Treasury Hides A7’s Shell List After the 2025 Miss

The U.S. Treasury branded Russia’s A7 Network a transnational criminal organization on Oct. 1, 2026, then asked banks to screen a list it will not publish. The Office of Foreign Assets Control blocked the network’s U.S. property the same day. FinCEN, Treasury’s financial-crime bureau, proposed a separate rule that would bar American institutions from moving funds, including crypto, for the foreign front companies A7 calls Sub-Agents.

Publicly naming those fronts is the step FinCEN refused to take. The bureau’s draft says a public list would let A7 stand up replacements. That is the working design, and it follows a miss: Washington already hit the core companies in 2025, and the web grew anyway.

FinCEN Would Keep A7’s Shell List Off the Public Record

The Oct. 1 package sits inside Operation Economic Outcast, the Iran pressure campaign Treasury Secretary Scott Bessent announced on Aug. 24, 2026. OFAC’s order freezes A7 property in the United States and bars U.S. persons from dealing with the network, including Sub-Agents acting for it. FinCEN’s notice of proposed rulemaking is the piece built for the names that are not on a public sanctions list.

Today’s action targeting A7 continues Treasury’s unprecedented efforts to isolate Iran and its financial enablers and sends a clear message that if you facilitate illicit finance for America’s adversaries, you will lose access to the U.S. financial system.

Scott Bessent, Treasury Secretary, Oct. 1, 2026 statement

Bessent’s line about efforts to isolate Iran and its financial enablers is the political frame. The legal frame is narrower. FinCEN found that transactions involving any non-U.S. company controlled by A7 are a class of primary money-laundering concern under section 9714 of the Combating Russian Money Laundering Act, then chose a funds-transmittal ban rather than extra paperwork or a correspondent-account clamp.

Today, Treasury took unprecedented action against the A7 Network, a shadow banking network with ties to Russia used by the Iranian regime to evade sanctions as part of Operation Economic Outcast.

Treasury’s @FinCENnews proposed a rule that would prohibit transmittals of funds…

— Treasury Department (@USTreasury) October 1, 2026

The draft, proposed as 31 CFR 1010.668, would require covered banks, brokers, and money-services firms to block payments to or from listed Sub-Agents, including crypto addresses run for them. Beyond six United Arab Emirates companies named in the filing, FinCEN says it would share a secure list through FinCEN’s FI-Portal, a closed channel already used to pass alerts to banks, and would update that list over time. The bureau wrote that it is “opting to securely provide this list only to covered financial institutions,” because a broader public release would let the A7 Network add new Sub-Agents and walk around the measure.

WHAT WE KNOW

• OFAC block: As of Oct. 1, 2026, U.S. property of the A7 Network is frozen, and U.S. persons may not deal with it or with Sub-Agents acting on its behalf.
• Named core: The action builds on the Aug. 14, 2025 listing of A7 LLC, A71 LLC, A7 Agent LLC, and Old Vector LLC, the Kyrgyz issuer of the ruble token A7A5.
• Iran use: Treasury says the same Sub-Agents moved funds for the Central Bank of Iran, the Islamic Revolutionary Guard Corps, and Iran-backed groups including Hamas.

WHAT’S UNCONFIRMED

• Final rule: The funds ban is a proposal. Comments close 30 days after it appears in the Federal Register, and listed firms may petition to come off the private list.
• Full roster: FinCEN says it has identified hundreds of Sub-Agents. The public filing names six. The rest would sit on the FI-Portal list, which outsiders cannot audit.

A sanctions specialist watching the package, Nate Sibley of the Helsinki Commission, wrote that a primary money-laundering measure is often called a financial “death sentence,” and that even the mention of it has toppled major foreign banks. He also wrote that A7 was built to sit outside U.S. jurisdiction, so the order only bites if the banks and brokers that still touch the network are forced to drop it. That is the bet inside the secret list: hide the names from A7, show them to compliance desks, and hope the desks catch the next shell before it clears.

How the Network Grew After the 2025 Sanctions

A7 launched in September 2024 as a cross-border settlement shop for Russian trade after SWIFT cuts and bank listings. Promsvyazbank, the state defense lender known as PSB, described the service at launch as support for Russian exporters under sanctions pressure. The core is three Moscow companies, A7 LLC and its units A71 and A7 Agent, jointly owned by PSB and Ilan Mironovich Shor, the Moldovan businessman Treasury calls a convicted fraudster.

OFAC went after that core on Aug. 14, 2025, in a crypto-evasion action that also re-listed Garantex and designated Old Vector. Several fronts shut. Internal records, website forensics, and company registries then showed new shells and units in Bahrain, Nigeria, the UAE, Mongolia, and elsewhere. FinCEN’s own count, as of June 2026, is hundreds of Sub-Agents with accounts at about 435 financial institutions in at least 83 countries.

FROM LAUNCH TO THE SECRET LIST

1. September 2024: A7 opens as a ruble settlement platform backed by Shor and Promsvyazbank, with Old Vector later issuing the A7A5 token in Kyrgyzstan.
2. August 14, 2025: OFAC designates A7 LLC, A71, A7 Agent, and Old Vector; related exchange infrastructure around Garantex and Grinex is hit in the same sweep.
3. Late 2025: New payer companies appear in the UAE, Bahrain, Nigeria, and other third countries after the first listings, according to company records and internal files later cited by investigators.
4. August 31, 2026: The United Kingdom’s National Crime Agency warns lenders about A7’s use for Russian and Iranian illicit finance.
5. October 1, 2026: OFAC lists the whole A7 Network as a significant transnational criminal organization, and FinCEN proposes the private Sub-Agent list.

The August 2025 designation of A7 LLC treated the Moscow companies and the token issuer as the problem. Oct. 1 treats the method as the problem. If a Sub-Agent is just a newly formed trading company in Dubai or Hong Kong, with a local nominee on the paperwork and a Moscow operator on a custom VPN, a public SDN listing is a press release that tells the shop which letterhead to retire.

Sub-Agents, Fake Invoices and the A7A5 Token

The mechanics are trade-based money laundering with a software layer. A Russian client settles in rubles inside A7. A matching Sub-Agent abroad appears as the buyer or payer, with invoices and shipping records stripped of any Russia link. A7 staff run the foreign bank accounts over virtual private networks that make the traffic look as if it starts in Dubai, Hong Kong, or Bishkek. FinCEN’s alert flags goods descriptions that do not match the supplier, sudden volume at new trading companies, and invoices that show signs of AI alteration. A custom app has been used to generate those trade records.

A7’s own marketing is the larger number. FinCEN’s dollar trace is the smaller one. They measure different things, and both are now on the record.

THE VOLUME A7 CLAIMED AND THE DOLLARS FINCEN TRACED

The $91.5 billion line is A7 talking about itself. The $17 billion line is FinCEN adding up dollar-side traffic it could see. One Sub-Agent and a sister company took in nearly $140 million from entities in Iranian sanctions evasion; another sent about $1.6 million to a firm tied to Iranian weapons buying. Those are slices, not the whole book.

THE SIX UAE FIRMS NAMED IN THE PROPOSED RULE

• Power Sphere LLC-FZ: Dubai electronics supplier that FinCEN ties to energy-sector procurement and trade-based laundering, the largest of the six named fronts.
• Hydrofusion Resources FZ-LLC: UAE energy-commodities trader that also lists food, electronics, and heavy machinery on paper.
• Gimli Trade LLC-FZ: UAE trading company already sanctioned by the United Kingdom in December 2025.
• Galadriel Trading FZCO: Dubai Silicon Oasis firm that presents as an agricultural commodities trader.
• Sigizmund FZCO: UAE front FinCEN links to dual-use goods.
• Pearl Bridge: The smallest of the six named Sub-Agents in the filing.

The crypto rail runs beside the invoices. A7A5 is a ruble-backed token issued by Old Vector, blocked since Aug. 14, 2025, and used as an internal bridge into other stablecoins and then into fiat. Treasury says the token also pays sanctioned infrastructure that profits from its circulation. The TCO listing did not drop wallet addresses, so crypto desks are left tracing flows instead of freezing a published set of accounts. That gap is why FinCEN’s draft tries to reach convertible virtual currency at the Sub-Agent as well as the wire.

U.S. Banks Would Police a List They Cannot Share

If the rule is finalized, the obligation is simple on paper and ugly in practice. A bank may process a payment unless the counterparty is on the FI-Portal list. It is not asked to guess the rest of the hydra. It is asked to keep a confidential roster current, to notify customers with a direct relationship, and to take extra due diligence on a risk basis. Listed parties may email FinCEN to argue they do not belong on the list. Comments run 30 days from Federal Register publication, under docket FINCEN-2026-0265.

THE FOOTPRINT BANKS ARE ASKED TO POLICE

• Update cycle: FinCEN says the private list will be revised to add new Sub-Agents and to drop names that no longer qualify.
• Crypto inbound: If a listed address sends tokens that cannot be stopped in flight, the draft treats a freeze or a return to sender as compliance.
• Where OFAC already blocks: An OFAC freeze satisfies the FinCEN ban on the same transfer.
• Whistleblowers: Tips that lead to a penalty above $1,000,000 can qualify for FinCEN’s award program, including Iran-proxy cases.

FinCEN also published red flags for A7 Network activity so that suspicious-activity reports can start before any final rule. The flags include new trading companies in the Kyrgyz Republic, Hong Kong, Türkiye, the Seychelles, Indonesia, and the UAE with sudden high volume, and routing through stacked intermediaries. Those are the jurisdictions where A7 has been forming, buying, or partnering with local firms that look, on paper, as if they are owned by non-Russians.

The hidden-list model solves a problem A7 taught Treasury in 2025. It creates another one. A public SDN name can be screened by every mid-size bank’s vendor file overnight. A portal list is only as good as the institutions that log in, parse updates, and map a new Dubai trading company to the account they already opened. Correspondent chains still run through places that may not see the portal at all.

Iran’s Guard Used the Same Payment Pipes

Treasury’s Iran file is why the A7 action landed on the same morning as a second Outcast release, not as a Russia-only cleanup. FinCEN says the Sub-Agents that serve Russian trade also opened paths for the Central Bank of Iran, the IRGC, and Iran-backed groups. One Sub-Agent dealt directly with firms in Iran’s shadow fleet, the tankers and fronts that move sanctioned oil. Nobitex, Iran’s largest digital-asset exchange, which OFAC listed on June 2, 2026, sits on the same map. So do ransomware crews and procurement agents buying restricted goods, and flows Treasury links to North Korean exchange hacks.

The companion action that morning targeted Iran’s rail and automotive sectors, including new sectoral determinations under Executive Order 13902. OFAC listed Iran Khodro Company and SAIPA, which Treasury says hold more than 90 percent of Iran’s domestic auto market, plus the Islamic Republic of Iran Railway Company and other rail operators. Auto and rail are, in that telling, remaining cash and logistics after oil routes came under naval pressure. A7 is the payments layer that lets those sectors, and the Guard, still clear through ordinary-looking trade.

That overlap is the point of using a Russia money-laundering statute against an Iran problem. Section 9714 was written for Russian illicit finance. FinCEN’s finding is that the same fronts now carry both books. A bank screening an energy invoice from a year-old UAE company is not being asked whether the end buyer is in Moscow or Tehran. It is being asked whether the company is on a list it cannot discuss.

A Cartel Label on a Moscow Payments Firm

OFAC’s second tool is the label. The A7 Network is now a significant transnational criminal organization under Executive Order 13581, a tag the United States has used for Mexican drug cartels, Italian mafia groups, and other syndicates. The legal test is a group with a foreign person that runs a pattern of serious crime across two or more countries, or one foreign country and the United States, and that threatens U.S. security, policy, or the economy. Treasury’s case is fraud, sanctions evasion, and money laundering at wholesale, not a street gang with a payments app on the side.

Calling a settlement firm a TCO does two jobs a normal SDN listing does not advertise. It frames the operators as criminals rather than sanctions-policy targets, which matters for foreign banks that still want a U.S. correspondent. It also pulls in anyone providing funds, goods, or services to the blocked network, and it warns non-U.S. persons against causing Americans to breach the freeze. That is the stick for the UAE, Hong Kong, and Kyrgyz shops that insist they are ordinary traders.

It does not, by itself, publish the next 200 letterheads. That is why the TCO order and the secret list were issued together. One hits the brand. The other tries to hit the stationery drawer.

Promsvyazbank Put a Convicted Fraudster in Charge

Shor owns 51 percent of A7, per Elliptic, a blockchain-analytics firm that mapped the 2025 listings. Promsvyazbank holds the rest. Shor was convicted in 2017 over the 2014 theft of $1 billion from three Moldovan banks, and he was already under U.S. sanctions for work to undermine Moldovan elections on Russia’s behalf. Treasury’s Oct. 1 release calls him a sanctioned and convicted criminal fraudster and names him as the network’s leader. PSB is the Kremlin’s defense bank, already listed for financing the military sector.

That ownership mix is the product. A convicted launderer knows how to stack foreign companies. A sanctioned defense bank knows which clients need the stack. Vladimir Putin appeared at a virtual opening of an A7 office in Vladivostok, and the firm kept a booth at the Eastern Economic Forum there in September. This was not a garage startup that drifted into evasion. It was built, in public, as a parallel rail for trade that Western banks would no longer clear.

The comment window is 30 days once the proposal hits the Federal Register. A named Sub-Agent can petition FinCEN, with a written decision at the end of that review. The last time Washington put A7’s core on a public list, the next companies opened in other countries. The list is secret so that move is harder to copy. Whether 435 banks will actually read the portal is the part the rule cannot draft.