Security News > 2022 > March > US Treasury: Russia may bypass sanctions using ransomware payments

The Treasury Department's Financial Crimes Enforcement Network warned U.S. financial institutions this week to keep an eye out for attempts to evade sanctions and US-imposed restrictions following Russia's invasion of Ukraine.
FinCEN said [PDF] that it's critical to "Identify and quickly report suspicious activity associated with potential sanctions evasion, and conduct appropriate risk-based customer due diligence or, where required, enhanced due diligence."
President Joe Biden also issued an Executive Order on Wednesday regarding the use of digital assets to bypass sanctions imposed by the United States and foreign governments.
"In the face of mounting economic pressure on Russia, it is vitally important for U.S. financial institutions to be vigilant about potential Russian sanctions evasion, including by both state actors and oligarchs," said FinCEN Acting Director Him Das.
"Although we have not seen widespread evasion of our sanctions using methods such as cryptocurrency, prompt reporting of suspicious activity contributes to our national security and our efforts to support Ukraine and its people."
In September, the U.S. Treasury announced its first-ever sanctions against a cryptocurrency exchange for facilitating ransom transactions linked to ransomware gangs and helping them evade sanctions.
News URL
Related news
- US charges operators of cryptomixers linked to ransomware gangs (source)
- UK Considers Banning Ransomware Payments (source)
- DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system (source)
- Ransomware payments fell by 35% in 2024, totalling $813,550,000 (source)
- Ransomware payments plummet as more victims refuse to pay (source)
- Ransomware Payments Decreased by 35% in 2024, Research Finds (source)
- All your 8Base are belong to us: Ransomware crew busted in global sting (source)
- US sanctions LockBit ransomware’s bulletproof hosting provider (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware (source)