FinCEN, Treasury's financial-crimes bureau, issued Alert FIN-2026-Alert006 on Tuesday 8 September on Iranian commercial aviation procurement networks, assigning the term FIN-2026-IRANAIR for banks to attach to their suspicious activity reports1. On Thursday 10 September it opened an Iran-specific whistleblower channel, with awards available where a tip leads to an enforcement action carrying penalties above $1 million2.
A suspicious activity report is the filing a bank must make when a transaction carries the marks of sanctions evasion. Banks generate them in volume, and most sit unread. A reporting term changes that: it is a permanent, searchable field in a federal database, so a prosecutor building a case three years from now can retrieve every filing an analyst in Frankfurt or Dubai tagged this autumn without knowing the analyst existed.
The bounty supplies the other half. Procurement networks are built from freight forwarders, parts brokers and shell intermediaries, and the person who can identify one is usually an employee inside it. Sanctions enforcement rarely reaches those people through subpoenas, because the transactions are structured to look ordinary from outside. A financial incentive tied to a penalty threshold reaches them through their own interest instead.
Neither instrument prohibits anything on its own, which is why they attract no headlines. Treasury's late-August widening of the Iran programme changed what is allowed; these two change what can later be proved. Their effect is measured in what becomes provable later, and that horizon runs well past any ceasefire.
