Treasury hits Iran-Russia shadow-banking network A7 with rare TCO designation and fund-transfer ban

The Treasury Department on Thursday designated the Iran-linked, Russia-tied A7 shadow-banking network as a transnational criminal organization and moved to cut its front companies off from the U.S. financial system -- part of a three-pronged strike Treasury calls "unprecedented action."

Three moves at once

On Thursday afternoon, the Treasury Department rolled out what it called "unprecedented action" against the A7 Network, a shadow-banking network with ties to Russia that Treasury says the Iranian regime has used to evade sanctions. FinCEN proposed a rule that would prohibit transmittals of funds for transactions involving the network's Sub-Agents. FinCEN also issued an Alert to help financial institutions detect and report suspicious A7 activity. And OFAC sanctioned the A7 Network itself as a significant transnational criminal organization.

"Treasury is dismantling the financial infrastructure that allows Iran and other adversaries to evade sanctions, move illicit funds, and undermine the integrity of the global financial system," said Secretary of the Treasury Scott Bessent. "Today's action targeting A7 continues Treasury's unprecedented efforts to isolate Iran and its financial enablers and sends a clear message that if you facilitate illicit finance for America's adversaries, you will lose access to the U.S. financial system."

A front-company web led by a convicted fraudster

Treasury says the network was "created and backed by U.S.-sanctioned persons in order to evade sanctions" and built a global web of Sub-Agents -- companies "purpose-built to disguise payments linked to sanctioned sectors and persons as ordinary commercial activity." The network is led, Treasury says, by Ilan Mironovich Shor, described as "a sanctioned and convicted criminal fraudster."

OFAC's sanctions-list entry for the action is spare. It lists four jurisdictions -- Russia, Kyrgyzstan, Nigeria and Zimbabwe -- gives an organization-established date of 2024, and tags the network [TCO], for transnational criminal organization. No Sub-Agent companies are named anywhere in the release, which limits what can be attributed to any specific company.

The scale figures are striking, and Treasury is careful about whose figures they are. By A7's own account, as of January 2026, the network claimed to process more than 2,000 transactions a day, totaling more than 7.5 trillion rubles -- a U.S. dollar equivalent of $91.5 billion, or about 13 percent of Russia's 2025 foreign-trade transactions. FinCEN's own investigation found the Sub-Agents processed more than $17 billion between January 2025 and June 2026, aggregated globally.

The Iran thread: $140 million and $1.6 million

The Iran connection is enforcement-significant but, in dollar terms, far smaller than the network's totals -- the release gives only two concrete examples. One Sub-Agent, Treasury says, "directly transacted with entities involved in Iran's 'shadow fleet'" -- the tankers, shipping companies and front companies used to transport and sell Iranian oil in contravention of U.S. and international sanctions -- and that same Sub-Agent and its sister company "received nearly $140 million from entities involved in Iranian sanctions evasion." A separate Sub-Agent transferred roughly $1.6 million to a company linked to Iranian sanctions evasion and weapons procurement.

Beyond the dollar examples, Treasury says the Sub-Agents built pathways for the Central Bank of Iran, the Islamic Revolutionary Guard Corps and Iran-backed terrorist organizations to move funds through the international financial system; that the action "underscores the A7 Network's financial support" of the IRGC and Iranian proxies such as Hamas; that the network was linked to Nobitex, Iran's largest digital-asset exchange, which OFAC designated on June 2, 2026; and that it facilitated transactions tied to North Korean hacks of cryptocurrency exchanges.

What the FinCEN measures would actually do

The proposed rule, issued under section 9714(a) of the Combating Russian Money Laundering Act, would prohibit transmittals of funds for transactions involving the network's Sub-Agents -- and it is "not limited to Russian sanctions evasion." The same Sub-Agent rails that moved Russian illicit finance, Treasury says, carried pathways for the Central Bank of Iran, the IRGC and Iran-backed terrorist organizations. The public comment period closes 30 days after the proposal is published in the Federal Register.

The Alert is the enforcement-ops piece: a red-flag list to help banks detect, identify and report A7-related suspicious activity, plus a description of how the network uses foreign companies to reach international payment systems. Treasury says the Sub-Agents' websites and bank accounts are controlled by network staff who access the accounts through custom-built virtual private networks that mask their true locations. Today's action follows an August 31, 2026 alert on A7 from the United Kingdom's National Crime Agency.

Why the TCO label is the sharp end

The transnational-criminal-organization designation is the rare piece. It lands the A7 Network on the SDN list under the [TCO] program tag, with immediate consequences: all of its property in the United States or in the possession or control of U.S. persons is blocked and must be reported to OFAC; entities 50 percent or more owned by blocked persons are blocked as well; OFAC can impose civil penalties on a strict-liability basis; and non-U.S. persons are barred from causing U.S. persons to violate the sanctions, even unwittingly. The release does not cite an Executive Order number for the designation.

This is not the first U.S. hit on the network. Today's measures build on the August 14, 2025 designations of A7 LLC, Old Vector LLC and related entities -- and the ruble-backed A7A5 token, issued by Old Vector, was already blocked; Treasury says the network created the token "for its members to evade sanctions and transact internationally." The action continues Operation Economic Outcast, the Treasury campaign against Iran's economic lifelines that Treasury announced August 24, 2026. OFAC also published a separate same-day batch of Iran sector designations and an amended FAQ 831 -- a different action, not part of the A7 measures.

A note on the market tape: MarketWatch reported that U.S. equities turned higher Thursday afternoon -- the Dow up 0.1%, the S&P 500 up 0.3% and the Nasdaq Composite up 0.4% -- while investors "assessed" Treasury's announcement alongside other factors, including retreating Treasury yields. That is an assessment, not a causal claim; there is no documented evidence the sanctions themselves moved markets. No response from Tehran or Moscow had surfaced in any source checked as of Thursday evening.