rubles, roughly $13 million, according to an official statement translated from its Telegram channel, with the firm alleging the exploit was conducted by "Western special services." Since a reported hack at Grinex in April, A7A5 supply has consolidated into unhosted wallets, which FinCEN reads as a possible pivot away from sanctioned venues. The proposed rule will now undergo a public comment period before any final action is taken.