Real Sanctions Evasion Networks Are Discovered, Not Announced

What happens when a crypto laundering network falls in the woods and no one is there to hear it?
Last week, as G7 leaders gathered in France, the United Kingdom quietly added an entity in Nigeria to its sanctions list for supporting A7, the Kremlin-linked financial network behind the ruble-backed stablecoin A7A5. The designation marked the first time UK sanctions authorities had reached A7’s African expansion directly. To understand why a single Nigerian entity ended up on a G7-timed sanctions package, you have to go back to a ribbon-cutting in Lagos nine months earlier.
In September 2025, A7 opened its first African offices in Lagos and Harare. The ribbon was cut by a Russian Deputy Finance Minister and the Deputy Chairman of Promsvyazbank, the sanctioned defense-sector bank that co-owns A7 alongside the sanctioned Moldovan oligarch Ilan Shor. Three months later, at the Russia-Africa Partnership Forum in Cairo, Foreign Minister Sergei Lavrov named A7 directly, calling it Russia’s first “international financial platform,” and told the assembled African partners that Nigeria and Zimbabwe had already joined and that the rest were welcome to follow.
It was a polished launch. It is worth asking why a sanctions evasion network would want one.
How These Networks Normally Form
Illicit finance infrastructure is usually discovered, not announced. It grows from the bottom up because it follows real demand, a trader who needs to move value, a counterparty who needs to be paid, a financial corridor that already carries volume. It stays quiet because visibility equals exposure. The exchanges, nested services, and shell companies that investigators spend countless hours mapping are built to move money, not to be seen moving it. By the time a network surfaces in an enforcement action, it has usually been operating, profitably and silently, for a long time.
A7 in Africa inverts nearly every part of that pattern. It was announced before there was anything visible to announce. The corporate vehicles went up the same week as the press event. According to the Centre for Information Resilience, a Kyrgyzstan company named A7 Africa was registered on 12 September 2025, just days before the offices were publicly unveiled, with the Russian A7 entity listed as owner. The flagship participants were named by a foreign minister at a state forum rather than uncovered by investigators. And the operation was endorsed from the top of two governments before any transaction layer beneath it could be observed.
The Footprint Does Not Match the Fanfare
The choice of markets makes the mismatch more striking, not less. Nigeria is one of the strongest grassroots cryptocurrency markets in the world, with an estimated 22 million users, roughly one in ten Nigerians. Stablecoins account for around 43% of retail transactions under one million dollars, as people hedge against a sliding naira. Zimbabwe’s crypto transaction volumes are estimated near 6% of GDP, among the highest shares of any emerging market surveyed. These are the easiest places on the continent for a payment network to blend into real, organic volume. And yet independent researchers and the Financial Times found A7’s online presence in both countries to be minimal, with local crypto-market participants reporting that they knew nothing about active A7 transactions.
The Centre for Information Resilience found that A7 Zimbabwe had created no public presence at all as of March 2026, months after being announced as an active member. The Nigerian operation appears to run through a local front, Pilot Finance Limited, whose own materials list a small operations team. There are flags on the table and wall clocks set to Lagos, Moscow, Bishkek, and Shanghai. There is not, yet, much evidence of money moving.
There are also quieter signals that cut the other way, toward something real being built. A delegation linked to A7, including the Promsvyazbank deputy chairman, made undisclosed visits to Togo and Madagascar in January 2026, alongside a broader uptick in Russian diplomatic and military activity in both countries, including the arrival of Africa Corps, the Russian state’s successor to the Wagner Group, in Madagascar. A7 also posted a job opening for someone to build its Togo operation from scratch. As any baseball fan knows, sometimes you have to build it before Shoeless Joe shows up.
Neither Alarm Nor Dismissal
The temptation is to resolve this into a headline, either that Russia has opened a major new sanctions evasion front in Africa, or that the whole thing is theater. The open-source record does not yet support either. So I will say something uncommon in this space: I don’t know. Yet. What the information does support is a more useful observation: this is a top-down political project whose plumbing is being laid in public, and the inversion is itself the tell. Networks that are announced before they operate are doing something other than quietly moving money. They may be signaling, to a domestic audience and to African governments, that Russia has functioning alternatives to the international SWIFT system it has been cut out of. They may also be laying corporate and diplomatic groundwork that real volume will later flow through. Both may be true at once.
Either way, the analytical work is the same, and it is happening now rather than after the fact. The shells are registered in Kyrgyzstan, and the local fronts have names and associated members. The intermediaries appear in photographs counter-signing contracts. The diplomatic visits track against military deployments and may play into a larger geopolitical chess match Russia is running across the continent. None of that requires a single confirmed transaction to be worth mapping, because the value of watching infrastructure form is that you understand it before it is used. Last week’s UK designation of the Nigerian node is the first sign that Western authorities are arriving at the same conclusion, months into a conversation that open-source researchers have already been having.
Real networks are discovered, not announced. When one is announced anyway, with ribbon-cuttings and ministerial endorsements and wall clocks, the right response is not alarm and not dismissal. It is to start pulling the threads that are already visible, and to keep pulling them quietly, building out the whole ecosystem, while everyone else reads the press release.
Meridian3 works at the intersection of open-source intelligence, financial intelligence, sanctions, and cryptocurrency investigations. This is an area we continue to examine closely.





Comments