Episode 277

31st August – 3rd September 2026

Sanctions

US Targets UAE and Hong Kong Financial Nodes in Expanded "Operation Economic Outcast" Sanctions Against Iran

The United States government has intensified its "Operation Economic Outcast" sanctions campaign against Iran by targeting several international financial facilitators. Under the counterterrorism authorities of Executive Orders 13224 and 13902, the US imposed sanctions on Reza Mohammad Taeedi, the Dubai branch manager of Iran’s state-owned Bank Melli, and an unnamed Hong Kong-based company for allegedly helping designated Iranian entities, including the Islamic Revolutionary Guard Corps-Qods Force (IRGC-QF) and the Ministry of Defence, access the international financial system. Concurrently, the Financial Crimes Enforcement Network (FinCEN) proposed a rule under Section 311 of the USA PATRIOT Act to revoke the US correspondent banking access of Banque Misr UAE, assessing that the institution serves as a critical node for the Iranian regime to acquire US dollars.

UK Issues Nationwide Alert on Russian A7 Sanctions Evasion Network and Doubles Maximum OFSI Fines

The UK National Crime Agency (NCA) and National Economic Crime Centre (NECC), working with the Office of Financial Sanctions Implementation (OFSI) and the Foreign, Commonwealth and Development Office (FCDO), have issued their first nationwide, industry-wide flash alert on the Russian A7 sanctions evasion network. Established in 2024 with state-level backing from Promsvyazbank (PSB) and VEB.RF, alongside Russian-Moldovan oligarch Ilan Shor, A7 claims to have settled more than $86 billion in transactions during its first year. The network helps clients bypass international trade and financial restrictions by routing fiat-currency and cryptoasset payments through third-country financial institutions, shell companies and Russia-controlled “sub-agents,” while using virtual private networks, false trade documentation and promissory notes (“veksels”) to disguise the origin and purpose of funds. The alert also describes A7’s expansion from Kyrgyz channels into Chinese jurisdictions and African markets, and advises regulated entities to watch for red flags including newly established firms processing unusually large transactions, anomalous invoices, and mismatched digital footprints. Announcing the action at the G20 meeting in North Carolina, Chancellor of the Exchequer John Healey MP also said the UK would double the maximum civil monetary penalty available to OFSI from 50% to 100% of the value of a sanctions breach, strengthening the deterrent effect of the enforcement regime. The full document is here.

UK Sanctions Regulator Imposes £4.7 Million Penalty on Citibank London Branch

The UK Office of Financial Sanctions Implementation (OFSI) has announced the imposition of a financial penalty of £4,732,830.58 on Citibank, N.A., London Branch (CBNA London). The penalty, issued under the Policing and Crime Act 2017, was for breaches of the Russia (Sanctions) (EU Exit) Regulations 2019 and the Global Anti-Corruption Sanctions Regulations 2021. OFSI determined that between 2022 and 2025, CBNA London processed 970 payments with a cumulative value of £19,720,127.43 which violated financial sanctions prohibitions. The majority of the breaches occurred in 2022 following Russia's invasion of Ukraine, stemming from staff errors, manual processing backlogs, and screening system deficiencies, such as the bank's automated screening system failing to recognise the Russian corporate prefix "PAO" on restricted accounts. The final penalty reflects a 40% settlement and disclosure discount applied to the initial baseline penalty of £7,888,050.97, in recognition of the bank's cooperation, proactive remediation, and formal settlement within the statutory period. The notice is here.

Money Laundering

Nigerian National Sentenced to 95 Months in Prison for Laundering $3.1 Million in Multi-State Fraud Proceeds

Oluwasegun Baiyewu, a 40-year-old Nigerian national residing in Houston, Texas, has been sentenced to 95 months in prison for leading an international conspiracy which laundered over $3.1 million in illicit proceeds derived from various fraud schemes targeting US citizens. According to court documents, between May 2020 and October 2021, Baiyewu collaborated with at least six co-conspirators in the United States and Nigeria via encrypted messaging applications to coordinate the receipt of illicit funds, purchase salvaged vehicles, and export them to West Africa. The underlying fraud schemes included romance scams, unemployment insurance fraud, and a business email compromise which tricked a Puerto Rican renewable energy company into wiring approximately $280,000 to fraudster-controlled bank accounts. Following a conviction by a federal jury in August 2025 on one count of conspiracy to commit money laundering, this sentence was secured through a multi-agency investigation conducted by the US Postal Inspection Service, the US Department of Labor's Office of Inspector General, and the FBI's San Juan Cyber Task Force.

UK Gambling Commission Suspends Operating Licences of BresBet and Bet St George Over Regulatory Concerns

The UK Gambling Commission immediately suspended the operating licences of BresBet Ltd (operating bresbet.com) and Bet St George Ltd (operating betstgeorge.com) following regulatory enquiries which revealed suspected social responsibility and anti-money laundering (AML) failings. The regulator has initiated a formal review of both licences under section 116, Gambling Act 2005, and the suspensions will remain active until the Commission is satisfied that the businesses are fully compliant. While both operators are expected to treat consumers fairly and keep them informed of ongoing developments, the suspension does not prevent customers from accessing their online accounts or withdrawing outstanding funds.

QuinnBet to Pay £609,104 Settlement Following UK Gambling Commission Investigation

The UK Gambling Commission has announced that remote gambling operator QuinnBet (Gibraltar) Limited agreed to a £609,104 regulatory settlement following a compliance review which identified social responsibility and anti-money laundering (AML) failures. The Commission's investigation found that between March 2023 and August 2025, QuinnBet had insufficient controls to manage customer risk, which included allowing customers to deposit significant sums without establishing their source of funds, delaying suspicious activity reports, and failing to prevent vulnerable young adults from exceeding deposit limits due to manual processes and platform migration errors. The settlement, which includes the disgorgement of £193,118, will be directed to the UK Government's Consolidated Fund. The Gambling Commission noted several mitigating factors, highlighting that QuinnBet had no previous regulatory history, cooperated fully with the investigation, self-reported several of the issues, and has since implemented an action plan to improve its compliance systems. The public notice is here, and the press release here.

Fraud

Founder and COO of Bay Area Real Estate Investment Fund Charged in $100 Million Fraud Scheme

The US Attorney's Office for the Northern District of California has filed charges against Mark Hanf, 66, the founder and CEO of Pacific Private Money, and Nam Phan, 58, the enterprise's Chief Operating Officer. The defendants made their initial federal court appearances in San Francisco on 1st September 2026, waiving indictment for wire fraud conspiracy, with Hanf also facing an additional count of money laundering. According to the allegations, between December 2021 and December 2025, the pair operated a scheme which raised approximately $103 million from over 175 investors by concealing significant project losses and using new investor funds to pay distributions and redemptions to existing clients. The Pacific Private Money entities filed for Chapter 11 bankruptcy in June 2026, and the Securities and Exchange Commission (SEC) has filed a concurrent civil enforcement action against both defendants, who are scheduled for change of plea hearings in late September 2026 and remain presumed innocent of the allegations.

Five Indicted in Washington State for Laundering $7.4 Million in Nationwide Elder Fraud Proceeds

Federal prosecutors in the Western District of Washington have announced an indictment charging five men with participating in a conspiracy to launder over $7.4 million in fraud proceeds stolen from at least 77 elderly victims across the United States. According to the indictment, between October 2024 and March 2026, the defendants registered 21 shell companies in Washington State, opened 44 bank accounts under fake identities, and rented commercial mailboxes to receive victim funds generated from "tech support" and government or bank imposter scams. Once deposited, the funds were transferred to business bank accounts in Hong Kong and the People's Republic of China. Four of the defendants, namely Hung Chieh Kuo, Tung Wei Yeh, Hsin Chien, and Chengpeng Zhang, have appeared in court, while You Wei Liew remains sought by law enforcement. The defendants face charges of conspiracy to commit money laundering, ten counts of money laundering by concealment, and ten counts of money laundering by spending, with a trial scheduled for 9th November 2026.

Five Eyes Alliance Endorses UK-Led Measures to Combat Global Fraud Networks

During the Five Country Ministerial in Sydney, the Five Eyes alliance, which comprises the United Kingdom, the United States, Canada, Australia, and New Zealand, formally endorsed a package of UK-led measures designed to strengthen international cooperation against global fraud and online scams. Supported by UK Home Secretary Shabana Mahmood and her ministerial counterparts, the initiative seeks to establish faster intelligence-sharing mechanisms to identify cross-border scams, facilitate coordinated public-private actions to shut down illicit communication channels, and address system vulnerabilities in partnership with telecommunications providers, technology companies, and financial institutions. Additionally, the member nations backed enhanced international support for the UK-supported INTERPOL Global Fraud Taskforce to improve the mapping of organised fraud networks and assist law enforcement in disrupting transnational operations.

Market Abuse

White House Teleprompter Operator Ordered to Pay $172,000 for Prediction Market Insider Trading

The Commodity Futures Trading Commission (CFTC) has announced a settled order against Gabriel Perez for using material, non-public White House information to trade event contracts on a prediction market platform. The CFTC found that between December 2025 and February 2026, while working as a White House teleprompter operator, Perez accessed drafts of presidential speeches prior to delivery and traded "presidential mention market" contracts. These are swaps which speculate on specific words or phrases the President might use. By misappropriating this information, Perez generated $107,539.02 in profits. Under the terms of the settlement, Perez is required to disgorge his full profits and pay a $65,000 civil penalty, which represents a discount due to his exemplary cooperation with the agency. Additionally, Perez agreed to a cease-and-desist order and a three-year trading ban.

Other Financial Crime

Walmart Agrees to Pay $50 Million to Settle Federal Allegations of Unlawful Opioid Dispensing

The US Department of Justice and the Drug Enforcement Administration (DEA) have announced a $50 million settlement with Walmart Inc to resolve civil allegations that the retail chain's pharmacies violated the Controlled Substances Act (CSA) by filling thousands of invalid prescriptions for opioids and other controlled substances. According to the government's complaint, originally filed in December 2020 in the District of Delaware, Walmart's compliance team and pharmacists knowingly filled illegitimate prescriptions from suspected "pill mill" prescribers since June 2013, despite internal red flags and numerous "refusal-to-fill" reports submitted by its own retail pharmacists. In addition to the monetary payment, Walmart has entered into a memorandum of agreement with the DEA, which mandates the establishment of an employee and patient reporting hotline, proactive monitoring of pharmacy dispensing patterns, and a formalised evaluation process for suspicious prescribers. Under the settlement terms, the resolved claims remain allegations only, with no formal determination of liability.

Cybercrime

UK NCSC Issues Security Warning Over Global Cyber Targeting of Internet-Exposed Operational Technology

The UK’s National Cyber Security Centre (NCSC) has issued a security advisory warning of an increase in the cyber targeting of operational technology (OT) systems across multiple sectors globally, including in the UK, which has already resulted in limited real-world disruptions. The NCSC stated that a range of threat actors are exploiting unintended internet exposure in OT systems caused by network misconfigurations, legacy connections, or unmanaged assets. Set against a broader backdrop of geopolitical instability and technology-enabled improvements in offensive cyber capabilities, the agency assessed that the threat of offensive cyber operations from state actors has almost certainly increased. To mitigate these developing threats, the NCSC advises organisations immediately to verify their OT architectures, ensure critical hardware like Programmable Logic Controllers (PLCs) is not directly exposed to the public internet, implement multi-factor authentication (MFA), and segment operational control systems from standard business IT networks.

Cyberattack Accesses Personal Data of 8.7 million Customers at Three UK Airports

The Manchester Airports Group (MAG) has disclosed that a cyberattack targeted Manchester, London Stansted, and East Midlands airports, resulting in unauthorised access to the personal data of approximately 8.7 million customers. According to MAG, the compromised information includes email addresses, phone numbers, vehicle registration numbers, and postcodes collected from car park, lounge, and fast-track bookings, as well as in-airport Wi-Fi sign-ups. The operator clarified that the affected system did not contain customers' bank or payment details. MAG also confirmed that airport operations and customer parking services continue to run normally, and at no point was passenger safety or aviation security compromised. The group has contained the risk, contacted relevant authorities, and warned affected customers to remain cautious of unexpected communications claiming to be from the airports.

FSB Chair Warns G20 of Market Volatility and Cyber Risks from Frontier AI Models

The Financial Stability Board (FSB) has published a letter from its Chair, Andrew Bailey, to G20 Finance Ministers and Central Bank Governors warning of elevated vulnerabilities within the global financial system. Sent ahead of the G20 meeting in Asheville, North Carolina, the letter cautions that rising leverage in equity markets, which has been accelerated by leveraged exchange-traded funds (ETFs) and momentum-investment strategies, is interacting with stretched asset valuations and artificial intelligence-related optimism in a manner which could amplify a potential disorderly market correction. Furthermore, Bailey highlighted the rapid emergence of autonomous "frontier" AI models as a complex development capable of altering the speed, scale, and economics of cyber risk. To safeguard global financial stability, the FSB urged jurisdictions to prioritise international frameworks for the safe deployment of these advanced models, while advising financial institutions to strengthen their vulnerability management and recovery capabilities to survive severe, simultaneous disruptions across critical third-party technology dependencies. The press release is here, and the letter is here.