Published Wednesday, June 3, 2026
What’s new in compliance. Why it matters. What it means for your operations.
From the Founder
Compliance teams that treated blockchain analytics as next year’s problem just had their timeline accelerated by a year. This week’s OFAC cartel action makes wallet screening table stakes, not a nice-to-have. If your 2026 budget didn’t carve a line for it, this is the week your COO needs the briefing.
Dominic Suszek
Founder and CEO, Global RADAR
1. Top story of the week
OFAC just put six cartel wallets on the SDN List. On May 20, OFAC designated eleven individuals, two entities, and six Ethereum addresses tied to Sinaloa Cartel money laundering. It is the first time a US cartel action has placed on-chain wallets directly on the SDN List. Combined with the May 11 FinCEN alert flagging stablecoin use by Iran’s Revolutionary Guard Corps, Treasury has made digital asset rails a top tier sanctions risk for 2026.
Why This Matters
If your institution serves virtual asset firms or holds correspondent ties with crypto-active banks, the six new SDN addresses are now an active screening obligation, not a theoretical one. The Sinaloa action paired with the IRGC stablecoin alert signals that digital asset rails will draw enforcement attention through the rest of 2026.
Operational Implications
Three steps for this week:
- Push the six addresses into your sanctions screening system today and run a look-back against open and recently closed cases.
- Update analyst training so the team can recognize cartel-linked stablecoin patterns alongside traditional Mexico-corridor flows.
- Document the SDN-feed-to-analyst-queue path; examiners are increasingly asking for that evidence at the next AML and CFT review.
2. Enforcement and penalties
- OFAC, May 20: Eleven persons, two entities, and six Ethereum wallets connected to Sinaloa Cartel laundering blocked under counter narcotics authorities.
- UK Government, May 19: Russia (Sanctions) (EU Exit) (Amendment) Regulations 2026 (SI 2026/543) published, adding trade prohibitions and expanding existing controls.
- FCA: Confirmed it will share roughly 5,000 records with police as it prioritises financial crime work, with 2026 fines already past £16 million.
- DOJ: Sentencing proceedings continued in the TD Bank matter, with a former branch manager appearing in mid May under the 2024 plea.
Why This Matters
US and UK regulators are both pairing institutional penalties with individual accountability. The signal is consistent: a senior manager named on a consent order or a sentencing docket is now the norm, not the exception.
Operational Implications
Two operational moves this week:
- Refresh your management information so the front line, the second line, and the audit committee see the same risk picture. The FCA’s 5,000-record data share signals more individual referrals are coming; brief your senior managers individually, not just in committee.
- Review compliance officer protections and your D&O coverage. DOJ’s continued TD Bank sentencing shows criminal exposure now reaches branch-level managers, and the policy language drafted three years ago may not reflect today’s risk.
3. New guidance and rulemaking
- FinCEN AML and CFT program reform, comments due June 9, 2026: Joint proposal with OCC, Federal Reserve, FDIC, and NCUA to refocus programs on risk based outcomes, with a twelve month implementation window.
- Treasury stablecoin issuer rule, comments due June 9, 2026: Joint FinCEN and OFAC proposal under the GENIUS Act, treating permitted payment stablecoin issuers as BSA financial institutions with an explicit sanctions program duty.
- FDIC stablecoin coordination proposal, May 26: Would require FDIC to notify FinCEN thirty days before any major AML action against a permitted payment stablecoin issuer.
- FCA Safeguarding Supplementary Regime, effective May 7, 2026: Daily reconciliation, independent audit, monthly reporting, and resolution pack duties now apply to UK payments and e money firms above the small firm threshold.
Why This Matters
Two of the most consequential US comment windows of 2026 close on the same day. If your firm has skin in either rule, the docket closes June 9 and late comments rarely shift final text.
Operational Implications
A practical comment-period playbook:
- Identify your top three operational pain points that the proposed text either fixes or breaks. Regulators weight specific operational concerns more heavily than general objections.
- Quantify the impact in dollars or FTE hours per year; concrete numbers move final-rule preambles.
- For UK firms, FCA Safeguarding is already live as of May 7. If you missed the implementation window, your March 2026 monthly report will surface the gap to FCA, so escalate now rather than at the report due date.
4. Coming up in the next 30 days
| Date |
Event or deadline |
| May 30, 2026 |
AUSTRAC deadline for existing reporting entities to notify their AML and CTF compliance officer. |
| June 9, 2026 |
Comments close on the joint FinCEN and federal banking agencies AML and CFT program reform proposal. |
| June 9, 2026 |
Comments close on the Treasury, FinCEN, and OFAC stablecoin issuer rule under the GENIUS Act. |
| June 15 to 19, 2026 |
FATF Plenary and Working Group meetings in Paris, with grey list updates expected at week’s end. |
| June 17, 2026 |
ACAMS featured virtual event, seven CAMS continuing education credits. |
| July 1, 2026 |
AUSTRAC Tranche 2 obligations commence for legal, accounting, real estate, jewellery, and virtual asset service providers. |
5. From the podcast
This week’s Compliance Coffee Break: $3 Billion and 28 Days. The audio companion to this brief unpacks FinCEN’s biggest AML rewrite in 25 years and why AI agents got there before the regulators did.
Listen: $3 Billion and 28 Days →
Get the Weekly Compliance Brief in your inbox. Every Wednesday at 8 AM ET. Subscribe here.
Know a compliance officer who’d want this? Forward this page.