OFSI’s July 2025 Cryptoassets Threat Assessment warns UK crypto firms that sanctions risk has shifted from fringe to frontline. The agency maintains suspected breach reporting is inconsistent and has been likely under-reported since 2022, with most issues arising inadvertently via delayed attribution, indirect exposure to designated persons (DPs) and weak due diligence. Three dominant jurisdictions pose threats: Russia, North Korea and Iran. OFSI urges a risk-based program using continuous blockchain analytics to track newly spawned addresses post-designation, heightened scrutiny of privacy coins, chain-hopping and non-KYC services and prompt reporting of suspected sanctions evasion.
