Skip to content

Topic

Sanctions Evasion

Methods used to evade sanctions, including relabeled cargoes, shell companies, intermediary banks, and crypto wallets moving restricted goods or payments.

Current stories

securityOne report1 publisher

Researcher traced payments for 122 cybercrime services to one Vancouver processor in 2024

In December 2024, KrebsOnSecurity reported analyst Richard Sanders's finding that all 122 cybercrime services he tested took payments through Cryptomus. The processor listed a Vancouver address, where a CTV and IJF count found at least 90 registrations.

Reality

Evidence55
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence55
securityOne report1 publisher

Aeza-linked networks now hold 21 times the IPv4 space of 2022, Qurium finds

Qurium says Aeza International and NetCrafters together originate 536 IPv4 prefixes, up from 25 at the end of 2022. It argues that operators should follow ASNs and prefixes, because the company names around them changed through two rounds of OFAC sanctions.

Publishers:qurium.org

Reality

Evidence60
Adoption
Not scored
Hype gap+10
Incentives45
Confidence58
investConfirmed5 publishers

Bank of Russia gives peer-to-peer crypto trading until July 1, 2027

Russia's central bank says its digital currency law bars transfers to non-custodial wallets and allows peer-to-peer crypto trades only until July 1, 2027. Licensed intermediaries, Sberbank among them, will handle everything after that.

Perspective Coverage

5 publishers
Builder
Builder 21%
Operator
Operator 42%
Investor
Investor 37%

Reality

Evidence72
Adoption20
Hype gap+35
Incentives60
Confidence74
securityConfirmed17 publishers

DOJ seizes 187 laptops in raids on more than 40 Texas homes tied to North Korean IT workers

DOJ raided more than 40 Texas residences on September 21-25 and seized 187 laptops and other devices it says North Koreans used in an IT-worker scheme. The FBI says the workers now also hire freelancers in South Asia and West Africa, so US hosts are one intermediary among several.

Perspective Coverage

17 publishers
Builder
Builder 25%
Operator
Operator 55%
Investor
Investor 20%

Reality

Evidence80
Adoption
Not scored
Hype gap+25
Incentives55
Confidence78
investConfirmed8 publishers

Israeli designations supply most of the wallets in a Senate report's 84% Tether finding

Senate Democratic staff found 84% of 846 Iran-linked sanctioned wallets moved almost only in Tether's USDT. Most came from Israel's list, and any penalty rests with a Treasury and Justice Department that Senator Blumenthal says have enforced nothing.

Perspective Coverage

8 publishers
Builder
Builder 17%
Operator
Operator 41%
Investor
Investor 42%

Reality

Evidence60
Adoption75
Hype gap+30
Incentives72
Confidence62
investConfirmed6 publishers

Treasury designates Russia-linked A7 payments network a transnational criminal organization

OFAC designated A7, a Russia-linked payments network that reportedly settled over $86 billion in its first year, a transnational criminal organization. FinCEN's same-day proposal to bar transfers through A7's sub-agents gives banks and crypto firms a new screening job aimed at intermediaries.

Perspective Coverage

6 publishers
Builder
Builder 17%
Operator
Operator 47%
Investor
Investor 36%

Reality

Evidence70
Adoption62
Hype gap+15
Incentives55
Confidence70
investOne report1 publisher

Two named banks account for $2.9bn of the $6.9bn A7 moved through SWIFT-connected accounts

Leaked internal files from the Promsvyazbank-backed payments group describe roughly 100 front companies in four jurisdictions opening accounts at banks still on the network, with counterfeit invoices produced whenever compliance teams asked questions.

Reality

Evidence40
Adoption55
Hype gap+12
Incentives55
Confidence40
investOne report1 publisher

Cutting A7A5's route into liquid stablecoins took its daily volume down 96%

Leaked files put $6.9 billion of the Kremlin-linked A7 network's money through correspondent banks, while TRM counts $166 billion of A7-linked crypto volume. After the sanctions, the daily turnover of its ruble token fell 96%.

Reality

Evidence58
Adoption61
Hype gap+14
Incentives72
Confidence52
securityOne report1 publisher

Sekoia and Kudelski split the Lazarus umbrella into six DPRK sub-clusters

The joint research argues that constant reorganization under the GRIB and NIA is a control mechanism rather than administrative noise, and that treating Lazarus as one actor hides the revenue mandate driving most of the intrusions.

Publishers:kudelskisecurity.com

Reality

Evidence38
Adoption
Not scored
Hype gap+18
Incentives62
Confidence48
leadershipOne report1 publisher

Iran plans exclusion zone near Hormuz requiring permission to transit

American strikes on five Revolutionary Guard tankers and Tehran's plan to stop unpermitted vessels have turned a current-quarter fuel line into a routing and compliance question, with Brent's seven-week high of $97 the part most plans already price.

Publishers:cbsnews.com

Reality

Evidence50
Adoption35
Hype gap+20
Incentives78
Confidence50
leadershipOne report1 publisher

China's $1 Trillion Illicit Economy Runs On Rails Your Supply Chain Already Uses

Foreign Affairs puts the annual take near $1 trillion and says two-thirds of counterfeit seizures worldwide trace to China or Hong Kong. That is a counterparty problem, not a compliance checkbox.

Reality

Evidence44
Adoption58
Hype gap+24
Incentives34
Confidence46