Invest1 publisher3 min readPublished
Cutting A7A5's route into liquid stablecoins took its daily volume down 96%
Leaked files put $6.9 billion of the Kremlin-linked A7 network's money through correspondent banks, while TRM counts $166 billion of A7-linked crypto volume. After the sanctions, the daily turnover of its ruble token fell 96%.
The Investor · Invest desk

What happened
- Leaked documents reported by the Financial Times show the A7 network moved more than $6.9 billion through global banks using front companies and forged trade and shipping paperwork.
- TRM Labs traced more than $166 billion of A7-linked on-chain volume, with the same network using Tether's USDT and the ruble-pegged A7A5 token alongside its bank rails.
- TRM found one A7 address received more than $65 million from an address it attributes to Iran's Revolutionary Guard, and another about $5 million from Hamas.
Compiled by The InvestorSomething wrong?How this is made
Why it matters
- constraint A bank's file on a shell company and an analytics firm's label on a wallet each cover one leg of the same payment, so neither institution holds a complete case on its own.
- exposure Correspondent banks that cleared A7's forged trade documents are now identifiable from a document set held by journalists, ahead of any regulator's finding against them.
- decision Compliance teams pricing exposure to ruble-linked tokens have to decide whether a 96% volume collapse means the flow stopped or moved to a rail that has yet to be labelled.
- precedent The A7A5 collapse points to designating the venues that swap a token as well as its issuer, and the UK has already named an exchange in the same package.
Elliptic put A7A5's first year of operation at $102 billion across 251,000 transactions [4], which averages about $406,000 a transaction [1]. By June 2026 the ruble-pegged token was averaging $24.3 million a day, 96% below its July 2025 peak [5]. Annualise that and it is roughly $8.9 billion, under a tenth of the first year [2]. Elliptic attributes the fall mainly to restrictions that reduced the ways traders could convert A7A5 into more liquid stablecoins [6].
Leaked documents reconstruct $6.9 billion of bank-rail flow. TRM's $166 billion and Elliptic's $102 billion measure on-chain activity two different ways, and PSB chairman Pyotr Fradkov disclosed approximately $140 billion of cumulative turnover in August [16][15]. The source is explicit that these figures count different things. TRM itself strips out about $35 billion as circular transfers between A7 and other evasion actors, which leaves $131 billion [3][3]. The inflows it can attribute to a named sanctioned party are much smaller. More than $65 million came from an address TRM ties to Iran's Revolutionary Guard, about $5 million from Hamas, and at least $590,000 of BTCTurk and Woo X hack proceeds attributed to North Korean state hackers [11][12]. That is about $70.6 million, or 0.04% of the $166 billion [4].
Announcing 18 restrictions on May 26, UK Foreign Secretary Yvette Cooper said A7 claims to have transferred over $90 billion in the previous year, close to half of Russia's annual military expenditure [7]. Against the network's own claim, the leaked bank trail of $6.9 billion is about 8% [5]. "There will be no safe havens for those enabling Russia's aggression," Cooper said [8].
The UK government describes A7 as a Kremlin-backed system that helps avoid Western sanctions, assists military acquisitions and enables oil revenue transactions [18]. TRM Labs, working with the Open Source Centre, found that the Russian defence finance institution Promsvyazbank and the Moldovan businessman Ilan Shor set it up. The job was cross-border payments for Russian companies that cannot use regular banks [10]. The Financial Times reported that international banks executed transactions involving A7 without really being aware of who was behind them, while blockchain investigators followed the trail into sanctioned digital-asset channels [17].
If conversion is the point where designations work, the next ones land on venues. The UK's May package already covers a bank in Kyrgyzstan and a global exchange it suspects of transferring over $1.5 billion to Moscow [9]. The counter-argument is substitution. The EU's 20th package names A7A5, RUBx and assistance to the digital ruble, and the US Treasury has designated A7 and its issuer Old Vector [13][14]. The alternative rails are already identified, so the 96% may just mean the flow is paying its costs somewhere else. What would settle it is A7A5 daily turnover climbing back toward the roughly $608 million a day its peak implies while the designations stand [6].
What to watch
- Whether TRM or Elliptic publishes a successor-token flow figure comparable to A7A5's $102 billion first year.
- Whether any bank named in the leaked files faces a penalty for processing A7 payments.
- Whether PSB's next disclosure shows the A7 product line's 15,000 repeat customers growing or shrinking.