The information in this article is current as of 2026-10-04. The rules involved (tariffs, CRS, foreign exchange, customs, tax, etc.) may all be adjusted; when citing or making decisions, please rely on the latest official sources and qualified professional judgment.

A Chinese export enterprise delivers goods to an overseas customer, but the payment is remitted from an unfamiliar company in Hong Kong, the UAE, or Central Asia. The payment reference can be matched to the contract, and the paying company has also provided a statement that it is "paying on behalf of the customer." In the past, such arrangements were mostly handled as issues of foreign exchange authenticity, anti-money laundering, or tax record-keeping. The combined measures taken by the U.S. Department of the Treasury on October 1, 2026 against A7 Network show that third-party payment on behalf of others may also become an interface through which sanctions-evasion networks enter the formal banking system.

The U.S. Financial Crimes Enforcement Network (FinCEN) published a proposed rule the same day, determining that transactions involving overseas "Sub-Agents" controlled by the A7 network fall within a primary money laundering concern class of transactions related to Russian illicit finance, and proposing to prohibit U.S. regulated financial institutions from processing certain transmittals of funds involving these Sub-Agents. FinCEN also issued a risk alert listing red flags such as shell companies, layered transfers, fraudulent or AI-altered invoices, and anomalous stablecoin transactions. The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) designated the A7 network as a significant transnational criminal organization.

This is not an already effective blanket payment prohibition. The proposed rule is scheduled to be published in the Federal Register on October 5, with the comment period ending November 4. The legal status and scope of application of the OFAC designation, the FinCEN risk alert, and the FinCEN proposed prohibition also differ. If an enterprise conflates the three into "the United States prohibits all transactions related to A7," it will overstate the rules; if it ignores the payment structure because the direct customer is not named, it will underestimate the actual risk.

I. The regulatory target extends from named entities to hidden payment nodes

The Sub-Agents referred to by FinCEN are companies controlled by the A7 network and operating outside the United States. The document publicly lists six companies and proposes to provide additional information on known Sub-Agents to regulated financial institutions through secure channels. The list will be adjusted dynamically, but it is not intended to be fully disclosed to the public, so as to prevent the network from rapidly replacing nodes.

The proposed rule requires U.S. regulated financial institutions not to process transmittals of funds involving Sub-Agents, including those sent from, paid to, or involving accounts managed by or convertible virtual currency addresses managed by Sub-Agents. Transmittals of funds cover both fiat currency and convertible virtual currency. Financial institutions should also adopt risk-based enhanced due diligence to identify circumstances in which a Sub-Agent appears as originator, beneficiary, or otherwise in a detectable manner in a transaction, and notify affected persons with whom they have a direct business relationship.

Exporters may therefore be unable to determine solely from the public list whether a third-party payer triggers bank controls. Banks may possess more FinCEN information than enterprises can obtain through public searches. If U.S. dollar clearing, U.S. accounts, U.S. payment service providers, or U.S.-regulated digital asset service providers enter the path, the transaction may be rejected or returned. Non-U.S. dollar payments also cannot be assumed to be unaffected, as international banking groups may apply unified risk models.

II. The A7 model separates the trade relationship from the payment relationship

According to public determinations or allegations by U.S. regulators, customers first record value within A7 through notes, ledgers, or digital assets; A7 then arranges for third-country Sub-Agents to appear as contracting parties or payers in invoices, sales agreements, and payment instructions. What overseas suppliers see is a non-Russian company and its bank account, not the Russian or other sanctioned customer behind it.

FinCEN states that, as of June 2026, the A7 network operated hundreds of companies and opened accounts at approximately 435 financial institutions in at least 83 countries; locations of establishment or cooperation include Hong Kong, Indonesia, Kyrgyzstan, Seychelles, Turkey, and the UAE. The network is also alleged to use VPNs to remotely control accounts, making operators appear to be located in Dubai, Hong Kong, or Kyrgyzstan; some transactions are layered through multiple companies, and trade documents may contain false records, vague goods descriptions, or signs of AI generation.

These are regulatory judgments and do not mean that all third-party payments or stablecoin transactions in the relevant jurisdictions are problematic. A Hong Kong company paying on behalf of a group member, a trade platform settling centrally, or a factor taking an assignment of receivables may all have legitimate commercial reasons. Review should determine whether the payment role can be reliably explained and verified, rather than reaching a negative conclusion simply upon seeing payment on behalf of another.

III. OFAC Designations and FinCEN's Proposed Prohibition Must Not Be Conflated

Following OFAC's designation of the A7 network, property interests held or controlled within the United States or by U.S. persons are blocked; entities in which blocked persons directly or indirectly hold an aggregate interest of 50% or more may also be treated as blocked under OFAC rules. Arrangements to act for, benefit, or assist in circumventing designated persons may give rise to additional sanctions risk.

However, "sub-agent" is a concept in FinCEN's proposed rule. A company identified by FinCEN as a sub-agent should not, without analysis, be described as having been placed on the SDN List. The proposed rule opts to prohibit U.S. regulated financial institutions from processing the relevant funds transfers; where the same transaction also involves property blocked by OFAC, financial institutions should block and report in accordance with OFAC rules. Rejection, return, freezing, and blocking differ in legal effect, destination of funds, and appeal channels.

When encountering payment anomalies, enterprises should ask the bank to explain the status as far as possible: whether it is general insufficiency of KYC materials or a hit in sanctions screening; whether the funds have not yet been credited, have been returned, or have been blocked; and whether the basis is applicable law, correspondent bank requirements, or the bank's own risk appetite. Banks may not be able to disclose restricted information, but enterprises should still obtain the transaction status, processing date, location of funds, and required materials, so as to preserve evidence for subsequent performance and dispute resolution.

IV. Stablecoins Do Not Eliminate the Payment Chain; They Merely Add Another Ledger

The A7 network also issues A7A5, a ruble-pegged stablecoin. FinCEN states that the token was issued with the participation of Old Vector LLC, which is subject to OFAC sanctions, and that OFAC has treated it as blocked property. It can perform bookkeeping and mirrored settlement functions within the network, while on the offshore side a sub-agent makes payment in U.S. dollars, renminbi, dirhams, or euros; it may also be converted into more widely accepted digital assets such as USDT, or continue to circulate via wrapped tokens.

On-chain transfers do not make the underlying transaction disappear; rather, they split "who pays the supplier" and "who bears the economic cost" into two ostensibly independent actions. An enterprise that verifies only the fiat currency ultimately received may overlook internal settlement assets, OTC exchangers, and the actual principal; conversely, screening only on-chain addresses may fail to reveal the contract, invoice, and third-country account on the other side.

Enterprises that accept stablecoins, settle through OTC, or cooperate with digital asset service providers should simultaneously verify wallet ownership, source of funds, fiat on-ramp and off-ramp accounts, token conversion paths, and the corresponding trade. The fact that the final credited amount is a mainstream stablecoin does not prove that the earlier path was unrelated to the tokens or addresses of concern.

V. How Banks Identify Seemingly Normal Trade Payments

The red flags listed by FinCEN include: newly established companies engaging in large-value, high-frequency transactions disproportionate to their scale within a short period; funds routed among shell companies across multiple jurisdictions; a mismatch between the payer and the supplier's industry; vague goods descriptions, abnormal prices, or dates conflicting with the delivery cycle; sudden changes in invoice templates, with Cyrillic letters appearing out of context in English documents; inconsistent physical seals on electronic documents; and distortions in text, letters, or stamps indicative of artificial intelligence generation.

Technical signals also enter the assessment. Specific VPNs, server ranges, anomalous email addresses, and corporate websites with almost no content may become investigative leads. On the digital asset side, exposure to A7A5 and its wrapped tokens, stablecoin payments to suspected sub-agents, and sudden increases in trading volume at newly established OTC institutions may all trigger enhanced review.

No single signal constitutes proof of illegality. FinCEN requires financial institutions to make a comprehensive assessment based on customer history, commercial practice, and multiple signals. Enterprises should likewise not accuse a counterparty on the basis of a single anomalous format, but where multiple inconsistencies appear simultaneously, they should not simply accept a templated explanation.

VI. Transforming Third-Party Payment on Behalf of Others into an Auditable Authorization Relationship

Cross-border traders, supply chain platforms, Hong Kong settlement centers, and enterprises that accept stablecoins can first complete five adjustments.

First, establish payer admission. When a customer intends to have a third party make payment, the payer's registration information, beneficial owner, relationship with the buyer, reason for payment, and expected account should be disclosed in advance. If the paying company changes on short notice, the jurisdiction changes, or the payment is split, re-approval should be required.

Second, create three-party evidence. The buyer issues a payment authorization, the payer confirms its status as paying on behalf of another and the source of funds, and the payee states that accepting payment on behalf of another does not alter the underlying creditor-debtor relationship. The contract, order, invoice, customs declaration, logistics documents, payment reference, and accounting records should correspond with one another. An explanatory letter cannot replace bank statements, group relationship documents, or genuine business vouchers.

Third, verify commercial reasonableness. The enterprise should answer why the payer is located in that jurisdiction, why its business scope differs from the goods, why the funds pass through multiple nodes, and who bears the fees. If the counterparty only emphasizes that it "can make payment" but refuses to disclose the actual principal, the risk has not disappeared.

Fourth, establish suspension and alternative paths. The contract may provide that if the payment entity, wallet, currency, or banking path is changed without approval, the payee has the right to suspend shipment or refuse acceptance; it should also allocate review delays, returned remittances, and fees. Splitting orders, frequently changing accounts, or concealing cargo information should not become response methods.

Fifth, preserve the basis for judgments. The time of list screening, beneficial ownership materials, document versions, bank inquiries and replies, internal approvers, and review reasons should all be kept on file. When account restrictions, payment disputes, or investigations occur, the judgment records made at the time are usually more probative than broad compliance statements written afterward.

VII. Differences from the Previous Article on Iran Sectoral Sanctions

A previous article on the website analyzed the lists, sectoral activities, and bank policies after the Iranian automobile and railway sectors were included in Executive Order 13902. This article focuses on another risk transmission path: how high-risk customers use third-country payment companies, internal instruments, and stablecoin mirror settlement to package funds as ordinary trade payments; and how FinCEN's proposed measures would prompt banks to look through the payer.

The previous article answered whether the goods and end users fall within the sectors of concern; this article answers whether the nominal payer is merely a settlement node for a hidden principal. The former requires examining the end use, while the latter requires examining who bears the payment authorization and economic costs.

Conclusion

The FinCEN proposed rule is still in its comment period, and the final text and implementation arrangements may change, but the risk alert issued at the same time has already provided a clear identification framework. Third-party payment on behalf of others, documentary inconsistencies, remotely controlled accounts, and stablecoin mirror settlement will be reviewed on the same evidence chain.

Chinese companies need not treat all cross-border payment on behalf as suspicious, nor should they treat "funds received" as the end of their review. Making the payer's identity, authorization, source of funds, commercial rationale and underlying transaction capable of repeated verification can both reduce the risk of chargebacks and account restrictions and preserve the boundaries of liability in the event of counterparty default or regulatory inquiry.

Principal References

The information in this article was verified as of October 4, 2026. This article is provided for general information sharing only and does not constitute advice on PRC law, U.S. sanctions, anti-money laundering, digital assets, tax or bank compliance with respect to any specific matter. The descriptions in this article of the A7 network, the relevant entities and transaction patterns are derived from public findings, allegations or proposed rules of U.S. regulatory authorities, and this article makes no independent factual findings. Specific transactions should be reviewed in light of the parties, beneficial ownership, goods, fund flows, bank participants, digital asset addresses and the rules in effect at the relevant time.