A7 Allegedly Moved $6.9 Billion Through Global Banks Using Front Companies and Forged Documents

A Russian financial technology group known as A7 allegedly moved more than $6.9 billion through the international banking system using front companies, forged commercial documents and other methods designed to conceal the nature and origin of transactions, according to an investigation based on hundreds of thousands of leaked internal files.

The investigation concerns A7, a cross-border payments business established in late 2024 with backing from Russian state-owned Promsvyazbank and sanctioned Moldovan businessman Ilan Shor. The company emerged as an alternative payments mechanism for Russian businesses after sanctions and restrictions reduced the ability of Russian financial institutions to use Western banking infrastructure.

The $6.9 billion figure represents transactions identified in the leaked material and analysed by the investigation. It is not a judicial finding that all of the funds constituted criminal proceeds, and no court has established that every transaction handled through the network involved sanctions violations or money laundering.

The leaked records reportedly show that A7 relied on a network of at least 200 front companies and other businesses to gain access to conventional bank accounts and the SWIFT payment system. The companies were used to receive funds, convert currencies and make payments on behalf of Russian clients while obscuring the underlying parties and purposes of the transactions.

The network extended across multiple jurisdictions, including the United Arab Emirates, Hong Kong, Kyrgyzstan, the United Kingdom and Hungary. Chinese bank accounts were reportedly the final destination for more than half of the identified flows.

A central element of the alleged operation was the production of false invoices and other commercial documents. The leaked material reportedly contains evidence that A7 maintained a large collection of corporate stamps and prepared documentation intended to create a legitimate-looking commercial explanation for transactions.

Employees allegedly received instructions concerning how goods and counterparties should be described in documents submitted to banks. The records reportedly include instances in which customs codes, product descriptions, buyers and sellers were changed to make transactions involving restricted goods less likely to attract sanctions or compliance scrutiny.

The leaked files also reportedly contain discussions about removing indications of Russian involvement from transaction documentation. These included references to changing buyer and delivery information and eliminating Russian-language or Cyrillic references from documents used in international payments.

One example identified in the leaked material concerned a transaction allegedly involving 500 night-vision scopes purchased for a Russian client. A7 personnel reportedly discussed how the goods should be described in documentation provided to a bank and considered alternative descriptions that would not identify the military-related nature of the transaction.

The material also reportedly shows that A7 used strategies to divide payments into smaller amounts. In early 2025, Standard Chartered raised concerns over payments involving three Kyrgyz banks. Some transactions were reportedly divided into multiple tranches, including payments totalling 20 million renminbi that were split into several separate transfers.

Following the increased scrutiny of transactions routed through Kyrgyzstan, A7 shifted a significant portion of its activity towards banks in the United Arab Emirates. First Abu Dhabi Bank became an important banking channel for the network, with accounts opened for 17 A7-linked entities.

Those entities reportedly made more than $1.8 billion in outbound payments through the bank. The leaked records indicate approximately $1.3 billion in outgoing payments and around $500 million in transfers between A7-linked entities. First Abu Dhabi Bank also provided access to currency-conversion services that allowed funds to be converted from UAE dirhams into US dollars, euros and Chinese renminbi.

A7-linked entities also used accounts connected to other major international financial institutions. The leaked data reportedly identifies $1.1 billion received by accounts at Standard Chartered's Hong Kong operations between late 2024 and August 2025. DBS in Hong Kong was associated with approximately $273 million in payments, while Citigroup clients received about $74 million. Clients of Deutsche Bank in Europe received approximately $18 million.

The reported figures do not necessarily represent funds directly received by the banks themselves. In several cases, the figures relate to transactions involving customers or entities connected to the A7 network. The extent to which individual institutions knew the underlying purpose or ultimate beneficiaries of particular transactions remains a matter of separate compliance and investigative assessment.

The leaked records indicate that banks did raise anti-money laundering questions concerning A7-linked companies. Inquiries reportedly resulted in the production of additional documentation intended to address questions concerning transaction counterparties and the nature of goods or services being purchased.

First Abu Dhabi Bank has stated that all identified A7-linked accounts had been identified and closed and that the bank applies sanctions requirements covering the United States, United Kingdom, European Union and United Nations. DBS said it had no direct relationship with A7 itself but confirmed that one entity identified in the investigation had held an account and that appropriate action had been taken. Standard Chartered, Citigroup, JPMorgan Chase and Deutsche Bank have also confirmed their commitment to anti-money laundering controls while declining to discuss individual customer relationships.

A7's activities have been subject to sanctions by multiple jurisdictions. The United Kingdom designated A7 in May 2025, while the United States and European Union have also imposed sanctions on A7 and entities connected to its network. US Treasury materials have described A7 as a provider of cross-border settlement infrastructure used to facilitate sanctions evasion.

The network is also associated with A7A5, a stablecoin cryptocurrency registered in Kyrgyzstan and described as part of A7's sanctions-evasion infrastructure. The Centre for Information Resilience reported that A7 and A7A5-related entities had been sanctioned by the United States, United Kingdom and European Union.

Separate reporting has previously estimated the scale of A7's overall transaction activity at a substantially higher level. A7 has claimed to have processed approximately $114.5 billion in transactions during its first year, representing around 19% of Russia's foreign trade. Those figures describe the network's claimed payment activity and are distinct from the more than $6.9 billion in transactions identified in the leaked documents as having moved through international banks.

The reported use of legitimate financial institutions illustrates the role of correspondent and customer banking relationships in cross-border sanctions exposure. A7 did not need every bank involved in a transaction chain to have a direct relationship with the Russian network. Instead, front companies could maintain ordinary accounts, receive funds through the banking system and use those accounts to make international payments.

The leaked records reportedly show that A7's payment activity was not limited to conventional commercial transactions. They also contain references to payments connected to sensitive goods and purchases allegedly involving Russian security services. The presence of such transactions in the leaked material does not by itself establish that the banks processing individual payments knew the ultimate purpose or end use of the funds.

The investigation also identified more than $20 billion in A7-issued promissory notes and evidence of billions of dollars in Tether transactions involving Russian buyers. The promissory notes and cryptocurrency activity represent additional elements of A7's wider financial infrastructure rather than part of the $6.9 billion figure identified as having moved through the international banking system.

The reported activity has prompted renewed attention to the ability of sanctions-evasion networks to exploit differences between customer-level due diligence, transaction monitoring and information available elsewhere in the payment chain. The use of front companies and apparently legitimate commercial documentation can make it more difficult for individual institutions to identify the ultimate purpose of a transaction when the underlying information is distributed across several jurisdictions.

The A7 case remains based principally on leaked internal records and investigative analysis rather than a judicial determination establishing criminal liability for the company or the financial institutions involved. The reported transactions therefore remain allegations and findings from the investigation unless independently established through regulatory or judicial proceedings.

The disclosed material nevertheless provides a detailed account of how a Russia-linked payment network allegedly used corporate structures, banking relationships, trade documentation and multiple financial jurisdictions to move billions of dollars through the international financial system while attempting to conceal links to restricted Russian activity.

By fLEXI tEAM