InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
OFAC issues new Syria sanctions FAQ
On November 8, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) published new Syria FAQ 934, which relates to the United Nations and the U.S. government's stabilization and early recovery-related activities and transactions involving Syria. According to OFAC, the Syrian Sanctions Regulations (SySR) § 542.513 permit, under certain conditions, “the United Nations, its Specialized Agencies, Programmes, Funds, and Related Organizations and their employees, contractors, or grantees to engage in all transactions and activities in support of their official business in Syria, including any stabilization and early recovery-related activities and transactions in support of their official business.” This authorization applies to all United Nations employees, grantees, and contractors carrying out the official business of the United Nations, specialized agencies, programmes, funds, and related organizations. This includes nongovernmental organizations and private sector entities that act as grantees or contractors.
FAQ 934 also reiterates advice from FAQ 884 that non-U.S. persons, including nongovernmental organizations and foreign financial institutions “do not risk exposure to U.S. secondary sanctions pursuant to the Caesar Syria Civilian Protection Act of 2019” for activities that would be authorized for U.S. persons under the SySR. (Covered by InfoBytes here.)
Treasury and DOJ announce sanctions and charges in ransomware attacks, FinCEN updates ransomware guidance
On November 8, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 13694 as amended against two ransomware operators and a virtual currency exchange network. According to OFAC, the virtual currency exchange, and its associated support network, are being designated for allegedly facilitating financial transactions for ransomware actors. OFAC is also designating two individuals allegedly associated with perpetuating ransomware incidents against the U.S., and who are part of a cybercriminal group that has engaged in ransomware activities and has received over $200 million in ransom payments. As a result of the sanctions, “all property and interests in property of the designated targets that are subject to U.S. jurisdiction are blocked, and U.S. persons are generally prohibited from engaging in transactions with them” and “any entities 50 percent or more owned by one or more designated persons are also blocked.” According to OFAC, the sanctions are a part of a set of actions focused on disrupting criminal ransomware actors and virtual currency exchanges that launder the proceeds of ransomware, which “advance the Biden Administration’s counter-ransomware efforts to disrupt ransomware infrastructure and actors and address abuse of the virtual currency ecosystem to launder ransom payments.” Additionally, the DOJ announced charges against the sanctioned individuals under OFACs designations, seizing approximately $6.1 million in alleged ransomware payments.
The same day, FinCEN issued an advisory, which updated and replaced its October 1, 2020 Advisory on Ransomware and the Use of the Financial System to Facilitate Ransom Payments (covered by InfoBytes here). The updated advisory is in response to the recent increase in ransomware attacks against critical U.S. infrastructure. The updated advisory also reflects information released by FinCEN in its Financial Trend Analysis Report, which discusses ransomware trends and includes information on current trends and typologies of ransomware and associated payments as well as recent examples of ransomware incidents. Additionally, the updated advisory describes financial red flag indicators of ransomware-related illicit activity to assist financial institutions in identifying and reporting suspicious transactions related to ransomware payments, consistent with obligations under the Bank Secrecy Act.
OFAC sanctions IRGC-connected entities
On October 29, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order (E.O.) 13224, as amended, as well as E.O. 13382, against members of a network of companies and individuals that supported Iran’s Islamic Revolutionary Guard Corps (IRGC) and its expeditionary unit, the IRGC Qods Force (IRGC-QF). The IRGC-QF used and proliferated lethal Unmanned Aerial Vehicles (UAVs) for use by Iran-supported terrorist groups, and to Ethiopia, where a crisis threatens to destabilize the region. Additionally, deadly UAVs were utilized in attacks on international shipping and on the U.S. OFAC also announced sanctions against the commander of the IRGC Aerospace Force (IRGC ASF) UAV Command who allegedly directs the planning, equipment, and training for IRGC ASF UAV operations. As a result of the sanctions, all property and interests in property belonging to the sanctioned individual subject to U.S. jurisdiction are blocked. U.S. persons are also generally prohibited from engaging in any dealings involving the property or interests in property of blocked or designated persons.
OFAC sanctions Lebanese individuals
On October 28, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 13441 against two Lebanese businessmen and a member of Parliament. According to OFAC, the sanctioned individuals contributed to the breakdown of good governance and the rule of law in Lebanon by profiting from the pervasive corruption and cronyism in Lebanon. As a result of the sanctions, all transactions by U.S. persons or in the U.S. that involve any property or interests in property of designated or otherwise blocked persons are generally prohibited. Additionally, “any entities that are owned, directly or indirectly, 50 percent or more by one or more blocked persons are also blocked.” U.S. persons are generally prohibited from engaging in any dealings involving the property or interests in property of blocked or designated persons.
OFAC sanctions Libyan for human rights abuse
On October 26, the U.S. Treasury Department announced sanctions pursuant to Executive Order 13726 against a Libyan national who is allegedly responsible for serious human rights abuse against migrants in Libya. According to OFAC, the individual has been identified as the de facto manager of a detention center in the country, and is “responsible for the systematic exploitation of African migrants at the detention center where these migrants are subject to various human rights abuses.” As a result of the sanctions, “all property and interests in property of the designated individual that are in the United States or in the possession or control of U.S. persons must be blocked and reported to OFAC,” and “any entities that are owned, directly or indirectly, 50 percent or more by one or more blocked persons are also blocked.” OFAC’s announcement further noted that OFAC regulations “generally prohibit” U.S. persons from participating in transactions with designated persons unless exempt or otherwise authorized by a general or specific license.
OFAC sanctions Mexican nationals
On October 6, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to the Foreign Narcotics Kingpin Designation Act against four individuals who are allegedly senior members of a Mexican-based drug cartel, which is said to be responsible for trafficking deadly drugs into the U.S. As a result of the sanctions, all property and interests in property subject to U.S. jurisdiction that belong to the sanctioned persons must be blocked and reported to OFAC. U.S. persons are also generally prohibited from engaging in any dealings involving the property or interests in property of blocked or designated persons. OFAC further notes that the designations against the individuals were made in collaboration with the Drug Enforcement Administration and Mexico’s Financial Intelligence Unit.
OFAC updates Iran, Venezuela FAQs
On September 30, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced the publication of a new Iran-related FAQ. FAQ 932 clarifies that “transactions ordinarily incident to travel to or from Iran by U.S. persons are within an exemption under the Iranian Transactions and Sanctions Regulations (ITSR), 31 C.F.R. part 560, and therefore generally are not prohibited.” OFAC also noted that U.S. persons could be prohibited from engaging in transactions associated with persons blocked by sanctions programs or authorities outside the scope of the ITSR.
The same week, on October 1, OFAC announced the publication of a new Venezuela-related FAQ. FAQ 933 clarifies that authorizations in paragraph (a) of Venezuela-related General Licenses 7C and 20B, respectively, have not expired.
OFAC issues Afghanistan general licenses and related FAQs
On September 24, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) issued two general licenses (GL) to support the ongoing flow of humanitarian efforts and other activities that support basic human needs in Afghanistan. GL 14, “Authorizing Humanitarian Activities in Afghanistan,” authorizes the U.S. government, nongovernmental organizations, and certain international organizations and entities, as well as those acting on their behalf, to engage in the provision of humanitarian assistance to Afghanistan or other activities that support basic human needs in Afghanistan. GL 15, “Transactions Related to the Exportation or Reexportation of Agricultural Commodities, Medicine, Medical Devices, Replacement Parts and Components, or Software Updates in Afghanistan,” authorizes certain transactions connected to the exportation or reexportation of agricultural commodities, medicine, and medical devices, replacement parts, components, and software updates for medical devices. OFAC also published updated four FAQs related to GLs 14 and 15 (see 928, 929, 930, and 931).
OFAC sanctions Mexican national
On September 22, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to the Foreign Narcotics Kingpin Designation Act against a Mexican-based cartel boss. OFAC noted that the designated individual allegedly oversaw a drug trafficking corridor and is allegedly responsible for smuggling drugs in the U.S. OFAC also designated seven other Mexican nationals and two Mexican entities. As a result of the sanctions, all property and interests in property belonging to the sanctioned persons subject to U.S. jurisdiction are blocked and must be reported to OFAC. U.S. persons are also generally prohibited from engaging in any dealings involving the property or interests in property of blocked or designated persons.
Treasury takes robust measures against ransomware
On September 21, the U.S. Treasury Department announced recent actions that are focused on confronting “criminal networks and virtual currency exchanges responsible for laundering ransoms, encouraging improved cyber security across the private sector, and increasing incident and ransomware payment reporting to U.S. government agencies, including both Treasury and law enforcement.” As part of its continuing actions to counter the increasing threat of ransomware, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions against a virtual currency exchange, pursuant to Executive Order 13694, as amended, for its alleged role in providing material support to the threat posed by criminal ransomware actors. As a result of the sanctions, all transactions by U.S. persons or in the U.S. that involve any property or interests in property of designated or otherwise blocked persons are generally prohibited. Additionally, OFAC issued an updated advisory, which highlights “the sanctions risks associated with ransomware payments in connection with malicious cyber-enabled activities and the proactive steps companies can take to mitigate such risks, including actions that OFAC would consider to be ‘mitigating factors’ in any related enforcement action.” Treasury also noted that FinCEN has engaged with industry, law enforcement, and others regarding the ransomware threat through the FinCEN Exchange public-private partnership (covered by InfoBytes here).