A7A5 Stablecoin Moved $179B in Two Years, FinCEN Says

WASHINGTON. FinCEN, the Treasury Department’s financial intelligence unit, says a ruble-backed stablecoin called A7A5 moved at least $179.1 billion in transactions between February 2025 and June 2026, and the agency has proposed a rule that would ban US banks and money transmitters from handling payments tied to the network behind it. The token is part of the A7 Network, a Russia-linked shadow banking system the Treasury sanctioned on October 1 as part of what it calls Operation Economic Outcast. Investigators say the network moved more than $17 billion through its sub-agents between January 2025 and June 2026, in both fiat and crypto, for customers trying to work around sanctions on Russia and Iran. Treasury Secretary Scott Bessent framed the action plainly: anyone who helps move illicit funds for these groups risks losing access to the US financial system.

How the pipeline works

The A7 Network is not an exchange or a protocol in the usual sense. It runs through companies Treasury calls Sub-Agents, registered in places like Hong Kong, Indonesia, Kyrgyzstan, the Seychelles, Türkiye and the United Arab Emirates. On paper each looks like an ordinary payments business. Behind the scenes, A7 staff controlled the websites and bank accounts, reached them through custom virtual private networks, and dressed up transfers with false trade records and invented product descriptions so payments cleared as ordinary commerce. The scale underneath is hard to overstate. Bank records show accounts at roughly 435 financial institutions spread across 83 countries, more correspondent breadth than many mid sized banks build in a decade, and staff used custom virtual private networks to hide their locations whenever they touched those accounts. The crypto leg is where A7A5 comes in. The token, issued by Old Vector LLC, was itself sanctioned by the United States in August 2025. FinCEN says customers used it as a hard-to-freeze bridging asset: rubles go in, A7A5 moves across the chain, and the receiving side converts into USDT or another widely traded token, then into whatever fiat the customer prefers. Elliptic, the blockchain analytics firm, reported back in January that A7A5 had already crossed $100 billion in cumulative volume, a figure the government’s new numbers now exceed. That January report drew on public chain data, which means the totals Treasury prints now probably understate what flows through the addresses analysts have been watching since spring.

Twelve figures worth knowing

The paperwork attached to the action is dense, but the key numbers are short.

Investigators also connected parts of the network to Iran’s central bank and the Revolutionary Guard, to Nobitex, an Iranian exchange already under sanctions since June, and to wallets touched by North Korean crypto thefts. The overlap matters less for money laundering analysis than for enforcement strategy: one rule proposal now covers a network that fiat and crypto routes both ran through. The two headline totals, $17 billion and $179.1 billion, measure different things. The first counts Sub-Agent payments. The second counts every A7A5 transaction Treasury could trace, which includes repeat churn across the same wallets and entities. Treasury flagged this itself and said the two figures cannot be compared directly because payment types overlap. What can be said cleanly is that a stablecoin pegged to the ruble, riding on public blockchains anyone can audit, moved more money in eighteen months than most regulated payment firms do in a comparable stretch. Crypto’s role here is narrower than the headlines suggest but not trivial. The token gave the network a rail that sits outside correspondent banking. No bank has to clear it, no consortium gets consulted, and if one wallet draws attention the money moves again.

What happens next

OFAC’s designations took effect right away, freezing any A7 property that touches US jurisdiction and exposing anyone 50 percent or more owned by blocked parties to the same treatment. The FinCEN rule is the heavier weapon and it is not final. Once it lands in the Federal Register it opens for thirty days of public comment, then can prohibit US banks and money services businesses from processing transmittals of funds involving named Sub-Agents. Banks are being told to flag related reports with the keyword FIN-2026-A7NETWORK. OP-STATUS-REVIEW: none. Enforcement will lean on institutions spotting the pattern themselves, since neither the alert nor the proposed rule creates a new scanner that catches A7A5 going forward. The practical burden sits with compliance teams at exchanges, banks and OTC desks, who now have a named keyword and a published red flag list to work from. Surveillance output on A7A5 has grown quickly: Elliptic’s January report, earlier Treasury designations of Garantex and Grinex, and now the October alert all point at the same addresses. Garantex, once Europe’s largest darknet market by volume, was itself sanctioned in April 2026, and Grinex carried much of that traffic after the takedown, which is part of why the FinCEN alert reads as overdue rather than premature. For stablecoin issuers the read-across is uncomfortable. USDT keeps showing up as the exit leg, the step after a sanctioned token converts into something spendable. Tether has frozen sanctioned addresses before, though none of the coverage this week says it has acted on A7A5-linked wallets. When the FinCEN rule goes final, exchange and OTC desks will be under a legal duty to keep the network’s stablecoin conversion pipeline out of their books, and the token’s $179 billion will either stop being traceable or stop being convenient. Compliance teams will likely start flagging A7A5-adjacent wallets on their own, ahead of any formal rule, because treasury and banking regulators have already named keyword and address search as the baseline.