3 Nov 2026 · fim-2026-11-03
Lead Signal
Russia's sanctions-evasion architecture continued to formalise around two parallel tracks: expanding formal designation lists on one side, and a state-tolerated cross-border settlement channel on the other. On 28 October 2026, the US Treasury's Office of Foreign Assets Control (OFAC) added further designations under the RUSSIA-EO14024 sanctions programme and issued a Statement of Licensing Policy governing authorisation to purchase blocked vessels, extending the reach of the programme into shadow-fleet logistics. Separately, on 29 October 2026, the Bank of Russia confirmed that restrictions on self-custody crypto wallets introduced under Federal Law No. 282-FZ do not extend to cross-border trade settlement: domestic transfers from regulated digital-currency accounts to self-custody wallets remain blocked, but non-custodial wallets stay usable for international settlement. Read together, these two developments describe a jurisdiction simultaneously facing an expanding external designation perimeter and preserving, by design, exactly the channel most useful for routing value around that perimeter.
The significance is structural rather than incidental. A regulator narrowing domestic self-custody access while explicitly carving out cross-border settlement is not an oversight; it is a deliberate boundary-drawing exercise that keeps a sanctioned-adjacent settlement rail open even as enforcement elsewhere tightens. The confirmation came from a named Bank of Russia official but has not yet been independently verified against the Bank of Russia's own primary publication, so the finding is carried as probable rather than confirmed pending that anchor.
Other Developments
An investigative exposé detailed a cash-based shadow payment network. On 26 October 2026, Meduza, working with the International Consortium of Investigative Journalists, published a detailed account of the A7 payment system, describing an operation in which international transfers for sanctioned counterparties begin with physical bags of cash changing hands at Moscow markets, reportedly processing at least 58 metric tons of cash in a single month at its peak. An anti-money-laundering specialist cited in the reporting assessed that the mechanism is also likely to facilitate laundering of criminal proceeds by effectively legitimising them through the settlement process. No Russian primary-source instrument addresses A7 directly, which is itself notable: the absence of domestic regulatory acknowledgment of a network operating at this reported scale is a data point in its own right about the permissiveness of the operating environment in which such intermediaries function.
The sanctions perimeter kept widening on the formal side. The OFAC actions of 28 October 2026 sit within a broader external designation trend that includes a large European Union package of sanctions listings widely described by legal commentators as the largest single set the EU has approved to date. This divergence between an expanding formal designation architecture and an informal cash-intermediary layer that formal architecture does not yet reach is the core tension running through the findings.
Russia's suspension from the Financial Action Task Force was reconfirmed without change. The FATF's 28-30 October 2026 Plenary confirmed that Russia's membership suspension, in place since February 2023, continues, and that Russia sits on neither the FATF's call-for-action list nor its increased-monitoring list. Russia nonetheless remains on the European Commission's own list of high-risk third countries, which took effect 29 January 2026. The two lists diverge by design and by different legal tests, and that divergence is itself the standing fact worth noting rather than a change.
Cross-Monitor Connections
The cross-border settlement channel the Bank of Russia confirmed open sits directly at the intersection of sanctions enforcement and payment-system architecture: a crypto rail preserved for international trade settlement is, functionally, a payments question as much as an integrity one, and the same underlying fact pattern is relevant wherever payment-corridor or digital-money infrastructure in this jurisdiction is tracked. The A7 cash network similarly has a conflict-finance and commodity-flow dimension beyond its laundering characterisation: a network capable of moving tens of tons of cash monthly for sanctioned counterparties is plausibly also a channel for proceeds tied to extractive or conflict-adjacent trade, though the substrate does not extend the finding that far. The vessel-purchase licensing policy OFAC issued alongside its designations also has a direct bearing on commodity and shipping-flow monitoring, given its focus on blocked-vessel transactions.
Outlook
The near-term marker to watch is whether the Bank of Russia's own publication corroborates the cross-border self-custody confirmation currently resting on trade-press reporting of an official statement; that corroboration would move the finding from probable to confirmed and would materially firm up the picture of a deliberately preserved settlement channel. The next FATF Plenary, expected in the first quarter of 2027, is the next scheduled point at which Russia's suspension status could in principle be revisited, though no mutual evaluation or lifting mechanism is currently dated. Separately, continued OFAC and EU designation expansion alongside investigative reporting on informal cash-intermediary networks suggests the gap between formal designation architecture and informal settlement and laundering channels is likely to remain, and possibly widen, as enforcement concentrates on entities that are easier to designate than cash-based networks are to disrupt.
25 Oct 2026 · fim-2026-10-25
Lead Signal
Russia's financial-crime posture this period is defined by a widening split between state-directed sanctions-evasion architecture and the sanctions environment itself. The Bank of Russia opened a licensing window under Federal Law 282-FZ on 5 October 2026 for crypto exchanges, brokers, asset managers and digital depositories; seventeen firms had registered by 22 October, with the state-controlled banks Sberbank and VTB among the first movers. In parallel, authorised Russian exporters and importers were confirmed from mid-October 2026 to be permitted to use approved digital assets for cross-border trade settlement without transaction limits, reporting that frames this explicitly as a mechanism for bypassing SWIFT and correspondent-banking channels. Together, a licensed settlement rail built around the country's largest state banks and an unrestricted trade-settlement permission for crypto assets constitute a new, state-sanctioned architecture for moving value across borders outside Western-controlled financial infrastructure.
Other Developments
Sanctions posture diverged sharply across blocs this period. The EU adopted a new Russia listing package on 12 October 2026 and extended its hybrid-threats sanctions framework to October 2027 on 8 October; the UK added 38 new designations and two variations on 8 October, including a commercial bank. The US moved in the opposite direction: its executive waived most measures of the Graham Sanctioning Russia and Iran Act on 16 October 2026, certifying that the waiver served the national interest. This is a clear and dated cross-bloc divergence rather than a uniform tightening. Commercial positioning by state banks accelerated alongside the licensing rollout. VTB settled its first corporate stablecoin trades on 6 October 2026 through a newly established digital depository, and Sberbank joined the Bank of Russia's crypto-exchange register on 12 October, with both institutions reportedly targeting retail-facing crypto-trading launches in the November-December 2026 window. A peer-to-peer crypto-trading ban was also announced, to take effect from 1 July 2027, which would push remaining informal crypto activity toward the newly licensed intermediaries. Russia's standing high-risk-third-country classification under EU Commission Delegated Regulation (EU) 2026/46, in force since 29 January 2026, continues to trigger mandatory enhanced due diligence for EU obliged entities in Russia-nexus business; this is carried forward as standing context rather than as a new development. Similarly, Rosfinmonitoring's crypto counterparty-identification threshold, requiring full identification on transactions above RUB60,000 since 1 September 2026, continues to operate as a de facto travel-rule-equivalent control, unchanged this period.
Cross-Monitor Connections
The new crypto-settlement architecture has direct relevance to conflict-finance and commodity-trade monitoring, given that energy and commodity exporters are named beneficiaries of the newly legalised unrestricted cross-border settlement permission. The sanctions divergence between the EU/UK and the US also has state-capture and foreign-influence dimensions worth separate tracking, given that a unilateral US waiver running against the grain of EU/UK tightening raises questions about the coherence of the Western sanctions coalition on Russia going forward.
Outlook
The 1 July 2027 peer-to-peer ban and the broader question of whether licensed intermediary capacity can absorb current informal crypto volume by that date are the clearest forward markers in the crypto dimension. On the sanctions side, whether the US waiver of Graham Act measures proves durable, or is reversed amid continued EU/UK tightening, will materially shape how effective the broader Western sanctions architecture remains against the settlement workarounds Russia is now building.
18 Oct 2026 · fim-2026-10-18
Lead Signal
The EU Council and OFAC both expanded sanctions architecture against Russia this period, though the two designations target distinct layers of the same evasion ecosystem. On 12 October 2026 the EU Council sanctioned 826 companies in Russia's military-industrial complex and 743 of their executives, the largest single tranche of Russia-related EU listings to date, targeting direct components in missile, drone and aircraft production. Separately, on 1 October 2026 (published 6 October 2026) OFAC designated A7 Network, a criminal organisation spanning Russia, Kyrgyzstan, Nigeria and Zimbabwe, as a transnational criminal organisation. A7 Network sits adjacent to the ruble-pegged A7A5 stablecoin, issued via a Kyrgyz entity named Old Vector, and is reported as functioning as settlement infrastructure for cross-border sanctions evasion. Read together, the EU action is architecture-over-incident evidence of direct war-economy financing exposure, while the OFAC action names the multi-jurisdiction settlement rail increasingly used to move value around the sanctions perimeter altogether.
Other Developments
Russia's crypto-market law is operationalising new self-custody restrictions. Federal Law No. 282-FZ took effect on 1 September 2026, confirmed by the Bank of Russia. On 12 October 2026 the central bank clarified, per secondary reporting, that Article 31(5) and 31(9) bar individuals from withdrawing crypto from regulated custodial digital accounts to self-hosted wallets, and from transferring crypto peer-to-peer between individuals. This narrows the channels through which value can move outside custodial, and therefore monitorable, infrastructure, even as the same law has reportedly produced a parallel regulatory approval for Sberbank to offer crypto-exchange services.
Rosfinmonitoring's asset-freezing apparatus was used against a government critic. Rosfinmonitoring added journalist and commentator Alexander Nevzorov to Russia's register of "terrorists and extremists" around 15 October 2026, a designation that triggers mandatory bank asset-freezing. This illustrates a dual-use pattern in which the same AML/CFT freezing architecture built for counter-terrorist-financing purposes is applied to political ends against a critic of the government, a signal that should be weighed alongside the architecture's stated counter-terrorist-financing function.
EU and US sanctions posture diverged within the same month. Even as the EU tightened its stance, through the new designations and a restated ban on EU-operator engagement with Russia's Mir card system and SBP fast-payment system, OFAC simultaneously eased sanctions in a narrow lane: General Licence 135 extends diesel-trade authorisation to April 2027, and General Licence 13S extends administrative-payment authorisation to January 2027. This divergence is itself a structural signal about differing US and EU risk tolerances for maintaining limited channels of engagement with Russia's economy.
Kyrgyzstan, Nigeria and Zimbabwe surface as enabler-jurisdiction nodes. The OFAC A7 Network designation names these three jurisdictions as functioning alongside Russia in the network's settlement architecture, with Kyrgyzstan serving as the formal issuance jurisdiction for the Russia-linked A7A5 stablecoin rail. Nigeria and Zimbabwe appear as additional network nodes per the designation's own jurisdictional tags, though their specific operational roles within the network have not been further detailed this period.
Cross-Monitor Connections
The A7 Network designation and the 282-FZ self-custody restrictions connect directly to Crypto Monitor's coverage of Russia's digital-asset regulatory architecture, and to World Payments Monitor's tracking of Russia's stablecoin and digital-currency infrastructure. The enabler-jurisdiction dimension of the A7 Network designation, spanning Kyrgyzstan, Nigeria and Zimbabwe, also connects to broader conflict-finance and sanctions-evasion typology tracking that spans those same jurisdictions' own regulatory postures.
Outlook
The principal signal to watch is whether the A7 Network designation produces follow-on action against the A7A5 stablecoin's issuance and settlement infrastructure in Kyrgyzstan specifically, which would indicate the sanctions-evasion architecture identified this period is being dismantled rather than merely named. The divergence between EU tightening and OFAC's narrow-lane easing, through General Licence 135 (to April 2027) and General Licence 13S (to January 2027), is also worth monitoring for whether it persists or narrows as both licences approach their respective expiry dates.
11 Oct 2026 · fim-2026-10-11
Lead Signal
Russia's sanctions-evasion architecture is visibly shifting toward crypto and stablecoin channels as the European Union closes conventional financial-messaging routes. The EU's 20th sanctions package, adopted 23 April 2026, amends Regulations 833/2014 and 269/2014 to prohibit EU-person transactions with Russian-based cryptoasset service providers, the digital rouble, and the sanctioned RUBx stablecoin, while adding 70 EU-excluded banks cumulatively and, for the first time, activating the EU's anti-circumvention tool against Kyrgyzstan. The Kyrgyzstan designation is directly tied to A7A5, a ruble-pegged stablecoin issued via Kyrgyzstan-registered Old Vector and processed through sanctioned Promsvyazbank's Tokeon platform, which continues to move several billion dollars in cross-border settlement after reissuing its token supply specifically to sever links to previously sanctioned wallets. That reissuance is itself a probable architectural signal: an issuer restructuring its own token supply to outrun a sanctions-targeting exercise suggests the evasion infrastructure is adaptive rather than static, and that EU, US and UK designations targeting specific wallets will face a moving target rather than a fixed one.
Other Developments
Russia's first comprehensive crypto-licensing statute took a further step toward operative status. Federal Law No. 282-FZ establishes five licensed crypto-market participant classes, exchanges, custodians, brokers, trading venues and asset managers, under Bank of Russia supervision, with provisions commencing 1 September 2026 and full enforcement reserved for 1 July 2027. No Tier-1 primary text from pravo.gov.ru or cbr.ru was retrieved this cycle to confirm the licensing conditions; the structure as reported rests on Tier-3/Tier-4 commentary. The law's practical significance for sanctions-evasion analysis is double-edged: it formalises domestic crypto-market oversight while simultaneously creating a fresh institutional channel, licensed and government-sanctioned, through which cross-border settlement in digital assets now has an explicit domestic legal basis. A pending Duma amendment, reported but not confirmed by official number or date, would lower Rosfinmonitoring's crypto-transaction reporting threshold to RUB 60,000, a substantial reduction from the existing mandatory-control threshold.
Russia's FATF suspension continued unchanged through the 2026 plenary cycle. Russia remains suspended from FATF membership, a status distinct from grey- or black-listing that was confirmed by FATF's own statement. This suspension status functionally shields Russia from the FATF call-for-action and enhanced-due-diligence trigger mechanics that apply to formally listed states, meaning Russia's absence from any current FATF list should not be read as reflecting an improved underlying risk assessment.
Beneficial-ownership transparency in Russia remains unchanged and limited. Under Article 6.1 of Federal Law No. 115-FZ, a 25 percent beneficial-ownership disclosure threshold applies, but access to that data remains restricted to authorities, with no public register and limited cooperation reported with foreign counterparts. This long-standing posture, combined with Russia's suspended FIU-cooperation status, structurally limits external verifiability of Russian corporate ownership structures, a condition directly relevant to assessing the true beneficiaries behind entities like Old Vector.
Cross-Monitor Connections
The crypto monitor's tracking of 282-FZ's licensing mechanics and the world-payments monitor's tracking of Sberbank's new crypto-based cross-border trade-settlement service, launched the same day 282-FZ's provisions commenced, both bear directly on this cycle's sanctions-evasion architecture finding: a newly licensed, government-sanctioned domestic crypto-settlement channel is emerging in parallel with continued large-scale use of the A7A5 stablecoin for cross-border settlement outside any Western-aligned compliance framework. The conflict-finance monitor's framework for assessing enabler jurisdictions is relevant to Kyrgyzstan's newly formalised role as the EU anti-circumvention target tied to Old Vector's registration.
Outlook
The period to 1 July 2027, when 282-FZ's enforcement provisions become fully operative, and the resolution of the pending Rosfinmonitoring reporting-threshold amendment are the two concrete developments to watch. Separately, whether OFAC, OFSI or the EU take direct action against A7A5 itself, rather than against the jurisdictions and banks around it, would materially change the sanctions-evasion architecture assessment; no such direct action against the token was located within this cycle's window.
28 Sep 2026 · fim-2026-09-28
Lead Signal
The European Union has layered a new architecture onto its sanctions posture toward Russia this cycle. Commission Delegated Regulation (EU) 2026/46, in force from 29 January 2026, adds Russia to the Annex of Delegated Regulation (EU) 2016/1675 as a high-risk third country under Article 9 of Directive (EU) 2015/849, triggering mandatory enhanced due diligence under Article 18a. This is a distinct mechanism from the FATF grey or black lists, created specifically to address jurisdictions whose FATF membership has been suspended for gross violation of core principles rather than jurisdictions still subject to ordinary FATF listing processes. Russia remains suspended from FATF membership since 24 February 2023, without a plenary reversal to date, while continuing to hold membership in the Eurasian Group, a FATF-style regional body. The EU 21st sanctions package, adopted 23 July 2026, added 216 new designations covering 48 individuals and 168 entities, and extended transaction bans to 33 additional Russian credit and financial institutions along with 4 non-EU banks and 14 non-EU crypto-asset service platforms, with a board-membership ban extended to any crypto-asset services business from 25 August 2026.
Other Developments
Russia's domestic crypto-market formalisation proceeded on a parallel track. Federal Law No. 282-FZ took effect on 1 September 2026, establishing a Bank of Russia-supervised licensing regime for crypto exchanges and digital depositories, while retaining the existing domestic ban on using cryptocurrency as payment for goods and services. Critically, the separate 223-FZ experimental-legal-regime channel, which permits digital financial assets and digital currency as consideration under qualifying cross-border trade contracts for sanctioned counterparties, was preserved rather than closed. Read against the EU's own sanctions-package recitals, which characterise this channel as sanctions-evasion-oriented, Russia's crypto-market formalisation is best understood as a dual-track policy: domestic consumer-protection architecture paired with continued sanctions-resilience infrastructure for foreign trade settlement. A structural friction point emerged within the EU sanctions-maintenance process itself. On 14 September 2026, the EU failed to extend its six-monthly asset-freeze regulation on schedule after Slovakia demanded the delisting of Alisher Usmanov and Mikhail Fridman, requiring a one-week extension to negotiate the rollover under the unanimity requirement that governs EU sanctions renewal. This is the first sign this cycle of EU-internal sanctions-maintenance friction, as distinct from the pattern of continued external designation activity that has otherwise characterised the EU's approach.
Cross-Monitor Connections
The 223-FZ cross-border settlement channel and the new Bank of Russia crypto-licensing regime under Federal Law No. 282-FZ connect directly to the crypto monitor's tracking of Russia's licensing architecture, and to the world-payments monitor's tracking of correspondent-banking access narrowing under the EU 21st sanctions package. The enablement-versus-enforcement framing is instructive here: Russia is simultaneously tightening its domestic crypto-market governance (an enforcement-coded signal domestically) while preserving a channel explicitly identified by EU counterparts as enabling sanctions evasion (an enablement-coded signal externally). This is architecture, not incident, and should be read as such by both monitors.
Outlook
The Slovakia-driven delay to the EU's asset-freeze rollover is the clearest near-term marker: whether the negotiated one-week extension results in a full renewal, a partial delisting of specific high-profile individuals, or a further delay will signal whether EU sanctions-maintenance unanimity is becoming a structurally recurring vulnerability rather than an isolated episode. Separately, whether the EU moves to directly target the 223-FZ experimental-legal-regime channel in a future sanctions package, following its already-stated characterisation of that channel as sanctions-evasion-oriented, is the marker to watch on the crypto/sanctions intersection.