Operation Economic Outcast targets the π€πŸ• 𝐍𝐞𝐭𝐰𝐨𝐫𝐀, a Russia-linked shadow banking system used by Iran, the IRGC, Hamas, Russian illicit-finance actors, cybercriminals, and sanctions evaders. OFAC designated A7 as a significant transnational criminal organization, while FinCEN proposed cutting its Sub-Agents off from covered fund transfers and issued an alert identifying suspicious-activity indicators.

INDIVIDUALS

  • 𝐈π₯𝐚𝐧 𝐌𝐒𝐫𝐨𝐧𝐨𝐯𝐒𝐜𝐑 𝐒𝐑𝐨𝐫 β€” Sanctioned and convicted criminal fraudster who leads the A7 Network; nationality/location not specified in the release.

ENTITIES

  • π€πŸ• 𝐍𝐞𝐭𝐰𝐨𝐫𝐀 β€” Russia-linked global shadow banking network designated as a significant transnational criminal organization. Uses controlled third-country Sub-Agents, falsified trade and import-export records, misleading goods descriptions, masked account access, and custom-built VPNs to disguise illicit payments as legitimate commerce.
  • π€πŸ• 𝐋𝐋𝐂 β€” A7 Network entity previously designated on August 14, 2025.
  • 𝐎π₯𝐝 π•πžπœπ­π¨π« 𝐋𝐋𝐂 β€” Previously designated A7 Network entity and issuer of the blocked, ruble-backed A7A5 token.
  • ππ¨π›π’π­πžπ± β€” Iran’s largest digital asset exchange, designated June 2, 2026; linked to the A7 Network.

KEY NETWORK ACTIVITY

  • Supported transactions involving the Central Bank of Iran, the IRGC, Hamas, Iranian oil sales, weapons procurement, Russia-linked illicit finance, ransomware actors, restricted-goods procurement, and North Korean cryptocurrency exchange hacks.
  • Sub-Agents processed more than $17 billion globally from January 2025 through June 2026.
  • A7 claimed that by January 2026 it was processing more than 2,000 daily transactions totaling over 7.5 trillion rubles, approximately $91.5 billion or 13% of Russia’s 2025 foreign trade.
  • One Sub-Agent transacted with Iranian β€œshadow fleet” entities; it and a sister company received nearly $140 million from Iranian sanctions-evasion actors.
  • Another Sub-Agent transferred approximately $1.6 million to a company linked to Iranian sanctions evasion and weapons procurement.
  • A7 staff wholly control Sub-Agent websites and bank accounts, using custom VPN infrastructure to conceal their locations and execute payments rapidly.

FINCEN MEASURES

  • Proposed a rule under Section 9714(a) of the Combating Russian Money Laundering Act prohibiting transmittals of funds involving A7 Network Sub-Agents.
  • Public comments close 30 days after publication in the Federal Register.
  • Issued an alert with red flags to help financial institutions detect, report, and investigate A7-related suspicious activity.
  • The action follows the UK National Crime Agency’s August 31, 2026 alert concerning A7 sanctions evasion involving Russia and Iran.

SANCTIONS AND TECHNICAL IMPLICATIONS

  • All A7 Network property and interests in property within U.S. jurisdiction are blocked, including transactions involving Sub-Agents acting for or on behalf of A7.
  • Entities owned 50% or more, directly or indirectly and individually or in aggregate, by blocked persons are also blocked.
  • The ruble-backed π€πŸ•π€πŸ“ token is blocked because it was issued by designated 𝐎π₯𝐝 π•πžπœπ­π¨π« 𝐋𝐋𝐂 and designed to facilitate sanctions evasion and generate revenue for sanctioned infrastructure providers.
  • No new cryptocurrency wallet addresses, wind-down licenses, or FAQs were announced.
  • U.S. and foreign persons may face civil or criminal exposure; OFAC civil penalties may apply on a strict-liability basis.

Source: https://home.treasury.gov/news/press-releases/sb0644/