---
title: "Weekly Enforcement Action Digest"
slug: "weekly-enforcement-action-digest-august-31-2026"
date: "2026-08-31"
author: "Across Regulatory Intelligence"
excerpt: "FinCEN moves to cut off Banque Misr UAE's correspondent access over Iran-linked shadow banking as DOJ brings cartel money-laundering, stolen-check, and software supply-chain cyber cases across a 10-action week."
regulators: "FinCEN, OFAC, Treasury, DOJ, FBI, Federal Reserve, OCC, FDIC, FTC"
metrics:
  - label: "New Actions"
    value: "10"
  - label: "High Fintech Relevance"
    value: "7"
  - label: "BSA/AML & Sanctions"
    value: "4"
  - label: "Governance & Risk"
    value: "2"
tags: [Enforcement, BSA/AML, Sanctions, Cybersecurity]
---

## Executive Summary

**Key Takeaways This Week**

- 10 new material enforcement, sanctions, or criminal financial-risk actions were identified for August 24–31, 2026.
- The highest sponsor-bank and fintech relevance arose from FinCEN's proposed correspondent-account restriction on Banque Misr UAE, OFAC's Iran-related sanctions, DOJ's money-transmitter laundering case tied to CJNG, and DOJ's bank/check-fraud cases.
- Major risk areas were BSA/AML and sanctions, correspondent banking, money transmission, fraud, identity theft, shell-company laundering, cyber intrusion, software supply-chain security, and insider misappropriation.
- No action directly targeted a BaaS or sponsor-bank oversight program. Several actions directly implicated payment access, correspondent banking, money transmitters, digital-asset activity, or financial-institution controls.
- Key supervisory developments included the OCC/FDIC final rule on unsafe or unsound practices and Matters Requiring Attention, plus OCC revisions to enforcement and MRA procedures.

## Priority Watchlist

| Institution | Regulator | Date | Action | Severity |
| --- | --- | --- | --- | --- |
| Banque Misr UAE / Iranian financial facilitators | FinCEN / OFAC | Aug 28 | Proposed correspondent-account restriction + sanctions | High |
| Christopher A. Bravo Marin / Minnesota money transmitter | DOJ | Aug 25 | Indictment — cartel money-laundering (CJNG) | High |
| Iranian networks under Operation Economic Outcast | OFAC / Treasury | Aug 24 | Sanctions campaign / designations | High |
| Autistici Inventati, Palestine Action, Masar Badil | OFAC | Aug 26 | Counterterrorism designations | High |
| Five defendants / $24M stolen-check scheme | DOJ | Aug 25 | Indictment — bank fraud / stolen checks | High |
| PRC state-sponsored QScan/QTRouter platforms | DOJ / FBI | Aug 26 | Domain seizures — cyber / critical infrastructure | High |
| Gadiel Rosario-Alvarado / Banco Popular de Puerto Rico | Federal Reserve | Aug 27 | Prohibition order — insider fraud | Medium |

## New Enforcement Actions This Week

### 01 — BSA/AML & Sanctions / Correspondent Banking

#### Banque Misr UAE and Iranian Financial Facilitators

**Date:** August 28, 2026 · **Regulator:** FinCEN / OFAC · **Type:** Proposed Rule / Sanctions Designations

**Key Findings**

- FinCEN proposed a rule that would revoke Banque Misr UAE's correspondent banking access to U.S. financial institutions.
- Treasury stated Banque Misr UAE processed approximately $1.8 billion between January 2024 and June 2026 for 103 companies potentially tied to Iranian shadow-banking networks.
- OFAC also sanctioned Reza Mohammad Taeedi, manager of Bank Melli's Dubai branch, and Hong Kong-based Kameng Trading Limited for Iran-related financial facilitation.

**Why It Matters**

This is directly relevant to correspondent banking, nested relationships, cross-border payments, sanctions screening, and third-party due diligence. U.S. institutions should assess direct and indirect exposure to Banque Misr UAE, Bank Melli-linked facilitators, and related shadow-banking networks.

**Fintech Monitoring Relevance:** High

### 02 — Sanctions / Shadow Banking / Cyber

#### Operation Economic Outcast — Iran Networks

**Date:** August 24, 2026 · **Regulator:** OFAC / U.S. Treasury · **Type:** Sanctions Designations / Campaign Launch

**Key Findings**

- Treasury launched Operation Economic Outcast to target financial channels supporting the Iranian regime and IRGC.
- The action targeted procurement networks, a malicious cyber group linked to Iran's intelligence apparatus, and brokers, companies, and shadow-fleet vessels used to move Iranian oil and revenue.
- Treasury stated the campaign is intended to increase isolation of Iran's financial facilitators and expand sanctions risk for third-country actors.

**Why It Matters**

Banks, fintechs, digital-asset firms, MSBs, and payment providers should review exposure to Iranian shadow-banking networks, petroleum-linked entities, cyber actors, intermediaries, and cross-border counterparties.

**Fintech Monitoring Relevance:** High

### 03 — BSA/AML & Sanctions / Terrorist Financing

#### Autistici Inventati, Palestine Action, Masar Badil and Leaders

**Date:** August 26, 2026 · **Regulator:** OFAC · **Type:** Sanctions Designations

**Key Findings**

- OFAC designated entities and individuals under counterterrorism authority E.O. 13224, as amended.
- Designated parties included Autistici Inventati, Palestine Action, Masar Badil, and two Masar Badil leaders.
- Treasury emphasized blocking obligations, the 50 Percent Rule, and possible secondary-sanctions exposure for foreign financial institutions facilitating significant transactions for designated persons.

**Why It Matters**

The action is relevant to sanctions screening, correspondent banking, payment processing, fundraising controls, and monitoring of entities that may provide technical, financial, or logistical support to designated organizations.

**Fintech Monitoring Relevance:** High

### 04 — Money Laundering / Money Transmission

#### Christopher A. Bravo Marin / Minnesota-Based Money Transmitter

**Date:** August 25, 2026 · **Regulator:** DOJ · **Type:** Indictment

**Key Findings**

- DOJ announced an indictment charging the operator of a Minnesota-based money transmitter with conspiring to launder at least $750,000 in drug proceeds for the Cártel de Jalisco Nueva Generación.
- DOJ alleged the defendant abused his position at a financial institution to facilitate laundering of cartel proceeds back to Mexico.
- The case directly involves money transmission, cross-border movement of funds, and alleged misuse of financial-institution access.

**Why It Matters**

This is highly relevant to MSB and money-transmitter onboarding, agent oversight, transaction monitoring, source-of-funds analysis, cartel typologies, cross-border remittance risk, and sponsor-bank oversight of payment partners.

**Fintech Monitoring Relevance:** High

### 05 — Bank Fraud / Check Fraud

#### Five Defendants / $24 Million Stolen-Check Scheme

**Date:** August 25, 2026 · **Regulator:** DOJ · **Type:** Indictment

**Key Findings**

- Five Houston-area defendants were indicted in a scheme involving checks stolen from U.S. mail.
- DOJ alleged postal employees were recruited to steal checks that were then sold through Telegram and distributed to buyers.
- The alleged scheme involved approximately $24 million in stolen checks.

**Why It Matters**

The case is relevant to check-fraud controls, anomalous deposit monitoring, mail-theft typologies, account takeover, mule activity, and rapid information sharing between banks and law enforcement.

**Fintech Monitoring Relevance:** High

### 06 — Digital Assets / Investment Fraud / Money Laundering

#### Brent C. Kovar / Profit Connect

**Date:** August 24, 2026 · **Regulator:** DOJ · **Type:** Criminal Conviction

**Key Findings**

- A federal jury convicted Kovar of wire fraud, mail fraud, and money laundering related to Profit Connect.
- DOJ stated that Kovar fraudulently obtained $24 million from at least 400 investors through false claims involving AI software, cryptocurrency mining, fixed returns, and purported reserves.
- DOJ stated investor funds were used to operate the scheme, purchase personal assets, and make payments to earlier investors.

**Why It Matters**

The matter is relevant to digital-asset due diligence, investment-fraud monitoring, high-yield return claims, source-of-funds review, and banking services provided to crypto-related businesses.

**Fintech Monitoring Relevance:** High

### 07 — Information Security / Cybersecurity

#### PRC State-Sponsored QScan and QTRouter Platforms

**Date:** August 26, 2026 · **Regulator:** DOJ / FBI · **Type:** Court-Authorized Domain Seizures

**Key Findings**

- DOJ and FBI seized domains used by two hacking platforms associated with a PRC state-sponsored group.
- The platforms allegedly targeted U.S. critical infrastructure and sensitive networks, including the Federal Reserve.
- The action was intended to disrupt malicious infrastructure used for reconnaissance and compromise.

**Why It Matters**

Banks and fintechs should review threat intelligence for state-sponsored scanning, credential compromise, edge-device exposure, and infrastructure used to stage attacks against financial and critical systems.

**Fintech Monitoring Relevance:** Medium

### 08 — Information Security / Cybersecurity

#### Ruben Ian Thomson / TeamPCP Software Supply-Chain Attacks

**Date:** August 27, 2026 · **Regulator:** DOJ · **Type:** Indictment

**Key Findings**

- A federal grand jury indicted Thomson for alleged computer-fraud offenses tied to TeamPCP cyberattacks.
- DOJ alleged exploitation of trusted software supply-chain security tools and injection of malicious code.
- The alleged compromise affected downstream customers that relied on the targeted software tools.

**Why It Matters**

The action highlights third-party software risk, supply-chain compromise, code-signing controls, vendor security, continuous monitoring, and incident-response dependencies across financial technology ecosystems.

**Fintech Monitoring Relevance:** High

### 09 — Money Laundering / Fraud

#### Oluwasegun Baiyewu

**Date:** August 28, 2026 · **Regulator:** DOJ · **Type:** Criminal Sentencing

**Key Findings**

- Baiyewu was sentenced to 95 months in prison for laundering more than $3.1 million in proceeds from business email compromise, romance, and unemployment-insurance fraud.
- DOJ stated the conspiracy used illicit proceeds to purchase used vehicles that were shipped to West Africa.
- The laundering involved multiple co-conspirators in the United States and Nigeria.

**Why It Matters**

The case is relevant to BEC monitoring, mule networks, cross-border laundering, unusual vehicle-related payments, rapid movement of fraud proceeds, and international beneficiary risk.

**Fintech Monitoring Relevance:** Medium

### 10 — Insider Fraud / Operational Risk

#### Gadiel Rosario-Alvarado, Former Banco Popular de Puerto Rico Employee

**Date:** August 27, 2026 · **Regulator:** Federal Reserve · **Type:** Prohibition Order

**Key Findings**

- The Federal Reserve announced a consent prohibition order against a former Banco Popular de Puerto Rico employee.
- The stated basis was misappropriation of customer funds.
- The prohibition prevents the individual from participating in the affairs of federally insured depository institutions without required regulatory approval.

**Why It Matters**

The action reinforces employee-fraud monitoring, privileged-access controls, customer-account surveillance, segregation of duties, and escalation of suspicious employee activity.

**Fintech Monitoring Relevance:** Medium

## Enforcement Actions by Risk Category

**BSA/AML & Sanctions**

- FinCEN / OFAC — August 28, 2026: Proposed correspondent-account restriction on Banque Misr UAE and sanctions against additional Iran-related financial facilitators.
- OFAC — August 24, 2026: Operation Economic Outcast launched against Iranian financial, petroleum, cyber, and shadow-banking networks.
- OFAC — August 26, 2026: Counterterrorism designations targeted entities and leaders providing financial, technological, or organizational support to designated terrorist-linked networks.
- DOJ — August 25, 2026: Money-transmitter operator charged with laundering alleged CJNG drug proceeds.

**Consumer Compliance**

- FTC — August 27, 2026: FTC finalized orders requiring Cox Media Group, MindSift, and 1010 Digital Works to pay a total of $930,000 over allegedly deceptive representations concerning an AI-powered "active listening" advertising service. The action is consumer/data-use related but not bank-specific.

**Operational Risk & Fraud**

- DOJ — August 25, 2026: Approximately $24 million stolen-check scheme allegedly involved postal employees and resale of stolen checks.
- DOJ — August 24, 2026: Crypto/AI investment-fraud conviction involved $24 million obtained from at least 400 investors.
- DOJ — August 28, 2026: Money laundering sentencing involved more than $3.1 million in fraud proceeds.
- Federal Reserve — August 27, 2026: Former Banco Popular employee prohibited after misappropriation of customer funds.

**Information Security & Cybersecurity**

- DOJ / FBI — August 26, 2026: Court-authorized seizure of infrastructure used by PRC state-sponsored hackers to target U.S. critical infrastructure and sensitive networks.
- DOJ — August 27, 2026: TeamPCP indictment alleged exploitation of trusted software supply-chain security tools and downstream customer compromise.
- Treasury — August 24, 2026: Operation Economic Outcast included action against an Iranian malicious cyber group linked to attacks on U.S. critical infrastructure and financially motivated cyber theft.

**Third-Party Risk / Fintech Partnerships**

- FinCEN / OFAC — August 28, 2026: Banque Misr UAE action is highly relevant to correspondent banking, nested relationships, and indirect exposure to shadow-banking networks.
- DOJ — August 25, 2026: Money-transmitter operator charged with laundering cartel proceeds, creating direct MSB and remittance-monitoring relevance.
- DOJ — August 27, 2026: TeamPCP software supply-chain case highlights risks created by trusted third-party technology providers.
- DOJ — August 24, 2026: Profit Connect conviction is relevant to banking services supporting crypto and AI-related investment businesses.
- No enforcement actions directly targeting sponsor-bank programs or BaaS arrangements were identified this week.

**Governance & Risk Management**

- OCC / FDIC — August 27, 2026: Joint final rule defined "unsafe or unsound practice" for Section 8 purposes and revised the framework for Matters Requiring Attention and other supervisory communications.
- OCC — August 27, 2026: OCC revised enforcement-action and MRA policies and procedures and proposed amendments to its violations framework.

**Financial / Capital / Liquidity Risk**

No material actions identified this week.

## Key Regulatory Themes

1. **Correspondent Banking and Iran-Related Shadow Finance** — The Banque Misr UAE proposal and Operation Economic Outcast materially increase focus on correspondent access, front companies, exchange houses, and third-country institutions that may facilitate Iranian financial activity.
2. **Money Transmission and Cross-Border Laundering** — DOJ's Minnesota money-transmitter case highlights the need for agent oversight, corridor risk assessment, source-of-funds controls, and transaction monitoring for cartel-related laundering.
3. **Fraud Through Checks, Digital Assets, and Mule Networks** — The week's fraud cases involved stolen checks, Treasury-related instruments, investment schemes, BEC proceeds, shell or intermediary activity, and cross-border laundering.
4. **Cyber and Third-Party Technology Risk** — State-sponsored hacking and software supply-chain attacks reinforce the need for vendor security, threat intelligence, hardened access controls, and rapid incident response.

## Implications for Sponsor Banks and Fintech Programs

**Immediate Monitoring Considerations**

- Screen direct and indirect counterparties for newly designated Iran-related entities, facilitators, and 50-percent-owned entities; assess correspondent exposure to Banque Misr UAE.
- Review MSB, money-transmitter, and remittance partners for cartel typologies, unusual cash or cross-border activity, agent anomalies, and rapid funds movement to Mexico or other high-risk destinations.
- Strengthen check-fraud monitoring for stolen-mail typologies, high-value Treasury or business checks, newly opened accounts, and rapid withdrawals or transfers after deposit.
- Review third-party software and security vendors for supply-chain compromise risk, privileged access, code integrity, and downstream dependency exposure.

**Areas Requiring Elevated Attention**

- Correspondent and nested banking relationships
- Iran and sanctioned-network exposure
- Money transmitters and agent networks
- Cross-border remittance corridors
- High-value check and mail-theft fraud
- Digital-asset and investment-fraud businesses
- Business email compromise and mule activity
- Third-party software supply-chain security
- Employee misappropriation and privileged access

## No Material Actions Identified

The following regulators were reviewed and no material new enforcement actions meeting the digest criteria were identified: FDIC (separate enforcement action; joint supervisory rule noted above), CFPB, NCUA, SEC, NYDFS, California DFPI, and relevant U.S. State Banking Departments beyond the federal/state-related items identified above.

## Sources

| Regulator | Source |
| --- | --- |
| OCC | Aug. 27, 2026 - OCC Acts to Improve Transparency and Consistency to Bank Enforcement and Supervisory Standards; Bulletin 2026-40 and related OCC materials. https://occ.gov/news-issuances/news-releases/2026/nr-occ-2026-72.html · https://occ.gov/news-issuances/bulletins/2026/bulletin-2026-40.html |
| FDIC | Official FDIC news/enforcement sources reviewed; joint Aug. 27 OCC/FDIC supervisory rule reflected through OCC's official release. |
| CFPB | Official CFPB enforcement and newsroom sources reviewed; no qualifying material new weekly action identified. |
| FinCEN | Aug. 28, 2026 - Treasury/FinCEN proposed action concerning Banque Misr UAE correspondent banking access. https://home.treasury.gov/news/press-releases/iran-s-access-uae-banks-targeted-under-operation-economic-outcast/ |
| OFAC | Aug. 24, 2026 - Operation Economic Outcast (https://home.treasury.gov/news/press-releases/sb0613); Aug. 26, 2026 - counterterrorism designations (https://home.treasury.gov/news/press-releases/sb0616/); Aug. 28, 2026 - additional Iran-related financial facilitators. |
| Federal Reserve | Aug. 27, 2026 - Enforcement action with former employee of Banco Popular de Puerto Rico. https://www.federalreserve.gov/newsevents/pressreleases/enforcement20260827a.htm |
| NCUA | Official NCUA press releases and administrative orders reviewed; no qualifying material new weekly action identified. |
| SEC | Official SEC newsroom/enforcement sources reviewed; no qualifying material new enforcement action identified in the weekly period. |
| FTC | Aug. 27, 2026 - Final orders involving Cox Media Group, MindSift, and 1010 Digital Works over alleged "active listening" AI marketing representations. https://www.ftc.gov/news-events/news/press-releases |
| DOJ | Aug. 24-28, 2026 official DOJ/U.S. Attorney releases: Profit Connect conviction (https://www.justice.gov/usao-nv/pr/jury-convicts-las-vegas-business-owner-cryptocurrency-ponzi-scheme); Minnesota money-transmitter indictment (https://www.justice.gov/opa/pr/operator-minnesota-based-money-transmitter-charged-laundering-drug-proceeds-mexican-cartel-0); $24M stolen-check indictment (https://www.justice.gov/usao-sdtx/pr/postal-employees-charged-24m-stolen-check-scheme); PRC hacking-platform seizures (https://www.justice.gov/opa/pr/justice-department-and-fbi-seize-platforms-operated-and-used-china-state-sponsored-hackers); TeamPCP supply-chain indictment (https://www.justice.gov/usao-ndca/pr/australian-man-indicted-teampcp-cyberattacks-software-supply-chain); Baiyewu money-laundering sentencing (https://www.justice.gov/opa/pr/nigerian-national-sentenced-laundering-31m-scam-proceeds). |
| NYDFS | Official NYDFS enforcement/press release sources reviewed; no qualifying material new weekly action identified. |
| California DFPI | Official DFPI enforcement/press release sources reviewed; no qualifying material new weekly action identified. |
| Relevant U.S. State Banking Departments | Official state regulator sources reviewed where relevant; no additional qualifying material action identified. |

*Review period: August 24–31, 2026. Public release dates were used for weekly inclusion. Overlapping Treasury, FinCEN, OFAC, DOJ, and underlying-order announcements were deduplicated. Criminal allegations are described as allegations unless a conviction, plea, or sentence occurred. Counts are category counts and may overlap across risk areas.*