Top Story Security Related

FinCEN has published [89 FR 5995] in the January 30, 2024, Federal Register a Notice and Request for Comments on the proposed information collection associated with requests made to FinCEN, by certain persons, for beneficial ownership information, consistent with the requirements of the Beneficial Ownership Information Access and Safeguards final rule.

Included in the notice are FinCEN's estimates of the burden to state, local and tribal law enforcement agencies, and for financial institutions. An appendix to the Notice and Request for Comments summarizes the proposed data fields to be submitted by authorized recipients. Financial institutions would submit the reporting company name, TIN type, and TIN, and a check mark agreeing to a system-provided certification of compliance statement.

Comments will be accepted through April 1, 2024.

Note: This proposal does not in any way change the current rule in 31 C.F.R. § 1010.230 requiring financial institutions to obtain certification of beneficial ownership information from its customers. Amendments to that rule are not expected until at least the end of 2024.

The Treasury Department has reported the OFAC and the United Kingdom have taken joint action against a network of individuals that targeted Iranian dissidents and opposition activists for assassination at the direction of the Iranian regime. The network is led by Iranian narcotics trafficker Naji Ibrahim Sharifi-Zindashti (Zindashti) and operates at the behest of Iran’s Ministry of Intelligence and Security (MOIS). Treasury reports that Zindashti’s network has carried out numerous acts of transnational repression including assassinations and kidnappings across multiple jurisdictions in an attempt to silence the Iranian regime’s perceived critics. The network has also plotted operations in the United States.

For identification information on the targeted individuals, see this BankersOnline's OFAC Update.

The Treasury Department reported yesterday that OFAC has imposed sanctions on key officials of the forces of Ansarallah, commonly known as the Houthis, for their support of acts of terrorism targeting commercial shipping. Yesterday’s action targets four individuals who have supported the Houthis’ recent attacks against commercial vessels in the Red Sea and Gulf of Aden, including holding civilian crews hostage. Concurrent with OFAC’s designations, the United Kingdom also imposed sanctions on these key figures of Houthi forces.

For the names and identification information of the four individuals, see yesterday's BankersOnline OFAC Update.

Federal Reserve Financial Services has announced its launch of FedDetect Anomaly Notification for FedACH Services, a new risk management service that helps financial institutions identify anomalous activity and supplement their fraud detection and alerting tools. This new addition to FedACH Risk Management Services allows financial institutions to receive notifications via secure email when anomalous FedACH activity is detected.

The new service can help financial institutions catch potential fraud attempts with account verification through micro-entry return and forward-entry monitoring. It can also help originating financial institutions adhere to Nacha rules around notifications of change and avoid future rule violations.

This morning, FinCEN published [89 FR 4820] a final rule to reflect inflation adjustments to its civil monetary penalties as mandated by the Federal Civil Penalties Inflation Adjustment Act of 1990, as amended. This rule adjusts certain maximum civil monetary penalties within the jurisdiction of FinCEN to the amounts required by that Act.

The rule amends 31 CFR 1010.821 and is effective today.

On Tuesday, OFAC, in coordination with Australia and the United Kingdom, designated Alexander Ermakov, a cyber actor who played a pivotal in the 2022 ransomware attack against Medibank Private Limited, an Australian healthcare insurer.

Australia sanctioned Ermakov on Monday for utilizing ransomware to attack the Medibank network and for the exfiltration of sensitive data of 9.7 million users of Medibank services. Tuesday, the United States and the United Kingdom, in solidarity with Australia, took action against Ermakov because of the similar risk he presents to the United States and the UK.

For identification information on Ermakov, see BankersOnline's January 23, 2024, OFAC Update.

The Department of the Treasury on Monday announced that OFAC had designated Iraqi airline Fly Baghdad and its CEO for providing assistance to the Islamic Revolutionary Guard Corps–Qods Force (IRGC-QF) and its proxy groups in Iraq, Syria, and Lebanon. OFAC also designated three leaders and supporters of one of the IRGC-QF’s main Iran-aligned militias in Iraq, Kata’ib Hizballah (KH), as well as a business that moves and launders funds for KH.

Treasury also announced that OFAC has imposed a fifth round of sanctions on Hamas since the October 7 terrorist attack on Israel. Monday’s action targets networks of Hamas-affiliated financial exchanges in Gaza, their owners, and associates, and particularly financial facilitators that have played key roles in funds transfers, including cryptocurrency transfers, from the Islamic Revolutionary Guard Corps-Qods Force (IRGC-QF) to Hamas and Palestinian Islamic Jihad (PIJ) in Gaza. Concurrent with OFAC’s designations, the United Kingdom and Australia are also placing sanctions on key Hamas officials and facilitators.

For the names and identification information of individuals, entities, and aircraft targeted in these OFAC actions, see the January 22, 2024, BankersOnline OFAC Update.

OFAC has released the first video in its "OFAC Basics" video series. The OFAC Basics: Sanctions List Search YouTube video provides viewers with a brief tutorial on how to use OFAC’s Sanctions List Search Tool and recommended steps for assessing a potential match to one of OFAC’s published sanctions lists.

The “OFAC Basics” series serves as a companion series to the “Introduction to OFAC” series, also available on YouTube.

The Federal Reserve Board on Friday announced it has issued an enforcement action against Industrial and Commercial Bank of China Ltd. and its New York branch for their unauthorized use and disclosure of confidential supervisory information (CSI). The consent order requires the bank to pay a civil money penalty of $2,431,956 and to submit a written plan to enhance the effectiveness of the branch's internal controls and compliance functions regarding the identification, monitoring, and control of CSI.

Confidential supervisory information includes reports of bank examinations and other confidential communications by banking regulators. It is illegal to disclose confidential supervisory information without prior approval of the appropriate banking regulator.

The Board's action was taken in conjunction with an action by the New York Department of Financial Services, the state supervisor of the bank's New York branch. The penalties announced by the Board and the Department of Financial Services total approximately $32.4 million.

On Thursday, the Treasury Department reported that OFAC took its first oil price cap enforcement action of 2024, targeting a shipping company linked to a price cap violation.

United Arab Emirates-based shipping company Hennesea Holdings Limited (Hennesea) is the ultimate owner of 18 vessels, including the HS Atlantica, which OFAC previously identified as having engaged in the transport of crude oil of Russian Federation origin priced above the $60 per barrel price cap while using a covered U.S.-based provider after the price cap policy came into effect. On December 1, 2023, OFAC identified the HS Atlantica as property in which Hennesea’s subsidiary, U.S.-designated HS Atlantica Limited, has an interest. OFAC additionally re-identified the HS Atlantica as property in which Hennesea has an interest. OFAC also designated 17 other vessels in which Hennesea has an interest.

For identification information on Hennesea and the designated vessels, see this January 18, 2024, BankersOnline OFAC Update.