The U.S. Treasury has gone after A7 Network, a Russia-linked financial network that officials say helped sanctioned actors move money through banks, companies, and crypto rails while hiding the real source and destination of funds.
- OFAC designated A7 Network as a significant transnational criminal organization.
- FinCEN says A7 sub-agents processed more than $17 billion in dollar-denominated transactions between January 2025 and June 2026.
- The proposed U.S. transfer ban covers conventional funds and convertible virtual currency, including crypto tied to the network.
- Treasury linked A7 to Iran, Nobitex, and other illicit actors, treating crypto as one piece of a wider sanctions-evasion machine.
On Oct. 1, the Treasury Department announced a coordinated move against A7 Network: an OFAC sanctions designation and a FinCEN proposal that would bar covered U.S. financial institutions from transmitting funds involving identified A7 sub-agents. Treasury Secretary Scott Bessent put it bluntly, warning that facilitators could “lose access to the U.S. financial system.”
That is the real weapon here. When Washington wants to hurt a network, it does not always start with handcuffs. It starts with the dollar system.
OFAC’s designation labels A7 Network a significant transnational criminal organization, which means property held by U.S. persons must be frozen and U.S. persons generally cannot deal with the target. FinCEN’s proposed rule goes further by targeting the movement of funds itself, including transfers involving convertible virtual currency, the regulatory term for crypto that can be converted into or used like money.
That distinction matters. OFAC isolates. FinCEN tries to choke off the pipes. For a plain-English breakdown of the term, see the Definition and Examples of "Official">official meaning in the dictionary sense: authorized by a government or authority, not some crypto Twitter cope-fest.
What Treasury says A7 was doing
Treasury describes A7 as a shadow banking network used by sanctioned and illicit actors to move money through apparently ordinary commercial activity while obscuring who was really behind it. The mechanics are familiar to anyone who has watched sanctions evasion up close: third-country intermediaries, misleading trade records, false product descriptions, and fabricated import-export paperwork.
In plain English, it is financial concealment dressed up as normal business.
FinCEN says A7 sub-agents processed more than $17 billion in dollar-denominated transactions between January 2025 and June 2026. The proposed rule would stop covered U.S. financial institutions from transmitting funds involving those identified sub-agents. In other words, the U.S. wants banks and payment firms to treat this network as radioactive.
The agency’s action also reaches beyond traditional payments. The proposal covers both conventional funds and convertible virtual currency, which is a reminder that crypto is not being treated as a side show here. It is one of the rails Treasury wants to cut off. That’s why the Questions on Virtual Currency guidance from OFAC matters: regulators have been spelling out for years that crypto is not a sanctions-free playground, no matter how much some people pretend it is.
The crypto piece: A7A5 and the broader payment stack
Treasury also tied A7 to A7A5, a ruble-backed token issued by Old Vector LLC. Treasury said Old Vector was sanctioned in August 2025 and described A7A5 as blocked property.
That does not mean every A7A5 transfer was criminal. Blockchain volume, by itself, is not proof of wrongdoing. It can include internal routing, exchange movement, settlement churn, or other activity that is perfectly mundane. But when a token sits inside a network Treasury describes as sanctions-evasion infrastructure, the benign explanation gets a lot less convincing.
Crypto’s appeal in cases like this is obvious: fast settlement, cross-border reach, and the ability to route value through layers of intermediaries. That is useful for legitimate payments too. It is also exactly why sanctioned actors, money launderers, and procurement networks like it. The same plumbing that helps honest users can help bad actors move faster and stay harder to see.
So no, this is not a “crypto did it” story. It is a sanctions-enforcement story where crypto appears to be one of the tools being used.
Why A7 drew serious attention
Treasury said A7 had links to Iran’s Central Bank and the Islamic Revolutionary Guard Corps, and it also pointed to connections with Nobitex, the Iranian digital-asset exchange sanctioned by OFAC in June. Treasury further said some A7 activity was tied to cybercriminals and procurement networks.
That combination is what turns a messy payment network into a national-security problem. If a system is helping sanctioned Iranian actors move funds, while also touching other illicit groups, regulators are not looking at a fringe compliance issue. They are looking at financial infrastructure being abused at scale.
According to Treasury, one sub-agent and a related company received nearly $140 million from entities associated with Iranian sanctions evasion. Treasury also said a separate sub-agent transferred about $1.6 million to a company linked to Iranian sanctions evasion and weapons procurement.
Those are not small, accidental payments. They point to a network that was built to move value around restrictions, not around them by mistake.
For a broader look at the policy backdrop, see Treasury Targets A7 Network Over Iran Sanctions Evasion and the separate enforcement warning in OFAC Warns Iran Crypto Payments Can Trigger Sanctions as Nobitex faces scrutiny.
The geography matters too
FinCEN said the network operated through jurisdictions including Hong Kong, Indonesia, Kyrgyzstan, Seychelles, Türkiye and the United Arab Emirates. That kind of spread is not random. It is how evasion networks reduce risk: disperse the entities, spread the banking relationships, and make it harder for any one country or institution to see the full picture.
TRM Labs, cited in FinCEN’s work, said A7 created or acquired hundreds of sub-agents with accounts at roughly 435 financial institutions across at least 83 countries. Those figures are useful context, but they should be read as part of a broader tracing effort, not as a simple count of criminal accounts. The headline point is the same either way: this was not a tiny, local setup.
That scale is why the action matters. A7 was built to spread itself across jurisdictions and institutions so that no single chokepoint could shut it down cleanly. That is a classic sanctions-evasion playbook: divide, layer, obscure, repeat.
Why the numbers need careful reading
One figure in particular deserves caution. TRM Labs said more than 180 entities processed at least $179.1 billion in A7A5 transactions between February 2025 and June 2026. That is a huge number, but it is not directly comparable to FinCEN’s figure of more than $17 billion processed by sub-agents.
Different entities, different metrics, different time windows, and likely different measurement methods mean the numbers are not measuring the same thing. Bad crypto coverage loves to mash together giant volumes and pretend they all mean the same thing. They do not.
Earlier reporting had already flagged the Russia-backed A7A5 stablecoin as moving more than $6 billion despite U.S. sanctions, and in July, crypto.news reported that onchain analysts saw A7A5 activity fall sharply after sanctions. Previous EU scrutiny of crypto services tied to Russian sanctions evasion also cited Chainalysis data putting transaction volume linked to A7A5 at $93.3 billion at the time.
Those figures may overlap, or they may not. Without the underlying methodology, they should not be treated as interchangeable proof of the same flow. Volume is useful context. It is not a substitute for disciplined reporting. For background on that earlier enforcement angle, see U.S. sanctions A7 Network after $17B in transfers and US Sanctions Venezuela’s Tren de Aragua Gang Over $40M ATM, which shows how often these enforcement stories spill into broader anti-money-laundering terrain, sometimes with more noise than clarity. For the raw enforcement document itself, the FinCEN Alert, FIN-2026-Alert007, October 1, 2026 lays out the agency’s position in black and white.
What this means for banks and exchanges
FinCEN’s proposed transfer ban will enter a 30-day public comment period after publication in the Federal Register. The agency listed the proposal under docket FINCEN-2026-0265, and institutions filing related Suspicious Activity Reports were asked to use the key term FIN-2026-A7NETWORK.
That is Treasury telling compliance teams to start screening now, not later. The practical message to banks, payment companies, and exchanges is simple: if you touch this network, or something close enough to it, you may be inheriting a sanctions headache you do not want.
The United Kingdom has already moved in the same general direction. On Aug. 31, British authorities issued an industry-wide warning describing A7’s use of financial companies in third countries to bypass restrictions on Russian entities. When multiple jurisdictions start circling the same network, it usually means the problem is not imaginary.
This is also where the usual crypto hand-wringing gets a little too lazy. Yes, digital assets can be abused. So can banks, trade finance, shell companies, and prepaid cards. The technology is not the only issue. The issue is whether the system is built to respect compliance boundaries or route around them for whoever is paying.
In A7’s case, Treasury is saying the network was built to route around them. And if you want a reminder that regulators are still drawing red lines around tokenized money, the new U.S. Stablecoin Rules Near June 9 Deadline as GENIUS Act oversight begins, which is exactly the kind of policy backdrop that makes these enforcement actions less surprising and more inevitable. Also, yes, the internet will still try to sell you Fall Faves Up To 50% Off + Extra 30% Off Purchase mid-crisis, because apparently even sanctions enforcement must coexist with retail noise. Capitalism is a clown car, but the compliance memo still needs to get read.
Key questions and takeaways
-
Is this mainly a crypto crackdown?
No. Crypto is part of the picture, but Treasury is targeting a broader sanctions-evasion and shadow-banking network that also used companies, intermediaries, and conventional financial channels. -
What does the $17 billion figure measure?
FinCEN says A7 sub-agents processed more than $17 billion in dollar-denominated transactions between January 2025 and June 2026. It is not a pure crypto volume number. -
Why does A7A5 matter?
Treasury treats A7A5 as part of the network’s payment infrastructure. A token can speed up cross-border value movement and make enforcement harder when it is embedded in a sanctions-evasion setup. -
Does a huge blockchain volume prove crime by itself?
No. Large token flows can include legitimate settlement or internal activity. The concern here is the network context, the sanctioned links, and Treasury’s findings about evasion behavior. -
What happens next?
FinCEN’s proposal still has to go through the public comment process before it becomes final. In the meantime, U.S. institutions are being pushed to tighten screening around A7-related activity.
The bigger takeaway is not that crypto is uniquely dirty. It is that efficient financial rails are useful to everyone, including people who would rather hide than play by the rules. Treasury is treating A7 Network as sanctions infrastructure, not as a quirky token story, and that should make banks, exchanges, and compliance teams pay attention.
