Terror Finance Weekly

“Sunlight is the best disinfectant.”

Welcome back,

If you were unable to join us at the ICT conference in Herzliya last week, we invite you to watch the panel on Terror Financing we hosted together with 240 Analytics. It is now available on our website.

This week’s lead sets aside the question of exactly how much money Iran moved to Hezbollah last month, and asks the more useful one: what Naim Qassem now has to spend it on.

As always, we would love to hear what you think. Reply to this email and it will reach us.

Sharon Gal

Chief Executive Officer, CENTEF

 

Two Hundred Million Dollars, and a Bill for Two Billion

CENTEF ANALYSIS  ·  5 to 11 October 2026

Two hundred million dollars was transferred from Iran to Hezbollah. The interesting question is not the number. It is exactly what the money will pay for.

Iran moved roughly $200 million to Hezbollah last month, with intermediaries reportedly taking a 20 percent cut, as part of a reported $1 billion flow to its Lebanese ally. The United States disputed the validity of the report. For the sake of this discussion, please allow us to set aside the questions of whether the amount was strictly $200 million, how much money has flowed in recent months, and whether $200 million will now become the baseline monthly transfer going forward.

Washington disputed the report for good reason. Alma Research detailed Treasury Secretary Bessent’s September 28 pressure on Prime Minister Nawaf Salam and Finance Minister Yassine Jaber to dismantle the network from within the government, an act Beirut has so far failed to implement. The entanglement is structural rather than incidental, because Beirut is being asked to police the same apparatus its own coalition depends on.

Instead, we wish to direct attention to another dimension of this issue, which is how this capital will be distributed across the various spheres in Hezbollah requiring cash injections. If we were discussing Hamas, the answer would be straightforward. Hamas would direct the entire sum toward purchasing armaments and equipping its terrorist forces with lethal weapons, even if doing so brought the Palestinian population, including its own officials and their families, to the brink of starvation. Hamas’s iron fist over the Palestinian population is beyond debate, as is its willingness to sacrifice every last Palestinian to achieve its terrorist objectives.

With Hezbollah, however, a different set of considerations comes into play. Naim Qassem, the organization’s Secretary-General, faces a formidable dilemma. He must rehabilitate the organization across all fronts: social, medical, political, military, foreign terrorism, and beyond.

The wounded require rehabilitation, families of the deceased are demanding payouts, the military force was crushed at the Ali-Taher Range, and an unprecedented number of civilians in Southern Lebanon are homeless with the Lebanese winter just around the corner. By conservative estimates, Qassem requires well over $2 billion to fully restore the organization, and it remains uncertain whether that funding will materialize at all.

On one hand, it is entirely plausible that the leak regarding the $200 million transfer from Iran was deliberately intended to compel Qassem to allocate the funds toward the needy civilian population, thereby thwarting his ability to direct capital toward rebuilding Hezbollah’s military capability.

On the other hand, if Hezbollah takes charge of rehabilitating the population in Southern Lebanon, it undermines the authority of the central Lebanese government. This makes it significantly harder for the government to dislodge Hezbollah from its position, a step Western nations are actively pushing it to take.

At present, it remains unclear where this power struggle will settle, though the picture may become clearer in the coming weeks.

ALSO THIS WEEK

Treasury Goes After the Ships, Not the Banks

U.S. TREASURY / STATE  ·  Week of October 5, 2026

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) opened the week by warning foreign financial institutions that transactions with sanctioned Iranian banks could draw sanctions at any time without advance notice under Operation Economic Outcast, issued the day after Iran’s oil minister resigned. Treasury then designated 27 companies, six individuals, and 22 vessels tied to Iran’s shadow-fleet oil trade, with operators based across Turkey, China, the UAE, the UK, and the Marshall Islands. The State Department ran a parallel track, sanctioning ten entities, six individuals, and five vessels under E.O. 13846, while Treasury layered on a further 17 entities and their associated shadow-fleet vessels under a separate authority.

The sequence functions as one coordinated campaign rather than three disconnected actions. The no-notice warning closes the compliance grace period that previously let intermediaries unwind exposure quietly, while the vessel and entity-level designations go after the ownership and flagging structures that let Iranian crude move through multiple jurisdictions with reduced scrutiny. The jurisdictional spread named in the designations is the clearest indicator of why shadow-fleet disruption, rather than bank-level designations alone, has become the primary lever for constraining Iranian oil revenue.

At the same time, it is mind-boggling why additional and equally effective measures are not taken in coordination with these designations. Every designated entity depends on people and activities in various jurisdictions for its operation. Each entity has managers, owners, boards of directors, bankers, bank accounts, lawyers and internal and external accountants generating annual reports and signing them, and insurance companies where professionals hold professional liability policies. Why aren’t all these automatically designated together with the entity they run?

Yes, we are familiar with the voices that claim “innocent” people could be negatively affected by these designations, and therefore we should refrain from taking them. To this we answer: let’s not forget that truly innocent people are the main target of terrorists, and failing to protect them is usually more severe in terms of its consequences.

We would also suggest a simple mechanism. Let designating bodies, like any other sovereign authority, open hotlines for innocent people negatively affected by designations, allowing them to provide relevant materials proving their innocence. I fail to see how a CEO, auditor or board member of a designated entity would claim they “knew nothing” about the true business of the company they ran or supervised. The importance of doing this also lies elsewhere. Naming these individuals will make it harder for them to simply open a new entity the following day, and conduct their business with a fresh set of documents. Lawyers and CPAs that risk their professional license would think twice before supporting these activities. Insurers would hike premiums for people dealing with shady businesses, and banks would refrain altogether from providing them services.

Going after ships is welcome, but to make it effective it should be supplemented by additional actions that will seal the move, otherwise the cat-and-mouse game will not end.

The French Charity Designations Should Be a First Move, Not a Last One

FDD  ·  Week of October 5, 2026

OFAC’s designation of Hamas battalion deputy Saleem Abdallah Saleem al-Zaq, together with France-based fundraisers Faouzi Barika and Amel Oualid and their associations Association Baraka and Ensemble C Mieux, extends the network we covered last week, which raised more than $2 million for Hamas, $1.5 million of it collected after October 7, 2023.

The harder problem the designation exposes is structural rather than resolved by it. A crowdfunded donor base routed through charitable fronts is not dismantled by sanctioning two individuals and two associations, because the underlying mechanism, small recurring donations gathered under a humanitarian or charitable label, survives the removal of any single node. FDD argues the French designation should function as a first move rather than a closing one, and that Treasury and European counterparts need to treat the Barika and Oualid structure as a template for locating comparable Hamas-linked entities operating under humanitarian-aid cover elsewhere in Europe.

London Designates Crypto Firms the Same Week Washington Withdraws Its Reporting Rules

UK FCDO / FINCEN  ·  October 8, 2026

The UK’s FCDO designated five Russia-linked crypto and payment firms on October 8, among them Xeltox Enterprises, covering Cryptomus and Heleket, and TokenSpot, as part of a 38-entity sanctions package. Blockchain analytics firm TRM Labs traces TokenSpot alone to over $950 million routed to the Grin exchange. In the same window FinCEN moved the opposite direction, withdrawing its October 2023 proposed rule that would have required financial institutions to report crypto transactions suspected of mixing through a foreign jurisdiction, and separately pulling a 2020 proposal on unhosted-wallet reporting invoked under Section 311 of the USA PATRIOT Act.

Treasury’s stated rationale was industry pushback over reporting burden layered onto a July 2025 White House shift in digital-asset policy. Because neither U.S. proposal had been finalized, the withdrawal removes a standing enforcement option rather than unwinding live obligations. The practical effect is a widening transatlantic gap. London is actively naming mixer and payment-adjacent entities tied to Russian sanction evasion, while Washington steps back from the reporting architecture that would have flagged exactly the kind of mixing-routed flow TRM documents at TokenSpot. That pushes the compliance burden onto exchanges’ own due diligence and onto the UK’s designation track, in the absence of a U.S. domestic hook.

A Decade of AML Failures, and What $350 Million Buys

OCC / FEDERAL RESERVE / FINTRAC  ·  Week of October 5, 2026

The Office of the Comptroller of the Currency (OCC) and the Federal Reserve penalized American Express in the amount of $350 million for AML failures stretching back more than a decade, citing $13 billion in suspected money laundering that went unflagged. FINTRAC’s parallel action against four Canadian credit unions and caisses populaires, with penalties ranging from $16,500 to $676,500 for missing compliance policies and inadequate risk assessments, applies the same enforcement logic at a far smaller scale.

Read together, the two actions test what penalty size actually buys in compliance behavior. A fine that reflects a decade of accumulated exposure at a global institution carries different weight as a deterrent than one calibrated to a regional credit union’s balance sheet. That gap raises the open question of whether sticks of this kind are sufficient to secure private-sector cooperation with AML and counter-terrorist-financing regulation on their own, or whether durable compliance requires pairing enforcement with carrots, meaning supervisory guidance, safe harbors, or other incentive structures, rather than relying on after-the-fact penalties alone.

$350 million is a very large sum, but please consider this: $350 million out of $13 billion is 2.69 percent. The average commission Amex charges its clients is roughly 2.5 percent. Don’t misunderstand; this is a very important move, but with no punitive fines and no implications for senior management, it may fall short of actually generating a change in the financial sector.

A Chinese Network Laundered Over $1 Billion for Lazarus

COINTELEGRAPH  ·  Week of October 5, 2026

Blockchain investigator ZachXBT said a Chinese organized-crime network laundered over $1 billion in cryptocurrency for North Korea’s Lazarus Group, infiltrating the operation to trace funds from the $1.5 billion Bybit hack and identify over $12 million in related transfers.

Proliferation finance and terror finance increasingly share a laundering layer. The same organized-crime infrastructure that moves scam proceeds and sanctions-evasion flows is being rented by a state weapons program, which means a compliance team screening for one is screening for all three whether it knows it or not.

About this brief. Terror Finance Weekly is compiled by CENTEF from open-source reporting and primary government releases for research and situational-awareness purposes. Items reflect developments published between October 5 and 11, 2026. Allegations described in designation notices and indictments are the issuing authority’s findings and carry a presumption of innocence unless proven in court. Reporting is attributed to the outlets named; the judgments drawn from it are CENTEF’s own. Headlines link to source material where available.