Sanctions are supposed to choke off an aggressive state's war machine. Instead, billions slip through everyday banking channels because bad actors figured out how to fake paperwork at an industrial scale.
When major Western governments cut Russian institutions off the SWIFT network following the 2022 invasion of Ukraine, experts assumed international finance would dry up for Moscow. They were wrong. Leaked internal files from A7—a Russian payments group established to bypass these sanctions—expose how an army of front companies moved more than $6.9 billion through the international banking system between late 2024 and August 2025.
Major global institutions like Standard Chartered, Citigroup, and First Abu Dhabi Bank processed billions for this network. They didn't do it with high-tech hacking or crypto obfuscation. They relied on a surprisingly low-tech trick: counterfeit invoices, fake company stamps, and altered customs codes that easily bypassed standard anti-money laundering controls.
The Mechanics of Sanctions Evasion
You might wonder how a newly minted Russian payment system manages to slip past compliance officers at Tier-1 Western banks. The answer is layer cakes of deception.
A7, backed by Russian state-owned lender Promsvyazbank and launched by Moldovan businessman Ilan Shor, operated as a sanctions-evasion-as-a-service provider. Rather than inventing a revolutionary alternative payment rail, they used traditional trade-based money laundering.
Here is how the pipeline functioned in practice:
- Front companies were set up across multiple compliant third-party jurisdictions, including the UAE, Hong Kong, and Kyrgyzstan.
- These entities placed cash into bank accounts that still maintained full access to SWIFT and international clearinghouses.
- The network generated counterfeit invoices for completely harmless everyday goods, masking the true nature of the transactions.
- Some of those transactions actually funded sensitive war-related materials, military equipment, and purchases by Russian security services.
Compliance software looks at the paperwork you hand it. If the invoice says a shell company in Hong Kong is buying industrial plastic or office supplies, automated filters often wave it right through. Banks trust the paper trail unless someone manually digs deep into the supply chain.
Why Traditional Compliance Fails
Most financial institutions rely on automated transaction monitoring systems designed to spot sudden spikes in volume or weird geographical routing. But when a payment is backed by a pristine, legally formatted invoice bearing a forged corporate stamp from a third-party nation, the alert flags don't trigger.
Compliance officers are overwhelmed. They deal with millions of alerts daily, forcing them to prioritize speed over exhaustive forensic investigations. State-backed networks exploit this operational bottleneck. They know that if they distribute transactions across dozens of front companies in manageable amounts, compliance teams will view them as routine commercial activity.
The A7 leak shows that 17 distinct A7-linked entities pushed over $1.8 billion through First Abu Dhabi Bank alone during a brief window. Standard Chartered accounts in Hong Kong reeled in another $1.1 billion. DBS and various clients of Citigroup and Deutsche Bank also handled millions from the same web.
The Broader Shift in Financial Crime
Law enforcement agencies are finally waking up to the reality that individual bad actors matter less than the technology-enabled financial networks supporting them. The UK government and international regulators are pivoting their strategies away from chasing low-level couriers and toward disrupting these sophisticated infrastructure hubs.
Yet, catching them is like playing whack-a-mole. Shut down one front company in Bishkek or Dubai, and three more pop up under different names the next morning.
Financial institutions need to rethink how they vet trade finance. Relying on digital PDFs of invoices is no longer enough when state-sponsored forgery operations can replicate stamps, signatures, and shipping manifests with absolute precision. Until banks cross-reference trade data with physical customs records and actual cargo tracking, billions will keep flowing where they shouldn't.
