AML and Financial Crime Weekly Bulletin: Key Developments

Financial crime regulators intensified enforcement activity this week, with major developments spanning sanctions evasion, illicit finance, healthcare fraud, crypto compliance, and banking supervision. From U.S. actions targeting Iran-linked financial networks to India’s crackdown on non-compliant virtual asset providers, the latest developments highlight the growing importance of risk-based controls and effective financial crime monitoring.

OFAC targets networks supporting Iran-linked proxies

On September 10, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned individuals and entities across Iraq, Lebanon, the United Arab Emirates, and Türkiye for supporting Iran-linked groups, including Kata’ib Hizballah and Hizballah. The action forms part of Operation Economic Outcast, which aims to disrupt financial channels supporting Iran and its proxy networks.

Treasury also announced a $1.43 million settlement involving an individual who allegedly provided services to an Iranian company and received Iranian-origin dividends through U.S. bank accounts. OFAC separately introduced a presumption of denial for most Iran-related specific license requests.

FinCEN calls for information on Iran-related illicit finance

The Financial Crimes Enforcement Network (FinCEN) issued a whistleblower bulletin on September 10 focused on Iran-related illicit finance. The bulletin encourages individuals to report potential violations involving the Bank Secrecy Act, U.S. sanctions, Iranian proxies, and facilitators operating outside Iran.

FinCEN said information voluntarily provided through its whistleblower program may qualify for financial awards. The move reinforces the importance of identifying financial networks that facilitate sanctions evasion and illicit Iranian commerce.

FinCEN identifies $17.5 billion in suspected healthcare fraud

On September 9, FinCEN published a Financial Trend Analysis identifying approximately $17.5 billion in suspicious financial activity potentially linked to healthcare fraud. The analysis highlights the role of financial institutions and Bank Secrecy Act data in identifying patterns associated with fraudulent healthcare activity.

For compliance teams, the findings demonstrate how transaction monitoring and suspicious activity reporting can support the detection of complex fraud schemes beyond traditional money laundering typologies.

India takes action against 15 crypto platforms

India’s Financial Intelligence Unit (FIU-IND) issued non-compliance notices to 15 virtual digital asset service providers on September 9 under the Prevention of Money Laundering Act. The action also sought the removal of their applications and URLs from public access.

The named providers include Weex, Blofin, Bitunix, DigiFinex, Toobit, XT.com, Latoken, WOO X, Pionex, ChangeNow, SimpleSwap, FixedFloat, WhiteBIT, Guardarian, and Rezorex. FIU-IND reiterated that VDA providers serving the Indian market must comply with registration, reporting, and record-keeping requirements, regardless of whether they maintain a physical presence in India.

What compliance teams should watch

This week’s developments reinforce a common regulatory expectation: financial crime controls must work effectively in practice, not simply exist on paper.

Three key takeaways for compliance professionals:

• Strengthen sanctions controls: Iran-related enforcement highlights the need for accurate screening, transaction-level review, and network-aware due diligence.
• Expand monitoring beyond AML typologies: Healthcare fraud shows how transaction monitoring and SAR reporting can identify complex financial crime patterns.
• Monitor crypto regulatory obligations: VDA providers must understand local AML requirements when serving customers in a jurisdiction, including registration and reporting obligations.

As regulators increase scrutiny of sanctions evasion, fraud, illicit finance, and virtual assets, firms should continue testing whether their controls can identify and escalate emerging risks effectively.