By PYMNTS
Published September 22, 2026
Main Facts
Some of the world’s most prominent financial institutions have reportedly processed billions of dollars on behalf of a Kremlin-backed financial technology firm that systematically bypassed international sanctions. Operating under the radar of traditional compliance checks, a shadowy FinTech entity known as A7 successfully funneled more than $6.9 billion through the global banking architecture by orchestrating an industrial-scale forgery and money-laundering operation.
The revelations come to light following a comprehensive investigative report published by the Financial Times (FT), which analyzed hundreds of internal A7 files obtained via a massive data leak. Established deliberately as an alternative payment mechanism to circumvent Western financial isolation, A7 utilized a convoluted web of front companies and unsuspecting legitimate businesses. These entities executed cross-border transactions through the secure messaging infrastructure of the Society for Worldwide Interbank Financial Telecommunication (SWIFT).
To mask the true origin and destination of these capital flows, A7 engaged in what intelligence and banking experts describe as "old-fashioned money laundering" supercharged by digital-era sophistication. Specifically, the firm relied on a sprawling network of counterfeit invoices to deceive compliance officers at major international banks, including Standard Chartered, JPMorgan Chase, and Citigroup. While these institutions maintain that they adhere to rigorous anti-money laundering (AML) protocols and robust compliance frameworks, they have largely declined to comment on the specifics of the leaked files.
The fallout from this investigation extends far beyond institutional embarrassment. It highlights critical vulnerabilities in the architecture of correspondent banking, raising urgent questions about how easily state-backed actors can exploit global financial pipelines to sustain sanction-hit economies.
Chronology of the A7 Operation
The genesis and evolution of the A7 network trace a direct line back to the geopolitical fallout of Russia’s 2022 invasion of Ukraine and the subsequent financial blockades imposed by Western allies.
- Early 2022: In the wake of widespread geopolitical condemnation, Western governments and international coalitions disconnected major Russian financial institutions from the SWIFT global payment network. This isolation severed traditional cross-border trade routes, imperiling Russia’s import-export economy.
- The Establishment of A7: Recognizing the existential threat to Russian trade, Moldovan oligarch Ilan Shor—working in tandem with Russian state-backed entities—helped establish A7. The firm was designed specifically to serve as Russia’s premier cross-border import payments provider, operating outside the purview of Western regulatory oversight.
- Strategic Backing: The venture secured critical institutional support from Promsvyazbank, a Russian state-owned bank maintaining deep, structural ties to the country’s military-industrial complex and defense sector. Promoted heavily by the Kremlin, A7 positioned itself as an innovative financial alternative to bridge the gap between Russian enterprises and foreign suppliers.
- Operational Scaling (2023–2025): Over several years, A7 scaled its operations exponentially. Using a tiered network of shell corporations, the firm systematically opened accounts with premier Western and international banks. Deposits were channeled through the SWIFT system, disguised as legitimate commercial payments for foreign goods, and ultimately settled in overseas destinations—predominantly within China.
- September 2026: The Financial Times published its explosive investigation based on hundreds of leaked A7 documents, blowing the lid off the multi-billion-dollar evasion scheme and prompting renewed scrutiny from international regulators and compliance experts.
Supporting Data and Technical Mechanics
The scale of the A7 network far exceeds initial estimations made by intelligence analysts and financial watchdogs. According to the leaked files evaluated by the Financial Times, A7 successfully maneuvered $6.9 billion through the international banking system, utilizing mechanical processes designed to evade automated transaction monitoring systems.
The Mechanics of the Scheme
A7’s operational blueprint relied on a multi-step layering process:
- Front Company Deployment: A7 established and co-opted numerous front companies across multiple jurisdictions, presenting them as legitimate trading entities engaged in international commerce.
- Cash Deposits via SWIFT: These front companies arranged for substantial cash deposits to be funneled into accounts held at major global banks operating within the SWIFT network.
- Industrial-Scale Forgery: To satisfy the strict compliance queries of intermediary and beneficiary banks, A7 manufactured thousands of counterfeit commercial invoices, bills of lading, and shipping documents. These forged papers provided false justifications for the movement of capital, effectively blinding transaction-monitoring algorithms designed to flag suspicious activity.
- Geographic Distribution: The ultimate destination for a slight majority—just over 50%—of these illicit capital flows was a network of Chinese bank accounts, which facilitated the purchase of goods required by Russian importers.
Zach Tvarozna, a former U.S. government banking analyst who authored a preliminary report on A7 for the Open Source Center following an earlier data leak, emphasized the unprecedented nature of the findings.
"The new data here really shows that the true scale of A7’s money-laundering network is much bigger than anyone had previously realized," Tvarozna noted. He added that the material "should make us think again about how hard it is to keep traditional correspondent banking clean."
Official Responses and Industry Reactions
The revelations have sent shockwaves through the global financial compliance community, forcing major banking institutions and regulatory bodies to address systemic vulnerabilities.
The Major Banks
Institutions named in the leaked documents—namely Standard Chartered, JPMorgan Chase, and Citigroup—found themselves under intense public scrutiny. In statements provided to investigative journalists, representatives from these banks reiterated their steadfast commitment to anti-money laundering (AML) controls, Know Your Customer (KYC) mandates, and sanctions compliance. However, citing client confidentiality laws and ongoing internal reviews, the banks declined to offer detailed commentary regarding specific transactions linked to A7 or its front entities.
Regulatory Shifts in the United States and United Kingdom
The timing of the A7 leak intersects with broader regulatory adjustments currently underway in Western jurisdictions:
- U.S. Treasury Adjustments: Just prior to the FT report, industry updates indicated that the U.S. Treasury is actively considering raising reporting thresholds for Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs). By tethering these thresholds to customer tenure, regulators hope to alleviate administrative burdens on community banks, allowing compliance officers to focus high-level scrutiny on complex, high-risk international networks like A7.
- U.K. Strategic Pivot: Simultaneously, the British government announced a fundamental shift in its national AML strategy. Rather than focusing predominantly on prosecuting individual financial offenders, the U.K. is reorienting its enforcement mechanisms toward disrupting the increasingly technology-enabled financial networks that allow sophisticated illicit actors to move capital undetected.
Broader Implications for Global Finance and Sanctions
The A7 scandal serves as a stark wake-up call regarding the limitations of modern economic sanctions and the fragility of global banking safeguards.
1. The Resilience of State-Sponsored Evasion
Sanctions are designed to isolate rogue regimes from the lifeblood of international commerce. However, the A7 case demonstrates that well-resourced state actors—backed by sovereign wealth, intelligence apparatuses, and specialized FinTech frameworks—can successfully construct parallel financial architectures. By mimicking legitimate trade and exploiting the automated trust inherent in the SWIFT system, these networks can siphon billions across borders with impunity.
2. The Vulnerability of Correspondent Banking
Correspondent banking remains the foundational highway of international trade, but it operates on a model of distributed trust. When intermediary banks rely on the initial vetting performed by originating institutions, vulnerabilities multiply. As Zach Tvarozna pointed out, scrubbing traditional correspondent banking networks clean of state-sponsored forgery operations requires far more than legacy algorithms and reactive compliance checklists.
3. The Need for Technological Counter-Measures
As illicit networks leverage advanced digital tools, synthetic identities, and industrial-scale document forgery, financial institutions must evolve in tandem. Regulators and banks are increasingly pressured to adopt advanced artificial intelligence, machine learning-driven document verification, and cross-border data-sharing initiatives. These technologies are vital to detect anomalies in trade finance and prevent the next iteration of state-backed sanctions evasion.
Ultimately, the exposure of the A7 network proves that financial crime has outpaced traditional regulatory defenses. Unless international regulators, law enforcement agencies, and global banking giants forge a more unified, technologically agile front, state-backed entities will continue to find lucrative backdoors into the heart of the Western financial system.
