---
title: "Weekly Enforcement Action Digest"
slug: "weekly-enforcement-action-digest-june-9-2026"
date: "2026-06-09"
author: "Across Technology, Inc."
excerpt: "Material enforcement and supervisory items from OFAC, FinCEN, the federal banking agencies, SEC, and California DFPI for the week ending June 9, 2026 — including OFAC's designation of Iranian digital asset exchanges and a $4M DFPI penalty against Navitas Credit Corp."
tags:
  - Enforcement
  - BSA/AML
  - Sanctions
  - Fintech
featured: true
---

## Executive Summary

**Key Takeaways This Week**

- New material enforcement or supervisory items were identified from **OFAC**, **FinCEN**, the **federal banking agencies**, **SEC**, and **California DFPI**.
- The highest fintech-relevant item was **OFAC's June 2 designation of Iranian digital asset exchanges**, including Nobitex, Wallex, Bitpin, and Ramzinex, for sanctions evasion, terror-finance, and IRGC-linked activity.
- FinCEN issued a **joint advisory** with the FDIC, OCC, NCUA, and IRS on detecting and reporting illicit activity related to non-work-authorized populations, including identity theft, payroll fraud, and misuse of the banking system.
- The OCC, FDIC, and Federal Reserve jointly removed additional references to **reputation risk** from interagency supervisory materials, reinforcing a shift toward material financial-risk-based supervision.
- California DFPI announced a **$4 million penalty against Navitas Credit Corp.** for unlicensed lending activity in California.
- No new material enforcement actions were identified this week from the CFPB, DOJ, FTC, NYDFS, or NCUA beyond participation in the FinCEN advisory.

## Weekly Metrics

| Metric | Count |
| --- | --- |
| Total New Enforcement Actions / Material Supervisory Updates | 6 |
| High Relevance to Fintech / Sponsor Banks | 3 |
| BSA/AML & Sanctions | 3 |
| Consumer Compliance | 1 |
| Governance & Risk Management | 1 |
| Fraud & Operational Risk | 2 |
| Information Security / Cybersecurity | 0 |
| Fintech / BaaS Specific Actions | 2 |

## Priority Watchlist

| Institution | Regulator | Action | Risk Area | Fintech/BaaS Relevance | Severity |
| --- | --- | --- | --- | --- | --- |
| Nobitex, Wallex, Bitpin, Ramzinex | OFAC | Sanctions designations | Sanctions, digital assets, terror finance | High: direct digital asset exchange activity | High |
| Iranian LPG / shadow banking network | OFAC | Sanctions designations | Sanctions evasion, foreign bank accounts, shell companies | Medium: sanctions-screening and correspondent-risk relevance | High |
| Financial institutions broadly | FinCEN / FDIC / OCC / NCUA / IRS | Joint advisory | Identity theft, payroll fraud, suspicious activity reporting | Medium: MSBs, banks, payroll processors, and fintech onboarding controls | Medium |
| Banks supervised by OCC, FDIC, Federal Reserve | OCC / FDIC / Federal Reserve | Supervisory guidance update | Governance, supervision, debanking, risk taxonomy | High: sponsor-bank and lawful-business access implications | Medium |
| Navitas Credit Corp. | California DFPI | $4 million penalty | Unlicensed lending, state licensing | Medium: fintech lending and state licensing controls | Medium |
| Financial institutions reporting to federal regulators | SEC and other agencies | Joint data standards final rule | Regulatory reporting, data quality | Low to Medium: future reporting-data modernization | Low |

## New Enforcement Actions This Week

### 1. Nobitex, Wallex, Bitpin, Ramzinex, and Related Individuals

**Regulator:** OFAC
**Action Type:** Sanctions Designation
**Risk Area:** Sanctions, digital assets, terror finance, ransomware-linked activity

**Key Findings**

- OFAC designated Nobitex, described by Treasury as Iran's largest digital asset exchange, along with Wallex, Bitpin, and Ramzinex.
- Treasury stated that Nobitex processed more than 50% of Iranian digital asset inflows in 2025 and facilitated activity tied to sanctions evasion, IRGC-linked transactions, and ransomware-linked actors.
- OFAC also designated Nobitex leadership and officials, including Amir Hossein Rad.

**Why It Matters**

- This is a high-priority digital asset sanctions action. Banks, sponsor banks, money transmitters, crypto firms, payment processors, and fintechs should review sanctions-screening, blockchain analytics, customer-risk-rating, and geolocation controls.

**Fintech Monitoring Relevance:** High

---

### 2. Iranian LPG Smuggling and Shadow Banking Network

**Regulator:** OFAC
**Action Type:** Sanctions Designation
**Risk Area:** Sanctions evasion, shadow banking, foreign bank accounts, front companies

**Key Findings**

- OFAC designated a network of individuals, entities, and vessels involved in shipping Iranian-origin LPG disguised as Omani LPG to South and East Asia.
- Treasury stated the network used UAE and China front companies, foreign bank accounts, and Iran's shadow fleet to move Iranian LPG while concealing its origin.
- OFAC also targeted an Iranian exchange house and leadership for moving foreign currency on behalf of sanctioned Iranian banks.

**Why It Matters**

- This action is relevant to sanctions screening, trade finance, correspondent banking, nested activity, shell-company detection, and payment-flow monitoring.

**Fintech Monitoring Relevance:** Medium

---

### 3. Joint Advisory on Illicit Activity Related to Non-Work-Authorized Populations

**Regulator:** FinCEN, with FDIC, OCC, NCUA, and IRS
**Action Type:** Advisory / Supervisory Update
**Risk Area:** BSA/AML, identity theft, payroll fraud, suspicious activity reporting

**Key Findings**

- FinCEN issued an advisory urging financial institutions to detect and report illicit activity linked to unlawful employment schemes.
- The advisory highlights identity theft, payroll fraud, misuse of Social Security numbers, and access to financial services through unlawfully obtained personal information.
- FinCEN stated that schemes can involve U.S. banks and may support transnational criminal activity, including drug trafficking and human trafficking.

**Why It Matters**

- Banks, fintechs, payroll platforms, MSBs, and sponsor-bank programs should consider whether onboarding, CIP, fraud-monitoring, payroll-processing, and SAR escalation controls identify these risk typologies.

**Fintech Monitoring Relevance:** Medium

---

### 4. Removal of Additional References to Reputation Risk

**Regulator:** OCC, FDIC, Federal Reserve
**Action Type:** Supervisory Guidance Update
**Risk Area:** Governance, supervision, risk taxonomy, debanking

**Key Findings**

- The federal banking agencies jointly updated interagency documents to remove references to reputation risk.
- The agencies stated that supervisory decisions should be based on material financial risks and that the updates are limited to removing reputation-risk references.
- The agencies stated they may continue reviewing supervisory materials for further updates.

**Why It Matters**

- Sponsor banks should ensure fintech, BaaS, payments, crypto, and higher-risk customer decisions are documented in terms of legal, compliance, credit, operational, BSA/AML, sanctions, and fraud risk rather than unsupported reputation-risk concepts.

**Fintech Monitoring Relevance:** High

---

### 5. Navitas Credit Corp.

**Regulator:** California DFPI
**Action Type:** Penalty / Enforcement Action
**Risk Area:** State licensing, consumer lending, unlicensed lending

**Key Findings**

- DFPI announced that it ordered Florida-based Navitas Credit Corp. to pay a $4 million penalty for unlicensed lending activity in California.
- The action is relevant to state licensing controls for nonbank lenders and fintech lending programs.

**Why It Matters**

- Banks and fintech lenders should review state lending-license determinations, exempt-bank partnership models, broker/lender role documentation, and state-law monitoring.

**Fintech Monitoring Relevance:** Medium

---

### 6. SEC Joint Data Standards Final Rule

**Regulator:** SEC, with other federal financial regulators
**Action Type:** Final Rule / Regulatory Update
**Risk Area:** Regulatory reporting, data standards, operational controls

**Key Findings**

- The SEC established joint data standards under the Financial Data Transparency Act of 2022.
- The standards are intended to promote interoperability of financial regulatory data across agencies using common identifiers for entities, locations, dates, products, and currencies.
- The SEC stated that the Federal Reserve, CFTC, CFPB, Treasury, FDIC, FHFA, NCUA, and OCC have established or are expected to act on the standards.

**Why It Matters**

- This is not an enforcement action, but it may affect future regulatory reporting, data lineage, system mapping, and machine-readable reporting obligations.

**Fintech Monitoring Relevance:** Low to Medium

## Enforcement Actions by Risk Category

### BSA/AML & Sanctions

- **OFAC – Iranian digital asset exchanges:** High-priority sanctions action involving digital asset exchanges, sanctions evasion, IRGC-linked activity, and ransomware-linked wallets.
- **OFAC – Iranian LPG and shadow banking network:** Sanctions action involving front companies, foreign bank accounts, and exchange-house activity on behalf of sanctioned Iranian banks.
- **FinCEN advisory:** BSA/AML advisory focused on identity theft, payroll fraud, and suspicious activity tied to unlawful employment schemes.

### Consumer Compliance

- **California DFPI – Navitas Credit Corp.:** $4 million penalty for unlicensed lending activity in California.

### Operational Risk & Fraud

- **FinCEN advisory:** Highlights identity theft, payroll fraud, tax evasion, and misuse of financial accounts.
- **DFPI – Navitas:** Indicates licensing and compliance-control failures in lending activity.

### Information Security & Cybersecurity

No material actions identified this week.

### Third-Party Risk / Fintech Partnerships

- **Federal banking agencies – reputation risk update:** Sponsor banks should ensure fintech and customer-access decisions are tied to documented material financial and compliance risks.
- **OFAC – digital asset exchanges:** Relevant to crypto partners, blockchain analytics vendors, payment partners, and sanctions-screening controls.

### Governance & Risk Management

- **OCC / FDIC / Federal Reserve:** Removal of reputation-risk references from interagency supervisory materials may affect board-level risk appetite, exit decisions, and supervisory documentation standards.
- **SEC:** Joint data standards may require stronger governance over regulatory data quality, identifiers, and reporting architecture.

### Financial / Capital / Liquidity Risk

No material actions identified this week.

## Key Regulatory Themes

1. **Sanctions Evasion Through Digital Assets** — OFAC's digital asset exchange designations reinforce expectations for sanctions screening beyond name matching, including wallet analytics, jurisdictional risk, and exposure to foreign exchanges.
2. **Shadow Banking and Front-Company Risk** — OFAC's Iran-related actions show continued focus on foreign exchange houses, shell companies, foreign bank accounts, and trade-based sanctions evasion.
3. **Identity Theft and Payroll Fraud Typologies** — FinCEN's advisory identifies identity theft and payroll fraud as key illicit-finance typologies requiring monitoring and SAR escalation.
4. **Supervisory Shift Away From Reputation Risk** — Federal banking agencies continue to remove reputation-risk references and emphasize material financial risks in supervisory decision-making.
5. **State Licensing Enforcement for Nonbank Lenders** — DFPI's Navitas action reinforces state-level scrutiny of lending authority, licensing coverage, and consumer-credit compliance.
6. **Regulatory Data Modernization** — The SEC's joint data standards final rule points toward increased use of common identifiers and machine-readable regulatory submissions.

## Implications for Sponsor Banks and Fintech Programs

### Immediate Monitoring Considerations

- Review OFAC screening for exposure to Nobitex, Wallex, Bitpin, Ramzinex, related individuals, and connected wallets or counterparties.
- Confirm crypto, MSB, money-transmission, and payment partners have controls for Iranian sanctions evasion, nested activity, and digital asset exposure.
- Evaluate whether onboarding and transaction monitoring identify payroll-fraud, identity-theft, and suspicious employment-related activity described in the FinCEN advisory.
- Update fintech and higher-risk customer exit documentation to anchor decisions in material financial, legal, compliance, operational, fraud, sanctions, or BSA/AML risks.
- Review state lending-license inventories and bank-partnership documentation for nonbank lending programs.
- Begin assessing regulatory data governance against emerging common-identifier and machine-readable reporting standards.

### Areas Requiring Elevated Attention

- Digital asset sanctions screening and blockchain analytics
- Payroll processor and employer-related fraud monitoring
- CIP / CDD controls for identity-theft indicators
- Money transmitter and MSB partner oversight
- State lending-license coverage
- Sponsor-bank customer exit and restriction documentation
- Regulatory data lineage, common identifiers, and reporting controls

## No Material Actions Identified

No material new enforcement actions or supervisory updates meeting the weekly digest criteria were identified from the following regulators during the review period:

- CFPB
- DOJ
- FTC
- NYDFS
- NCUA, other than participation in the FinCEN advisory
- OCC standalone enforcement actions
- FDIC standalone enforcement actions
- Federal Reserve standalone enforcement actions
- Relevant U.S. state banking departments other than California DFPI

## Sources

| Regulator | Source |
| --- | --- |
| OFAC / Treasury | OFAC designation of Iranian digital asset exchanges, including Nobitex, Wallex, Bitpin, and Ramzinex. |
| OFAC / Treasury | OFAC action targeting Iranian LPG smuggling and shadow banking networks. |
| FinCEN / Treasury | FinCEN advisory on detecting and reporting illicit activity related to non-work-authorized populations. |
| OCC / FDIC / Federal Reserve | Joint release removing additional references to reputation risk from interagency documents. |
| SEC | Final rule establishing joint data standards under the Financial Data Transparency Act of 2022. |
| SEC | Draft Strategic Plan, including digital asset, enforcement, and technology priorities. |
| California DFPI | Navitas Credit Corp. $4 million penalty for unlicensed lending. |
| FDIC | FDIC 2026 press release index reviewed; no standalone enforcement release identified during the review period. |