NCA Traces $5.2m Forfeiture Through China, Front Companies and Crypto Conversion

A UK agricultural trading company has agreed to forfeit more than $5.2 million after investigators traced funds through a cross-border network involving suspected front companies, Chinese bank accounts, UK electronic money institutions and cryptocurrency.

The case shows how quickly an apparently ordinary trading business can become the centre of a sanctions and money laundering investigation once the source and movement of its funds are examined closely.

ENEX Premium Trading Limited, registered in St Kitts and Nevis and owned by Azerbaijani national Nadir Valiyev, transferred significant sums into newly opened UK accounts between July and September 2024. When the accounts were opened, Valiyev told the UK institutions that the money came from his personal wealth and retained earnings generated through earlier trading structures, including UAE registered Burston Trading FZE.

ENEX describes itself as an agricultural trading and logistics company dealing in grains, oilseeds and oilseed meals.

The National Crime Agency became interested after reports in 2024 alleged that companies linked to Valiyev had been involved in the shipment of stolen Ukrainian grain. In November 2024, the NCA obtained an Account Freezing Order over funds held in an ENEX account while investigators examined where the money had come from.

What investigators subsequently found was considerably more complicated.

The NCA traced the UK funds back to ENEX bank accounts in China. Those accounts had received tens of millions of pounds from companies the agency suspected were front companies. Some of the companies that paid into the Chinese accounts were later designated by the United States for allegedly facilitating illicit Iranian oil sales and transferring revenue to Iran’s Quds Force.

Investigators also identified a further layer in the movement of the money. The suspected network was using UK electronic money institutions to move funds before converting them into cryptocurrency.

That detail is particularly relevant for financial institutions.

The case demonstrates why source of funds checks can become inadequate when they rely too heavily on what a customer says about the immediate origin of money. Valiyev described the funds as personal wealth and retained trading earnings. Investigators instead followed the transaction trail backwards, through corporate structures and overseas accounts, to identify the entities that had originally supplied the money.

The NCA’s civil recovery powers then provided a route to recover the funds without requiring a criminal conviction.

Valiyev has denied criminal activity. The settlement agreement does not amount to an admission of unlawful conduct by either Valiyev or ENEX, nor does it constitute evidence of criminal conduct.

For compliance teams, the case is a useful illustration of several risk indicators arriving together.

A recently opened UK account receiving substantial funds from an offshore trading company should prompt questions about the customer’s expected activity, commercial rationale and underlying counterparties. Where the money is connected to multiple jurisdictions, particularly jurisdictions associated with complex corporate structures, the institution needs to establish the economic purpose of the payments rather than simply record the customer’s explanation.

The sanctions element makes the case more serious.

A payment does not become safe simply because the immediate counterparty is not itself sanctioned. If the money can be traced to companies designated for facilitating prohibited Iranian oil transactions, institutions need controls capable of looking beyond the first name appearing on the payment instruction.

The crypto element adds another complication.

The NCA says the suspected network used UK electronic money institutions to facilitate transactions before funds were converted into cryptocurrency. That does not make cryptocurrency itself evidence of criminality. It does, however, demonstrate why financial crime investigators and compliance teams increasingly examine the relationship between conventional banking, electronic money institutions and digital assets rather than treating them as separate systems.

The case also puts renewed attention on professional and corporate structures used in international trade.

Agricultural commodities are particularly exposed to sanctions and trade based money laundering risks because legitimate transactions can involve complex supply chains, multiple intermediaries, commodity traders, shipping companies, insurers, banks and jurisdictions.

The NCA’s investigation ultimately followed the money rather than relying on the appearance of the business.

That is the important lesson.

The agency’s Combatting Kleptocracy Cell said its officers had tracked the source of the funds and uncovered evidence that payments into ENEX accounts had originated from US sanctioned companies. The NCA said it would continue using its powers to identify, pursue and recover cash connected to crime.

For banks, EMIs and other regulated firms, the case reinforces a basic but increasingly important compliance principle: a credible business model does not by itself establish a credible source of funds.

A grain trader can be a legitimate grain trader. A UAE company can be a legitimate UAE company. A Chinese bank account can be a legitimate bank account. A cryptocurrency transaction can be legitimate.

The risk emerges in the connections between them.

That is where modern financial crime investigations increasingly begin.