This Week in Global Compliance — A7, Sinaloa and UK Crypto Controls Expand the Enforcement Perimeter
October 2, 2026 — Week of 26 September–2 October
Executive Summary
The period of 26 September–2 October produced a clear enforcement pattern rather than a set of isolated actions. Authorities targeted financial infrastructure, criminal facilitators and regulated access points across sanctions, fraud, cryptoassets and transnational organised crime.
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) expanded action against Iranian procurement networks on 29 September, targeted Sinaloa Cartel leadership and financial facilitators the same day, and sanctioned a Tren de Aragua financial network on 30 September following ATM jackpotting activity. On 1 October, Treasury and FinCEN escalated the response against the A7 Network, combining sanctions, suspicious-activity indicators and a proposed restriction on fund transfers involving its sub-agents. :contentReference[oaicite:0]
In the United Kingdom, the Financial Conduct Authority (FCA) secured confiscation orders in a crypto fraud case on 28 September and opened the authorisation gateway for the country's new cryptoasset regime on 30 September. These developments are reflected in the GFN Daily Briefs "FCA Secures Confiscation Orders in £1.5m Crypto Fraud Case" (28 September 2026) and "FCA Opens Authorisation Gateway for New UK Crypto Regime" (30 September 2026). :contentReference[oaicite:1]
The common signal is an increasingly network-oriented approach: enforcement is reaching the entities, payment mechanisms, crypto channels and intermediaries that enable illicit finance, while regulators are simultaneously tightening access to legitimate financial infrastructure.
Top Signals
1. Treasury combined sanctions and financial-intelligence measures against the A7 Network
On 1 October 2026, the U.S. Department of the Treasury took coordinated action against the A7 Network, a shadow-banking network with ties to Russia that Treasury said was used by Iran and other illicit actors to move funds through international financial channels. OFAC designated the network, while FinCEN proposed restricting fund transmittals involving A7 sub-agents and issued an alert containing indicators for detecting related suspicious activity. :contentReference[oaicite:2]
Treasury stated that FinCEN identified more than $17 billion processed by A7 sub-agents between January 2025 and June 2026, while the network used third-country companies, falsified trade documentation and misleading goods descriptions to disguise transactions.
Why it matters:
The action links sanctions designation with BSA reporting expectations and potential restrictions on financial transfers. Firms may need to evaluate whether their existing screening and transaction-monitoring controls can identify network-level relationships rather than relying only on individual names or entities.
Source: U.S. Department of the Treasury / OFAC and FinCEN, Operation Economic Outcast Takes Unprecedented Action Against Sanctions Evasion Network Used by Iran, 1 October 2026. :contentReference[oaicite:3]
2. Treasury targeted criminal networks through their financial facilitators and proceeds
On 29 September 2026, OFAC sanctioned nearly 50 individuals and entities connected to the Sinaloa Cartel, including money launderers, corrupt officials and other facilitators. The action focused on the Los Mayos faction and its networks around Baja California. :contentReference[oaicite:4]
On 30 September, OFAC separately designated 10 targets linked to a Tren de Aragua fraud network that allegedly stole millions from U.S. financial institutions through ATM jackpotting. Treasury stated that proceeds were moved among members and associates and that cryptocurrency transactions were used to launder some of the proceeds. :contentReference[oaicite:5]
Why it matters:
The two actions show enforcement extending beyond principal criminal organisations to the financial facilitators and movement mechanisms supporting them. This increases the relevance of network analysis, beneficiary relationships and transaction-pattern detection in financial-crime controls.
Source: U.S. Department of the Treasury / OFAC, Treasury Sanctions Sinaloa Cartel Leadership and Corruption Networks, 29 September 2026; Treasury Sanctions Financial Network of Foreign Terrorist Organization, Tren de Aragua, After Theft of Millions from U.S. Banks, 30 September 2026. :contentReference[oaicite:6]
Deep Dives
1. UK crypto supervision moved from perimeter definition to authorisation
On 30 September 2026, the UK Financial Conduct Authority opened its authorisation gateway for firms conducting cryptoasset activities covered by the new regulatory regime. Applications opened at 7am and the application period runs until 28 February 2027. Existing registrations under the Money Laundering Regulations do not automatically convert into the new FSMA permissions. :contentReference[oaicite:7]
This follows the FCA's 28 September confiscation orders against two individuals convicted in a £1.5 million crypto investment fraud. The regulator stated that at least 65 investors were defrauded and that recovered funds will be returned to victims. The GFN Daily Brief "FCA Secures Confiscation Orders in £1.5m Crypto Fraud Case" (28 September 2026) captured the asset-recovery signal ahead of the gateway opening. :contentReference[oaicite:8]
Practical impact:
- Separate existing MLR registration from future FSMA authorisation requirements.
- Map crypto activities against the new regulatory perimeter.
- Ensure fraud detection, transaction monitoring and asset-tracing capabilities support both regulatory and enforcement expectations.
Source: UK Financial Conduct Authority, FCA Opens Authorisation Gateway for New UK Crypto Regime, 30 September 2026; FCA Secures Money Back for Victims of Crypto Fraud, 28 September 2026. :contentReference[oaicite:9]
2. Iran-related enforcement continued to reach procurement and industrial channels
On 29 September 2026, OFAC sanctioned 10 individuals and entities across multiple jurisdictions for procuring weapons and weapons components for Iran's Ministry of Defense and Armed Forces Logistics. The action targeted procurement activity supporting Iran's military supply chain. :contentReference[oaicite:10]
The following day, Treasury sanctioned a separate Tren de Aragua financial network, while on 1 October it expanded Operation Economic Outcast against both Iran's remaining industrial lifelines and the A7 shadow-banking network. Treasury's industrial action covered automotive, rail, manufacturing and steel networks, including foreign suppliers and facilitators. :contentReference[oaicite:11]
Practical impact:
- Reassess sanctions exposure across procurement and trade-finance relationships.
- Review indirect exposure through suppliers, intermediaries and third-country entities.
- Incorporate trade-document inconsistencies and unusual payment structures into sanctions and AML investigations.
Source: U.S. Department of the Treasury / OFAC, Operation Economic Outcast Takes Down Iranian Military Procurement Networks, 29 September 2026; Operation Economic Outcast Targets Iran's Remaining Industrial Lifelines, 1 October 2026. :contentReference[oaicite:12]
Data Points
- 28 September: The FCA secured confiscation orders following a £1.5 million crypto investment fraud involving at least 65 victims. :contentReference[oaicite:13]
- 29 September: OFAC sanctioned nearly 50 Sinaloa Cartel-linked individuals and entities, including money launderers and facilitators. :contentReference[oaicite:14]
- 29 September: OFAC sanctioned 10 individuals and entities linked to Iranian military procurement networks. :contentReference[oaicite:15]
- 30 September: The FCA opened applications for authorisation under the UK's new cryptoasset regime. :contentReference[oaicite:16]
- 30 September: OFAC designated 10 targets linked to a Tren de Aragua ATM jackpotting and money-laundering network. :contentReference[oaicite:17]
- 1 October: Treasury and FinCEN combined sanctions, a proposed financial restriction and suspicious-activity indicators against the A7 Network. :contentReference[oaicite:18]
- 1 October: OFAC expanded Operation Economic Outcast to Iran's automotive, rail, manufacturing and steel sectors. :contentReference[oaicite:19]
Watchlist
- Implementation of the UK's new cryptoasset authorisation regime following the 30 September gateway opening.
- Further financial restrictions or reporting requirements targeting A7 Network sub-agents and related intermediaries.
- Continued sanctions against third-country procurement and trade networks supporting Iran.
- Additional disruption of financial channels used by transnational criminal organisations.
- Increased use of cryptocurrency and alternative payment channels in fraud and organised-crime laundering schemes.
- Development of network-level transaction monitoring capable of connecting counterparties, facilitators and payment flows.
Sources
- U.S. Department of the Treasury / OFAC, Treasury Sanctions Sinaloa Cartel Leadership and Corruption Networks, 29 September 2026. :contentReference[oaicite:20]
- U.S. Department of the Treasury / OFAC, Operation Economic Outcast Takes Down Iranian Military Procurement Networks, 29 September 2026. :contentReference[oaicite:21]
- U.S. Department of the Treasury / OFAC, Treasury Sanctions Financial Network of Foreign Terrorist Organization, Tren de Aragua, After Theft of Millions from U.S. Banks, 30 September 2026. :contentReference[oaicite:22]
- Financial Conduct Authority, FCA Secures Money Back for Victims of Crypto Fraud, 28 September 2026. :contentReference[oaicite:23]
- Financial Conduct Authority, FCA Opens Authorisation Gateway for New UK Crypto Regime, 30 September 2026. :contentReference[oaicite:24]
- U.S. Department of the Treasury / OFAC and FinCEN, Operation Economic Outcast Takes Unprecedented Action Against Sanctions Evasion Network Used by Iran, 1 October 2026. :contentReference[oaicite:25]
- U.S. Department of the Treasury / OFAC, Operation Economic Outcast Targets Iran's Remaining Industrial Lifelines, 1 October 2026. :contentReference[oaicite:26]
- GFN, FCA Secures Confiscation Orders in £1.5m Crypto Fraud Case, 28 September 2026. :contentReference[oaicite:27]
- GFN, FCA Opens Authorisation Gateway for New UK Crypto Regime, 30 September 2026. :contentReference[oaicite:28]