Mr. Sanctions

Category: Iraq

  • March 17, 2026: TradeStation Securities, Inc. settles with OFAC for $1,110,661

    This report summarizes the enforcement release regarding TradeStation Securities, Inc., a Florida-headquartered brokerage firm that operates online securities trading platforms.

    What Happened

    Between June 21, 2021, and June 15, 2022, TradeStation provided investment services—specifically allowing 481 securities trades—to customers who were physically located in Iran, Syria, and the Crimea region of Ukraine.

    The problem originated from a failure in the company’s “geo-blocking” systems, which are designed to identify where a customer is located and block them if they are in a sanctioned country. While TradeStation had two layers of this technology, the second layer contained a critical technical blind spot: instead of checking the customer’s location, the system mistakenly checked the location of TradeStation’s own U.S.-based servers. This error meant that customers using the company’s mobile app were not restricted from trading for nearly a year, even though those attempting to use the web platform were successfully blocked.

    The issue persisted because TradeStation’s compliance team failed to properly test and validate that these tools were working as intended. Specifically, in November 2021, the company stopped using an automated tool that was meant to test its servers for exactly these types of vulnerabilities.

    The Penalty

    TradeStation agreed to pay $1,110,661 to settle its potential civil liability for the 481 apparent violations.

    • Violation Type and Status: All 481 violations were determined by OFAC to be non-egregious and were voluntarily self-disclosed by TradeStation.
    • Base Penalty Breakdown: The total value of the illegal trades was $4,442,645. Under OFAC’s guidelines for self-disclosed, non-egregious cases, the base penalty is calculated as one-half of the transaction value.
      • Base Penalty Total: $2,221,322.
    • Final Settlement: The final penalty of $1,110,661 reflects a 50% reduction from the base penalty due to the company’s cooperation and remedial efforts.

    Aggravating Factors

    • Failure to Exercise Minimal Caution
      • General Factor involved: Degree of Care.
      • Applicability: TradeStation allowed significant compliance weaknesses to remain unaddressed for a full year. Crucially, the company had received a “Cautionary Letter” from OFAC earlier in 2021 regarding similar geo-blocking failures, meaning they were already aware of the risks but failed to ensure their systems were properly tested.
    • Discontinuing Necessary Testing Tools
      • General Factor involved: Management of Compliance Program.
      • Applicability: In November 2021, TradeStation intentionally stopped using an automated testing tool for its on-premises servers, which directly contributed to the failure to detect the system error that allowed sanctioned users to trade.

    Mitigating Factors

    • Prompt and Comprehensive Correction
      • General Factor involved: Remedial Response.
      • Applicability: After discovering the error, TradeStation quickly implemented new technical controls and solutions to ensure that future failures in its geo-blocking or alert systems would be identified immediately.
    • Limited Scope and Low Financial Benefit
      • General Factor involved: Nature and Complexity of Operations / Economic Benefit.
      • Applicability: The illegal trades represented a very small percentage of TradeStation’s total transaction volume during that year, and the company earned less than $2,000 in total revenue from these specific trades.
    • Substantial Cooperation
      • General Factor involved: Cooperation with OFAC.
      • Applicability: The company filed a detailed self-disclosure report, was highly cooperative throughout the investigation, and agreed to “toll” the statute of limitations (giving OFAC more time to complete the case).
    • Clean Five-Year History
      • General Factor involved: Prior Record.
      • Applicability: TradeStation had not received a formal Penalty Notice or Finding of Violation from OFAC in the five years leading up to these events.

    To find more details on this case, please see the full Enforcement Release provided by OFAC.

    What are the Takeaways?

    • Test and Audit Regularly: This case shows that even if you have “two tiers” of defense, they only work if they are correctly implemented. Companies must regularly test their compliance tools to ensure they are actually blocking what they are supposed to block.
    • Don’t Ignore Warning Signs: If a regulator sends a cautionary letter or points out a flaw, treat it as a high-priority alert. TradeStation’s failure to act on a previous warning was a major factor in the size of the penalty.
    • Verify After Every Update: Technical changes—such as migrating to new servers or updating software—can accidentally break your compliance filters. Testing should be a standard part of any system maintenance.
    • Use Diverse Indicators: Effective geo-blocking should look at more than just a single IP address; it should include tools like VPN detection and location-based alerts to prevent users from bypassing restrictions.

    and the full enforcement release:

    20260317_tradestationDownload

    —

    , , , , , , ,

  • Follow the leader: OFSI also removes Munir Al Qubaysi from Iraq sanctions

    Based on the Office of Financial Sanctions Implementation (OFSI) Financial Sanctions Notice for Iraq, dated 10/12/2025, there is one section of Delistings.

    Individual

    • AL QUBAYSI, Munir
    • Group ID: 8278
    • Name (non-Latin script): منير القبيسي
    • DOB: –/–/1966.
    • POB: Heet, Iraq
    • Good quality a.k.a: (1) AL-KUBAISI, Muneer (2) AL-KUBAYSI, Munir (3) AWAD, Munir (4) AWAD, Munir, A, Mamduh.
    • Nationality: Iraq
    • Address: Syria.
    • Other Information: (UK Sanctions List Ref): IRQ0135. (UN Ref): IQi.074.
    • Listed on: 05/05/2004
    • UK Sanctions List Date Designated: 26/04/2004
    • Last Updated: 10/12/2025

    Supplemental Information:

    • Munir Al Qubaysi was removed from the UN Security Council’s 1518 Sanctions List (Iraq) on December 9, 2025, which precipitated his removal from the UK list on December 10, 2025.
    • He was originally listed by the UN on April 26, 2004, under the reference number IQi.074.
    • The UN listing linked him to the entity Al-Huda State Company for Religious Tourism (Entity reference IQe.204).
    • Al-Huda State Company for Religious Tourism was identified as a commercial front for the Iraqi Intelligence Service under the former regime, allegedly used to skim funds from tourism packages for Iranian pilgrims.
    • He has been designated under various aliases including Munir Awad and Munir Mamduh Awad.
    • He remains listed on the US OFAC Specially Designated Nationals (SDN) list under the program IRAQ2 as of the latest available search data, with the same identifying details (POB: Heet, Iraq; DOB: 1966).

    —

    ,

  • UN 1518 Sanctions Committee removes 1 person from Iraq sanctions

    Note: I do not have a prompt yet to reformat UN designations. Given the inconsistency of the format (note how the “a.k.a.” after “Low quality” isn’t bolded like the one after “Good quality”), I may not.

    SC/16240

    9 December 2025

    Security Council 1518 Sanctions Committee Removes One Entry from Its Sanctions List

    On 9 December 2025, the Security Council Committee established pursuant to resolution 1518 (2003) removed the following entry from its Sanctions List of individuals and entities.

    A. Individuals

    IQi.074 Name: 1: MUNIR 2: AL QUBAYSI 3: na 4: na
    Name (original script): منير القبيسي
    Title: na Designation: na DOB: 1966 POB: Heet, Iraq Good quality a.k.a.: a) Munir Al-Kubaysi b)Muneer Al-Kubaisi c) Munir Awad d) Munir A Mamduh. Awad Low quality a.k.a.: na Nationality: Iraq Passport no: na National identification no: na Address: Syrian Arab Republic Listed on: 26 Apr. 2004 Other information:  No link available

    Press releases concerning changes to the Committee’s Sanctions List may be found in the “Press Releases” section on the Committee’s website at the following URL:  https://main.un.org/securitycouncil/en/sanctions/1518/press-releases.

    The updated version of the Committee’s Sanctions List, available in HTML, PDF and XML format, may be found at the following URL:  https://main.un.org/securitycouncil/en/sanctions/1518/materials.

    The United Nations Security Council Consolidated List is also updated following all changes made to the Committee’s Sanctions List and is accessible at the following URL:  https://main.un.org/securitycouncil/en/content/un-sc-consolidated-list.

    —

    ,