The OFAC SPFS Alert and Its Implications for Global Financial Compliance

The Office of Foreign Assets Control (OFAC) issued a significant alert on November 21, 2024, highlighting concerns over the use of Russia's System for Transfer of Financial Messages (SPFS) to circumvent international sanctions. This development underscores the evolving challenges financial institutions face in maintaining compliance amid geopolitical tensions. The alert not only targets Russian entities but also signals potential scrutiny of non-Russian banks engaged with SPFS, particularly in Europe, China, and other regions.​

SPFS, established by the Russian Central Bank in 2014, serves as an alternative to the SWIFT network, enabling Russian banks to process cross-border transactions independently. Its expansion, especially post-2022, has seen participation from foreign banks in countries like Switzerland, China, Turkey, and Kazakhstan. This growth raises concerns about the system's role in facilitating transactions that may support sanctioned activities, including military operations.

Understanding the implications of OFAC's alert is crucial for compliance professionals. It necessitates a reevaluation of existing risk management frameworks and the adoption of proactive measures to identify and mitigate potential exposures related to SPFS-linked institutions.​

{{snippets-guide}}

Understanding SPFS and Its Role in Sanctions Evasion

SPFS was developed in response to Western sanctions following Russia's annexation of Crimea. By providing an alternative messaging system for financial transactions, it allows Russian banks to bypass the traditional SWIFT network, thereby reducing the impact of international sanctions. This system has become a tool for facilitating transactions that might otherwise be restricted under global sanctions regimes.​

The participation of foreign banks in SPFS has expanded its reach, enabling transactions between Russian entities and third-country institutions. Such arrangements can obscure the true origin of payments, creating blind spots in the global financial system's ability to detect and prevent sanctions evasion. This is particularly concerning for banks offering correspondent services, as they may inadvertently process transactions linked to sanctioned activities.​

The opacity of SPFS participation, especially after the Russian government ceased public disclosures in 2022, complicates efforts to monitor and assess associated risks. Financial institutions must therefore employ enhanced due diligence and leverage specialised data sources to identify potential exposures.​

OFAC's Alert: Key Takeaways for Compliance

OFAC's alert serves as a clear warning to financial institutions about the risks associated with SPFS. It emphasises that joining or facilitating transactions through SPFS post-alert publication is considered a red flag, potentially leading to sanctions under Executive Order 14024. This directive empowers OFAC to target foreign financial institutions engaged in activities that support Russia's economy or military capabilities.​

Compliance teams must assess their correspondent relationships and transaction flows to identify any connections to SPFS-linked institutions. This includes scrutinising counterparties in jurisdictions known for SPFS participation and monitoring for transactions involving high-risk sectors, such as arms and military supplies. Proactive measures are essential to mitigate the risk of regulatory action and reputational damage.​

The alert also highlights the importance of aligning compliance programmes with evolving regulatory expectations. Institutions should ensure their policies and procedures are updated to reflect the heightened scrutiny of SPFS-related activities and incorporate mechanisms for ongoing monitoring and risk assessment.​

Divergent Regulatory Approaches: OFAC vs. EU

While OFAC's stance on SPFS is assertive, the European Union has adopted a more cautious approach. In its 14th sanctions package against Russia, implemented in June 2024, the EU imposed restrictions on SPFS expansion within its member states. However, these measures primarily aim to prevent new EU banks from joining SPFS and limit transactions between EU banks and non-EU SPFS participants, without fully severing existing ties.

This divergence in regulatory approaches necessitates that global financial institutions navigate a complex compliance landscape. Organisations operating across multiple jurisdictions must reconcile differing requirements and ensure their compliance frameworks are robust enough to address both US and EU regulations. Failure to do so could result in conflicting obligations and increased compliance risks.​

To manage these challenges, institutions should establish cross-jurisdictional compliance teams and engage in continuous dialogue with regulators. Staying informed about regulatory developments and participating in industry forums can also aid in aligning compliance strategies with evolving expectations.​

{{snippets-case}}

Leveraging Data for Enhanced Compliance

Given the lack of publicly available information on SPFS participants, financial institutions must seek alternative data sources to identify potential exposures. Castellum.AI, for instance, has developed a proprietary dataset tracking hundreds of institutions associated with SPFS, including entities outside Russia with significant US operations. Utilising such datasets can enhance the effectiveness of screening and risk assessment processes.​

Incorporating SPFS data into compliance workflows enables institutions to flag high-risk relationships and transactions proactively. By assigning elevated risk ratings to entities linked to SPFS, particularly those in jurisdictions with weak regulatory oversight, organisations can prioritise due diligence efforts and allocate resources more effectively.​

Integrating advanced screening tools and real-time data feeds into compliance systems can improve the detection of suspicious activities. Automation and machine learning algorithms can assist in identifying patterns indicative of sanctions evasion, thereby strengthening the institution's overall compliance posture.​

Conclusion

OFAC's SPFS alert underscores the increasing complexity of global sanctions enforcement and the imperative for financial institutions to adapt their compliance strategies accordingly. By understanding the mechanisms of SPFS, assessing the implications of regulatory directives, and leveraging specialised data sources, organisations can enhance their ability to detect and mitigate sanctions-related risks. Proactive engagement with evolving regulatory landscapes and the adoption of advanced compliance technologies will be critical in safeguarding institutional integrity and maintaining trust in the global financial system.

sanctions.io is a highly reliable and cost-effective solution for real-time screening. AI-powered and with an enterprise-grade API with 99.99% uptime are reasons why customers globally trust us with their compliance efforts and sanctions screening needs.

To learn more about how our sanctions, PEP, and criminal watchlist screening service can support your organisation's compliance program: Book a free Discovery Call.

We also encourage you to take advantage of our free 7-day trial to get started with your sanctions and AML screening (no credit card is required).

‍