The $80 Million Laundry: How Canaccord Genuity Washed Kremlin Money Through Wall Street

A Canadian broker-dealer spent six years processing trades for Russian oligarchs, sanctions evaders, and penny-stock fraudsters - while its compliance department looked the other way. The largest penalty ever imposed on a broker-dealer under the Bank Secrecy Act exposes a network connecting Cyprus shell companies, Crimea's financier, Putin's chef, and the American penny-stock underworld.

On March 6, 2026, the U.S. Treasury's Financial Crimes Enforcement Network dropped the largest penalty in its history against a broker-dealer: $80 million against Canaccord Genuity LLC, the American subsidiary of Toronto-based Canaccord Genuity Group. The firm admitted to willfully violating the Bank Secrecy Act. It admitted to failing to file at least 160 Suspicious Activity Reports covering thousands of transactions. It admitted to onboarding high-risk customers with known ties to sanctioned Russian oligarchs. And buried in a footnote on page 27 of the 30-page Consent Order, a name appeared that ties this entire affair to the financing of Russia's war in Ukraine: Konstantin Malofeyev.

This is not a story about a compliance failure. Compliance failures produce fines in the low millions and stern letters from regulators. This is a story about a financial institution that functioned, for years, as a willing conduit between Kremlin-connected money and the American capital markets - while regulators warned them repeatedly and they promised, in writing, to fix the problem.

They never did.

01 // The Machine: How Canaccord's OTC Desk Worked

To understand how Canaccord became the largest broker-dealer ever fined under the Bank Secrecy Act, you first need to understand where it sits in the financial ecosystem. Canaccord Genuity LLC is not Goldman Sachs. It is not JPMorgan. It is a mid-market investment dealer headquartered in Vancouver, with operations spanning wealth management, capital markets, and - critically - over-the-counter (OTC) market making.

OTC market making is the beating heart of the penny stock world. Unlike stocks listed on the NYSE or NASDAQ, OTC securities trade on decentralized networks where a market maker like Canaccord stands between buyers and sellers, providing liquidity and setting bid-ask spreads. The stocks are often thinly traded, poorly regulated, and extraordinarily vulnerable to manipulation. This is the terrain where pump-and-dump schemes flourish, where shell companies can be inflated from pennies to dollars on hype alone, and where the proceeds of fraud can be quietly converted into legitimate-looking profits.

Canaccord was one of the largest OTC market makers in the United States. According to the FinCEN Consent Order, the firm processed trillions of shares in low-priced OTC securities during the period under examination. That is not a typo. Trillions. The volume was staggering, and so was the responsibility that came with it. As a market maker, Canaccord sat at the nexus of every trade. It could see the order flow. It could see the patterns. It could see when a stock went from zero volume to millions of shares in a day, when the same small group of accounts was always on the winning side, when freshly issued shares from offshore entities flooded the market simultaneously.

It could see all of this. The FinCEN Consent Order makes clear that it chose not to look.

The firm's Anti-Money Laundering program was, by the government's account, a fiction. The compliance team was "significantly under-resourced" - staffed by an "insufficient number of inexperienced" employees who were "poorly trained and overwhelmed." The transaction monitoring system relied on surveillance reports that FinCEN described as "unreasonably designed." When red flags appeared, they were either ignored or dismissed without adequate investigation. When regulators conducted examinations and found weaknesses, Canaccord committed in writing to fix them. Those commitments went unfulfilled for years. According to FinCEN, "significant aspects of such remediation" were not undertaken until the agency's own investigation was already underway.

In practical terms, this meant that for at least six years - from 2018 through 2024 - Canaccord operated one of America's busiest penny stock trading desks with what amounted to no functional compliance oversight. The door was open. Anybody could walk through it. And several very dangerous people did.

02 // Individual 2: The Cypriot Fixer Who Served the Kremlin

The FinCEN Consent Order does not name its subjects directly. It uses code names: Customer A, Customer B, Individual 1, Individual 2. But the details it provides - cross-referenced against public reporting by The Globe and Mail, ICIJ's Cyprus Confidential investigation, and UK sanctions designations - paint an unmistakable portrait.

"Individual 2" is described as a person who, according to multiple 2023 news articles, spent years shielding wealthy Russians' assets through "an affiliate based in Cyprus." Individual 2's business was linked to Russian oligarchs as early as 2012. By 2023, those links were public knowledge, documented in a massive international investigation. Yet Canaccord's customer due diligence files contained no reference to any of this information for roughly five years after the account was opened.

The Globe and Mail, reporting on the FinCEN action in March 2026, identified the likely identity of Individual 2: Demetris Ioannides, managing director of MeritServus HC Limited, a corporate services firm based in Limassol, Cyprus.

MeritServus is not an obscure entity. It is one of the most extensively documented enablers of Russian oligarch sanctions evasion in the Western financial system. Founded by Ioannides - a former Deloitte partner - MeritServus specialized in establishing offshore trusts and shell companies for ultra-wealthy clients. Its client list reads like an OFAC sanctions roster.

The firm's most notorious client was Roman Abramovich, the billionaire former owner of Chelsea Football Club, who was sanctioned by the UK, EU, and other jurisdictions following Russia's full-scale invasion of Ukraine in February 2022. According to ICIJ's Cyprus Confidential investigation, which drew on hundreds of thousands of leaked documents from MeritServus and its affiliates, Ioannides and his firm "collaborated intimately" with Deloitte's Cyprus operations to support Abramovich's "vast offshore network."

In April 2023, the United Kingdom added both Ioannides and MeritServus to its sanctions list. The official designation stated that Ioannides had "knowingly assisted sanctioned Russian oligarchs to hide their assets in complex financial networks." Lawyers acting for Ioannides and MeritServus told The Guardian at the time that they had "no involvement in any Abramovich family trusts." The UK government disagreed.

But Abramovich was not the only client. And this is where the Canaccord story takes a darker turn.

The Malofeyev Connection

Buried in a footnote on page 27 of the FinCEN Consent Order - the kind of footnote that most readers skip - is a reference to another Russian oligarch whose money Individual 2 allegedly helped move: Konstantin Malofeyev.

The footnote states that "Canaccord's CDD records for Customer B do not reflect reporting alleging that Individual 2 aided certain oligarchs in hiding their assets, including Konstantin Malofeyev." It then notes that OFAC designated Malofeyev as a Specially Designated National in December 2014, describing him as "one of the main sources of financing for Russians promoting separatism in Crimea."

This is not a minor detail. This is the financial thread that connects a Canadian broker-dealer's compliance failures directly to the funding of Russia's military aggression in Ukraine - aggression that began not in 2022, but in 2014, with the annexation of Crimea and the fomenting of separatist uprisings in the Donbas.

Malofeyev was sanctioned again in April 2022 for "acting, or purporting to act, on behalf of, directly or indirectly, the Government of Russia." In April 2022, the U.S. Department of Justice indicted him for sanctions violations - the first criminal charges against a Russian oligarch since the full-scale invasion of Ukraine. He has called Russia's invasion a "holy war." He runs the Tsargrad media network, a platform for extreme-right Russian nationalism and the views of Aleksandr Dugin, the philosopher whose theories of imperial expansion have provided intellectual cover for Putin's territorial ambitions.

And according to The Guardian's reporting on the Oligarch Files - a cache of leaked documents from MeritServus - the Cypriot firm continued to help Malofeyev move money and issue loans, some denominated in U.S. dollars, for up to three years after he was sanctioned by the United States. MeritServus appears to have processed millions of dollars in transactions on Malofeyev's behalf while he was a sanctioned individual under U.S. law.

Canaccord, according to FinCEN, never noted any of this in its customer files. Not the sanctions. Not the leaked documents. Not the public reporting. Not the ICIJ investigation. The information was publicly available. Canaccord simply did not look.

03 // The Pump-and-Dump Pipeline: From Penny Stocks to Putin's Chef

The Kremlin connections alone would make this case extraordinary. But Canaccord's compliance failures enabled a second, parallel stream of illicit activity: a network of penny stock pump-and-dump schemes with their own disturbing Russian links.

The FinCEN Consent Order describes multiple unnamed stock fraud schemes that Canaccord processed without filing Suspicious Activity Reports. One of the individuals named in the Consent Order is Joseph A. Padilla, a California stock promoter who was arrested in August 2022 at San Diego International Airport on federal fraud charges.

Padilla, then 53, and his associate Kevin Dills were indicted for allegedly orchestrating a $150 million pump-and-dump scheme involving shares of a company traded under the ticker ONPH. According to the indictment, they used a network of offshore accounts, nominee shareholders, and coordinated promotional campaigns to artificially inflate the stock price before dumping their holdings on unsuspecting retail investors. The scheme ran through Canaccord's market-making desk. The firm processed the trades. It did not file SARs.

But here is the detail that investigators like Wendy Siegelman - the open-source intelligence researcher who first mapped the Russian connections in the FinCEN filing - flagged as significant: a separate SEC filing related to Padilla's case reveals that he enlisted four Russian nationals in his scheme. Those Russian nationals held accounts at Valor Capital, a brokerage firm linked to a Latvian-born financier named Ivo Zutis.

Zutis has been reported to have connections to Yevgeny Prigozhin - the man known as "Putin's Chef," the founder of the Wagner Group private military company, and one of the most sanctioned individuals in Russian history before his death in a plane crash in August 2023. Prigozhin built an empire that spanned catering contracts for the Kremlin, internet troll farms that interfered in the 2016 U.S. presidential election, and a mercenary army that fought in Syria, Libya, Mali, the Central African Republic, and Ukraine.

The connection is not direct. It runs through intermediaries and associated firms. But it illustrates a pattern that FinCEN's enforcement action exposes: the American penny stock market became a meeting point for Russian money and American fraud, and Canaccord sat at the intersection, processing everything, questioning nothing.

The SEC's own order found that Canaccord "failed to maintain an anti-money laundering surveillance program that was reasonably designed to detect, investigate, and report suspicious OTC trading." The firm processed trades in securities where, according to the SEC, the red flags were overwhelming: sudden spikes in volume, coordinated trading across linked accounts, promotional campaigns timed to coincide with insider selling. Canaccord was "well-positioned to detect and investigate" these patterns. It did not.

When asked about the failures, Canaccord's parent company issued a statement noting that "the firm involved in the U.S. enforcement action is Canaccord Genuity LLC, a brokerage firm regulated by the SEC and FINRA." The implication was clear: this was a subsidiary problem, not a parent company problem. Regulators were not persuaded.

04 // The Cyprus Pipeline: How Sanctions Evasion Actually Works

To understand why the Canaccord case matters beyond the headline fine, you need to understand the architecture of Russian sanctions evasion - and Cyprus's central role in it.

For decades, Cyprus has served as Russia's financial gateway to the West. The arrangement was simple: Russian oligarchs moved their wealth into Cypriot corporate structures - trusts, holding companies, special purpose vehicles - managed by local corporate services firms. These structures provided anonymity, tax advantages, and most critically, a veneer of European legitimacy. Money that arrived as Russian oligarch wealth departed as Cypriot corporate investment.

The International Consortium of Investigative Journalists (ICIJ) documented this system in devastating detail through its Cyprus Confidential investigation, published in November 2023. The investigation was based on 3.6 million leaked documents from six Cypriot corporate services providers, including MeritServus. The findings were damning.

ICIJ found that Cyprus had "ignored Russian atrocities, Western sanctions to shield vast wealth of Putin allies." Cypriot firms continued to administer shell companies and trusts for sanctioned individuals long after those sanctions were imposed. The leaked documents showed money flowing through complex chains of entities designed to obscure its origin - from Moscow to Limassol to London to New York.

MeritServus was the most extensively documented of the six firms. The ICIJ analysis showed that Ioannides's company administered entities linked to some of the most prominent figures in Putin's inner circle. The leaked emails revealed "intimate collaboration" between MeritServus and Deloitte's Cyprus operations to support offshore networks valued at hundreds of millions of dollars.

And while Ioannides was administering these structures, he and two family members were looking for investment opportunities in New York real estate, according to ICIJ. The fixer for sanctioned oligarchs was, simultaneously, seeking to invest in Manhattan property. The boundaries between the legitimate and illegitimate financial systems were not just blurred. They were nonexistent.

This is the context in which Canaccord's failures must be understood. When FinCEN says that Canaccord onboarded "high-risk customers with reported ties to illicit actors," it is describing an institution that plugged directly into this sanctions evasion infrastructure. The Cypriot corporate structures managed by MeritServus generated entities that needed access to Western capital markets. Canaccord's OTC desk, with its nonexistent compliance oversight, provided that access.

The money did not arrive labeled "Russian oligarch sanctions evasion proceeds." It arrived as trading orders from corporate entities registered in jurisdictions with favorable disclosure requirements. But the information was available. The ICIJ investigation was public. The UK sanctions designations were public. The Guardian's reporting on the Oligarch Files was public. Canaccord's compliance team, such as it was, simply never checked.

The Venezuelan Thread

The FinCEN Consent Order contains another buried reference that deserves attention. Among the high-risk customers Canaccord onboarded was one who "public reporting identified as being implicated in investigations involving a Venezuelan individual designated by Treasury's Office of Foreign Assets Control."

This suggests that Canaccord's compliance failures extended beyond Russian sanctions evasion into the broader world of OFAC-designated individuals. Venezuela has been subject to extensive U.S. sanctions targeting the Maduro regime and its associates. The intersection of Russian and Venezuelan sanctions evasion networks is well-documented - both countries have used similar intermediaries, cryptocurrency infrastructure, and corporate shell structures to circumvent Western financial restrictions.

The Consent Order does not elaborate further on this Venezuelan connection. But it adds another dimension to the picture: Canaccord was not just serving one set of sanctioned interests. Its open-door policy attracted illicit actors from multiple sanctioned jurisdictions, all taking advantage of the same compliance vacuum.

05 // The Regulator Warnings They Ignored

What makes the Canaccord case uniquely damning is not just what the firm failed to do. It is what the firm promised to do - and then did not.

The FinCEN Consent Order documents a pattern of regulatory warnings stretching back years. Canaccord's own regulator - FINRA - "repeatedly found weaknesses in Canaccord's AML program, including in its monitoring of suspicious transactions." Each time, Canaccord responded with written commitments to remediate the problems. Each time, the remediation either never happened or was so superficial as to be meaningless.

This is the conduct that FinCEN described as "willful." Not accidental. Not negligent in the ordinary sense. Willful. The firm knew its AML program was inadequate. Its regulators told it so. It agreed to fix it. And then it chose not to, because fixing it would have cost money and slowed down the trading that generated revenue.

The numbers tell the story. Canaccord failed to file at least 160 Suspicious Activity Reports across dozens of different OTC securities. Each SAR represents a transaction or pattern of transactions that should have triggered a report to law enforcement. FinCEN estimates that the underlying suspicious transactions numbered "in the thousands." Each one of those was a data point that law enforcement never received - a lead that was never pursued, a pattern that was never connected to a larger investigation.

FinCEN Director Andrea Gacki, announcing the penalty, called it "a wake-up call to broker-dealers that willfully fail to comply with their obligations to safeguard the financial system from illicit actors." She framed the action within Treasury's broader anti-fraud mission, noting that Canaccord's failures "deprived law enforcement of timely and critical financial information pertaining to suspicious activity."

The penalty structure itself reveals the coordinated nature of the enforcement. The $80 million FinCEN penalty is the headline number, but $40 million of that is credited against separate payments to the SEC ($20 million) and FINRA ($20 million). The remaining $40 million goes directly to FinCEN, with $5 million suspended pending Canaccord's completion of a SAR Lookback Undertaking - essentially requiring the firm to go back through its records and file the SARs it should have filed years ago.

All three regulators acted on the same day: March 6, 2026. The coordination was deliberate. The message was explicit. The SEC's order found that from 2018 through at least 2024, Canaccord "failed to maintain an anti-money laundering surveillance program that was reasonably designed to detect, investigate, and report suspicious OTC trading." FINRA fined the firm $20 million for "failing to supervise trillions of shares in low-priced over-the-counter securities." The word "trillions" appears in the FINRA order without further comment, as if the scale itself requires no elaboration.

Legal analysts have described the penalty as a watershed moment for broker-dealer AML enforcement. Chapman and Cutler LLP noted that "the Consent Order imposes an $80 million penalty, with $40 million credited for payments Canaccord has made to the SEC and FINRA, and $5 million suspended pending compliance with a SAR Lookback Undertaking." AMW Law PLLC called it "a warning shot to broker-dealers, particularly those operating in higher-risk areas of the securities markets," noting that the BSA, FINRA Rule 3310, and Exchange Act Rule 17a-8 "collectively require more than a paper program."

More than a paper program. That phrase captures the entirety of Canaccord's failure. The firm had a program. On paper. It simply bore no relationship to reality.

06 // The Malofeyev File: From Crimea to War Criminal

Konstantin Valeryevich Malofeyev is not a peripheral figure in Russian geopolitics. He is one of its architects.

Born in 1974, Malofeyev founded Marshall Capital Partners, a Russian investment group, and built a fortune estimated at hundreds of millions of dollars. He used that fortune to advance an aggressively nationalist, Orthodox Christian vision of Russian imperial expansion - one that would eventually provide both the ideological justification and the financial infrastructure for Russia's military campaigns in Ukraine.

In December 2014, the U.S. Treasury's Office of Foreign Assets Control designated Malofeyev as a Specially Designated National, citing him as "one of the main sources of financing for Russians promoting separatism in Crimea." OFAC noted that Malofeyev was "responsible for or complicit in, or has engaged in, actions or policies that threaten the peace, security, stability, sovereignty, or territorial integrity of Ukraine" and had "materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of the so-called Donetsk People's Republic."

His Marshall Capital Fund was sanctioned alongside him. U.S. citizens were prohibited from working for or doing business with Malofeyev. The sanctions were supposed to cut him off from the Western financial system.

They did not.

According to The Guardian's reporting on leaked MeritServus documents, the Cypriot firm continued to process transactions on Malofeyev's behalf for up to three years after his 2014 designation. Some of those transactions were denominated in U.S. dollars - meaning they necessarily touched the U.S. financial system, where Malofeyev was a sanctioned person. The money moved through layers of corporate structures, making it difficult to trace but not impossible. Not impossible if you were looking. Canaccord was not looking.

Malofeyev's activities escalated alongside Russia's military ambitions. He founded the Tsargrad TV channel, which became a platform for extreme Russian nationalism and the theories of Aleksandr Dugin - the philosopher whose "Foundations of Geopolitics" has been described as a roadmap for Russian imperial expansion. Dugin, whose daughter Darya was killed in a car bombing in August 2022 widely attributed to Ukrainian intelligence, used Tsargrad to advocate for the annexation of Ukraine and the destruction of the Western liberal order.

When Russia launched its full-scale invasion of Ukraine in February 2022, Malofeyev publicly celebrated. He described the war as a "holy war." In April 2022, the Treasury Department imposed additional sanctions on Malofeyev for "acting, or purporting to act, on behalf of, directly or indirectly, the Government of Russia." The same month, the Department of Justice indicted him for sanctions violations - the first criminal charges against a Russian oligarch since the invasion began.

Radio Free Europe/Radio Liberty reported in 2023 that Malofeyev was continuing to finance support for Moscow's war effort. He maintained his media empire, his charitable foundations, and his network of political influence - all while under multiple layers of sanctions from the United States, the European Union, and the United Kingdom.

And the financial infrastructure that enabled his operations - the Cypriot corporate services firms, the offshore trusts, the shell companies - was the same infrastructure that FinCEN found connected to Canaccord's customer base. Individual 2, who reportedly aided Malofeyev in hiding his assets, was a customer whose due diligence file at Canaccord contained none of the publicly available information linking him to sanctioned oligarchs. The connection was there. Canaccord simply chose not to see it.

07 // The Deloitte Shadow: When the Big Four Enable the Fixers

The Canaccord case does not exist in isolation. It is one node in a larger network of institutional complicity that includes some of the most respected names in global finance.

ICIJ's Cyprus Confidential investigation, published in November 2024 in an expanded follow-up, revealed that Deloitte - one of the Big Four accounting firms - maintained "close ties" with MeritServus while Ioannides served as director and MeritServus administered portions of Deloitte's business in Cyprus. "Thousands of pages of leaked emails" showed that the two firms "collaborated intimately to support Abramovich's vast offshore network."

Debra LaPrevotte, a financial crime expert and former FBI agent, told ICIJ: "These people are only able to hide their money because big firms like Deloitte are adding some air of legitimacy to these financial mechanisms." The observation cuts to the core of how sanctions evasion works at scale. It is not a solo operation. It requires a supporting cast of banks, brokers, accountants, lawyers, and corporate services providers - each contributing a layer of legitimacy that makes the illicit activity harder to detect and easier to deny.

Canaccord was one such supporting actor. Deloitte was another. MeritServus was the hub that connected them. The Cypriot firm provided the corporate structures. Deloitte provided the accounting and audit infrastructure. Canaccord provided access to the American capital markets. Each institution could plausibly claim it was performing legitimate services for legitimate clients. The sanctions evasion happened in the gaps between them - in the spaces where customer due diligence should have been but wasn't, where suspicious activity should have been reported but wasn't, where public information should have been reviewed but wasn't.

This is the essential architecture of modern financial crime. It does not require criminal conspiracies or secret meetings. It requires only that enough institutions fail to do their jobs at the same time, creating corridors through which illicit money can flow without triggering the alarms that are supposed to stop it. The Canaccord case is a textbook example of how that architecture functions - and how it can persist for years before anyone acts.

Deloitte has not been charged in connection with the Canaccord enforcement action. The ICIJ investigation documented the firm's relationship with MeritServus but Deloitte has not, as of this writing, faced regulatory penalties related to the Cyprus Confidential findings. The gap between what has been documented and what has been enforced remains wide.

08 // The Whistleblower Angle: Who Talked?

One detail in FinCEN's press release about the Canaccord penalty has received almost no attention: the final section, which highlights FinCEN's whistleblower incentive program.

The program, established under the Anti-Money Laundering Act of 2020, offers financial awards to individuals who provide information leading to successful enforcement actions resulting in penalties exceeding $1 million. The Canaccord penalty is $80 million. Whistleblower awards under similar programs at the SEC have ranged from 10% to 30% of collected sanctions.

FinCEN's deliberate inclusion of the whistleblower section in the Canaccord press release serves two purposes. First, it signals that tips from insiders may have contributed to the investigation - though FinCEN has not confirmed this. Second, it serves as a recruitment tool aimed at employees at other broker-dealers who may be witnessing similar compliance failures.

The timing matters. The FinCEN Consent Order documents conduct spanning 2018 to 2024. The agency's investigation would have been underway for some portion of that period, during which Canaccord's compliance remediation finally began. The implication is that it was the threat of enforcement - not internal governance - that ultimately prompted the firm to address its failures.

If a whistleblower did contribute to the investigation, the potential award from the Canaccord case alone could range into the tens of millions of dollars. That creates a powerful incentive structure - one that FinCEN is clearly hoping will produce more tips from inside the financial industry.

For employees at mid-market broker-dealers processing OTC trades, the message is clear: if your firm's AML program looks anything like Canaccord's did, FinCEN wants to hear from you. And they're willing to pay.

09 // Timeline: Six Years of Willful Blindness

The timeline reveals a six-year window during which every warning was ignored and every opportunity to prevent harm was missed. Between 2018 and 2024, Canaccord processed thousands of suspicious transactions without reporting them. During that same period, the clients it serviced - or their associates - were financing separatist movements, evading international sanctions, and defrauding American investors.

The gap between what was known and what was done is the defining feature of this case. The information about Individual 2's ties to sanctioned oligarchs was publicly available from at least 2012. The information about Malofeyev's sanctions was publicly available from 2014. The ICIJ investigation was published in 2023. At no point did Canaccord update its customer files to reflect any of this.

This was not a failure of information. It was a failure of will.

10 // What Comes Next: The Unfinished Investigation

The $80 million penalty closes one chapter and opens several others.

First, there is the SAR Lookback Undertaking. Canaccord has been required to go back through its historical records and file the Suspicious Activity Reports it should have filed during the violation period. FinCEN suspended $5 million of the penalty pending completion of this review. The lookback will almost certainly produce new SARs covering transactions that law enforcement has not previously seen. Some of those transactions may trigger new investigations into the clients and counterparties involved.

Second, there is the question of criminal liability. The FinCEN action is a civil penalty. Canaccord admitted to "willful" violations of the BSA, which is a higher standard than negligence but lower than criminal intent. However, the same conduct that supports a civil penalty for willful violations can, in some circumstances, support criminal charges under federal anti-money laundering statutes. The coordinated nature of the enforcement action - FinCEN, SEC, and FINRA acting simultaneously - suggests that the Department of Justice was at least aware of the case. Whether DOJ pursues criminal charges against individuals at Canaccord remains to be seen.

Third, there is the broader question of the OTC market. Canaccord was one of the largest OTC market makers in the United States. If its AML program was this deficient, what does that say about other firms operating in the same space? The FinCEN press release explicitly frames the penalty as "a wake-up call to broker-dealers" - language that suggests the agency believes the problem extends beyond Canaccord. The legal compliance community has taken notice. AMW Law PLLC's analysis described the action as demonstrating that "the BSA, FINRA Rule 3310, and Exchange Act Rule 17a-8 collectively require more than a paper program. They require a functioning AML compliance program built around the firm's actual risks."

Fourth, there is the Cyprus dimension. Ioannides and MeritServus have been sanctioned by the UK but not, as of this writing, by the United States. The FinCEN Consent Order's references to Individual 2 could provide the basis for U.S. sanctions designations. OFAC has been expanding its targeting of sanctions evasion facilitators, and the documented connections between MeritServus, Malofeyev, and Abramovich fit squarely within that enforcement priority.

Finally, there is the Deloitte question. The Big Four firm's documented collaboration with MeritServus in supporting Abramovich's offshore network has not resulted in regulatory action. The gap between what ICIJ documented and what regulators have done remains conspicuous. Whether the Canaccord case provides momentum for enforcement action against other institutions in the sanctions evasion chain is an open question - but one that investigators and compliance professionals are now asking publicly.

The $80 million fine against Canaccord Genuity is the largest BSA penalty ever imposed on a broker-dealer. It should not be the last. The networks it exposed - from Limassol to Moscow to Wall Street - remain largely intact. The corporate structures still exist. The intermediaries are still operating. The money is still moving.

The question is whether the regulators who spent six years watching Canaccord ignore their warnings have the appetite to follow the money further - through Cyprus, through London, through every offshore trust and shell company that connects the American capital markets to the architects of Russia's war.

The footnote on page 27 of the Consent Order named Malofeyev. The rest of the story is still being written. The money trail does not end at Canaccord's door. It runs through it.