On October 1, 2026, three actions by the Treasury Department reshaped compliance requirements for financial institutions dealing with Iran-related transactions. The most significant change isn't just the new sectors affected but the rewrite of FAQ 831.
Key Changes and Implications
The Office of Foreign Assets Control (OFAC) extended sanctions to the automotive and rail sectors in Iran under Section 1(a)(i) of EO 13902. It also designated 28 entities and two individuals under its Iran-related authorities, many of which are not based in Iran. Additionally, OFAC broadened FAQ 831 to include "providers of economic or financial services in or involving Iran," affecting institutions globally. The Russia-linked A7 Network was designated as a significant transnational criminal organization under EO 13581, as amended by EO 13863. FinCEN proposed a rule under Section 9714(a) of the Combating Russian Money Laundering Act and issued an alert, FIN-2026-Alert007.
These actions are part of Treasury's Operation Economic Outcast campaign against Iran, initiated on August 24, 2026.
Key Findings
1. Expanded Exposure for Non-Iranian Institutions
The revised FAQ 831 shifts the focus from the location of service providers to whether services involve Iran. This change affects credit card companies, payday lenders, mortgage companies, and asset managers, among others. Activities like fund transfers and investment facilitation are now included, impacting institutions that may not have direct ties to Iran.
2. Growing Sector Coverage
The inclusion of automotive and rail sectors adds to existing sanctions on construction, mining, manufacturing, and textiles. While definitions for these new sectors are pending, your team should not delay in assessing risks.
3. Explicit Secondary Sanctions Exposure
FAQ 831 now clearly states that engaging in significant transactions related to sanctioned sectors can lead to blocking sanctions. Foreign financial institutions facilitating these transactions risk correspondent account sanctions.
4. A7 Network's Broad Reach
The A7 Network, linked to Russia and used by Iran to evade sanctions, now includes Sub-Agents in its designation. Transactions involving these Sub-Agents, especially those in the US or controlled by US persons, are subject to blocking.
5. Detailed Yet Non-Binding FinCEN Proposal
FinCEN's proposed rule identifies transactions involving A7 Network-controlled companies as a primary money laundering concern. While not yet binding, the proposal outlines prohibitions on fund transmittals involving Sub-Agents and requires institutions to notify and document interactions with affected parties.
Implications for Your Team
Name screening alone won't suffice. Sub-Agents may not appear on any list, so you'll need to evaluate the totality of circumstances, including customer history and business practices. The FAQ 831 update shifts focus from customer identity to the nature of services provided. Your Customer Risk Rating logic should reflect this change.
Action Items
Immediate Actions
- Reassess your Iran exposure using the amended FAQ 831. Identify customers involved in services related to Iran.
- Integrate automotive and rail sectors into your risk taxonomy. Review trade finance and payment flows involving these sectors.
- Use the key term from FIN-2026-Alert007 in Suspicious Activity Reports related to the A7 Network.
- Incorporate red flag indicators from the alert into your transaction monitoring rules.
Before November 4, 2026
- Decide whether to comment on the FinCEN proposal. Consider operational challenges like identifying Sub-Agents and defining "risk-based" due diligence.
- Map your CVC transmittals to ensure compliance with proposed prohibitions on Sub-Agent transactions.
Before Rule Finalization
- Develop a notification workflow for affected parties, ensuring documentation and compliance with blocking obligations.
- Monitor for OFAC's definitions of automotive and rail sectors and update your guidance accordingly.
