Treasury sanctions A7 Network as transnational criminal organization

The US Treasury has stopped treating the A7 Network as a sanctions problem. It is now treating it as organized crime.

On October 1, 2026, the Office of Foreign Assets Control (OFAC) designated A7 a significant transnational criminal organization under Operation Economic Outcast. That label puts the network in a category usually associated with cartels and mafia-style syndicates, not payment processors.

The practical effect is blunt. Property tied to the network and its sub-agents that touches US persons is now blocked, and transactions with it are off-limits.

What Treasury did, and what A7 allegedly does

The OFAC designation was only half of the move. On the same day, the Financial Crimes Enforcement Network (FinCEN) proposed a rule that would prohibit fund transmittals involving A7’s sub-agents.

FinCEN also issued an alert to financial institutions to help banks and other firms spot activity connected to the network before it slips through their systems.

According to Treasury’s findings, A7 functions as a shadow banking service selling sanctions evasion at wholesale. Its toolkit reportedly includes shell companies, falsified documentation, and bespoke VPN services designed to disguise where transactions originate.

The network reportedly processed over $86 billion in cross-border settlements in its first year of operation alone. A7 has also been linked to transactions involving approximately 7.5 trillion rubles (about $91.5 billion) and $17 billion globally during certain periods.

The Russia, Iran, and crypto connections

A7 is run by Ilan Mironovich Shor, a convicted fraudster with ties to Promsvyazbank (PSB), a Russian state bank already under sanctions.

One sub-agent alone facilitated nearly $140 million tied to Iranian sanctions evasion and weapons procurement, connecting A7 directly to military supply chains.

A7 has used a ruble-backed stablecoin to settle transactions, giving sanctioned parties a way to move value without routing through traditional correspondent banks.

The network also connects to firms like Nobitex, an exchange linked to North Korean digital asset activities, tying A7 to North Korean digital asset theft through those links.

How A7 got here

A7 dates back to late 2024. It was conceived as an alternative payment system to blunt the impact of Western sanctions imposed on Russia after its invasion of Ukraine, and received substantial financial backing from Russian institutions.

On August 14, 2025, OFAC designated A7 LLC and Old Vector LLC, two entities associated with the network. The October 2026 action goes further by labeling the entire network a criminal organization, and also captures sub-agents.

What this means for banks, exchanges, and crypto markets

For financial institutions, the immediate burden is compliance. FinCEN’s alert effectively hands banks a list of red flags, and the proposed transmittal ban, if finalized, would make processing payments tied to A7 sub-agents a clear violation.

For the crypto industry, a ruble-backed stablecoin sitting at the center of a sanctions evasion scheme gives regulators a concrete example of how digital assets can be repurposed for illicit settlement. The research notes that heightened scrutiny of illicit crypto dealings could lead to broader enforcement measures and higher compliance costs across the sector.

The Nobitex connection is worth watching in particular. When an exchange is linked to both a sanctioned payment network and North Korean activity, any platform that has interacted with it may need to revisit its own transaction history.

The transmittal ban is still a proposed rule, so its final scope and timing will shape how aggressively institutions must cut ties with A7’s sub-agents.