FinCrime Intelligence Weekly
Treasury sanctions a Bitcoin funded Hormuz insurance racket, Lombard Odier is fined over Karimova funds, the Gambling Commission flags white label gaps, and a Brisbane bribe hides in a tea gift.
Marco’s Take
Marco Beranzoni
This week’s five stories share a structural feature worth naming: launderers, sanctions evaders, and bribe payers keep routing value through an intermediary layer, and that layer is consistently the one compliance teams scrutinize least.
Iran’s shipping insurance scheme in the Strait of Hormuz worked because HormuzSafe Marine Services Authority and Persian Gulf Marine Insurance Company sat between the tankers and the buyers of the oil. That positioning absorbed the scrutiny that would otherwise fall on the cargo itself. Lombard Odier’s relationship manager did run customer due diligence (CDD) checks on Gulnara Karimova’s funds. The Swiss Federal Criminal Court found those checks on the origin of the money were superficial, despite the bank being aware of corruption indicators.
The UK Gambling Commission’s 2026 risk assessment names a version of the same gap in a different sector: white label partnerships, where the licence holder outsources the actual customer relationship and the scrutiny that should come with it. Even Guoxin Zhu’s alleged bribe in Brisbane arrived inside a tea gift rather than a bank transfer, because a gift is not a payment most controls are built to see.
My one slightly uncomfortable ask this week: pull the list of every intermediary, agent, and white label partner your firm relies on, and ask who last verified what they actually do, not what their contract says they do.
See you next Monday.
Marco
OFAC designated HormuzSafe and PGMIC for forcing ships to buy Bitcoin backed transit insurance through the Strait of Hormuz, tied to a wider shadow fleet crackdown.
The Gambling Commission's 2026 assessment rates casinos and betting as high risk for money laundering and names weak scrutiny of white-label partnerships as the sector's primary vulnerability.
Federal Criminal Court cites organizational failures as bank client manager gets a suspended sentence over funds tied to the Uzbek Office bribery scheme.
Prosecutors allege Growatt's Australian country manager hid AUD 20,000 in a tea gift to a Commonwealth official seeking fast tracked certification approvals, and he has since been charged and denied bail.
According to The Defense Post, the EU's 21st sanctions package lets member states sell oil and cargo seized from tankers evading Russian export restrictions.
What changed this week, why it matters, and what to do about it.
| Region | Update | Why it matters | Action |
|---|---|---|---|
| EU | Portugal's Lobbying Law (Law No. 5-A/2026) took effect on July 27, 2026, creating the Registo de Transparencia da Representacao de Interesses (RTRI), a public registry run by the Assembly of the Republic. It requires private Portuguese and foreign entities representing interests before public bodies to register, and introduces a legislative footprint documenting their interactions during policy and regulatory preparation. | Firms, external counsel, and lobbying agents dealing with Portuguese regulators, ministries, or local authorities now sit inside a registration regime with teeth. Non-compliance can mean register suspension or contact restrictions of up to two years, and unregistered lobbying can be reported to prosecutors. | Map every interaction your government affairs, compliance, or external counsel function has with Portuguese public bodies, and confirm registration status before the next contact. |
| UK | The National Crime Agency (NCA) and Freeview channel Great! Romance launched a joint television and social media campaign against romance fraud on July 29, 2026. The NCA describes it as the first partnership of its kind between a UK law enforcement agency and a TV channel using donated airtime. | NCA figures for April 2025 to March 2026 show 12,348 reported cases of romance fraud, GBP 116 million in total losses, and an average loss over GBP 13,000 per victim, with 51% of victims aged 50 or over. This is a live typology showing up in transaction monitoring alerts now, not a historic problem. | Confirm romance fraud red flags, such as a new payee combined with a sudden change in transfer behavior, are represented in your typology library and front-line staff training. |
| Global | OFAC (the US Office of Foreign Assets Control) designated six entities and individuals across China, India, and Russia on July 30, 2026 for supporting Iranian airline Mahan Air and the Islamic Revolutionary Guard Corps (IRGC). Shanghai Wings International Logistics Co, a China-based general sales agent for Mahan Air, and its managing director Tang Xin were named, under Executive Order 13224 as amended. | The designations extend sanctions exposure into the general sales agents and logistics intermediaries that keep an already-sanctioned airline operating, not just the airline itself. | Screen counterparties and correspondent relationships tied to air cargo and travel agency networks representing Mahan Air, particularly general sales agents operating in China, against the updated OFAC list. |
Portugal's Lobbying Law (Law No. 5-A/2026) took effect on July 27, 2026, creating the Registo de Transparencia da Representacao de Interesses (RTRI), a public registry run by the Assembly of the Republic. It requires private Portuguese and foreign entities representing interests before public bodies to register, and introduces a legislative footprint documenting their interactions during policy and regulatory preparation.
Why it matters:Firms, external counsel, and lobbying agents dealing with Portuguese regulators, ministries, or local authorities now sit inside a registration regime with teeth. Non-compliance can mean register suspension or contact restrictions of up to two years, and unregistered lobbying can be reported to prosecutors.
Action:Map every interaction your government affairs, compliance, or external counsel function has with Portuguese public bodies, and confirm registration status before the next contact.
The National Crime Agency (NCA) and Freeview channel Great! Romance launched a joint television and social media campaign against romance fraud on July 29, 2026. The NCA describes it as the first partnership of its kind between a UK law enforcement agency and a TV channel using donated airtime.
Why it matters:NCA figures for April 2025 to March 2026 show 12,348 reported cases of romance fraud, GBP 116 million in total losses, and an average loss over GBP 13,000 per victim, with 51% of victims aged 50 or over. This is a live typology showing up in transaction monitoring alerts now, not a historic problem.
Action:Confirm romance fraud red flags, such as a new payee combined with a sudden change in transfer behavior, are represented in your typology library and front-line staff training.
OFAC (the US Office of Foreign Assets Control) designated six entities and individuals across China, India, and Russia on July 30, 2026 for supporting Iranian airline Mahan Air and the Islamic Revolutionary Guard Corps (IRGC). Shanghai Wings International Logistics Co, a China-based general sales agent for Mahan Air, and its managing director Tang Xin were named, under Executive Order 13224 as amended.
Why it matters:The designations extend sanctions exposure into the general sales agents and logistics intermediaries that keep an already-sanctioned airline operating, not just the airline itself.
Action:Screen counterparties and correspondent relationships tied to air cargo and travel agency networks representing Mahan Air, particularly general sales agents operating in China, against the updated OFAC list.
Typology of the week
A person seeking a regulatory approval, certification, or contract decision hands cash to the decision maker inside an object that reads as a normal courtesy gift rather than a payment, such as food packaging, a gift box, or a hamper. The physical form matters: a gift exchanged at a business meeting does not trigger the internal alarms a wire transfer, invoice, or expense claim would. The cash sits below the radar of financial controls because it never touches an account, a ledger, or a payment rail.
Example
Australia's National Anti-Corruption Commission (NACC) charged Guoxin Zhu, the Australian country manager for Chinese solar equipment maker Growatt, on July 27, 2026, with offering a secret commission. He allegedly hid AUD 20,000 in cash inside a tea gift during a certification approval meeting in Brisbane. No further detail on the outcome of the charge is available at this stage.
Recent actions and the control lessons behind them.
OFAC / U.S. Department of the Treasury
Control failure:Shanghai Wings International Logistics Co kept a previously sanctioned airline operating as its general sales agent, coordinating electronics shipments from China to Iran, sitting one layer removed from the entity everyone already knew to screen against.
Lesson:Sanctions screening that stops at the named airline misses the general sales agents, freight forwarders, and travel agencies that keep a designated entity supplied, funded, and operating commercially. Screening lists need to extend to the layer around a designated party, not just the party itself.
OFAC's July 29, 2026 designations describe HormuzSafe Marine Services Authority and Persian Gulf Marine Insurance Company (PGMIC) collecting Bitcoin denominated payments from vessels transiting the Strait of Hormuz. Using cryptocurrency rather than a bank wire moved the payment outside conventional correspondent banking screening entirely. Firms with any exposure to shipping, marine insurance, or trade finance in the Gulf region should confirm their sanctions screening covers blockchain analytics on wallets tied to vessel and cargo transactions, not just fiat payment rails.
The UK Gambling Commission's 2026 risk assessment, published July 31, 2026, flags AI generated fake identity documents as an emerging risk alongside weak scrutiny of white label partnerships. Document verification tools calibrated on older forgery patterns may not catch synthetic documents generated to order. Firms relying on automated know your customer (KYC) document checks should ask their vendor directly what detection capability exists specifically for AI generated documents, rather than assuming general forgery detection covers it.
Career & Skills Corner
When an enforcement decision or court judgment lands, most people skim for the headline number and move on. The more useful habit is to read the section describing what the firm's control actually did, step by step, and where it stopped short. In the Lombard Odier case this week, the interesting detail is not the CHF 3 million fine. It is the description of checks on fund origin as superficial despite known corruption indicators. That single phrase tells you exactly what the enhanced due diligence process failed to do in practice. Build a habit of extracting one specific control failure from every judgment you read, phrased as a sentence you could use in a training session. Do that consistently and you build a mental library of real failure patterns that no generic training course will give you.
I am watching for further OFAC designations connected to the Strait of Hormuz shipping network, since eight tankers and eight shipping companies were named alongside HormuzSafe and PGMIC and that rarely stays a one week story. I am also tracking whether the UK Gambling Commission follows its 2026 risk assessment with enforcement action against operators named for weak white label oversight.
Turn this weekly intelligence into a career. Marco’s AML & Financial Crime course takes you from curious to hireable.
AML & Financial Crime course →