InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
OFAC clarifies wind-down period for Iran transactions
On January 16, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced the issuance of Iran-related Frequently Asked Question (FAQ) 816, which addresses the question, “Is there a wind-down period for Executive Order [(E.O.)] 13902?” (previously covered in InfoBytes here). According to the FAQ, individuals and entities involved in activities that qualify as sanctionable under E.O. 13902, which include activities dealing with the mining, construction, manufacturing and textiles industries in Iran, should wind down those transactions within 90 days after the E.O. was issued. OFAC stresses that new engagements entered into with the specified Iranian sectors on or after January 10 will not be considered wind-down activities. These new engagements may be sanctionable during the wind-down period, even if the new engagements commence prior to the end of the 90-day wind-down period, which expires on April 9.
Trump administration's Executive Order 13902 authorizes Iranian industry sanctions
On January 10, the Trump administration issued new sanctions intended to deny the Iranian government revenues from the export of key economic products that may be used to fund its nuclear program. Specifically, newly-issued Executive Order 13902 authorizes the Secretary of the Treasury, in conjunction with the Secretary of State, to impose asset blocking sanctions on any person determined to operate in the construction, mining, manufacturing or textile sectors of the Iranian economy, or any additional sector as they may jointly determine. Additionally, EO 13902 authorizes the imposition of certain sanctions on any person determined to have engaged in, or any foreign financial institution determined to have knowingly facilitated, a significant transaction involving one of the aforementioned sectors of the Iranian economy.
Representatives urge financial regulators to strengthen cyber infrastructures
On January 7, Representatives Emanuel Cleaver II (D-MO) and Gregory Meeks D-NY) sent a letter to nine federal financial regulators urging them to strengthen their financial infrastructures against possible cyber-attacks in the wake of recent threats against the U.S. from Iran and its allies following the killing of Iranian official Qasem Soleimani. The letter also requests that the regulators coordinate with law enforcement and regulated entities to increase information sharing surrounding cyber threats, and “communicate a strategy to further mitigate existing cyber vulnerabilities within [the U.S.] financial infrastructure by March.” The letter was sent to the Federal Reserve Board, Treasury Department, SEC, FDIC, CFPB, Federal Housing Finance Agency, Commodity Futures Trading Commission, National Credit Union Administration, and the OCC.
As previously covered by InfoBytes, NYDFS separately issued an Industry Letter on January 4 warning regulated entities about the “heightened risk” of cyber-attacks by hackers affiliated with the Iranian government. The letter provides recommendations for ensuring quick responses to any suspected cyber incidents, and reminds entities they must inform NYDFS “as promptly as possible but in no event later than 72 hours’ after a material cybersecurity event.”
NYDFS encourages regulated entities to prepare for cyber attacks
On January 4, NYDFS issued an Industry Letter warning regulated entities about the “heightened risk” of cyberattacks by hackers affiliated with the Iranian government following the killing of Iranian official Qasem Soleimani, and strongly encouraging entities to undertake preparations to ensure quick responses to any suspected cyber incidents. Specifically, NYDFS recommends that regulated entities (i) patch/remediate all vulnerabilities (especially publicly disclosed vulnerabilities); (ii) ensure employees are adequately able to handle phishing attacks; (iii) “fully implement multi-factor authentication”; (iv) “review and update disaster recovery plans”; (v) and quickly respond to further alerts from the government or other reliable sources, even outside regular business hours. The letter notes that NYDFS’ cyber regulation 23 NYCRR 500.17 (previously covered by InfoBytes here), requires regulated entities to notify NYDFS “‘as promptly as possible but in no event later than 72 hours’ after a material cybersecurity event.”
OFAC issues amended Iran-related General License, FAQs
On December 19, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) issued amended Iran General License (No. K-1), which permits transactions “ordinarily incident and necessary to the maintenance or wind down of transactions” involving certain shipping entities blocked by Executive Order 13846. In conjunction with the amendment, OFAC amended three Iran-related FAQs (FAQ 804, 806, and 807), which discuss whether sanctions on certain shipping tankers apply to their corporate parent and affiliates, the types of activities considered “maintenance” in General License K-1, and the processing of transactions by U.S. financial institutions involving a specific shipping tanker under General License K-1.
Aircraft maintenance company issued OFAC violation
On December 12, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) issued a Finding of Violation to a now dissolved Texas-based aircraft maintenance company for alleged violations of the Global Terrorism Sanctions Regulations (GTSR). According to OFAC, in 2016, the company negotiated and entered into a memorandum of understanding (MOU) for aircraft maintenance with an Iranian commercial airline that was on OFAC’s Specially Designated Nationals and Blocked Persons List (SDN List) for providing financial, material, and technological support to the Islamic Revolutionary Guard Corps-Qods Force. Although the company was aware that the airline was on the SDN list, and in fact, had made the MOU contingent upon the airline being removed from the list, they incorrectly believed that Iran General License I (GL I) allowed them to negotiate and enter into the contingent contract. The GL I, however, excluded transactions and dealings with anyone, including the airline, whose property is blocked pursuant to Executive Order 13224. In deciding to issue a Finding of Violation, OFAC considered as mitigating factors that the company had not been issued a penalty or a Finding of Violation in at least five years prior to the alleged violations and that the company was a small company with financial problems that led to its bankruptcy and dissolution. OFAC also considered a number of aggravating factors including that the airline was a “high-profile entity identified on the SDN List,” that the company knew that the airline was on the SDN list, and that the company “engaged in a reckless violation of the law” by negotiating and entering an MOU with the airline. According to OFAC, had it not dissolved, the company would have been subject to “a strong civil monetary penalty.”
OFAC updates and issues new Iran-related FAQs
On November 27, the U.S. Treasury Department's of Foreign Assets Control (OFAC) updated two existing Iran-related FAQs: FAQ 303, which discusses insurance, reinsurance, and underwriting activities; and FAQ 804, which discusses whether sanctions on certain shipping tankers apply to their corporate parent and affiliates. Additionally, OFAC issued three new Iran-related FAQs (FAQ 805-807) covering the sanctions exposure of non-U.S. persons, the types of activities considered “maintenance” in General License K, and the processing of transactions involving a specific shipping tanker under General License K.
FATF issues an advisory on jurisdictions with AML/CFT deficiencies
On November 12, the Financial Crimes Enforcement Network (FinCEN) issued an advisory on the Financial Action Task Force (FATF)-identified jurisdictions with “strategic deficiencies” in their anti-money laundering and combating the financing of terrorism (AML/CFT) regimes. As previously covered by InfoBytes, in October, FATF updated the list of jurisdictions to include the Bahamas, Botswana, Cambodia, Ghana, Iceland, Mongolia, Pakistan, Panama, Syria, Trinidad and Tobago, Yemen, and Zimbabwe. At the time, FATF noted that several jurisdictions had not yet been reviewed, and that it “continues to identify additional jurisdictions, on an ongoing basis, that pose a risk to the international financial system.”
The FinCEN advisory reminds financial institutions of the FATF October updates and emphasizes that financial institutions should consider both the FATF Public Statement and the Improving Global AML/CFT Compliance: On-going Process documents when reviewing due diligence obligations and risk-based policies, procedures, and practices. Moreover, the advisory includes public statements on the status of, and obligations involving, the Democratic People’s Republic of Korea (DPRK) and Iran, in particular. The advisory reminds jurisdictions of the actions the United Nations and the U.S. have taken with respect to sanctioning the DPRK and Iran and emphasizes that financial institutions must comply “with the extensive U.S. restrictions and prohibitions against opening or maintaining any correspondent accounts, directly or indirectly, with foreign banks licensed by the DPRK or Iran.”
Terrorist Financing Targeting Center designates network supporting IRGC and Hizballah
On October 30, the U.S. Treasury Department announced that the seven member nations of the Terrorist Financing Targeting Center (TFTC) have jointly designated 25 targets for allegedly supporting Iran’s Islamic Revolutionary Guard Corps and Hizballah, as part of Treasury’s efforts to “bolster the fight against terrorist financing.” The targets include 21 entities that comprise a “vast network of businesses providing financial support to the Basij Resistance Force” through the use of shell companies and other measures within Iran’s automotive, mining, metals, and banking industries, along with four Hizballah-affiliated individuals allegedly involved in related financial activities in Iraq. The seven members—Bahrain, Kuwait, Oman, Qatar, Saudi Arabia, the United Arab Emirates, and the U.S.—coordinate disruptive actions, share financial intelligence information, and enhance member state capacity in order to target activities posing national security threats to TFTC members, including the disruption of financial networks used to fund terrorism.
Visit here for additional InfoBytes coverage on actions involving Iran and Hizballah.
FinCEN final rule designates Iran a primary money laundering concern; new Treasury and State department mechanism to make humanitarian trade more transparent
On October 25, the U.S. Treasury Department announced the issuance of a final rule by the Financial Crimes Enforcement Network (FinCEN) to impose a fifth special measure against Iran as a jurisdiction of primary money laundering concern under Section 311 of the USA Patriot Act. The final rule prohibits U.S. financial institutions from opening or maintaining a correspondent account on behalf of an Iranian financial institution, and also prohibits U.S. financial institutions from processing transactions involving Iranian financial institutions. The final rule takes effect ten days after publication in the Federal Register.
FinCEN stated that its action is based on Iran’s abuse of the international financial system, including providing support for terrorist groups such as Hizballah and HAMAS, and builds upon Treasury’s Office of Foreign Assets Control’s (OFAC) September designation of Iran’s central bank for providing financial support to the Islamic Revolutionary Guards Corps, its Qods Force, and Hizballah (previous InfoBytes coverage here). Additionally, FinCEN determined that the Iranian regime continues to engage in deceptive financial practices through the use of front companies and shell companies, among other things, to facilitate military purchases. These actions, FinCEN noted, are “further compounded by Iran’s continued failure to adequately address its AML/CFT deficiencies, as identified by the Financial Action Task Force,” which recently re-imposed countermeasures and enhanced due diligence strategies on Iran and “called on its members and urged all jurisdictions to advise their financial institutions to apply enhanced due diligence with respect to business relationships and transactions with natural and legal persons from Iran.” (Previous InfoBytes coverage here.)
Concurrent with the imposition of the fifth special measure, Treasury and the U.S. Department of State announced a new mechanism to increase the transparency of humanitarian trade with Iran that will establish processes for participating foreign governments and financial institutions when conducting enhanced due diligence designed to mitigate the higher risks associated with Iran-related transactions. OFAC’s guidance outlines due diligence and reporting requirements for participating entities, and stipulates that “[p]rovided that foreign financial institutions commit to implement stringent enhanced due diligence steps, the framework will enable them to seek written confirmation from Treasury that the proposed financial channel will not be exposed to U.S. sanctions.”