US Labels Russia's A7 a Criminal Network as Ruble Token Moves $179 Billion

Treasury designates A7 Network a criminal organization

On 1 October 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) designated the A7 Network a significant transnational criminal organization. The Russia-linked shadow banking operation was listed with addresses in Russia, Kyrgyzstan, Nigeria and Zimbabwe. Treasury said Iran, including its Islamic Revolutionary Guard Corps, used the network to evade sanctions. The Financial Crimes Enforcement Network (FinCEN) separately proposed a rule to bar U.S. institutions from processing transfers tied to the network's front companies, which it calls Sub-Agents. Earlier coverage: Tether's Stablecoin Became Iran's Financial Lifeline, Senate Report Alleges →.

A7A5 token moved $179 billion through sanctioned venues

FinCEN found that more than 180 entities moved at least $179.1 billion in A7A5, the network's ruble-backed token, between February 2025 and June 2026. Most of that volume passed through the sanctioned exchanges Garantex and Grinex. A7A5 is issued by Kyrgyz-registered Old Vector, runs on the Tron and Ethereum blockchains, and is backed by ruble deposits at Promsvyazbank, Russia's state-owned defense bank. The network most often converts A7A5 into Tether's USDT, then into fiat currency for payments abroad.

FinCEN rule reaches both fiat and crypto

FinCEN acted under Section 9714 of the Combating Russian Money Laundering Act, which offers six special measures. It chose the sixth, a transmittal-of-funds prohibition that reaches both fiat and crypto. The proposed rule would bind roughly 348,000 financial institutions, crypto exchanges among them. A correspondent-account restriction would have left a gap, FinCEN said, because A7A5 transactions move outside correspondent banking entirely.

Sub-agents processed $17 billion across 83 countries

On the fiat side, A7 created or acquired hundreds of Sub-Agents holding accounts at about 435 financial institutions across at least 83 countries. Those accounts processed more than $17 billion between January 2025 and June 2026. Staff ran the accounts from Moscow using custom virtual private networks (VPNs) that made the activity appear to originate in Dubai, Hong Kong or Bishkek. One Sub-Agent and a sister company received close to $140 million from firms involved in Iranian sanctions evasion, Treasury said.

USDT serves as the network's bridge into liquidity

The network depends on liquid assets to move value across borders. USDT, the stablecoinREAD → A7A5 most often converts into, traded at $1.00 with a market capitalization of about $184 billion on 2 October 2026 (CoinPaprika, 2 October 2026). That scale makes the stablecoin a common conversion point out of a blocked, ruble-backed token.

"Treasury is dismantling the financial infrastructure that allows Iran and other adversaries to evade sanctions, move illicit funds, and undermine the integrity of the global financial system", 1 October 2026. — Scott Bessent, Treasury Secretary, U.S. Department of the Treasury

Action builds on earlier sanctions against the network

The A7 Network launched in September 2024, founded by fugitive Moldovan oligarch Ilan Shor and Promsvyazbank. By January 2026 it claimed to handle more than 2,000 transactions a day, with a stated historical volume of 7.5 trillion rubles, about $91.5 billion. The move builds on an August 2025 designation of A7 entities, including Old Vector. The European Union had sanctioned parts of the network, and the UK's National Crime Agency issued an alert in August 2026. The comment period on the proposed rule closes 30 days after it appears in the Federal Register.

Primary source: Source ↗