Weekly Financial Crime Brief: 5–11 October 2026

The FinCrime Wire · Weekly Brief · By LearnAML
Sources checked 11 October 2026 · 10 minute read

Washington tightened its Iran sanctions campaign this week, with direct exposure for banks and traders in Pakistan, the Gulf and Türkiye, while dropping two long-stalled crypto proposals.

This week in brief

Foreign banks warned. OFAC told foreign financial institutions still dealing with Iran’s financial sector that they could be sanctioned at any time, without advance notice (5 October).
Iran’s shadow fleet targeted. The US designated 17 tankers and the companies and people behind them, across India, the UAE, Türkiye, Hong Kong, the UK and elsewhere. One of the tankers had carried Iranian LPG to Pakistan (8 October).
Two crypto proposals withdrawn. FinCEN withdrew its 2020 unhosted-wallet proposal and its 2023 proposal on crypto mixing. Neither will now become law (announced 5 October, published 6 October).

Sanctions

OFAC warns foreign banks doing business with Iran (5 October)

OFAC published an Alert, Notice to Foreign Financial Institutions Conducting Business with Iran, under the Treasury campaign it calls “Operation Economic Outcast”.

The message. Foreign financial institutions that continue to transact with sanctioned Iranian banks could be targeted without advance notice. They should end that activity and those relationships immediately.
Who is at risk. Institutions that give Iranian banks, or their branches and subsidiaries in third countries, access to the financial system risk designation themselves. They also face civil and criminal penalties if their Iran-related transactions cause US persons to breach sanctions.
Recent precedents cited in the Alert:
- 28 August: Treasury cut off US correspondent banking access for Banque Misr UAE.
- 4 September: Treasury designated Türkiye-based Golden Global Bank and its subsidiaries.
- 14 September: Treasury designated Russia’s VTB Bank.
Shadow banking. The Alert asks institutions to detect and disrupt Iranian “shadow banking”: networks of front companies and trusted parties that launder oil revenue. It points to three FinCEN documents for the typologies:
- the May 2026 Alert on the IRGC’s use of front companies, facilitators and digital assets;
- the October 2025 Financial Trend Analysis on Iranian shadow banking;
- the June 2025 Advisory on illicit oil smuggling and shadow banking.

Iran’s “shadow fleet” designated (8 October)

Treasury designated what it described as the remaining core of Iran’s shadow fleet. These are older tankers that move Iranian petroleum and petrochemicals to buyers in South and East Asia.

The vessels and their owners.

17 vessels were designated. Their owning companies are registered mainly in the Marshall Islands, Hong Kong, the British Virgin Islands and the UK.
The owning companies were designated under Executive Order 13902, which covers Iran’s petroleum and petrochemical sectors.

Service providers and traders. A second group was designated under Executive Order 13846:

India: Mumbai-based Samudra Marine Services and SSPL Solutions, and five Indian nationals linked to them.
UAE: ArabianPro Materials FZCO (Dubai), Hessonite Ship Management (Dubai) and Horizon Ship Management FZE (Ajman).
Türkiye: Noorzad Petrokimya, BGZ Dış Ticaret and Tüter Plastik, and Said Ahmad Noorzad, a Turkish national linked to Noorzad Petrokimya.
Iran: Padideh Plastic Poshtiban (Tehran).
UK: One Plus International (London).

Licences and removals.

General Licence EE allows a limited wind-down of transactions involving Samudra Marine Services.
Russia-related General Licence 13S was also issued.
Two vessels removed. The Hakuna Matata and Pinocchio were taken off the SDN List after being sold to non-sanctioned operators. Treasury cited a demonstrated change in circumstances.

Why banks outside the US should care. The designations carry secondary sanctions risk. A foreign bank that knowingly facilitates a significant transaction for a designated person can have its US correspondent or payable-through accounts restricted or prohibited.

Third round of “modernisation” delistings (5 October)

OFAC removed a large set of old entries from the SDN List as part of its modernisation initiative:

dozens of Iraq-era (IRAQ2) individuals and companies;
Colombian narcotics (SDNT) entries;
three Venezuela-related individuals and one Belarus-related individual.

OFAC also updated identifying details, such as CURP numbers and current vessel names and flags, for a number of existing entries, including Mexican narcotics designations.

Why it matters. Your screening lists should reflect the removals and corrected identifiers. Stale entries generate false positives, and outdated vessel names generate misses.

International Criminal Court added to the SDN List (9 October)

The listing. OFAC added the International Criminal Court itself to the SDN List under Executive Order 14203. It also removed one Burma-related individual.
Four general licences. At the same time, OFAC issued ICC-related General Licences 13 to 16. They authorise certain transactions:
- involving the Court generally;
- for telecommunications and enterprise software;
- for pension payments;
- concerning certain ICC detainees.

Why it matters. Institutions with any ICC-related payments, such as staff salaries, pensions, suppliers or donors, need to check them against the scope of the four licences. They should take legal advice where the position is unclear.

Enforcement

Freight forwarder settles for $175,015 (9 October)

OFAC settled with Pegasus Worldwide Logistics, a freight forwarder that handles cross-border shipments.

What happened.

Between September 2023 and February 2024, the firm helped import a machine supplied by a designated company, which amounted to dealing in blocked property.
It also took six months to respond fully to an OFAC subpoena.

The settlement.

The $175,015 covers four apparent violations of the Illicit Drug Trafficking Sanctions Regulations and six apparent violations of the Reporting, Procedures and Penalties Regulations.
OFAC treated the conduct as non-egregious and not voluntarily disclosed.

The lesson. It extends beyond banks:

Logistics firms must screen suppliers and consignors, not just consignees.
Slow or incomplete answers to a regulator’s information request can themselves be violations.

Crypto and virtual assets

FinCEN withdraws two proposed crypto rules (5–6 October)

FinCEN announced on 5 October, and published in the Federal Register on 6 October, the withdrawal of two proposals.

1. The unhosted-wallet proposal of 23 December 2020. It would have required banks and money services businesses to:

report customer transactions above $10,000 with unhosted wallets, or with wallets held at institutions in jurisdictions FinCEN identified;
keep records and verify customer identity for such transactions above $3,000.

FinCEN said it will take no further action on this proposal.

2. The section 311 “special measure” on crypto mixing of 23 October 2023. It would have treated international crypto mixing as a class of transactions of primary money laundering concern, with enhanced recordkeeping and reporting.

Reasons given.

Both withdrawals are part of the administration’s deregulatory agenda and its aim of making digital asset rules “fit for purpose”.
On mixing, FinCEN cited commenters’ concerns that the broad definition could chill legitimate activity and create a heavy reporting burden.
FinCEN also said that illicit actors continue to use mixers. It will keep monitoring them and may act in future.

What it does not change.

The notices only withdraw proposals. Existing Bank Secrecy Act obligations remain, including suspicious activity reporting.
Outside the US, the FATF Travel Rule and local regimes still apply. Examples include PVARA in Pakistan, VARA in Dubai, and EU rules under MiCA and the AML package.

FATF and standard setters

No new FATF publications appeared during the week. The main dates ahead:

FATF Plenary, 26–30 October 2026, Paris.
- This is the first plenary under the UK Presidency of Giles Thomson, which runs from 1 July 2026 to 30 June 2028.
- Updated grey and black lists are expected at the close of the plenary.
- In its June statement, the FATF said it will consider countermeasures against Myanmar if no further progress is made by October 2026. For now it asks for enhanced due diligence on Myanmar risks.
Mutual evaluations of Canada and Türkiye. Both were adopted in June, with publication promised for September–October 2026. Türkiye’s appeared on 23 September (see the regional section). Canada’s is due by the end of October.
Regional plenaries.
- EAG: 16–20 November.
- MENAFATF: 22–26 November (see the regional section).
- MONEYVAL: 8–11 December.

Pakistan, Middle East & North Africa, and Türkiye

Pakistan

The POLAR tanker. Treasury said the LPG tanker POLAR, one of the 17 vessels designated on 8 October, has carried more than 100,000 barrels of Iranian propane and butane to Pakistan since 2025.
Who should check their exposure. LPG importers, terminal operators and the banks that finance or settle their trade should check for exposure to the vessel (IMO 9050187) and its owner, Terra Nav Shipping.
Existing tool. The State Bank’s November 2025 framework for managing trade-based money laundering and terrorist financing risks is the natural reference for this review.
No new official publications confirmed. We found no new AML/CFT circulars from the SBP or FMU dated inside the week.

Gulf

United Arab Emirates

Three designations on 8 October:
- ArabianPro Materials FZCO (Dubai);
- Hessonite Ship Management (Dubai);
- Horizon Ship Management FZE (Ajman).
Banque Misr UAE. The 5 October Alert restates Treasury’s 28 August action cutting Banque Misr UAE off from US correspondent banking.
Who should act. UAE banks, free-zone corporate service providers and ship managers should treat Iran-linked shipping and petrochemical trade as a priority review area.
Mutual evaluation timing. The FATF assessments calendar still lists the UAE’s joint FATF-MENAFATF on-site visit as June 2026, with plenary discussion in February 2027.

Saudi Arabia and Bahrain

No new official publications. We confirmed no new AML/CFT publications from either country dated inside the week.
On-site visits next month. The FATF assessments calendar lists joint FATF-MENAFATF on-site visits for both Saudi Arabia and Bahrain in November 2026, with plenary discussion in June 2027.
Preparation. Firms in both countries should expect assessor meetings and sample-file requests in the coming weeks.

Wider MENA

Iraq. Iraq was added to the FATF grey list in June 2026. The FATF reviews listed jurisdictions’ progress at each plenary. Note that the 5 October OFAC delistings concerned legacy entries under the old Iraq sanctions programme, not current Iraq risk.
MENAFATF. The UAE holds the MENAFATF presidency for 2026. Its stated priorities include preparing members for mutual evaluations, virtual-asset and fintech risks, and asset recovery. Bahrain takes over in 2027. The next MENAFATF plenary is listed for 22–26 November 2026, with dates and location to be confirmed.

Türkiye

This week. Four Turkish parties were designated on 8 October for Iranian petroleum and petrochemical trade:
- Noorzad Petrokimya (Istanbul) and Said Ahmad Noorzad, a Turkish national linked to it;
- BGZ Dış Ticaret (Istanbul);
- Tüter Plastik (Gaziantep).
Golden Global Bank. The 5 October OFAC Alert also cites Treasury’s 4 September designation of Türkiye-based Golden Global Bank and its subsidiaries.
Recent context: Türkiye’s new mutual evaluation (published 23 September). The FATF found:
- Technical compliance: compliant or largely compliant on 38 of the 40 Recommendations, with partial compliance on R.7 (proliferation financing sanctions) and R.8 (non-profit organisations).
- Effectiveness: substantial on 3 of the 11 outcomes and moderate on the other 8.
- Follow-up: Türkiye is in enhanced follow-up.
- Ministry reaction. The Treasury and Finance Ministry said there is no risk of a return to the grey list, which Türkiye left in June 2024.
The priority for Turkish banks and traders. Iran-linked petrochemical and plastics trade, which is exactly where this week’s designations landed.

What this means for compliance teams

Screen the 8 October designations now, including vessels by IMO number. Check shipping, trade finance and correspondent files for the vessels and their owners. Apply the 50 per cent ownership rule to related companies.
Review Iranian “nested” exposure. Banks with correspondents in the Gulf, Türkiye or South Asia should ask those correspondents directly about their Iranian exposure. Test transaction monitoring against FinCEN’s shadow-banking typologies.
Process removals as carefully as additions. The 5 October delistings and data corrections should flow through to your screening lists, alert rules and case records.
Do not loosen crypto controls because of the US withdrawals. They remove proposed US obligations only. Travel Rule, risk assessment and suspicious activity reporting obligations, and your local regulator’s rules, are unchanged.
Treat regulator information requests as deadlines. Pegasus was penalised partly for a slow, incomplete answer to a subpoena.
Get ready for FATF list changes. Plan to update high-risk country lists and EDD triggers in the week after the plenary closes on 30 October.

Learn more on LearnAML

Sanctions screening, ownership and secondary sanctions risk: Sanctions Compliance in Practice.
Customer risk and enhanced due diligence: CDD & EDD in Practice.
Mixers, unhosted wallets and the Travel Rule: Cryptoassets & Financial Crime.
New to AML? Start with the free AML Foundations & Core Concepts course.
Country context: our Pakistan, UAE and Saudi Arabia AML/CFT guides, and all country guides.

Sources

Compiled from official and public sources; reviewed by the LearnAML editor. This brief is general information, not legal advice. Last updated 11 October 2026.