On 1 October 2026 the U.S. Department of the Treasury announced action against the A7 Network, which it describes as a shadow banking network with ties to Russia that the Iranian regime used to evade sanctions. The Financial Times has separately reported an investigation identifying more than 200 front companies and roughly $6.9 billion in transactions. We have attributed that figure to the FT’s reporting and have not independently verified it.
This is not another sanctions news bite. It is a due diligence lesson for banks, exporters, manufacturers and distributors, including those trading through the Middle East: a clean name on a list is the start of an assessment, not the end of one.
Crest.Digital’s agentic due diligence maps entities, directors, owners, related parties and payment links, then keeps monitoring them.
Explore the PlatformWhat Treasury Described
We describe the network only as the Treasury release does, and we recommend reading it in full. According to the release, the A7 Network operates through a group of companies it calls Sub-Agents, based in third-country jurisdictions. Treasury says these entities used falsified trade documents and misleading goods descriptions to make illicit payments look like ordinary commercial activity, and used controlled companies, bank accounts, custom-built VPN infrastructure and a ruble-backed digital asset, the A7A5 token.
The release also lists three actions: OFAC sanctioned the A7 Network as a transnational criminal organization, FinCEN proposed a rule on fund transmittals involving A7 Network Sub-Agents, and FinCEN issued an alert to help institutions detect suspicious activity. Treasury gives figures for the network’s scale, including more than $17 billion processed by Sub-Agents between January 2025 and June 2026. Those are Treasury’s numbers and separate from the FT’s $6.9 billion figure, so we do not blend them here.
The Screening Gap: A List Answers the Wrong Question
Conventional screening asks whether a supplier, distributor or customer is sanctioned. That is a necessary check and an easy one to automate. But it tests identity against a list, and a structure designed to look ordinary is built to pass exactly that test. The harder question is about control.
Two Different Questions
- Counterparty screening: Is this named company or person on a sanctions list?
- Network due diligence: Who actually controls the supplier, its bank account and the transaction, and what else do they control?
- The gap: A company can answer “no” to the first while the second is never asked.
Who Actually Controls the Supplier, the Account and the Payment?
Control has three layers, and each needs its own evidence. Corporate control is about owners, directors and related entities. Financial control is about who holds and directs the bank account, and whether the payer and payee match the trade. Transaction control is about whether the goods, documents, route and geography make commercial sense together.
Ownership is where many programmes thin out. Our guides to beneficial ownership and influential persons and to the procurement networks behind Iran sanctions go deeper on tracing control. The principle is the same here: screen the people and entities that stand behind the counterparty, not only the counterparty. OFAC’s published guidance on ownership, including its 50 percent rule, is the authoritative place to check how aggregation applies.
The 8-Step Distributor EDD Process
For distributors, agents and resellers, the places where control is least visible, we recommend an eight-step Enhanced Due Diligence sequence. Each step feeds the next, and the result is an evidence file rather than a pass or fail.
Entity
Verify the legal entity: registration, status, address, licences and operating footprint. Does it look like a real business with real activity?
Directors
Identify directors and officers, and check them against sanctions, PEP and adverse sources. Look for nominee patterns and officers shared with other entities.
Ultimate Beneficial Owner
Trace ownership through every layer to the natural persons who ultimately own or control the entity, and record how you verified it.
Related Entities
Map companies linked by shared owners, directors, addresses, bank accounts or contact details, and screen the wider group, not just the named counterparty.
Bank and Payment
Confirm that account holder, bank, currency and payment route match the contracting entity and the trade. Treat unexplained third-party payers or changed details as an escalation trigger.
Geography
Assess the jurisdictions of incorporation, operation, shipping and banking, and whether the footprint makes commercial sense for the goods.
Sanctions
Screen the entity, directors, owners, related entities and payment parties against OFAC and other applicable lists, with ownership-aware logic such as the 50 percent rule where relevant.
Adverse Intelligence
Review credible adverse media, enforcement notices and regulatory alerts, keep monitoring continuously, and document the decision and owner.
Steps 4 and 5 are where network risk usually appears. Related entities and payment links are rarely in a registry extract; they surface when you connect shared directors, addresses, accounts and contacts across many records. That is a data-correlation task, and it is slow to do by hand. See our guide to supply chain due diligence by natural language query for how teams ask these questions of their own data.
Crest.Digital’s Agentic AI workflows gather the evidence, connect the entities and escalate exceptions to your analysts, with a full activity record. See the industries we cover.
Warning Signs That Should Trigger Escalation
Treasury and FinCEN are the primary source for typologies, and FinCEN’s alert should be read directly by any institution in scope. Alongside it, the themes below recur in the wider guidance from bodies such as the Financial Action Task Force. No single item proves wrongdoing; each is a reason to ask more and to document the answer.
Escalate and Document When You See
- Mismatch: Goods descriptions, invoices or shipping records that do not fit the counterparty’s known business.
- Unrelated payers: Payment from, or to, a party or jurisdiction with no clear role in the trade.
- Thin footprint: A company with little operating evidence but large transaction flow.
- Late changes: Requests to change bank details, payment currency or route close to settlement.
- Opaque ownership: Layers, nominees or shared officers that lead to the same unexplained controllers.
For Middle East businesses that trade across several jurisdictions, free zones and banking centres, a multi-country footprint can be entirely legitimate. That is why geography is a step in the process rather than a verdict. Our piece on UAE operational risk and third-party controls covers how regional teams document that judgement.
From One-Time Screening to Continuous Network Monitoring
Ownership, directors, bank details and sanctions listings change. A distributor cleared at onboarding can look different a year later, and a designation can reach a related entity without touching the name you screened. Continuous monitoring re-runs the eight steps when something changes, and escalates only the exceptions. Agentic AI does the collection and correlation across sources, while accountable people review, approve and own each decision. Read more on end-to-end vendor risk governance.
A note on scope: this article is general information, not legal advice, and it does not replace the Treasury release, FinCEN’s alert or your own counsel on sanctions obligations.
Your Turn: Do You Screen the Counterparty or the Network?
- Name only: We screen the counterparty against lists at onboarding.
- Owners too: We trace UBOs, but related entities and payments are manual.
- Network and monitoring: All eight steps, kept current.
Which describes your distributor programme today? Tell us in the comments when you share this on LinkedIn.
Crest Perspective
Financial crime compliance and third-party risk are converging: the vendor as a financial crime vector is now a live regulatory concern. Correspondent banks, payment intermediaries, and cross-border logistics providers are assessed not just for operational risk but for their exposure to sanctions-designated entities in their own supply chains. The compliance question is no longer only whether your vendor is clean — it is whether their vendors are clean.
Frequently Asked Questions
On 1 October 2026 the U.S. Treasury announced action against the A7 Network, which it describes as a shadow banking network with ties to Russia that the Iranian regime used to evade sanctions. According to the release, OFAC sanctioned the network, FinCEN proposed a rule on fund transmittals involving A7 Network Sub-Agents and issued an alert to help institutions spot suspicious activity. Treasury describes Sub-Agents as companies in third countries that disguise payments as ordinary commercial activity. Read the Treasury press release for exact wording.
Counterparty screening checks whether the name in front of you appears on a list. Treasury’s description of the A7 Network is of companies and accounts built so that payments look like ordinary trade, which means the name in front of you may be clean while control sits elsewhere. Enhanced due diligence asks who owns and controls the entity, who directs its bank account, what related entities exist, where the money moves and what credible adverse information says. A list match is a result; control analysis is the investigation.
Enhanced Due Diligence, or EDD, is a deeper level of review applied to higher-risk third parties such as distributors, agents and resellers. It goes beyond list screening to verify legal identity, directors, ultimate beneficial owners, related entities, bank and payment arrangements, geography and adverse intelligence, and it records the evidence and the decision. Triggers can include unusual payment routes, high-risk geographies, opaque ownership or sudden changes in a partner’s profile.
Treasury’s materials and FinCEN’s alert are the primary source for typologies, and teams should read them directly. Common themes in the wider guidance include trade documents or goods descriptions that do not match the business, payments routed through third countries or unrelated parties, counterparties with thin operating footprints, and requests to change bank details or payment channels. No single flag proves wrongdoing; the point is to escalate and document, not to guess.
AI agents can assemble entity, director, ownership, related-entity, payment, geography, sanctions and adverse-media evidence from many sources in one pass, link the connections between them and keep monitoring afterwards. They do the collection and correlation at scale. People still make the judgement, approve exceptions and own the decision, and the whole process should leave an audit trail a regulator can read.