According to reporting on the U.S. Treasury announcement, republished by Iran Watch, OFAC designated 10 individuals and entities on 29 September 2026 under an effort Treasury called Operation Economic Outcast. Those named were located in China, Hong Kong, Pakistan, Saudi Arabia and Turkiye, and allegedly supported procurement of weapons and components for Iran’s Ministry of Defense and Armed Forces Logistics (MODAFL).
Our Crest.Digital News Bite looks at why sanctions compliance is increasingly a network intelligence and third-party risk challenge. Watch it below, then read on for the practical workflow.
The figures and roles above come from press and republished reporting, so check the official OFAC notice for the authoritative designation list. What matters for this article is the pattern the action illustrates: a procurement network is made of connected parties, and listing one name rarely tells you who else sits around it.
Crest.Digital’s AI-powered TPRM platform combines sanctions and watchlist screening, beneficial ownership checks and adverse media with continuous monitoring and an audit-ready trail.
Explore the TPRM PlatformWhat the Action Reportedly Targeted
Reporting describes a layered network rather than a single bad actor: a MODAFL representative in Beijing coordinating procurement, an Iran-based procurement network supplying electronics, a Hong Kong supplier of electronic components, and Pakistan-based intermediaries distributing on behalf of the ministry. The items reportedly involved were electronic components and connectors used in aircraft manufacturing and missile development. Treasury Secretary Scott Bessent was quoted saying Treasury will continue to target and disrupt those who provide material, technological or financial support to the Iranian regime. The action was reportedly taken under Executive Order 13382, which targets proliferators of weapons of mass destruction and their delivery systems.
Notice how many different roles appear: a representative, a development group, a component supplier, distributors, individuals. Each sits in a different jurisdiction. A company that bought connectors from a trading firm in a third country would not see a sanctioned name in its supplier file. It would see a commercial counterparty. That gap is the point of this article.
From “Is the Supplier Sanctioned?” to “What Network Sits Behind It?”
The traditional sanctions question is binary: is this counterparty on a list? It is a necessary check, and every programme runs it. But it tests a name, and networks built to evade sanctions deliberately avoid obvious names. They use newly formed companies, nominee owners, trading intermediaries and transshipment points.
Three blind spots follow. First, ownership and control: a supplier may be majority owned or effectively controlled by a designated party without carrying that name. Second, intermediaries: agents, distributors and procurement firms sit between you and the real source or destination. Third, product and end use: dual-use components can be lawful in one context and a red flag in another, depending on who finally receives them.
These are procurement and third-party risk questions as much as compliance ones, because procurement, onboarding and distributor teams hold the data: who owns the supplier, who they sell through, what is shipped and where. Our earlier pieces on beneficial ownership verification and distributor due diligence cover the building blocks. For global enterprises, including Indian exporters and importers moving components across Asia and the Middle East, the same logic applies.
A Network-Based Sanctions Due Diligence Workflow
A practical workflow runs outward from the entity, widening the lens at each step and leaving a record. The eight stages below mirror how a network-aware analyst would work.
Entity
Start with the contracting entity: legal name, registration, address, activities and screening against sanctions and watchlists. This is the baseline most programmes already run.
UBO
Identify the beneficial owners and directors behind the entity and screen them too. Our guide to ultimate controllers and sanctions exposure explains why control matters as much as ownership percentage.
Supplier and Intermediary
Map who the supplier buys from, sells through and uses as agents or distributors. Intermediaries are where networks hide, as discussed in sanctions indirect exposure through the supplier network.
Geography
Assess the jurisdictions of the entity, owners, intermediaries and shipping routes, including transshipment points and secrecy jurisdictions.
Product
Review what is being supplied. Dual-use items such as electronic components and connectors carry different risk from commodity goods, a theme in our note on sanctions risk across technology and shipping supply chains.
End User
Establish who ultimately receives the goods and for what purpose. A clean supplier can still feed a restricted end user.
Sanctions
Screen every party in the chain against sanctions and watchlists and review adverse media, repeating on a schedule, as set out in why screening is continuous monitoring, not an onboarding check.
Investigation
Escalate unresolved links to a trained analyst with a documented rationale, decision and outcome, so the file can withstand regulatory scrutiny.
The test is whether the file can show how you got from the contract to the end user. A programme that can only show that the supplier’s name was screened on the day of onboarding has documented one step in eight. The relevant regulators’ expectations vary by jurisdiction, but the direction is consistent: they look for risk-based, documented and repeated assessment, not a one-time check.
Where Agentic AI Helps, and Where Analysts Stay in Charge
Network due diligence multiplies the work. One supplier becomes owners, directors, related companies, intermediaries and shipping parties, each needing registry data, screening and media review. That volume is where agents help most: gathering ownership and registry records, screening the whole chain, reading adverse media, linking entities and drafting a case summary.
Crest.Digital’s TPRM Agents handle screening, continuous monitoring and vendor outreach with human-in-the-loop review, and Agentic GRC extends the same discipline to compliance monitoring and remediation tracking.
The boundary matters. Whether a link indicates evasion, whether an exposure is material and whether to exit a relationship are judgements for trained compliance professionals. Agents prepare and record; people decide. Every check should be logged so decisions are reproducible, as we argue in why AI agents need audit trails, and the programme should be monitored continuously rather than at onboarding, a point also made in our piece on geopolitical third-party risk.
A Practical Playbook for Compliance, Procurement and Risk Leaders
Six Moves to Move From Name Screening to Network Intelligence
- Capture ownership at onboarding: Collect beneficial owners, directors and controlling parties for higher-risk counterparties, and screen them with the entity.
- Map intermediaries: Record agents, distributors, trading companies and procurement firms in the chain, not only the contracting party.
- Add product and end-user context: Flag dual-use items and unusual end users or routes for enhanced review.
- Weight geography sensibly: Use jurisdiction and transshipment risk as a trigger for depth, not as a blanket ban.
- Monitor continuously: Rescreen owners, entities and associated parties on a schedule and on new designations, with alerts routed to owners.
- Document escalation: Record every investigation, rationale and decision so the file stands up to regulator questions.
A word of proportion. Not every supplier needs a full network investigation, and a geography on the list does not make a counterparty guilty. Risk-based tiering decides depth, and the aim is to find the few relationships that deserve a closer look and to be able to show why. Our end-to-end vendor risk governance page shows how these steps sit inside the wider vendor lifecycle. This article is general information, not legal advice; obtain specialist sanctions counsel for specific decisions.
Crest Perspective
Financial crime compliance and third-party risk are converging: the vendor as a financial crime vector is now a live regulatory concern. Correspondent banks, payment intermediaries, and cross-border logistics providers are assessed not just for operational risk but for their exposure to sanctions-designated entities in their own supply chains. The compliance question is no longer only whether your vendor is clean — it is whether their vendors are clean.
Frequently Asked Questions
According to reporting on the Treasury announcement, OFAC designated 10 individuals and entities across China, Hong Kong, Pakistan, Saudi Arabia and Turkiye for allegedly supporting procurement of weapons and components for Iran's Ministry of Defense and Armed Forces Logistics (MODAFL), under an effort Treasury called Operation Economic Outcast. Reported targets included a MODAFL representative in Beijing, an Iran-based procurement network supplying electronics, a Hong Kong supplier of electronic components and Pakistan-based intermediaries. The action was reportedly taken under Executive Order 13382. Readers should check the official OFAC notice for the authoritative list.
Because exposure rarely sits with the direct supplier alone. Procurement networks use intermediaries, front or trading companies, agents and layered ownership across several jurisdictions to move goods. A supplier that is not itself listed can still be owned by, controlled by or acting for a designated party, or can pass components to a restricted end user. Procurement, onboarding and distributor teams therefore hold the information that sanctions teams need, namely who the real owners are, who the intermediaries are, what is being shipped and where it ends up.
It starts from the entity and moves outward. Screen the counterparty, then identify its beneficial owners and directors, then map related entities, intermediaries and procurement agents. Assess the jurisdictions involved, the products and components, and the end user. Run sanctions, watchlist and adverse media checks across the whole network rather than only the contracting name, and escalate unresolved links for investigation. After onboarding, monitor continuously, because ownership, designations and shipping patterns change.
Name screening remains necessary but is not sufficient. It tests whether a known name appears on a list. Networks designed to evade sanctions often avoid using listed names, relying on new entities, nominee owners or intermediaries in third countries. Combining name screening with ownership analysis, relationship mapping, product and geography risk and ongoing monitoring catches exposure that a one-time name check cannot, and produces a record that shows regulators what you looked at and why.
AI agents can do the repetitive, high-volume work: collecting ownership and registry data, screening entities and associated persons, reading adverse media, flagging links between suppliers and intermediaries, drafting a case summary and tracking follow-up. Escalation decisions, assessments of the likelihood of evasion and any decision to exit a relationship stay with trained compliance professionals. Crest.Digital's TPRM Agents follow this human-in-the-loop model and keep an audit trail of every check, so decisions can be reproduced for a regulator.