Link to At a Glance At a Glance
- FinCEN issued Alert FIN-2026-Alert008 (Oct. 15, 2026) warning banks that Iran exploits religious charities, including khums donations, to fund the regime and IRGC; the same day, OFAC designated an Iraqi bank, two Iranian offshore banks, and shadow exchange houses.
- The alert flags four red flags: charities with no real services or regime-linked messaging, unexplained large inflows followed by pass-through wires, structuring to evade CTR rules, and recipients with no clear charity relationship cashing out transfers.
- It builds on prior cases, including a 2024 guilty plea involving pilgrims hand-carrying khums cash into Iran, and fits Treasury’s “Operation Economic Outcast” campaign against Iran’s financial network.
- FinCEN stresses legitimate charities should retain banking access; this isn’t a call for blanket de-risking.
- Action item: banks should recalibrate NPO risk profiles, tune transaction monitoring to the four red flags, use the “FIN-2026-IRANCHARITYABUSE” SAR key term, update OFAC screening lists, and train staff without profiling entire faith communities.
Link to Introduction Introduction
On October 15, 2026, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued an alert to help financial institutions identify and report potential Iranian abuse of religious charity networks. That includes the diversion of religious tithes known as khums. The alert is designated FIN-2026-Alert008. It is the latest FinCEN product issued under Operation Economic Outcast, Treasury’s campaign against Iran and its financial enablers, including the Islamic Revolutionary Guard Corps (IRGC). On the same day, the Office of Foreign Assets Control (OFAC) designated an Iraqi bank that provides U.S. dollar access for Iran, two Iranian “offshore” banks, and several shadow banking exchange houses.
In earlier posts on the Banque Misr UAE Section 311 action and FinCEN’s Iranian aviation alert, we highlighted how the administration relies on banks and other financial services firms to advance its foreign policy and national security objectives against Iran. The charity alert shows how far that reliance now extends. Banks must look beyond correspondent banking and trade finance to nonprofit accounts that many community and regional banks serve every day.
Link to The Threat: How Iran Exploits Religious Charities The Threat: How Iran Exploits Religious Charities
FinCEN says the Iranian regime has a long history of abusing religious and charitable institutions to enrich its elites, fund repression at home, and support violence abroad. The alert points to two OFAC actions from 2020. The first was the designation of the Islamic Revolution Mostazafan Foundation (Bonyad Mostazafan). Treasury described it as ostensibly charitable, but said its holdings were expropriated from the Iranian people and used to enrich the supreme leader’s office and reward his allies. Bonyads are opaque, quasi-official organizations that report directly to the supreme leader. They enjoy tax exemptions without public budget approval, and Bonyad Mostazafan alone was estimated to account for more than 1% of Iran’s GDP. The second was the designation of the Reconstruction Organization of the Holy Shrines in Iraq (ROHSI). This nominally religious institution was, in fact, controlled by the IRGC-Qods Force. It moved millions of dollars to an IRGC-controlled company in Iraq that supported Iranian intelligence activities and arms shipments to Iranian-backed militias.
The newer typology centers on khums, the practice of donating one-fifth of one’s surplus annual income to religious institutions. FinCEN acknowledges that khums plays an important role in Shi’a communities. However, some collecting organizations act on behalf of regime-linked ayatollahs or the supreme leader himself, and they may use hawalas and cash couriers to move the funds to Iran. In 2024, two defendants pleaded guilty to collecting tens of thousands of dollars, including khums, for transfer to Iran. They recruited associates to carry the cash out of the country in amounts under $10,000. One transfer used a group of 25 pilgrims traveling to Iraq, who hand-carried the dollars into Iran.
Link to Red Flag Indicators Red Flag Indicators
FinCEN identifies four red flags, which supplement the charity-related indicators in its May 2024 Iran-backed terrorist financing advisory and its October 2023 Hamas alert. First, a charity or nonprofit organization (NPO) solicits donations but does not appear to provide any charitable services, or it openly supports the regime or its proxies in fundraising appeals or on social media. Second, a charity receives large donations from an unknown source over a short period and then sends significant wires or checks to other charities. Third, a charity or its personnel appear to be evading Currency Transaction Report (CTR) or recordkeeping requirements, for example, by structuring cash transactions below $10,000 or canceling a transaction after being told a CTR will be filed. Fourth, a customer receives transfers from a charity with which it has no clear relationship and then withdraws the funds in cash or sends them on.
As in the aviation alert, no single red flag decides the question. Institutions should weigh the totality of the facts, including the customer’s history and whether several indicators appear together. FinCEN also cites the October 2025 interagency SAR FAQs. Under those FAQs, transactions at or near the CTR threshold do not, on their own, require a SAR unless the institution knows, suspects, or has reason to suspect they are designed to evade reporting.
Link to How This Fits the Administration’s Broader Agenda How This Fits the Administration’s Broader Agenda
Treasury Secretary Scott Bessent launched Operation Economic Outcast on August 24, 2026, calling it “Economic D-Day.” He described it as a whole-of-government campaign to sever every economic lifeline that sustains the regime and the IRGC. On launch day, OFAC issued five new sectoral determinations under E.O. 13902 and sanctioned nearly 60 targets. It also suspended several general licenses that had authorized certain remittance payments to Iran. That last change matters here. With fewer licensed remittance channels open, informal channels that move khums deserve closer scrutiny.
The campaign has since moved quickly. It has included Section 311 actions against Banque Misr UAE and the A7 Network, a licensing policy that presumes denial in most cases, a new OFAC enforcement action, and sectoral actions against Iran’s automotive and rail industries. The Justice Department has been involved throughout. Its August 2026 indictment of 17 Iranian cyber actors was coordinated with OFAC designations, and the khums prosecution FinCEN highlights came out of the DOJ. Treasury has also reminded the public that whistleblowers who report sanctions violations may be eligible for awards. For banks, the message is consistent: FinCEN, OFAC, and DOJ are working from the same map.
Link to What Banks Need to Know What Banks Need to Know
FinCEN is not asking banks to drop charities. It stresses that legitimate charities should keep access to financial services. It also directs banks back to the 2020 Joint Fact Sheet on BSA due diligence for charities and NPOs. That guidance makes clear that the government does not view the charitable sector as a whole as presenting uniform or unacceptably high risk. It also confirms that the CDD rule does not require special due diligence steps for charities.
I recommend the following steps:
- Recalibrate customer risk profiles. The Joint Fact Sheet notes that charities operating abroad or tied to conflict regions can present a higher risk. For NPO customers, collect information on mission, geography, governance, funding sources, beneficiaries, intermediaries, and affiliations. Ask specifically whether a customer collects khums and how it disburses those funds.
- Tune transaction monitoring. Build scenarios around the alert’s four indicators, especially unexplained inflows followed by pass-through transfers to other NPOs, structured cash activity, and onward remittances by recipients with no clear tie to the charity.
- Implement the SAR instructions now. When appropriate, include the key term “FIN-2026-IRANCHARITYABUSE” in SAR field 2 and in the narrative. Where you identify potential sanctions violations, also notify OFAC through its Disclosure Portal.
- Screen and update procedures. Add the October 15 designees to your screening lists. Note that General License FF authorizes wind-down transactions involving the Iraqi bank only through October 30. Then update your NPO policies to cross-reference this alert and earlier FinCEN Iran products.
- Train without profiling. Frontline staff should recognize the typologies. However, de-risking an entire faith community would conflict with FinCEN’s expectation of a risk-based approach and its support for legitimate charitable access.
Link to The Bottom Line The Bottom Line
FinCEN’s charity alert takes Operation Economic Outcast from shadow banks and tanker fleets to local nonprofit accounts. Banks need a careful, documented, risk-based response to Iran’s abuse of religious giving. That means scrutinizing real indicators of diversion while continuing to serve the legitimate charities that FinCEN and the banking agencies have repeatedly said should keep access to the financial system. Given how quickly this administration is moving, institutions should expect more advisories and alerts and should not wait for the next one to act.