SanctionsLookup

Data last synced:

UniCredit Bank Austria OFAC Settlement: $20.3M (2019)

Last updated:

UniCredit Bank Austria AG, a financial institution headquartered in Austria and a subsidiary of the UniCredit Group, settled its potential civil liability for 127 apparent violations of the Iranian Transactions and Sanctions Regulations, the Sudanese Sanctions Regulations, the Burmese Sanctions Regulations, the Syrian Sanctions Regulations, and the Cuban Assets Control Regulations, agreeing to a settlement amount of $20,326,340.

Penalty Amount

$20,326,340.00

Enforcement Date

April 15, 2019

Rank in Top Penalties

#26

Case Details

Type:
Entity
Name:
UniCredit Bank Austria AG
Country:
🇦🇹 Austria
Industry:
Banking
Address:
Vienna, Austria
Penalty amount:
$20,326,340.00
Base civil monetary penalty:
$39,622,495.00
Egregious case:
Partial
Apparent violations:
127
Voluntary self disclosure:
No
Case:
Settlement
Violation period:
To 2012
Program:
Iranian Transactions and Sanctions Regulations, 31 C.F.R. Part 560 (ITSR)Sudanese Sanctions Regulations, 31 C.F.R. Part 538 (SSR)Burmese Sanctions Regulations, 31 C.F.R. Part 537 (BSR)Syrian Sanctions Regulations, 31 C.F.R. Part 542 (SySR)Cuban Assets Control Regulations, 31 C.F.R. Part 515 (CACR)
Enforcement date:
April 15, 2019

Nature of the Apparent Violations

For a number of years, up to and including 2012, Bank Austria processed transactions to or through U.S. financial institutions that involved countries, entities, and/or individuals subject to OFAC sanctions programs. Bank Austria appears to have utilized nontransparent payment practices to process these transactions in a manner that did not reveal the involvement of sanctioned parties or countries to intermediary financial institutions located in the United States, in contravention of UniCredit Group policies.

The specific practices included the use of SWIFT MT202 cover payment messages that did not reveal the involvement of sanctioned parties or jurisdictions, and executing payments related to trade finance agreements that did not identify the involvement of sanctioned parties or countries to or through U.S. financial institutions. Bank Austria also actively manipulated and resubmitted clean versions of six payments that U.S. intermediary financial institutions had rejected due to OFAC concerns.

How OFAC Determined the Penalty

OFAC determined that Bank Austria did not voluntarily self-disclose the Apparent Violations. Of the 127 apparent violations, 60 constitute a non-egregious case and the remaining 67 constitute an egregious case. The total base penalty amount for the Apparent Violations was $39,622,495. The settlement amount of $20,326,340 reflects OFAC's consideration of the facts and circumstances pursuant to the General Factors Affecting Administrative Action under OFAC's Economic Sanctions Enforcement Guidelines, 31 C.F.R. Part 501, app. A.

Bank Austria's obligation to pay OFAC the settlement amount was deemed satisfied up to an equal amount by payments in satisfaction of penalties assessed by U.S. federal officials arising out of the same patterns of conduct during the same time periods.

Aggravating Factors

  • Bank Austria appears to have demonstrated a reckless disregard for U.S. sanctions requirements by engaging in a pattern of conduct that lasted many years and which involved the failure of Bank Austria to reveal the sanctions nexus of certain payments from intermediary U.S. financial institutions;
  • By utilizing non-transparent payment practices such as the intentional use of cover payments for OFAC-prohibited transactions and the manual manipulation and resubmission of six payments rejected by U.S. financial institutions, Bank Austria did not reveal the sanctions nexus of the payments to other parties involved in processing payments to or through the United States;
  • Bank Austria ignored several warning signs that its conduct constituted or likely constituted an apparent violation of U.S. economic sanctions laws, including by apparently ignoring or failing to adhere to UniCredit Group sanctions policies that explicitly prohibited USD transaction with OFAC-sanctioned parties;
  • Bank Austria demonstrated an awareness of the conduct giving rise to the Apparent Violations by petitioning the UniCredit Group authorities for certain non-USD-related exemptions from initial group-wide compliance policies that prohibited the types of transactions at issue in the investigation, and the bank demonstrated an awareness of six of the transactions giving rise to the apparent violations by actively manipulating and resubmitting clean versions of certain payments after U.S. intermediary financial institutions had rejected them due to OFAC concerns;
  • The bank's conduct conferred significant economic benefit to persons subject to U.S. sanctions and undermined the integrity and policy objectives of multiple U.S. sanctions programs; and
  • Bank Austria is a large and commercially sophisticated financial institution.

Mitigating Factors

  • Bank Austria has not received a penalty notice or Finding of Violation from OFAC in the five years preceding the date of the earliest transaction giving rise to the Apparent Violations;
  • Bank Austria cooperated with OFAC's investigation of the Apparent Violations by conducting an internal investigation, responding to multiple requests for information in a timely manner, and executing a statute of limitations tolling agreement with multiple extensions; and
  • Bank Austria took remedial action in response to the Apparent Violations.

This settlement with OFAC was part of a global settlement among various UniCredit Group entities, OFAC, the U.S. Department of Justice, the New York County District Attorney's Office, the Federal Reserve Board of Governors, and the Department of Financial Services of the State of New York. Bank Austria's obligation to pay OFAC the settlement amount was deemed satisfied up to an equal amount by payments in satisfaction of penalties assessed by U.S. federal officials arising out of the same patterns of conduct during the same time periods.

Official Source Documents

This page summarizes an OFAC enforcement case based on the document archived below. SanctionsLookup assumes no liability for errors, omissions, or inaccuracies in the original documents, this summary, or any changes made to the source documents at any time.

Provided for informational purposes only and does not constitute legal or compliance advice. Always consult the source document directly rather than relying on this summary.

Archived on June 13, 2026

SHA-256: 7a5bf9bbff6846687f2e45e222b7058059c8b09a898bd98ee0d175d2b25318b3

More OFAC Cases