UK NCA issues industry-wide alert on A7 Russia sanctions evasion network

3 September 2026

The National Crime Agency (NCA) and its National Economic Crime Centre have issued an alert on the A7 sanctions evasion network. It was produced with OFSI, the FCDO and financial sector partners through the Joint Money Laundering Intelligence Taskforce, and announced by HM Treasury on 31 August 2026.

NCA alerts warn the private sector about criminal methods so firms can identify them. The alert is a ‘flash alert’, which highlights a matter of potential concern to consider against existing anti-money laundering controls. HM Treasury describes it as the first industry-wide alert, meaning it goes to the whole regulated sector rather than to a limited group of firms.  See the UK Guidance section of the site for all NCA alerts relating to sanctions.

A7 was set up in 2024 by Ilan Shor and is backed by PSB, a sanctioned Russian state bank, and the state corporation VEB.RF. It claims to have settled more than $86 billion in its first year. The UK, US and EU have sanctioned A7 and its affiliates.

The alert sets out how A7 moves value across borders:

• It builds pools of liquidity outside Russia, historically through Kyrgyz entities including TKKR, liquidated in February 2026.

• Shell companies called “sub-agents”, registered worldwide but run from inside Russia, hold local bank accounts and pay international suppliers for A7’s clients.

• False invoices accompany the payments, and staff use VPNs to appear located in the jurisdictions where they seek banking services.

• Customers buy promissory notes, or “veksels”, so that no correspondent bank transfer leaves Russia when a note is redeemed.

OFSI has identified transactions between A7 shell companies and UK-incorporated beneficiaries. The alert lists 7 red flag indicators.