Weekly Enforcement Action Digest
Executive Summary — Key Takeaways This Week
- FinCEN issued a November 6 funds-transfer prohibition involving MEXC Global, citing at least $16 billion in illicit transactions associated with sanctions evasion and cybercrime.
- OFAC announced sanctions involving eight Canadian money services businesses, Prince Group-linked scam networks, and a maritime network connected to Iranian petroleum activities.
- The FTC and Washington authorities pursued Riverside Payments and related parties over alleged deceptive merchant pricing, contract terms, and cancellation practices.
- DOJ charged three individuals in an alleged $129 million technology-enabled impersonation fraud scheme involving fraudulent payment instructions.
- The OCC issued a supervisory framework addressing super intelligence on November 4; FinCEN separately withdrew proposed Travel Rule amendments on November 6.
| Institution | Regulator | Date | Action | Severity |
|---|---|---|---|---|
| MEXC Global | FinCEN | Nov 6 | Funds-transfer prohibition; CVC illicit finance | High |
| Eight Canadian MSBs | OFAC | Nov 6 | Iran sanctions evasion; crypto exchange | High |
| Prince Group-linked network | OFAC | Nov 5 | Cyber-enabled scams, shell companies | High |
| Riverside Payments / Cascade | FTC + Washington | Nov 2 | Merchant pricing, contracts, cancellation | Medium |
| SI-enabled fraud defendants | DOJ | Nov 5 | Alleged $129M payment impersonation | High |
| Sharma maritime network | OFAC | Nov 4 | False flags, Iran petroleum / aviation | High |
| Progress Residential / Pretium | FTC + states | Nov 6 | Housing pricing / deposits | High |
MEXC Global
- FinCEN issued an order under section 9714(a) of the Combating Russian Money Laundering Act barring U.S. financial institutions from transmittals of funds to or from MEXC Global.
- Treasury reports at least $16 billion in illicit transactions between May 2021 and May 2026 linked to sanctions evasion, cybercrime and other activity; this is a Treasury finding, not a criminal conviction.
- Treasury identified nearly $1.5 billion connected to Russian sanctions evasion, about $1 billion in direct transactions with more than 40 Iranian CVC exchangers, and approximately $22 million benefitting the sanctioned Central Bank of Iran and IRGC/Qods Force.
- The prohibition takes effect 30 days after Federal Register publication; the press release does not provide the publication date. Existing SAR and OFAC obligations remain unchanged.
The measure directly affects financial institutions that facilitate payments involving a major crypto exchange. Sponsor banks should verify fintech partner exposure, including indirect liquidity and virtual-asset service provider relationships, rather than relying solely on named-account screening.
Eight Canadian Money Services Businesses
- OFAC designated eight Canada-based money services businesses under E.O. 13902 for operating in the digital-asset sector of the Iranian economy.
- Treasury describes exchanges of Iranian rials and other currencies into digital assets and transactions involving sanctioned Iranian exchanges and IRGC-associated addresses.
- Named businesses include Million Exchange, Amin Exchange-related companies, NIA Nations Currency, Farah Exchange, CCC Inc, B Galaxy/Cryptoyal and Darvish Exchange.
- Treasury also describes some links to laundering of narcotics proceeds and OFAC-sanctioned Ryan Wedding; designations were coordinated with FinCEN and FINTRAC.
The action shows that an MSB outside Iran can present direct U.S. sanctions exposure through its customers, wallet flows and ownership. Banks providing settlement or access to Canadian remittance and crypto businesses should reassess intermediary controls.
Prince Group-Linked Scam Network
- OFAC sanctioned four individuals and 41 entities supporting the Prince Group transnational criminal organization, plus a Malaysian individual connected to Africa-based scam activity.
- Treasury says Prince Group-linked actors supported investment and romance scams, offshore structures, concealed beneficial ownership and efforts to evade earlier sanctions.
- The action follows prior designations in October 2025 and June 2026 and targets corporate infrastructure rather than only alleged scam operators.
- Treasury describes proceeds moved through offshore entities, financial facilitators and digital-asset transactions; the designation is a sanctions action, not proof that every listed company committed each alleged predicate offense.
Sponsor banks may face exposure through ordinary-looking corporate accounts and merchant entities rather than known scam brands. Beneficial-ownership refresh and transactional network analysis are important complements to sanctions-name matching.
Riverside Payments & Cascade Equipment Leasing
- The FTC and Washington alleged misleading savings claims, omitted fees, automatic renewal and difficult cancellation of merchant-processing contracts.
- The complaint says some sales material claimed 40–60 percent savings, while important activation, batch and non-compliance fees were omitted.
- Contracts allegedly included a three-year initial term, a $695 early termination fee and a separate equipment lease extending beyond the processing agreement.
- The proposed order contains a $32.08 million judgment suspended after a $600,000 payment based on financial condition, and requires a 60-day opportunity to cancel merchant-processing agreements without penalty; court approval is required.
This matter is directly relevant to merchant acquiring and payment facilitators because conduct risk can originate in the distribution channel. Sponsor banks should not assume that a technically compliant payment flow addresses misleading sales or servicing practices.
Technology-Enabled Impersonation Scheme ($129M)
- DOJ unsealed charges against Jacob Soall, Sharon Hazan and Guy Sheetrit for an alleged global scheme using synthetic voices/images to impersonate CEOs and lawyers.
- The indictment alleges employees were induced to send payments to accounts controlled by conspirators, including an approximately $2.68 million loss by a Rhode Island bank and $11.58 million by a UK fintech.
- DOJ alleges more than $129 million was stolen and funds were moved through international bank accounts and converted into cryptocurrency.
- The defendants were arrested abroad and extradition requests were pending at announcement; the allegations have not been proven in court.
This case illustrates that voice and video identity signals may be compromised. Banks and fintechs should validate payment instructions through independent channels and preserve escalation records when authority is uncertain.
Maritime False-Flagging Network (Sharma / Shahid)
- Treasury targeted a network associated with Suniel Kumar Sharma and Jaspreet Preeti Shahid for allegedly providing false maritime flags and certifications to Iranian shadow-fleet vessels.
- Treasury says the arrangements helped sanctioned petroleum carriers circumvent maritime controls and raised insurance and safety concerns.
- OFAC also sanctioned Türkiye-based Fugo Ground Services Inc for support to Iran's aviation sector.
- An accompanying industry alert highlights false vessel registrations and the need for maritime due diligence.
The direct relevance is strongest for trade finance, international payments and shipping-linked fintechs. Ordinary retail fintech programs may have limited exposure, but cross-border payments involving maritime intermediaries warrant enhanced scrutiny.
Progress Residential / Pretium Partners
- The FTC and Arizona, Colorado, Indiana and Utah alleged misleading advertised rents, undisclosed mandatory fees and improper security-deposit deductions.
- The agencies also alleged inadequate move-in inspections, customer-service failures and restrictions on negative consumer reviews.
- The proposed $49.75 million settlement includes $48.5 million for FTC consumer redress and $1.25 million for Arizona.
- Proposed injunctive provisions require clearer all-in pricing, improved deposit documentation and other consumer protections; court approval remains relevant.
The relevance to sponsor banks is indirect unless they finance or process rental payments or support related consumer products. The case reinforces transparent pricing and complaint resolution as cross-sector control themes.
Regulatory and Supervisory Developments (Not Counted as Enforcement)
OCC — Super Intelligence Supervisory Framework (November 4): OCC Bulletin 2026-54 provides an examiner resource for reviewing banks' use of super intelligence and agentic systems. It explicitly does not create new enforceable supervisory expectations, require a separate SI risk appetite or mandate that banks use the guide for self-assessment. Examination intensity is intended to be proportionate to potential consequences, autonomy, transfer of agency, human oversight and materiality. Banks and fintech service providers can nevertheless use the concepts to review inventory, governance, data access, human approval, auditability, vendor oversight and monitoring under existing controls. No new effective date applies as a rule.
FinCEN / Federal Reserve — Withdrawal of proposed Travel Rule changes (November 6): FinCEN and the Federal Reserve withdrew a proposed amendment to recordkeeping and Travel Rule requirements for convertible virtual currencies and a lower threshold for certain cross-border transfers. This withdrawal is not a repeal of existing requirements. Banks and MSBs should continue applying current recordkeeping and Travel Rule obligations, and update regulatory change trackers so proposed requirements are not treated as enacted.
NCUA — Fourteenth deregulation proposal round (November 3): NCUA announced a fourteenth round of deregulation proposals. The public release establishes a new proposal cycle, not a completed change to credit-union compliance requirements. Credit unions and service providers should review the individual proposal texts and comment deadlines before modifying policies or control procedures.
Key Regulatory Themes
- Sanctions evasion increasingly intersects with crypto exchanges, foreign MSBs and intermediaries that obscure beneficial ownership.
- Scam networks exploit corporate structures and rapid cross-border settlement, requiring both entity screening and transactional behavioral controls.
- Payment-sector conduct risk extends to merchant pricing, leasing and cancellation, not only transaction security.
- Emerging synthetic impersonation raises authorization and fraud-control risks even where existing identity-verification tools appear satisfactory.
- New AI supervisory materials should be interpreted accurately: examiner guidance is not automatically a new binding regulatory standard.
Implications for Sponsor Banks and Fintech Programs
Immediate Monitoring Actions
- Identify MEXC Global exposure and confirm the order's Federal Register effective date; escalate any affected products or counterparties.
- Refresh OFAC designations from November 4–6 and back-test recent MSB, exchange and wallet activity for linked entities and aliases.
- Review merchant-acquiring contract, sales-agent and cancellation complaints, especially where pricing claims differ from executed agreements.
- Assess high-value wire controls against voice/video impersonation and verify independent beneficiary confirmation.
Control Areas to Review
- Counterparty onboarding, nested MSB relationships, beneficial ownership and periodic EDD refresh.
- Crypto analytics, wallet attribution, sanctions alert escalation, SAR decision support and blocked/rejected transaction reporting.
- ISO and agent oversight, advertising approval, fee disclosure, merchant consent and cancellation SLAs.
- AI governance and oversight evidence: use-case inventory, human approval, data grounding, audit logs and risk-proportionate validation.
No Material Actions Identified
No additional material OCC, FDIC or Federal Reserve bank-specific enforcement action was confirmed in the official releases reviewed for November 2–8. No separately verified CFPB, SEC, NYDFS or California DFPI enforcement matter was included in the selected watchlist. This is not a representation that those authorities issued no actions: public indexing and the scope of this scan limit completeness. State-level coverage includes the Washington merchant-processing action and states participating in the FTC housing case. OFAC designations are counted as consolidated matters, not one action per designated person.
Sources
- FinCEN, Nov 6 — MEXC Global: https://www.fincen.gov/news/news-releases/operation-economic-outcast-severs-mexc-globals-access-us-financial-system
- Treasury, Nov 6 — MEXC order and effective date: https://home.treasury.gov/news/press-releases/sb0685/
- Treasury/OFAC, Nov 6 — Eight Canadian MSBs: https://home.treasury.gov/news/press-releases/sb0686/
- Treasury/OFAC, Nov 5 — Prince Group: https://home.treasury.gov/news/press-releases/sb0683/
- Treasury/OFAC, Nov 4 — Maritime network: https://home.treasury.gov/news/press-releases/sb0681/
- OFAC recent actions (Nov 4–6): https://ofac.treasury.gov/recent-actions
- FTC, Nov 2 — Riverside Payments: https://www.ftc.gov/news-events/news/press-releases/2026/11/ftc-washington-take-action-against-payment-processor-deceiving-small-businesses-about-costs
- DOJ SDNY, Nov 5 — Synthetic impersonation fraud: https://www.justice.gov/usao-sdny/pr/three-foreign-nationals-arrested-and-charged-scheme-use-super-intelligence-defraud
- FTC, Nov 6 — Progress Residential: https://www.ftc.gov/news-events/news/press-releases/2026/11/progress-residential-owner-pretium-partners-pay-4975-million-settle-ftc-states-charges-over
- OCC Bulletin 2026-54, Nov 4: https://www.occ.gov/news-issuances/bulletins/2026/bulletin-2026-54.html
- FinCEN, Nov 6 — Proposed Travel Rule withdrawal: https://www.fincen.gov/news/news-releases/fincen-announces-withdrawal-proposed-rule-related-recordkeeping-and-travel-rule
- NCUA press release index: https://ncua.gov/news/press-releases
- SEC press release index: https://www.sec.gov/newsroom/press-releases
- OCC 2026 news releases: https://www.occ.gov/news-events/newsroom/news-issuances-by-year/news-releases/2026-news-releases.html
- FTC news index: https://www.ftc.gov/news-events