Compliance AlertIssue 16Week ending
This issue inENFRAR

OFSI fines Citibank’s London branch £4.7m. FinCEN lands a record $125m on UBS. OFAC blocks Banco Exterior de Cuba.

Nine stories for the week ending 4 September, drawn from a wide source sweep: the OFSI penalty notice, FinCEN news and consent orders, FINTRAC news releases, OFAC recent-actions and Treasury press, the US State Department, the UK Gambling Commission, AUSTRAC, the Monetary Authority of Singapore and industry press coverage. The heaviest item is OFSI’s £4,732,830.58 penalty on Citibank, N.A. London Branch for 970 payments worth £19.7 million that breached the Russia and Global Anti-Corruption Regulations, rated Level 4, the top of OFSI’s seriousness framework. Alongside it, FinCEN’s $125 million penalty on UBS Financial Services, the largest BSA penalty ever imposed on a broker-dealer, reads as the recidivism case of the year. FINTRAC penalised two Maritime gaming Crown corporations on 3 September. On the same day OFAC added Raúl Castro’s grandson and five Cuban state entities to the SDN List, including Banco Exterior de Cuba, the state bank that channels payments for imported food, fuel and medicine. The Operation Economic Outcast Iran campaign extended into UAE banking access on 28 August, and OFAC amended eight Venezuela General Licences on 27 August. On the framework side, MAS published draft legislation for its stablecoin regime and FinCEN identified nearly $13 billion in suspected overseas scam-centre digital-asset flows. Curated for compliance and risk leaders across Africa and beyond.

By Vyra from YouverifyPublished
9Stories
3Sanctions spotlight
4Enforcement actions
2Trends
What to do before Monday

Refresh Cuba-nexus screening today, including matches on the five state-entity names above and on Fidel Ernesto Castro Calis. For any correspondent-banking relationship with a bank that clears trade-finance flows into Cuba, pressure-test the beneficial-ownership chain against Banco Exterior de Cuba and Comercial Cupet; a facilitation finding by a US regulator would carry secondary-sanctions consequences. For commodity-trade banks with Latin American corridors, add Nicarotec, Cexni and Abapet to the mining and nickel-adjacent adverse-media watch list. Update customer risk ratings on any client with disclosed Cuba trade exposure.

Sanctions spotlight

01
Sanctions spotlight · US State

OFAC designates Raúl Castro’s grandson and Banco Exterior de Cuba; five Cuban state entities added to the SDN List

On 3 September OFAC added Fidel Ernesto Castro Calis, grandson of Raúl Castro and son of Alejandro Castro Espín (himself designated in June 2026), to the SDN List. The same action designated five Cuban state-linked entities: Banco Exterior de Cuba, the state bank specialising in foreign-trade finance and international transactions; Comercial Cupet S.A., the commercial arm of Cuba’s oil sector; and Nicarotec, Cexni and Abapet, tied to nickel and mining. Banco Exterior de Cuba is the principal channel through which Cuba pays for imported food, fuel and medicine. All assets under US jurisdiction are blocked, and the standard OFAC secondary-sanctions exposure applies to foreign banks that knowingly facilitate significant transactions on behalf of the designated parties. The move continues the tightening of the Cuba sanctions posture over 2026.

Sources: OFAC Recent Actions, 3 September 2026 (20260903); US State Department press release ‘Further Sanctions on Cuba’s Elites, Financial Channels, and Resource Exploitation Apparatus’, 3 September 2026; Reuters and UPI coverage, 3 September 2026

Key takeaway

Refresh Cuba-nexus screening today, including matches on the five state-entity names above and on Fidel Ernesto Castro Calis. For any correspondent-banking relationship with a bank that clears trade-finance flows into Cuba, pressure-test the beneficial-ownership chain against Banco Exterior de Cuba and Comercial Cupet; a facilitation finding by a US regulator would carry secondary-sanctions consequences. For commodity-trade banks with Latin American corridors, add Nicarotec, Cexni and Abapet to the mining and nickel-adjacent adverse-media watch list. Update customer risk ratings on any client with disclosed Cuba trade exposure.

Sources: OFAC / US State Department

02
Sanctions spotlight · OFAC

Operation Economic Outcast expands: OFAC targets Iran’s UAE banking access with Iran-related and Counter Terrorism Designations

On 28 August OFAC issued Iran-related and Counter Terrorism Designations under the Operation Economic Outcast umbrella launched by Treasury Secretary Scott Bessent on 24 August. The 28 August action focuses on Iran’s access to UAE banks and confirms UAE-domiciled correspondent lines as the next front of the secondary-sanctions campaign. Alongside the designations, Treasury suspended selected general licences. Treasury has framed the campaign as an unprecedented effort to sever Iran’s remaining economic ties across digital assets, gold, aviation, technology and shipping, with the UAE identified as the single largest jurisdiction for Iran-related US designations.

Sources: OFAC Recent Actions, 28 August 2026 (20260828); Steptoe Weekly Sanctions Update, 31 August 2026; Paul Hastings client alert on Operation Economic Outcast

Key takeaway

For any relationship with UAE-domiciled banks, run the 28 August delta through the sanctions screening stack today and refresh the Iran-nexus risk model on the correspondent portfolio. Read the suspended general licences against any live wind-down or authorised-activity workflow before resuming transactions. Crypto-service providers and payment institutions should treat the digital-assets prong of the campaign as an active examination lens, and African-corridor banks should expect the campaign to reach any respondent with credible Iran exposure in coming months.

Sources: OFAC

03
Sanctions spotlight · OFAC

OFAC amends eight Venezuela General Licences, removes US-state-law construction clause

On 27 August OFAC issued amended Venezuela-related General Licences 50C, 46D, 47B, 48C, 52B and 61A (among eight amendments) covering oil and gas sector operations, Venezuelan-origin oil and petrochemical products, US-origin diluents, PDVSA-related transactions and telecommunications. The amendments remove the requirement that the terms of authorised contracts be construed and interpreted in accordance with the laws of a US state or other US jurisdiction. That is a technical change with practical reach: counterparties operating under these general licences now have flexibility on the governing law of the underlying commercial contracts.

Sources: OFAC Recent Actions, 27 August 2026; Steptoe Weekly Sanctions Update, 31 August 2026; Venezuela sanctions programme page, OFAC

Key takeaway

For any operator or bank facilitating flows under the amended Venezuela GLs, review the standard contract templates on file and confirm whether the removal of the US-law-construction requirement opens a switch to a different governing law. Where counterparties propose to migrate, the AML and sanctions due-diligence file should be re-papered to keep the equivalent evidentiary standard, since OFAC’s expectation on the authorised-activity showing is unchanged. Update policy references and internal training materials for the amended GL numbers.

Sources: OFAC

Enforcement actions

04
Enforcement actions ·

OFSI fines Citibank, N.A. London Branch £4,732,830.58 for 970 payments breaching the Russia and Global Anti-Corruption Regulations

OFSI imposed a penalty of £4,732,830.58 on Citibank, N.A. London Branch (CBNA London) under section 146 of the Policing and Crime Act 2017 for breaches of the Russia (Sanctions) (EU Exit) Regulations 2019 and the Global Anti-Corruption Sanctions Regulations 2021. In total the bank processed 970 payments with a cumulative value of £19,720,127.43, the majority between February and November 2022. The breaches spanned eight matters across payment processing, correspondent banking and account restrictions. Root causes were specific and instructive: a screening system that did not match the Russian corporate prefix in ‘PAO Sovcomflot’ against the listed name ‘Sovcomflot’, leaving 32 accounts held by 29 SCF-owned entities unrestricted through 328 payments; an internal correspondent-bank list that was never screened against sanctions lists, so designated Russian banks were added to payment chains after screening; BICs for designated banks missing from internal list entries; and a third-level alert queue backlog that left alerts unadjudicated for weeks. OFSI rated the case Level 4, its highest seriousness band, with severity High and conduct Aggravating. The statutory maximum was £9,860,063.72 and the baseline £7,888,050.97, reduced 40% by a 20% voluntary-disclosure and co-operation discount and a 20% settlement discount. Aggravating separately: CBNA London failed to report frozen assets promptly on 53 occasions, averaging 274 days, with 11 reports at 518 days.

Sources: OFSI Public Penalty Notice, ‘Imposition of Monetary Penalty - Citibank, N.A., London Branch’; OFSI Financial Sanctions Enforcement and Monetary Penalties Guidance, 9 February 2026 version; AML Intelligence and Lexology Pro coverage, September 2026

Key takeaway

This notice is a control-design checklist, not just a fine. Test four things against your own stack this week. First, screening-name normalisation: confirm your engine matches corporate prefixes and legal-form abbreviations (PAO, OAO, PJSC, JSC, AO) against listed names, because that single calibration gap drove the largest breach group in this case. Second, correspondent-bank reference data: any internal routing list that can insert a bank into a payment chain must itself be screened and re-screened, and the full chain must be re-screened after correspondents are appended. Third, BIC-only payment messages: where a counterparty is identifiable only by BIC, confirm your list entries carry enriched BIC data for designated entities. Fourth, frozen-asset reporting: OFSI treated a 274-day average delay as an aggravating factor in its own right, so check the clock between reasonable cause to suspect and submission. Note also that OFSI gave no credit for absence of intent, and that general licences do not cure a payment released without any prior assessment against them.

Sources: settlement agreed 11 August 2026

05
Enforcement actions · FinCEN

FinCEN assesses a historic $125 million penalty against UBS Financial Services for recidivist BSA violations

FinCEN assessed a $125,000,000 civil money penalty against UBS Financial Services Inc. (UBSFS) for wilful violations of the Bank Secrecy Act, the largest penalty ever imposed on a broker-dealer for BSA violations. It is FinCEN’s second action against the firm: a December 2018 consent order carried a $14.5 million penalty for failures to monitor foreign currency wires. Despite assuring FinCEN it would remediate, UBSFS subsequently failed to monitor over 50,000 foreign currency wires with an aggregate value above $10 billion, and did not disclose the failure, which FinCEN discovered through its own investigation following a regulatory examination. UBSFS also failed on customer due diligence for high-risk customers with ties to Russia and Latin America, including instances where it did not adequately consider source of wealth or negative news alleging corruption, fraud and money laundering, even where a UBS affiliate had itself raised concerns. Hundreds of suspicious transactions went unreported on time. UBSFS admits the wilful violations. The consent order requires a third-party lookback and an independent AML review focused on four priority risks: the US Southwest border, cartels and narcotics trafficking; Iran; Russia; and Venezuela. FinCEN will waive up to $15 million of the expenses on satisfactory completion.

Sources: FinCEN news release, 3 August 2026: ‘FinCEN Assesses Historic $125 Million Penalty Against UBS Financial Services Inc. for Recidivist BSA Violations’; FinCEN-UBSFS Consent Order; FinCEN December 2018 UBSFS Consent Order

Key takeaway

The pricing signal here is recidivism, not the underlying wire monitoring. FinCEN Director Andrea Gacki framed it explicitly around repeat violators, and the $125m against a $14.5m predecessor is close to a ninefold escalation for the same failure mode. Two practical reads. For any institution sitting on an open consent order, undertaking or remediation plan, treat the remediation evidence file as a supervisory exhibit in its own right and be able to show, by date, what was fixed and when. Non-disclosure of a remediation slippage was treated as an aggravating fact. For wealth-management and broker-dealer businesses, FinCEN’s CDD language is pointed: it explicitly rejects ‘papering’ the disposition of apparent risk and expects an objective assessment with commensurate controls, refreshed across the life of the relationship. Where an affiliate has flagged negative news, the receiving business needs a documented answer, not a closure note.

Sources: FinCEN

06
Enforcement actions · FINTRAC

FINTRAC penalises the New Brunswick and Nova Scotia gaming Crown corporations for missed suspicious transaction reports

FINTRAC announced administrative monetary penalties against two Maritime gaming Crown corporations. The New Brunswick Lotteries and Gaming Corporation, headquartered in Fredericton, was penalised C$399,712.50 on 24 July 2026 for failing to submit suspicious transaction reports where there were reasonable grounds to suspect that transactions were related to a money laundering or terrorist activity financing offence. The Nova Scotia Gaming Corporation was penalised C$231,826, for the same reporting failure and additionally for failing to keep written compliance policies up to date. Both penalties have been paid in full and both cases are closed. FINTRAC noted that in 2025-26 it issued 35 Notices of Violation totalling more than C$247 million, the largest number in a single year in its history, and has imposed more than 180 penalties since gaining the authority in 2008. New Brunswick’s finance minister stated that no evidence of money laundering was found.

Sources: FINTRAC news release, 3 September 2026: ‘FINTRAC imposes an administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation’; parallel FINTRAC release on the Nova Scotia Gaming Corporation; CBC News and BNN Bloomberg coverage, 3 September 2026

Key takeaway

The violation here is a single reporting failure, not a laundering finding, and that is the point worth carrying into your own committee papers: FINTRAC priced an STR-submission gap at close to C$400,000 on its own. For gaming operators and state-owned or Crown entities generally, the read is that public ownership carries no supervisory discount. Check the decision trail between alerting and filing: where an analyst forms reasonable grounds to suspect, is the report filed, and can you evidence the timeline? For African and Gulf gaming and lottery operators under a comparable FIU regime, the Nova Scotia add-on is the cheaper lesson: out-of-date written compliance policies were cited as a separate violation, so date-stamp and re-approve the policy set on a fixed cycle.

Sources: FINTRAC

07
Enforcement actions · AUSTRAC

UKGC suspends BresBet and Bet St George licences; AUSTRAC opens an AML/CTF programme review of Western Union Australia

Two supervisors opened files in the same week. The UK Gambling Commission suspended the operating licences of BresBet Ltd (bresbet.com) and Bet St George Ltd (betstgeorge.com) between 28 August and 1 September, citing failure to meet regulatory standards on social responsibility and anti-money laundering protocols. The suspensions follow, in the same month, the QuinnBet (Gibraltar) Limited £609,104 order of 20 August and the Holland Park Leisure Limited £150,000 fine of 18 August. Separately, on 1 September AUSTRAC launched an investigation into Western Union Financial Services Australia and its US-based parent over how they manage money-laundering and terrorism-financing risks. The probe will examine the AML programme, transaction monitoring and governance, including whether the systems can identify known laundering typologies and suspicious transactions linked to child sexual exploitation and terrorism financing.

Sources: UK Gambling Commission enforcement page and industry press, 28 August - 1 September 2026; OCCRP report, 1 September 2026: ‘Australia Probes Western Union Over Possible Money Laundering Risks’; AUSTRAC enforcement page

Key takeaway

For UK-facing gambling operators, four UKGC actions in three weeks is a cadence, not a run of bad luck. Refresh source-of-funds evidence flow, PEP policy and personal-money-management controls against the Commission’s public statements from the last twelve months, and check that any Gibraltar-licensed subsidiary is documented to UK standard rather than a lighter offshore expectation. For money-services businesses with Australian corridors, expect information requests and refresh AML programme documentation against the specific AUSTRAC scope: transaction-monitoring rules for CSE-linked and terrorist-financing typologies, SAR-quality evidence, and governance minutes showing known-typology coverage. Banks holding correspondent lines into either sector should refresh the respondent risk rating now.

Sources: 1 September 2026 - UK Gambling Commission and AUSTRAC

Cite this issue

Vyra from Youverify. "OFSI fines Citibank’s London branch £4.7m. FinCEN lands a record $125m on UBS. OFAC blocks Banco Exterior de Cuba.." Youverify Weekly Compliance Alert, issue 16, 4 September 2026. https://youverify.co/compliance-alert/2026-09-04. Accessed 4 September 2026.

How this issue was verified

Figures are as stated by the issuing authority or the cited source. This briefing is for information and is not legal advice.