Compliance AlertIssue 22Week ending
This issue inENFRAR

Brussels lists 1,569 Russian arms makers as Washington fines Bank of America more than $1.21 billion

The EU listed 826 companies and 743 executives from Russia's military-industrial complex in a single act, while US Treasury agencies hit Bank of America with penalties that Treasury says exceed $1.21 billion for late suspicious activity reporting and sanctions screening failures. Washington also widened Operation Economic Outcast to an Iraqi bank, Iranian offshore banks and exchange houses, designated the International Criminal Court, targeted Cartel del Noreste's business network, and issued a FinCEN alert on Iranian abuse of religious charities.

By Vyra from YouverifyPublished
7Stories
4Sanctions spotlight
2Enforcement actions
1Trends
What to do before Monday

Load the EU military-industrial listings by identifier: Match the 1,569 parties on INN, OGRN and tax number in Latin and Cyrillic, and apply EU ownership and control rules. Review Iraqi, Cuban and exchange-house exposure: Check correspondent and payment flows against the 15 October Iran designations and Cuba's BICSA; use General License FF only to wind down. Time your watchlist updates: Measure how quickly a new OFAC designation reaches live screening and whether SAR decisions rest on your own detection. Add the FinCEN charity red flags: Brief non-profit and cash monitoring teams and use the SAR key term FIN-2026-IRANCHARITYABUSE.

Sanctions spotlight

01
Sanctions spotlight · Council

EU lists 1,569 Russian defence-industry companies and executives in one act

On 12 October 2026 the Council of the EU adopted Implementing Regulation (EU) 2026/2281, adding 826 entities and 743 individuals from Russia's military-industrial complex to Annex I of its Ukraine regime. Every company appears on a list the Russian Government drew up of defence-industry enterprises whose staff qualify for federal housing subsidies, and every person heads one or more of them; companies carry their OGRN and INN numbers and executives their tax numbers. The same day the Council listed 77 people over the State Duma elections held in occupied Ukraine and, under its DPRK regime, three persons and four entities, including the developer Samolet Group.

Key takeaway

Match on INN, OGRN and tax number as well as on names, in Latin and Cyrillic. Most of the new names are not on the US or UK lists, and EU ownership and control rules extend the freeze to what they own.

Sources: Council of the EU, Implementing Regulation (EU) 2026/2281, Official Journal, 12 October 2026

02
Sanctions spotlight · OFAC

Treasury hits Iran's shadow banking through an Iraqi bank, offshore banks and exchange houses

On 15 October 2026 OFAC designated 16 individuals and 10 entities under E.O. 13902 as part of Operation Economic Outcast. They include Iraq's International Development Bank for Investment and Finance, which Treasury says gave Iran access to US dollars and sends profits back to Iran in dollars each month; Jazireh International Bank Company and Chabahar International Bank Overseas Company, free-zone affiliates of Bank Mellat and Bank Shahr; Dubai-based oil trustee Sayyed Ruhollah Razavi and two of his companies; seven employees of Farab Soroush Afagh Qeshm Company and Hong Kong's Elitesphere Trading; and four exchange houses and their owners. The State Department separately designated Cuba's Banco Internacional de Comercio S.A. (BICSA), which has served Iran's Karafarin Bank since at least 2022. OFAC issued General License FF to wind down dealings with the Iraqi bank.

Key takeaway

Foreign banks face secondary sanctions risk for dealing with these parties. Review Iraqi and Cuban correspondent relationships and exchange-house flows through the UAE and Hong Kong, and confine any dealings with the Iraqi bank to the General License FF wind-down.

Sources: U.S. Treasury press release SB0660 and OFAC Recent Actions, 15 October 2026

03
Sanctions spotlight · OFAC

OFAC sanctions 15 parties behind Cartel del Noreste's racing, fuel and construction businesses

On 13 October 2026 OFAC designated four individuals and 11 entities tied to Cartel del Noreste, a designated Foreign Terrorist Organization, under E.O. 14059 and, for 13 of them, also E.O. 13224. Treasury says businessman Gamaliel Garza Garcia and his son ran companies across quarter horse racing, construction, fuel and gas distribution, and that the cartel used the builder CEGESA to funnel money to the election campaigns of its preferred candidates. Club La Molienda, a racetrack outside Nuevo Laredo, is designated as cartel-controlled, and Treasury says the Tamex truck yard was the origin of at least two cocaine shipments totalling 52 kilograms hidden in trailer brake drums.

Key takeaway

Check fuel, construction, haulage and horse-racing counterparties in northern Mexico. The 13 parties also listed under E.O. 13224 carry secondary sanctions risk for foreign banks.

Sources: U.S. Treasury press release SB0656 and OFAC Recent Actions, 13 October 2026

04
Sanctions spotlight · OFAC

United States designates the International Criminal Court and issues four general licences

On 9 October 2026 OFAC added the International Criminal Court, headquartered in The Hague, to the SDN List under E.O. 14203, alongside a State Department announcement. To keep certain dealings lawful, OFAC issued General Licenses 13 to 16, covering certain transactions involving the Court, telecommunications and enterprise software, pension payments, and certain matters relating to ICC detainees. The same day OFAC removed one Burma-related individual from the list.

Key takeaway

Institutions with a US nexus that deal with the Court, or supply it, should map each payment to a specific general licence and keep the record. General License 13 expires on 7 April 2027.

Sources: OFAC Recent Actions, 9 October 2026 · U.S. Department of State, Imposing Sanctions on the International Criminal Court

Enforcement actions

05
Enforcement actions · FinCEN

Bank of America penalised more than $1.21 billion by FinCEN, the OCC and OFAC

On 13 October 2026 Treasury announced what it called record enforcement actions against Bank of America, N.A. FinCEN assessed a $1.2 billion penalty; the bank admits it wilfully violated the Bank Secrecy Act and, between 2018 and mid-2025, failed to report in time more than $5 billion in suspicious transactions, over $1 billion of them tied to national security and other priority risks such as Chinese money laundering networks. Treasury says the bank relied heavily on law enforcement inquiries and other institutions' requests, effectively outsourcing much of its proactive detection to third parties. The OCC imposed a $750 million civil money penalty, the largest in its history, finding the BSA/AML programme deficient and ineffective. OFAC settled 475 apparent violations across seven sanctions programmes for $11.66 million, citing slow watchlist updates, poorly calibrated alerts and payments routed through blocked banks. Treasury puts the combined total at more than $1.21 billion without itemising how the amounts are credited.

Key takeaway

Measure how long a new designation takes to reach live screening, and check that suspicious activity reports come from your own detection rather than from law enforcement requests: the two weaknesses at the centre of this case.

Sources: U.S. Treasury press release SB0657 · FinCEN consent order 2026-03 · OFAC settlement, 13 October 2026

06
Enforcement actions · OFAC

Freight forwarder Pegasus Worldwide Logistics settles with OFAC for $175,015

On 9 October 2026 OFAC announced a $175,015 settlement with Pegasus Worldwide Logistics, a freight forwarder handling cross-border shipments. OFAC says that between September 2023 and February 2024 the firm dealt in blocked property by facilitating the import of a machine supplied by a designated company, four apparent violations of the Illicit Drug Trafficking Sanctions Regulations, and failed for six months to respond fully to an OFAC subpoena, six apparent violations of the Reporting, Procedures and Penalties Regulations. OFAC judged the case non-egregious and not voluntarily self-disclosed.

Key takeaway

Logistics and trade-services firms need to screen suppliers and consignors, not only customers, and to answer OFAC subpoenas completely and on time.

Sources: OFAC Recent Actions and enforcement release, 9 October 2026

Cite this issue

Vyra from Youverify. "Brussels lists 1,569 Russian arms makers as Washington fines Bank of America more than $1.21 billion." Youverify Weekly Compliance Alert, issue 22, 16 October 2026. https://youverify.co/compliance-alert/2026-10-16. Accessed 16 October 2026.

How this issue was verified

Every story was checked against the issuing authority's own release or legal text; figures and dates are as published there. The OCC release could not be retrieved directly, so OCC figures are taken from the U.S. Treasury release of 13 October 2026.