InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
OFAC issues updated Iran general license and related FAQ
On August 25, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) issued Iran General License (GL) M-2, “Authorizing the Exportation of Certain Graduate Level Educational Services and Software,” which authorizes accredited graduate and undergraduate degree-granting academic institutions in the U.S. to engage with Iranian students in online educational services and exploration of software through September 1, 2023, provided certain criteria are met. OFAC also published an updated FAQ related to GL M-2. Effective August 25, GL M-2 supersedes and replaces GL M-1.
Treasury announces MOU with Israel
On August 25, the U.S. Treasury Department announced a bilateral Memorandum of Understanding (MOU) on Cybersecurity Cooperation with the Ministry of Finance of the State of Israel (MOF). According to Treasury, the MOU “builds on U.S. Deputy Secretary of the Treasury Wally Adeyemo’s visit to Israel in November 2021 that established a bilateral partnership to protect critical infrastructure in the financial sector and recognized the importance of deepening cooperation on cybersecurity to protect the integrity of the international financial system.” While noting that Treasury has a “long-standing cybersecurity information sharing relationship” with MOF, the announcement stated that the MOU “formalizes and strengthens the close partnership between both agencies.” Specifically, the MOU enhanced collaboration in: (i) information sharing relating to the financial sector including cybersecurity information on incidents and threats; (ii) staff training and study visits to promote cooperation in the area of cybersecurity; and (iii) competency-building activities such as the conduct of cross-border cybersecurity exercises.
House Republican concerned about Treasury sanctions on virtual currency mixer
On August 23, Representative Tom Emmer (R-MN) sent a letter to Treasury Secretary Janet Yellen raising privacy and due process concerns related to recent “first-of-their-kind” sanctions issued against a virtual currency mixer accused of allegedly laundering more than $7 billion in virtual currency, including more than $455 million stolen by a Democratic People’s Republic of Korea state-sponsored hacking group that is separately subject to U.S. sanctions (covered by InfoBytes here). The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) said the sanctions resulted from the company “having materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of, a cyber-enabled activity originating from, or directed by persons located, in whole or in substantial part, outside the United States that is reasonably likely to result in, or has materially contributed to, a significant threat to the national security, foreign policy, or economic health or financial stability of the United States and that has the purpose or effect of causing a significant misappropriation of funds or economic resources, trade secrets, personal identifiers, or financial information for commercial or competitive advantage or private financial gain.” (Covered by InfoBytes here.)
Emmer stressed, however, that adding the company to OFAC’s Specially Designated Nationals and Blocked Persons (SDN) List seemed to diverge from previous OFAC precedent since several of the company’s designated “smart contract addresses” do not appear to be a person, entity, or property, but rather are distributed technological tools that are not controlled by any entity or natural person. “OFAC has a long, commendable history of utilizing financial sanctions to enhance the national security of the United States,” the letter said. “Nonetheless, the sanctioning of neutral, open-source, decentralized technology presents a series of new questions, which impact not only our national security but the right to privacy of every American citizen.” Emmer referenced May 2019 guidance issued by FinCEN (covered by InfoBytes here), which he said drew “a distinction between ‘providers of anonymizing services’ (including ‘mixers’)” which are subject to Bank Secrecy Act obligations and “‘anonymizing software providers’” which are not. Emmer recognized that OFAC is not bound by FinCEN regulations, but said it is his understanding that the sanctioned company is “simply the anonymizing software deployed on the blockchain.”
Emmer requested clarification from Treasury on several questions, including the factors OFAC considers when designating technology to the SDN List and how OFAC plans to “uphold the appeals process for the sanctioned addresses that have no ability to appeal the sanction to OFAC” because they “are smart contracts with no agency, corporate or personal, and as such cannot speak for themselves or those whose funds they hold.”
OFAC issues new Russia-related general licenses
On August 19, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) issued Russia-related General License (GL) 38A and GL 50. GL 38A authorizes transactions related to pension payments to U.S. persons or non-U.S. persons not located in the Russian Federation that are normally prohibited by Executive Order (E.O.) 14024 “provided that the only involvement of blocked persons is the processing of funds by financial institutions blocked pursuant to E.O. 14024.” GL 50 authorizes “the closing of an account of an individual, wherever located, who is not a blocked person” held at financial institutions blocked pursuant to E.O. 14024. GL 50 also permits “the unblocking and lump sum transfer of all remaining funds and other assets in the account to the account holder, including to an account of the account holder held at a non-blocked financial institution.”
OFAC sanctions Liberian officials
On August 15, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 13818 against two Liberian government officials under the Global Magnitsky Human Rights Accountability Act. According to OFAC, the sanctioned individuals are involved in ongoing public corruption in Liberia, and the sanctions are intended “to target[] perpetrators of serious human rights abuse and corruption around the world.” As a result, all property, and interests in property of the designated individuals and entities, “and of any entities that are owned, directly or indirectly, 50 percent or more by them, individually, or with other blocked persons, that are in the United States or in the possession or control of U.S. persons, must be blocked and reported to OFAC.” U.S. persons are generally prohibited from engaging in transactions with the designated persons. OFAC further warned that engaging in certain transactions with the designated individuals entails risk of sanctions.
OFAC sanctions “mixer” for laundering over $7 billion in virtual currency
On August 8, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 13694 against a virtual currency mixer accused of allegedly laundering more than $7 billion in virtual currency since 2019. According to OFAC, this amount includes more than $455 million stolen by a previously sanctioned Democratic People’s Republic of Korea state-sponsored hacking group (covered by InfoBytes here). OFAC stated that the designations resulted from the company “having materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of, a cyber-enabled activity originating from, or directed by persons located, in whole or in substantial part, outside the United States that is reasonably likely to result in, or has materially contributed to, a significant threat to the national security, foreign policy, or economic health or financial stability of the United States and that has the purpose or effect of causing a significant misappropriation of funds or economic resources, trade secrets, personal identifiers, or financial information for commercial or competitive advantage or private financial gain.” Under Secretary of the Treasury for Terrorism and Financial Intelligence, Brian E. Nelson, added that the company “repeatedly failed to impose effective controls designed to stop it from laundering funds for malicious cyber actors on a regular basis,” and stressed that Treasury “will continue to aggressively pursue actions against mixers that launder virtual currency for criminals and those who assist them.” As previously covered by InfoBytes, in 2020, Treasury’s FinCEN penalized a bitcoin mixer $60 million for violating the Bank Secrecy Act.
As a result of the sanctions, all property and interests in property of the sanctioned entity that are in the United States or in the possession or control of U.S. persons must be blocked and reported to OFAC, as well as “any entities that are owned, directly or indirectly, 50 percent or more by one or more blocked persons.” OFAC noted that its regulations prohibit U.S. persons from participating in transactions with designated persons unless authorized by a general or specific license issued by OFAC or exempt.
Treasury further stressed that players in the virtual currency industry should take a risk-based approach for assessing risks associated with different virtual currency services, implementing measures to mitigate risks, and addressing the challenges anonymizing features can present to anti-money laundering/countering the financing of terrorism sanctions obligations. “[M]ixers should in general be considered as high-risk by virtual currency firms, which should only process transactions if they have appropriate controls in place to prevent mixers from being used to launder illicit proceeds,” Treasury said.
OFAC sanctions Russian companies and other entities
On August 1, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced several new sanctions in response to Russia’s invasion of Ukraine. The new sanctions, issued pursuant to Executive Order 14024, target elites, a major multinational company, a sanctions evasion operation, and a yacht used by a sanctioned individual. The action was taken together with the U.S. Department of State, which imposed additional sanctions on entities and individuals, as well as visa restrictions. As a result of the sanctions, all property and interests in property belonging to the sanctioned persons that are in the U.S. or in the possession or control of U.S. persons, and “any entities that are owned, directly or indirectly, 50 percent or more” by the targeted persons are blocked and must be reported to OFAC. Additionally, U.S. persons are prohibited from engaging in any dealings involving the property or interests in property of blocked or designated persons, unless exempt or authorized by a general or specific OFAC license.
The following day, OFAC issued several new Russia-related General Licenses (GLs). OFAC also published three frequently asked questions regarding “Russian Harmful Foreign Sanctions.”
OFAC sanctions Iranian petrochemical network
On August 1, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 13846 against companies used by one of Iran’s largest petrochemical brokers to facilitate the sale of Iranian petroleum and petrochemical products from Iran to East Asia. The designations follow OFAC sanctions announced on July 6 against a network of individuals and entities for facilitating the delivery and sale of hundreds of millions of dollars’ worth of Iranian petroleum and petrochemical products from Iranian companies to East Asia through a web of Gulf-based front companies (covered by InfoBytes here). As a result of the sanctions, all property and interests in property of the sanctioned persons subject to U.S. jurisdiction, as well as any entities owned 50 percent or more by such persons, are blocked and must be reported to OFAC. U.S. persons are also generally prohibited from entering into transactions with the sanctioned persons. Additionally, OFAC warned that “any foreign financial institution that knowingly facilitates a significant transaction for any of the individuals or entities designated today could be subject to U.S. sanctions.”
Treasury establishes data hub to assist with climate-risk assessments
On July 28, the U.S. Department of Treasury’s Office of Financial Research (OFR) announced the establishment of the Climate Data and Analytics Hub pilot, which will be used to help financial regulators assess risks to financial stability due to climate change. According to the announcement, the Climate Data and Analytics Hub permits participants to integrate data from across the federal government, including wildfire, crop condition, precipitation, and other climate-related data, with their public supervisory data for a more precise view of the relationship between climate change and financial stability risk. Additionally, it is “equipped with statistical and visualization applications that will allow deeper insight into climate-related financial risks and vulnerabilities.” Access to the pilot is initially limited to the Federal Reserve Board of Governors and the Federal Reserve Bank of New York, with the goal of expanding access to all of the Financial Stability Oversight Council member agencies. The OFR also released a Fact Sheet, which provides more information on the Climate Data and Analytics Hub.
FSOC releases fact sheet on climate-related progress
On July 28, the Financial Stability Oversight Council (FSOC) released a Fact Sheet detailing the progress made to-date by the FSOC’s members in implementing the climate-related financial risk report’s recommendations. As previously covered by InfoBytes, in October 2021 the FSOC released a report, Report on Climate Related Financial Risk, identifying climate change as an emerging threat to financial stability and issued over 30 related recommendations to financial regulators. According to the Fact Sheet, the FSOC has made substantial progress since the October 2021 report by: (i) enhancing public climate-related disclosure; (ii) assessing and mitigating climate-related risks that could threaten U.S. financial stability; (iii) building capacity and expanding efforts to address climate-related financial risks; and (iv) filling climate-related data and methodological gaps.