SanctionsLookup

Data last synced:

UniCredit S.p.A. OFAC Settlement: $37.3M (2019)

Last updated:

UniCredit S.p.A., a financial institution headquartered in Italy and the parent company of the UniCredit Group, settled its potential civil liability for 612 apparent violations of the Cuban Assets Control Regulations, the Iranian Transactions and Sanctions Regulations, the Burmese Sanctions Regulations, the Sudanese Sanctions Regulations, and the Syrian Sanctions Regulations. The settlement, which was part of a global settlement among various UniCredit Group entities, OFAC, the U.S. Department of Justice, the New York County District Attorney's Office, the Federal Reserve Board of Governors, and the Department of Financial Services of the State of New York, totaled $37,316,322.

Penalty Amount

$37,316,322.00

Enforcement Date

April 15, 2019

Rank in Top Penalties

#22

Case Details

Type:
Entity
Name:
UniCredit S.p.A.
Country:
🇮🇹 Italy
Industry:
Banking
Address:
Milan, Italy
Penalty amount:
$37,316,322.00
Base civil monetary penalty:
$72,741,368.00
Egregious case:
Yes
Apparent violations:
612
Voluntary self disclosure:
No
Case:
Settlement
Violation period:
To 2012
Program:
Cuban Assets Control Regulations, 31 C.F.R. Part 515 (CACR)Iranian Transactions and Sanctions Regulations, 31 C.F.R. Part 560 (ITSR)Burmese Sanctions Regulations, 31 C.F.R. Part 537 (BSR)Sudanese Sanctions Regulations, 31 C.F.R. Part 538 (SSR)Syrian Sanctions Regulations, 31 C.F.R. Part 542 (SySR)
Enforcement date:
April 15, 2019

Nature of the Apparent Violations

For a number of years, up to and including 2012, UniCredit S.p.A. processed hundreds of transactions to or through U.S. financial institutions that involved countries, entities, and/or individuals subject to OFAC sanctions. The bank utilized nontransparent payment practices to process these transactions in a manner that did not disclose the involvement of sanctioned parties or countries to intermediary financial institutions in the United States, in apparent violation of various OFAC sanctions programs and in contravention of UniCredit Group policies.

The specific payment practices included: the use of SWIFT Message Type (MT) 202 cover payment messages that did not reference the involvement of sanctioned parties or jurisdictions; executing payments pursuant to trade finance agreements that did not identify the involvement of sanctioned parties or countries subject to the sanctions programs administered by OFAC; and executing commercial transactions with knowledge of interests of countries or entities subject to OFAC sanctions by sending USD payment messages through U.S. financial institutions omitting any reference to such interests. In certain instances, the bank also manipulated and resubmitted clean versions of payments after U.S. intermediary financial institutions had rejected them due to OFAC concerns.

How OFAC Determined the Penalty

OFAC determined that UniCredit S.p.A. did not voluntarily self-disclose the Apparent Violations and that the Apparent Violations constitute an egregious case. The total base penalty amount for the Apparent Violations was $72,741,368. The settlement amount of $37,316,322 reflects OFAC's consideration of aggravating and mitigating factors pursuant to the General Factors Affecting Administrative Action under OFAC's Economic Sanctions Enforcement Guidelines, 31 C.F.R. Part 501, app. A.

The bank's obligation to pay OFAC the settlement amount was deemed satisfied up to an equal amount by payments in satisfaction of penalties assessed by U.S. federal officials arising out of the same patterns of conduct during the same time periods.

Aggravating Factors

  • UniCredit S.p.A. appears to have demonstrated a reckless disregard for U.S. sanctions requirements by engaging in a pattern of conduct that lasted many years and which involved the failure to disclose OFAC-prohibited conduct from intermediary U.S. financial institutions
  • By utilizing non-transparent payment practices such as the intentional use of cover payments for OFAC-prohibited transactions and the manual manipulation and resubmission of payments rejected by U.S. financial institutions, UniCredit S.p.A. obfuscated its conduct in an apparent effort to mislead other parties involved in processing payments to or through the United States
  • UniCredit S.p.A. ignored several warning signs that its conduct constituted or likely constituted an apparent violation of U.S. economic sanctions laws, including by ignoring or failing to adhere to UniCredit Group sanctions policies that explicitly prohibited USD transactions with non-sanctioned parties resident in OFAC-sanctioned countries
  • The bank demonstrated an awareness of a small number of the transactions giving rise to the apparent violations by manipulating and resubmitting clean versions of certain payments after U.S. intermediary financial institutions had rejected them due to OFAC concerns
  • The bank's conduct conferred significant economic benefit to persons subject to U.S. sanctions and undermined the integrity and policy objectives of multiple U.S. sanctions programs
  • UniCredit S.p.A. is a large and commercially sophisticated financial institution

Mitigating Factors

  • UniCredit S.p.A. has not received a penalty notice or Finding of Violation from OFAC in the five years preceding the date of the earliest transaction giving rise to the Apparent Violations
  • UniCredit S.p.A. cooperated with OFAC's investigation of the Apparent Violations by conducting an internal investigation, responding to multiple requests for information in a timely manner, and executing a statute of limitations tolling agreement with multiple extensions
  • UniCredit S.p.A. took remedial action in response to the Apparent Violations described above

Official Source Documents

This page summarizes an OFAC enforcement case based on the document archived below. SanctionsLookup assumes no liability for errors, omissions, or inaccuracies in the original documents, this summary, or any changes made to the source documents at any time.

Provided for informational purposes only and does not constitute legal or compliance advice. Always consult the source document directly rather than relying on this summary.

Archived on June 13, 2026

SHA-256: 7a5bf9bbff6846687f2e45e222b7058059c8b09a898bd98ee0d175d2b25318b3

More OFAC Cases