A7 alert and doubled OFSI fines: the new sanctions perimeter for UK finance

The Treasury has moved the UK's sanctions regime onto a more aggressive footing. On 31 August, the Chancellor announced the first ever nationwide alert against the A7 network and doubled the maximum fine available to the Office for Financial Sanctions Implementation from 50% to 100% of the value of a sanctions breach (HM Treasury). For boards and executive committees in regulated firms, this is a step change in both intelligence-sharing and financial exposure.

Key Executive Takeaways

• The UK has issued its first ever nationwide alert against Russia's A7 sanctions evasion network, giving firms named typologies to screen against and removing the defence of ignorance.
• OFSI's maximum civil penalty has doubled to 100% of the value of a sanctions breach, meaning enforcement risk now matches transaction size rather than a capped proportion of it.
• A7 claims to have settled more than $86 billion of transactions in its first year using third-country financial institutions, so correspondent banking, trade finance and payments intermediaries carry the highest residual risk.

The alert itself, issued jointly by the National Crime Agency and government, is designed to expose the methods A7 uses to move value through third-country financial institutions and cross-border payment chains (HM Treasury). The scale claim is striking: A7 says it has settled more than $86 billion in its first year of operating, and the network has been linked to Iranian state-associated actors as well as Russia (HM Treasury). Once a public alert exists, supervisors and prosecutors will treat firms that fail to reflect its typologies in transaction monitoring as having accepted a known risk. The evidentiary burden shifts.

The fine change is the more consequential lever. Moving the OFSI ceiling from 50% to 100% of breach value means the civil penalty can, in principle, exceed the commercial margin on almost any transaction a bank or payments firm might process. Combined with OFSI's existing power to impose penalties on a strict civil basis, this recalibrates the internal economics of sanctions compliance: the cost of a single missed screening hit can now match the notional of the payment itself. Finance and risk committees that have been sizing sanctions provisions against historical fine distributions will need to rebuild those assumptions.

The operational implications concentrate in three places. Correspondent banks and payment service providers sit closest to the A7 typology, because the network's model relies on third-country institutions to intermediate cross-border flows (HM Treasury). Trade finance and commodity-linked lending face parallel exposure where documentation obscures ultimate counterparties. And private banking and wealth teams should read this alongside the FCA's parallel signalling on integrity failures, where the regulator recently banned three former Dolfin executives over a scheme that generated at least £35.5m in fees while bypassing UK visa rules (FCA). The common thread is that UK authorities are willing to publish detailed conduct findings and pursue individuals, not just firms.

For senior leaders, the near-term action is unglamorous but specific: confirm the A7 alert has been ingested into financial crime frameworks, revisit third-country correspondent exposures, and re-price sanctions risk in capital and provisioning models against the new 100% ceiling. Boards that treat this as a compliance memo rather than a change in the enforcement contract will be exposed on the next inspection cycle.