MBaer Merchant Bank AG (“MBaer”) was recently designated a “primary money laundering concern” by the U.S. Department of the Treasury’s Financing Crimes Enforcement Network (“FinCEN”) pursuant to Section 311 of the PATRIOT Act.  

The Consequences

FinCen detailed its allegations against MBaer on February 26, 2026, in its Notice of Proposed Rulemaking (“NPRM”) where it proposed measures that, if implemented, would effectively ban MBaer from the U.S. financial system.  Specifically, the measures would:

  • Prevent U.S. financial institutions from opening or maintaining correspondent accounts for or on behalf of MBaer,
  • Require U.S. financial institutions to take reasonable steps not to process transactions if the transactions that involve MBaer,
  • Implement due diligence requirements that would guard against accounts being used to process MBaer transactions.  This would require that a covered financial institution notify any foreign correspondent account that MBaer cannot use the correspondent account and take reasonable steps to identify any use of its foreign accounts by MBaer, and
  • Require U.S. financial institutions to document compliance with the notifications requirement.

FinCEN is acting under Section 311 of the PATRIOT Act, which grants the Treasury Secretary the authority to impose “special measures” against a foreign financial institution if the Secretary finds the institution is a “primary money laundering concern.”

FinCEN’s proposal, special measure five, represents the most restrictive action available under Section 311. When imposed, it can effectively bar a foreign financial institution from accessing the U.S. dollar and the broader U.S. financial system. For institutions that depend on these channels, the consequences can be significant.  (See additional posts on FinCEN’s Section 311 actions linked here).

The Justification

FinCEN alleges this extreme measure is warranted here because MBaer has assisted with Venezuelan state-sponsored corruption; assisted with Russian and Iranian money laundering and has facilitated terrorist financing.

Indeed, FinCEN concluded that, “MBaer maintained a higher-risk customer base without implementing sufficiently mitigating controls that would prohibit such customers from engaging in illicit activities, and in some cases, deliberately acted to facilitate those illicit activities.”  For example, a former MBaer Vice Chairperson of the Board was accused of using MBaer to “launder proceeds of Venezuelan corruption[.]”  MBaer also attempted to conceal that it had retained Russian clients, despite Russia related sanctions.  MBaer is also accused of providing access to the U.S. financial system for persons “providing material support to Iran-related money laundering and terrorist financing efforts, including support to Iranian foreign terrorist organizations[.]”

FinCEN believes the fifth special measure will:

  • Close MBaer’s access to the U.S. financial system,
  • Inhibit MBaer’s ability to act as an illicit finance facilitator, and
  • Raise awareness of the ways illicit actors circumvent money laundering controls and international sanctions.

FinCEN considered less extreme measures to impose against MBaer but concluded that anything other than a complete prohibition would be ineffective.

The Impact

FinCEN’s proposed prohibition against MBaer may signal a willingness by the Trump Administration to sanction financial institutions to protect its foreign policy interests. Foreign financial institutions should be aware of President Trump’s regulatory expectations if they want to maintain their ability to access and participate in the U.S. financial system and should be particularly wary of doing business with those that the U.S. deems to be adverse to its national security interests.

If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. And please click here to find out about Ballard Spahr’s Anti-Money Laundering Team.

Alleged Illicit Activity Included Transactions Promoting North Korea’s Missile Program and an Institutional Commitment to Laundering Money

On February 13, 2018, FinCEN announced that it had proposed a special measure naming ABLV Bank, AS (“ABLV”) an institution of primary money laundering concern pursuant to Section 311 of the USA Patriot Act.  We previously have blogged about FinCEN’s powers pursuant to Section 311 of the U.S. Patriot Act to designate institution “of primary money laundering concern” and impose a special measure which effectively cuts off the bank’s access to the U.S. financial system by requiring U.S. institutions as well as foreign institutions that create an indirect link between the foreign institution and the U.S. to sever ties with the designated bank.

Finding that ABLV was a foreign financial institution of primary money laundering concern, FinCEN proposed a prohibition under the fifth special measure restricting domestic financial institutions from opening or maintaining correspondent accounts with or on behalf of ABLV. FinCEN stated that ABLV executives, shareholders, and employees have institutionalized money laundering as a pillar of the bank’s business practices by orchestrating money laundering schemes, soliciting high-risk shell company activity that enables the bank and its customers to launder funds, maintaining inadequate controls over high-risk shell company accounts, and seeking to obstruct enforcement of Latvian anti-money laundering and combating the financing of terrorism (AML/CFT) rules in order to protect these business practices.  Indeed, included in the illicit financial activity were transactions for parties connected to the U.S. and U.N.-designated entities, some of which are involved in North Korea’s procurement or export of ballistic missiles.

ABLV shot back last Thursday stating that the allegations were based “on assumptions and information that is currently unavailable to the bank,” but that they were “continuing check into these allegations” and were open to cooperation with U.S. authorities.  As a result of FinCEN’s finding, Monday morning, the European Central Bank (“ECB”) halted all payments by ABLV pending further investigation into the allegations set forth in FinCEN’s Notice of Proposed Rulemaking (“NPRM”). Continue Reading FinCEN Imposes Section 311 Fifth Special Measure on Latvian Bank ABLV

On May 23, the federal court of appeals for the District of Columbia Circuit rejected an appeal by the majority shareholders in Banca Privada d’Andorra S.A. (“BPA”) regarding claims that FinCEN violated the Administrative Procedure Act when issuing a March 2015 Notice of Finding that the Andorran bank was a financial institution “of primary money laundering concern” and a Notice of Proposed Rulemaking to impose a special measure pursuant to Section 311 of the USA PATRIOT Act, effectively cutting off the bank’s access to the U.S. financial system.

Specifically, FinCEN had imposed against BPA the fifth and most severe special measure under Section 311, which prohibits a foreign financial institution from opening or maintaining in the United States through a domestic financial institution a correspondent account or payable-through account. See 31 U.S.C. § 5318A(b)(5).  We previously have blogged about FinCEN’s ability to impose the fifth special measure against foreign financial institutions, which the D.C. Circuit court aptly described in the BPA matter as a possible “death sentence” for smaller foreign banks which rely on access to correspondent accounts in the United States for U.S. dollar clearing.

The appellants had sought two principal claims for relief: (1) an order requiring FinCEN to withdraw the Notices; and (2) a declaration that the Notices were unlawfully issued. The D.C. Circuit affirmed the judgment of the district court dismissing the appellants’ first claim for relief on mootness grounds because FinCEN, once “satisfied that the Bank no longer posed a money laundering concern,” withdrew both Notices after the Andorran government seized BPA and transferred its assets to a bridge bank. However, the appellate court deviated from the analysis of the district court with respect to the second claim for relief by finding that this claim should be dismissed not for mootness, but for lack of standing because the appellants had failed to show that a judicial order would redress effectively their alleged injuries.

The appellants argued that a decision holding that the two Notices were unlawful would redress their injuries because “there is a substantial likelihood that a decision finding that FinCEN improperly labeled [the bank] as of ‘primary money laundering concern’ would materially impact the position of Andorran authorities as to the proper course to be followed with respect to the sale of [the bank’s] assets, what should be done with the corporate structure and any assets that remain, and how the majority shareholders, as [the bank’s] owners, should now be treated in the process.” The D.C. Circuit disagreed, reasoning that even if the appellants had shown injury and causation to support standing, the appellants nonetheless “offered no evidence that the Andorran Government would reverse course as a result of the withdrawal of FinCEN’s Notices” and so “have not shown that the sale actually could be undone even if the Andorran Government were so inclined.”

This case involves unusual facts and procedure and potentially represents a relatively unique holding. Having said that, the opinion more generally reflects how the government can put the “rabbit in the hat” in regards to standing to sue, or lack thereof:  by issuing a “death sentence” under Section 311, FinCEN ultimately deprived the former bank’s majority shareholders of standing to sue over almost certain and severe injury caused by FinCEN – specifically because the death sentence was implemented with such relentless efficiency.  Thus, harm and causation was so clear that, in effect, redress was impossible.

If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch.

Pursuant to Section 311 of the of the USA Patriot Act, FinCEN is authorized to designate foreign financial institutions as being “of primary money laundering concern” and to take any of five “special measures” against institutions so designated. FinCEN can impose the most severe, fifth special measure—allowing it to prohibit or restrict domestic financial institutions from opening or maintaining correspondent accounts for designated foreign financial institutions—only by issuing a regulation under the Administrative Procedure Act (APA). Ongoing litigation surrounding a Section 311 designation implicates the important question of how much FinCEN must explain itself under the APA, and the extent to which FinCEN must provide objective comparative benchmarks—such as the practices of other financial institutions—when it concludes that an institution has engaged in an unacceptably high degree of suspicious transactions.

On July 22, 2014, FinCEN issued a Notice of Finding designating FBME Bank Ltd., a Tanzanian- chartered bank operating primarily out of Cyprus, as an institution of primary money laundering concern based on its alleged involvement in money laundering and other illicit activity. FinCEN later promulgated a final rule imposing the special measure. Before the rule took effect, FBME brought suit against FinCEN seeking an order declaring the final rule unlawful and permanently enjoining its enforcement. FBME alleged, inter alia, that FinCEN violated the APA by failing to give FBME sufficient notice of the rule’s factual and legal basis and had acted arbitrarily and capriciously by failing to properly consider alternative measures against FBME.

Continue Reading 2016 Year in Review: District of Columbia District Court Again Stays Section 311 Action Against FBME Bank

In May, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued Alert FIN-2026-Alert002, warning financial institutions about the use of front companies, financial facilitators, and digital asset infrastructure by Iran’s Islamic Revolutionary Guard Corps (IRGC) to evade sanctions and launder proceeds. The Alert represents an escalation in U.S. government guidance concerning Iranian illicit finance and underscores the expectation that covered institutions maintain robust controls capable of detecting increasingly sophisticated sanctions evasion typologies.

Background: The IRGC and the Policy of “Maximum Pressure”

The IRGC was created after the Iranian Revolution as a parallel military organization reporting directly to Iran’s Supreme Leader, and includes ground, naval, and air forces, the Basij internal security militia, and the IRGC-Qods Force (IRGC-QF), which conducts covert operations abroad and supports terrorism by supplying funding, training, and weapons to aligned groups. The IRGC is a designated Foreign Terrorist Organization (FTO) and is subject to comprehensive U.S. sanctions, including a prohibition on opening or maintaining correspondent accounts in the United States for Iranian financial institutions pursuant to Section 311 of the USA PATRIOT Act.

The Alert arrives in the context of renewed maximum pressure on Iran. On February 4, 2025, President Trump signed National Security Presidential Memorandum-2 (NSPM-2), imposing a whole-of-government approach to deny Iran all paths to a nuclear weapon and counter its influence. The Financial Action Task Force (FATF) has also reiterated that Iran remains a high-risk jurisdiction, calling on all jurisdictions to apply effective countermeasures—including prohibiting Iranian digital asset service providers from establishing a presence in their countries.

Key Typologies and Financial Activity Flagged by FinCEN

The Alert identifies several categories of illicit financial activity through which the IRGC generates and moves funds, along with corresponding red flag indicators designed to help financial institutions detect, prevent, and report potential suspicious activity connected to Iranian sanctions evasion. No single red flag is determinative; institutions should consider the totality of the circumstances.

  • Commodity Sales and Oil Smuggling

The IRGC supplements its budgets by smuggling oil to international buyers, with proceeds funding procurement, weapons development, and terrorist activity abroad. FinCEN’s 2025 Financial Trend Analysis found that oil companies potentially linked to Iran transacted approximately $4 billion in 2024, while shipping companies potentially related to the transport of sanctioned Iranian oil conducted transactions through U.S. correspondent accounts totaling approximately $707 million over the same period. The IRGC uses a “shadow fleet” of aging vessels operating outside standard maritime regulations, often owned or managed by front companies outside Iran, and engages in deceptive shipping practices including blending Iranian oil with oil from third countries or relabeling it with forged documents as “Malaysian blend.”

Red flags in this area include transactions involving petroleum or shipping companies with ties to Iran or “shadow fleet” vessels; irregularities in shipping documentation intended to obscure an Iranian nexus; documentation referencing vessels with recent or multiple name, flag, or ownership changes following OFAC designations; and transactions referencing “Malaysian blend” oil, particularly if the vessel is bound for China via Southeast Asia with automatic Information System (AIS) irregularities.

  • Front Companies and Shadow Banking Networks

The IRGC relies on multi-jurisdictional shadow banking networks comprised of exchange houses, trading companies, and front companies to sell oil and other commodities abroad, launder the proceeds, and procure weapons and materiel on the international market. Iranian banks have established “rahbar” companies to manage international transactions, using exchange houses to form front companies in third-country jurisdictions, often in permissive free trade zones, to obscure Iranian involvement. FinCEN found that likely shell companies matching indicators for shell and Iranian activity moved $5 billion in 2024, primarily from non-resident accounts at banks in China operated by Hong Kong-based companies to the UAE.

Red flags in this area include wire transfers with unclear sources of funds involving entities in high-risk jurisdictions; general trading companies with opaque ownership registered in commercial free trade zones in the UAE with counterparties in Singapore, Hong Kong, China, or Oman; likely front companies with little to no web presence transacting in unusually high amounts from non-resident accounts; and unusual use of multiple exchange houses with fees or transaction patterns that do not reflect standard commercial practices.

  • Facilitators and Service Providers

IRGC networks are bolstered by facilitators including money services businesses (MSBs), investment companies, and trust and company service providers that assist—wittingly or unwittingly—in orchestrating complex money laundering and sanctions evasion schemes. Purported trust companies based in Hong Kong and Eastern Europe have been identified as facilitating the transmission of value to the IRGC, including through the conversion of fiat currency to digital assets.

  • Digital Assets

Iranian digital asset activity has reached billions of dollars per year, with the IRGC conducting sanctions evasion as part of this activity. Digital assets enable Iranian facilitators to circumvent the traditional financial system by transferring value internationally without intermediary financial institutions. Iranian facilitators are likely to use stablecoins due to their relative liquidity, ease of settlement, and exchange rate stability, and Iran’s use of stablecoins includes minting, moving between large-volume stablecoin issuers, and creating proprietary stablecoins. FinCEN also notes that unregistered peer-to-peer exchangers, unregistered foreign-located MSBs, and nested digital asset service providers (DASPs) may offer digital asset-related services in Iran.

Red flags in this area include companies with exposure to Iranian oil smuggling deviating from normal business practices to send or receive payments using digital assets; stablecoin payments with unclear sources of funds in high-risk jurisdictions; unusual stablecoin mint activity requiring multiple rate or limit increases; transactions directly or indirectly with digital asset addresses attributed to Iranian entities; authentication activity from Iranian IP addresses, email services, or phone numbers; and customer accounts that may be operating as unregistered P2P exchangers or nested DASPs providing services in Iran.

Conclusion

The FinCEN IRGC Alert reflects the U.S. government’s intensified focus on disrupting Iranian sanctions evasion networks and its expectation that the private sector serve as a critical partner in this effort. Regulatory compliance teams should evaluate existing frameworks governing exposure to Iranian illicit finance and ensure that processes align with current reporting and blocking obligations under U.S. law.

If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. Please click here to find out about our Anti-Money Laundering Team.

On April 8, 2026, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) and Office of Foreign Assets Control (OFAC) issued a joint Notice of Proposed Rulemaking (NPRM) to implement the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act). The proposal would create a comprehensive anti‑money‑laundering/countering‑the‑financing‑of‑terrorism (AML/CFT) and sanctions compliance framework for “permitted payment stablecoin issuers” (PPSIs), treating them as financial institutions under the Bank Secrecy Act (BSA). Treasury frames the rule as an effort to support responsible innovation in payment stablecoins while mitigating illicit‑finance risks (see also Treasury’s press release and Fact Sheet).

For our coverage of Treasury’s related Notice of Proposed Rulemaking on state oversight of stablecoin issuers, see our post here.

Statutory Background and Policy Context

The GENIUS Act directs that PPSIs be treated as financial institutions for BSA purposes and comply with federal laws relating to sanctions, money‑laundering prevention, customer identification, and due diligence. It also requires PPSIs to maintain an effective sanctions compliance program.

Treasury’s March 2026 Congressional Report highlights the rapid growth of digital assets, the increasing use of stablecoins in payments, and the ways illicit actors exploit them for fraud, ransomware, sanctions evasion, and money laundering. These findings inform the risk‑based approach reflected in the NPRM.

Primary and Secondary Market Activity

A central concept in the NPRM is the distinction between primary and secondary market activity. Primary market activity refers to direct interactions between a PPSI and a user, such as issuing, redeeming, converting, repurchasing, burning, reissuing, or providing custodial services. Secondary market activity involves transactions between third parties that rely on the PPSI’s smart contract but do not involve the PPSI as a counterparty. This distinction matters because several obligations—including suspicious activity reporting—apply only to primary‑market transactions. This distinction will shape how PPSIs design monitoring, SAR processes, and technical controls, because only primary‑market activity triggers most BSA obligations.

AML/CFT Program Requirements

The NPRM would require PPSIs to establish and maintain a written AML/CFT program that mirrors the core elements required of other financial institutions, with tailoring for stablecoin‑specific risks. PPSIs must implement internal policies, procedures, and controls to identify, assess, and mitigate illicit‑finance risks. Risk assessments must evaluate the PPSI’s business activities, incorporate the national AML/CFT priorities, and be updated promptly when risks change.

PPSIs would also be required to conduct ongoing customer due diligence, including understanding the nature and purpose of customer relationships, developing customer risk profiles, and monitoring for suspicious activity. On a risk basis, PPSIs must maintain and update customer information, including beneficial ownership information for legal‑entity customers.

Independent testing is required to assess whether the PPSI has implemented an effective AML/CFT program. PPSIs must designate a U.S.‑based AML/CFT compliance officer responsible for day‑to‑day compliance. The program must also include ongoing employee training tailored to employee roles and responsibilities and must be approved by the PPSI’s board or equivalent governing body.

The NPRM outlines a supervisory framework under which FinCEN would generally not take enforcement action if a PPSI has established an AML/CFT program and does not exhibit significant or systemic failures. It also describes a notice and consultation process between FinCEN and primary federal payment‑stablecoin regulators for significant supervisory actions. For many issuers, this will require adopting governance, documentation, and testing practices that resemble those of traditional financial institutions—a significant shift for engineering‑driven companies.

Suspicious Activity and Currency Transaction Reporting

PPSIs would be required to file suspicious activity reports (SARs) for any suspicious primary‑market transaction. The NPRM explicitly states that secondary‑market transfers are not, by themselves, considered transactions “by, at, or through” a PPSI for SAR purposes. PPSIs must retain SARs and supporting documentation for five years.

Currency‑transaction reporting (CTR) requirements would apply to transactions in currency exceeding $10,000, though Treasury notes that stablecoin issuers rarely engage in physical‑currency transactions.

Recordkeeping, Travel Rule, and Information Sharing

The NPRM would require PPSIs to comply with the BSA’s Recordkeeping Rule and Travel Rule for transfers of $3,000 or more and would amend the definition of “transmittal order” to expressly include payment stablecoins. PPSIs would also be integrated into the BSA’s information‑sharing framework, including Section 314(a) requests and voluntary Section 314(b) sharing.

Enhanced Due Diligence and Special Measures

The NPRM would apply the BSA’s enhanced due‑diligence requirements for correspondent accounts for foreign financial institutions and private‑banking accounts for non‑U.S. persons. PPSIs would also be subject to special measures under Section 311 of the USA PATRIOT Act, Section 9714(a) of the Combating Russian Money Laundering Act, and 21 U.S.C. 2313a.

Sanctions Compliance Program Requirements

The NPRM reflects a significant change in Treasury’s expectations for PPSIs. PPSIs would be required to maintain a formal sanctions compliance program—something other BSA‑regulated financial institutions are not explicitly required to do. OFAC sanctions remain a strict‑liability regime, but Treasury is elevating sanctions compliance to the same programmatic level as AML/CFT. Examiners would look not only at whether a PPSI violated sanctions, but at whether its program is designed, resourced, and operating in line with OFAC’s risk‑based expectations. A strong program would meaningfully mitigate enforcement exposure, while gaps or weak controls could carry greater consequences given the statutory mandate.

OFAC proposes requiring PPSIs to maintain an effective sanctions compliance program incorporating five core elements: senior‑management commitment; holistic risk assessments; risk‑based internal controls, including technical capabilities; independent testing and auditing; and risk‑based training. These elements align with OFAC’s existing guidance and reflect the GENIUS Act’s mandate that PPSIs comply with all federal sanctions laws applicable to financial institutions.

Technical Capabilities and Lawful Orders

The GENIUS Act requires PPSIs to maintain the technological capability to block, freeze, and reject impermissible transactions and to comply with lawful orders, including orders to seize, freeze, burn, or prevent the transfer of payment stablecoins. These expectations apply whenever a PPSI’s smart contract is involved, even in secondary‑market activity, and will require issuers to document how these controls function in practice. Because these controls must function whenever a PPSI’s smart contract is implicated, issuers will need to document how block, freeze, reject, and burn capabilities operate in practice and ensure they can withstand regulatory scrutiny.

Economic Impact

Treasury estimates that approximately 50 PPSIs may be subject to the rule, with first‑year compliance costs of about $1.8 million and ongoing annual costs of roughly $1 million. Government costs are estimated at $5.9 million in the first year, and customer costs at approximately $1.2 million annually. Treasury expects many PPSIs to be money‑services businesses or insured‑depository‑institution subsidiaries already subject to similar requirements, reducing incremental burden.

Key Takeaway

The proposal makes clear that Treasury now expects permitted stablecoin issuers to operate with the same level of AML, sanctions, governance, and technical rigor long required of mature financial institutions. The NPRM signals that PPSIs will need to build compliance into the core of their operating models—risk assessments, beneficial‑ownership collection, primary‑market SAR obligations, enhanced due diligence, and the ability to block, freeze, or burn tokens cannot be bolted on later. These expectations create a high regulatory bar, and not every current or aspiring issuer will be able to meet it. Firms with the capital, staffing, and engineering capacity to stand up a full BSA/OFAC program will be positioned to move forward, while smaller or less‑resourced issuers may struggle to qualify as PPSIs. The practical effect is a market that shifts toward a smaller number of issuers capable of operating under a full federal compliance regime. The framework ultimately favors well‑capitalized issuers and is likely to accelerate consolidation in the stablecoin market.

Next Steps

FinCEN and OFAC are accepting public comments for 60 days following publication in the Federal Register. Treasury seeks input on the clarity of definitions, the feasibility of technical requirements, the tailoring of obligations for PPSIs of different sizes and business models, and the interaction between federal and state regulatory frameworks.

If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. And please click here to find out about Ballard Spahr’s Anti-Money Laundering Team.

We blogged earlier this year about Attorney General Pam Bondi’s February 5, 2025 memorandum focusing the U.S. Department of Justice’s attention squarely on Mexican cartels, and about subsequent steps the Trump Administration has taken to follow through on that prioritization.  In the latest such effort, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has issued a Notice of Proposed Rulemaking (NPRM) pursuant to Section 311 of the USA PATRIOT Act, which would prohibit U.S. financial institutions from processing any transactions which involve any of ten specific Mexican casinos (referred to collectively in the NPRM as the “Gambling Establishments”).  The casinos in question, spread across four Mexican states, are owned by three separate Mexican companies; however, FinCEN states in the NPRM it “assesses that the Gambling Establishments are ultimately controlled by a criminal group with a longstanding and transactional financial relationship in which the Gambling Establishments facilitate money laundering for the benefit of the Cartel de Sinaloa (Sinaloa Cartel)” – a drug trafficking organization which President Trump designated as a terrorist group on the first day of his second term, and which the Drug Enforcement Administration (DEA), in its 2024 National Drug Threat Assessment, characterized as being one of two cartels “at the heart” of the U.S. synthetic opioid crisis.

In the NPRM, FinCEN declares that “reasonable grounds exist for concluding that transactions involving the Gambling Establishments are of primary money laundering concern” after considering certain relevant factors – that the casinos allegedly make monthly disbursements to the Sinaloa Cartel, as well as additional illicit payments to senior cartel members carefully arranged (in amounts and timing) “to prevent documentable connections” between the casinos; and that the money laundering allegedly facilitated by the casinos benefits the Sinaloa Cartel, which is (as framed in the NPRM) a major driver of the U.S. opioid crisis – thus constituting, in the words of the NPRM “a significant threat to U.S. national security.”

The “meat” of the NPRM is Section 1010.665(b) of the proposed rule, imposing a “special measure” to combat the instant problem. Section (b)(1) would impose a prohibition on covered financial institutions (e.g. banks, securities brokers and dealers, and mutual funds) “opening or maintaining in the United States any correspondent account for or on behalf of a foreign banking institution if such correspondent account is used to process a transaction involving any of the Gambling Establishments.” Section (b)(2) would require that a covered financial institution go beyond basic due diligence when assessing its foreign financial institution clients, as it calls for “apply[ing] special due diligence to its correspondent accounts that is reasonably designed to guard against such accounts being used to process transactions involving the Gambling Establishments[,]” and specifies that such enhanced due diligence must include both sending written notice to foreign financial institution customers that they must not provide the casinos with access to their correspondent accounts and implementing screening mechanisms to identify correspondent account transactions involving the casinos.

FinCEN notes in the NPRM that various alternatives were considered to the blanket prohibition on the opening or maintaining of correspondent accounts, but that “[b]ecause of the nature, extent, and purpose of the obfuscation engaged in” by the casinos, any efforts to require additional information collection – e.g., reporting obligations, beneficial ownership identification, or enhanced know-your-customer (KYC) requirements – would ultimately be inadequate in addressing the paired goals of (a) protecting the U.S. financial system from risk and (b) impacting the Sinaloa Cartel’s ability to profit from its illicit activities.

The press release announcing the NPRM stated that it was being promulgated “in coordination with the Government of Mexico” – importantly for cross-border relations, as implementation of this rule may severely deplete willingness of U.S. financial institutions to do business with Mexico-based financial institutions and businesses in light of the heightened scrutiny required.

            If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. And please click here to find out about Ballard Spahr’s Anti-Money Laundering Team.

On October 15, 2025, the Financial Crimes Enforcement Network (FinCEN) issued a final rule under Section 311 of the USA PATRIOT Act that prohibits U.S. financial institutions from conducting business with the Cambodia-based Huione Group, a financial services conglomerate based in Phnom Penh, Cambodia.  Huione Group is the parent company of, or otherwise controls, several subsidiaries, affiliates, and components, including, but not limited to: Haowang Guarantee, Huione Pay PLC, and Huione Crypto.  The rule targets all these entities as Huione Group for laundering proceeds of virtual currency scams on behalf of malicious cyber actors, among other criminal wrongdoing.  The final rule can be found here: https://www.fincen.gov/news/news-releases/fincen-issues-final-rule-severing-huione-group-us-financial-system.

In addition, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed sweeping sanctions on 146 targets within the Prince Group Transnational Criminal Organization (Prince Group TCO), a Cambodia-based network led by Cambodian national Chen Zhi that operates a transnational criminal enterprise through online investment scams targeting Americans and others worldwide.  Prince Group TCO is composed of Cambodia-based Prince Holding Group, Chen Zhi, his close associates and business partners, and their core commercial interests, all of which operate in furtherance of Prince Group TCO’s criminal enterprise.  Treasury’s news release can be found here: https://home.treasury.gov/news/press-releases/sb0278.

FinCEN’s Key Findings and Final Rule

FinCEN found that Huione Group is a foreign financial institution of primary money laundering concern, and its final rule imposes a prohibition on covered financial institutions from opening or maintaining a correspondent account for, or on behalf of, Huione Group.

  • Prohibition: Covered financial institutions are prohibited from opening or maintaining correspondent accounts for, or on behalf of, the Huione Group.  Such institutions much take reasonable steps to not process a transaction for the correspondent account of a foreign banking institution in the United States if that transaction involves Huione Group.
  • Enhanced Due Diligence: Covered financial institutions must employ special due diligence to all foreign correspondent accounts to prevent those accounts being used to process transactions involving Huione Group and provide notice to such account holders regarding these prohibitions.
  • Effective date: The final rule is effective November 17, 2025. 

Detailed Grounds for Action

Huione Group served as a crucial hub for laundering billions of dollars from a variety of illegal activities.  These activities include: 

  • North Korean cybercrimes: Laundering proceeds from cybercrimes carried out by the Democratic People’s Republic of Korea (DPRK), including the Lazarus Group.
  • Transnational fraud: Processing hundreds of millions of dollars in illicit proceeds from transnational criminal organizations, particularly those in Southeast Asia.
  • “Pig butchering” scams: Laundering funds from virtual currency investment scams that targeting individuals across the world.
  • Online marketplace for crime: Operating an online marketplace that offered illegal financial services and tools for trafficking.

Huione Group combined its substantial participation in worldwide criminality with an absence of, or a highly ineffective, anti-money laundering program, along with recent changes that served to further obscure Huione Group’s involvement in illicit activity.

Broader United States Government Activity

The FinCEN rule is part of a broader, coordinated enforcement action by United States and United Kingdom authorities to combat large-scale criminal networks operating in Southeast Asia.

  • Prince Group sanctions: OFAC and the U.K. Foreign, Commonwealth, and Development Office announced sanctions against the Cambodia-based Prince Group, which is accused of running a criminal empire through online investment scams and scam compounds that rely on human trafficking and forced labor.
  • Criminal charges: The United States Attorney’s Office in the Eastern District of New York unsealed an indictment against Chen Zhi, the founder of the Prince Group, on charges of wire fraud and money laundering conspiracy. The Department of Justice’s press release on the indictment can be found here: https://www.justice.gov/opa/pr/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged.
  • Largest-ever bitcoin seizure: As part of the action, the Department of Justice seized approximately $15 billion in bitcoin, alleged proceeds of Chen Zhi’s fraud schemes.

If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. Please click here to find out about Ballard Spahr’s Anti-Money Laundering Team.

On May 1, 2025, the Financial Crimes Enforcement Network (FinCEN) released a Notice of Proposed Rulemaking (NPRM) regarding the Huione Group, a foreign financial institution located in Cambodia. This proposal, enacted under section 311 of the USA PATRIOT Act, suggests prohibiting U.S. financial institutions from forming or maintaining correspondent banking relationships with Huione Group. The NPRM identifies Huione Group as a significant money laundering concern, based on its purported role in facilitating unlawful financial activities.

Following an investigation, FinCEN found that Huione Group was involved in laundering at least $4 billion in illegal proceeds between August 2021 and January 2025, with the funds distributed as follows:

  • Approximately $37 million was linked to cyber thefts conducted by North Korea;
  • Around $36 million originated from scams known as “pig butchering”;
  • About $300 million was related to various other cyber fraud schemes.

Background: Understanding Section 311 of the USA PATRIOT Act

Section 311 of the USA PATRIOT Act grants the Secretary of the Treasury the authority to identify foreign jurisdictions, financial institutions, or types of transactions that pose significant money laundering concerns. Upon such identification, the Secretary can impose special measures to mitigate risks to the U.S. financial system. These special measures can range from requiring enhanced record-keeping and reporting to prohibiting certain types of banking relationships.

The intention behind section 311 is to provide the U.S. government with flexible tools to protect the financial system from being exploited by money launderers and terrorist financiers. By targeting specific entities or jurisdictions, the U.S. aims to cut off illicit actors from accessing the global financial infrastructure.

Huione Group: A Profile of Concern

Huione Group, operating primarily out of Phnom Penh, Cambodia, is a conglomerate that includes several subsidiaries: Huione Crypto, Haowang Guarantee, and Huione Pay PLC. FinCEN’s investigations have identified the group as being involved in activities that significantly contribute to international money laundering schemes.

Key Findings

  1. Laundering Proceeds from Cybercrimes and Sanctions Evasion

FinCEN’s analysis indicates that Huione Group has been utilized to launder funds associated with cyber heists, notably those executed by the Lazarus Group, a North Korean entity known for its cybercriminal activities. (Explore other blog posts about Lazarus Group here, here, and here.) These heists have targeted cryptocurrency exchanges and other digital asset platforms, resulting in the theft of substantial amounts of convertible virtual currency (CVC). The proceeds from these activities allegedly support the North Korean regime’s evasion of international sanctions, which are intended to prevent the financing of its weapons programs.

The relationship between Huione Group and North Korean actors is particularly concerning due to the geopolitical implications. By facilitating the movement of illicit funds, Huione Group potentially undermines international efforts to curb North Korea’s nuclear ambitions. This connection underscores the severity of the risk posed by the group’s activities.

    2.  Facilitation of CVC Investment Scams

In addition to laundering cybercrime proceeds, Huione Group is reportedly involved in facilitating CVC investment scams, commonly referred to as “pig butchering” scams. (We have previously discussed pig-butchering scams in our blog post here.) These scams are orchestrated by transnational criminal organizations (TCOs) operating primarily in Southeast Asia. They involve deceiving victims into investing in fraudulent CVC schemes under the pretense of high returns. Once the funds are invested, they are channeled through networks like Huione Group, where they are layered and integrated to obscure their illicit origins.

The prevalence of these scams highlights the vulnerabilities in the global financial system, especially regarding digital assets. The ability of criminal organizations to exploit these vulnerabilities has significant implications for consumer protection and financial stability. It also raises questions about the adequacy of regulatory frameworks governing the use of digital assets.

    3.  Ineffective AML/KYC Practices

Another critical finding from FinCEN’s analysis is the inadequacy of Huione Group’s anti-money laundering (AML) and know-your-customer (KYC) practices. Despite being subject to various reports and criticisms, the group has not implemented effective measures to detect and prevent money laundering activities. This lack of robust compliance infrastructure is a significant factor contributing to its designation as a primary money laundering concern.

Public statements from Huione Group have acknowledged these deficiencies, citing challenges in maintaining effective KYC capabilities. Such admissions raise concerns about the group’s ability to comply with international AML standards and its willingness to address identified shortcomings.

Proposed Special Measures

In response to these findings, FinCEN proposes to implement special measure five, under Section 311 of the USA PATRIOT Act, which involves prohibiting U.S. financial institutions from opening or maintaining correspondent accounts for Huione Group. This measure seeks to mitigate the risks by severing the group’s access to the U.S. financial system, thereby limiting its ability to facilitate illicit financial activities.

Rationale for the Proposed Measures

  1. Effectiveness in Addressing Risks

The proposed prohibition is considered the most effective measure to prevent Huione Group from engaging in activities that pose a risk to the U.S. financial system. Given the group’s history and the complexity of its operations, other measures, such as enhanced reporting or additional due diligence requirements, may not adequately deter or monitor its activities. The prohibition aims to directly cut off the pathways through which illicit funds are processed.

      2.  Impact on Legitimate Business Activities

While the prohibition may impact some legitimate business activities conducted by Huione Group, FinCEN’s analysis suggests that a substantial portion of the group’s transactions are linked to illicit activities. By focusing on correspondent banking relationships, FinCEN seeks to target specific channels through which money laundering risks are most pronounced, minimizing the impact on legitimate operations to the extent possible.

    3.  Alignment with International Efforts

Although similar actions have not been widely adopted by other countries, FinCEN’s proposal aligns with broader international efforts to combat money laundering and financial crimes. The global nature of financial networks means that actions taken in one jurisdiction can have ripple effects worldwide. This proposal underscores the importance of international cooperation and coordination in tackling these issues.

Broader Implications for the Financial Sector

The proposed measures against Huione Group have significant implications for the financial sector, both domestically and internationally. For U.S. financial institutions, the prohibition necessitates a reevaluation of existing correspondent banking relationships and the implementation of enhanced due diligence procedures. Institutions must ensure compliance with the proposed rule to avoid potential penalties and reputational damage.

On an international level, FinCEN’s actions may prompt other jurisdictions to reassess their regulatory frameworks and cooperation mechanisms. The designation of Huione Group as a primary money laundering concern highlights the need for robust AML/CFT (counter-financing of terrorism) measures that can effectively address the challenges posed by digital assets and transnational financial crimes.

Conclusion

FinCEN’s proposal to impose special measures against Huione Group represents an important development in efforts to maintain the integrity of the U.S. financial system. This action is part of a broader initiative by the Treasury Department to address financial entities that contribute to cybercrime and sanctions evasion, particularly in regions with weaker regulatory environments. By concentrating on issues such as crypto-related fraud, state-sponsored cybercrime, and international money laundering networks, FinCEN highlights its commitment to using the tools available under Section 311. This strategy addresses immediate threats while emphasizing the need for global collaboration to combat money laundering and financial crimes. If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. Please click here to find out about Ballard Spahr’s Anti-Money Laundering

FinCEN Issues Corresponding But Limited Extensions of Reporting Deadlines

The Fates of the CTA and Corresponding CDD Rule Remain in a State of Flux

The Fifth Circuit has granted the government’s request to stay temporarily the order and injunction issued by the United States District Court for the Eastern District of Texas, which had issued a nationwide stay prohibiting enforcement of the Corporate Transparency Act (“CTA”).

As we have blogged, on December 3, 2024, in the case of Texas Top Cop Shop, Inc., et al. v. Garland, et al., the Eastern District of Texas issued an order (“Order”) granting a nationwide preliminary injunction that: (1) enjoined the CTA, including enforcement of that statute and regulations implementing its beneficial ownership information reporting requirements, and, specifically, (2) stayed all deadlines to comply with the CTA’s reporting requirements.

The Order created great uncertainty, if not chaos, because the CTA’s reporting deadline for covered entities existing prior to January 1, 2024 was January 1, 2025. The uncertainty regarding the status of the CTA was exacerbated last week during the looming federal  showdown, in which the initially proposed budget stop-gap bill included language which would have extended the CTA’s filing deadline for previously-existing covered entities by one year. But, that initial spending bill did not pass, and the spending bill which ultimately did pass did not include any language regarding the CTA.

Nonetheless, these political machinations suggest that the CTA and its implementation may face a rocky road when the new administration takes over in January 2025. The CTA could be undone by Congress, or just not enforced by a new administration. Or the implementing regulations could be revised significantly. It’s very hard to predict right now.

Continue Reading Fifth Circuit Halts Nationwide Stay of CTA Enforcement