Documentacion renderizada
Esta pagina renderiza Markdown y Mermaid del modulo directamente desde la fuente publica de documentacion.
Overview#
Capabilities: US Treasury bureau managing financial intelligence for law enforcement. Operates BSA database with 28M+ SARs, CTRs, and other financial intelligence reports.
Strengths:
- Data: Access to all US financial institution SAR/CTR filings (70M+ reports)
- Interagency Reach: Shares intelligence with FBI, DHS, IRS, DEA, Secret Service, international FIUs
- Regulatory Authority: Issues regulations, guidance, and enforcement actions for financial institutions
- 314(a) Requests: Can require financial institutions to search records for specific targets (PATRIOT Act authority)
Key Features#
Core Capabilities#
Terror Financing Pattern Recognition#
Automated detection of terror financing typologies across transaction data, entity registrations, and operational indicators.
Hawala & Informal Value Transfer Systems#
Hawala networks move substantial amounts-substantial amountsB annually outside formal banking channels. Detection requires behavioral analysis in the absence of transaction records, network reconstruction from fragmented indicators, and cross-border intelligence coordination.
Charity Abuse Detection#
IRS registers 1.9M charitable organizations. Estimated 2,400-3,800 exhibit diversion risk indicators. Terror financing through charity abuse includes operational control, fund redirection, and beneficiary misrepresentation.
Cryptocurrency Terror Financing#
FTOs exploit cryptocurrency for anonymity, cross-border reach, and financial system independence. ISIS Bitcoin campaigns raised substantial amounts-8M (2019-2026). Al-Qaeda, Hezbollah, and Hamas conduct similar operations.
Sanctions Screening (OFAC)#
JTTF Intelligence Coordination#
Joint Terrorism Task Forces (JTTFs) coordinate counterterrorism investigations across FBI, DHS, local law enforcement, and intelligence agencies. Financial intelligence sharing requires secure data exchange, deconfliction, and joint investigation support.
Use Case 1: ISIS Bitcoin Fundraising Network Disruption#
Background: ISIS supporters operated cryptocurrency fundraising campaigns on Twitter and Telegram (2026-2026), soliciting donations for "humanitarian aid" to families in Syria. Campaigns used rotating Bitcoin addresses, mixing services, and privacy coins to obscure fund flows.
- Campaign Attribution: Wallet addresses linked to known ISIS social media accounts
- Donation Patterns: substantial amounts in BTC received across 340 transactions over 4 months
- Mixing Activity: substantial of donated funds routed through Tornado Cash within 48 hours
- Exchange Deposits: Post-mixing funds deposited at Binance, Kraken, and LocalBitcoins
Benefits#
- Invoice anomalies (electronics invoiced at 40% below market rate)
- Shipping mismatches (declared cargo weight vs. actual container capacity)
- Entity relationships (shell company networks, shared addresses)
- Trade route analysis
- Commodity risk (gold, electronics, textiles with high value-to-weight ratios)
- Cash deposit/withdrawal patterns (large cash volumes without transaction justification)
- Velocity mismatches (account activity spikes during known hawala settlement periods)
- Geographic clustering (multiple accounts in areas with high hawala operator density)
Use Cases#
- Campaign Attribution: Wallet addresses linked to known ISIS social media accounts
- Donation Patterns: substantial amounts in BTC received across 340 transactions over 4 months
- Mixing Activity: substantial of donated funds routed through Tornado Cash within 48 hours
- Exchange Deposits: Post-mixing funds deposited at Binance, Kraken, and LocalBitcoins
- Transaction graph mapping 340 donations through mixing to exchange deposits
- Wallet clustering identifying 8 unique campaign wallets controlled by same entity
- Social media OSINT linking campaign wallets to ISIS propaganda accounts
- Exchange subpoena recommendations targeting Binance and Kraken accounts receiving funds
Integration#
- Automated Ingestion: System downloads XML file from OFAC website
- Database Update: New SDN entries added, modifications applied, removals processed
- Retroactive Screening: Historical transactions/entities rescreened against updates
- Alert Generation: Identify previously undetected matches
- UN Security Council: Consolidated sanctions list (ISIS, Al-Qaeda, Taliban, proliferation)
- EU Sanctions: European Union designated persons and entities
- UK HMT: UK Treasury financial sanctions targets
- Canada, Australia: Allied sanctions programs
Last Reviewed: 2026-02-04