FinCEN Files linked OneCoin founder to BNY Mellon reports

The International Consortium of Investigative Journalists and BuzzFeed News released the FinCEN Files investigation on September 20, 2020, opening an unusual window into how banks reported—and continued processing—transactions they considered suspicious. Among the people identified in ICIJ’s public data was OneCoin founder Ruja Ignatova, linked to suspicious-activity reports filed by Bank of New York Mellon.

The cryptocurrency connection mattered because OneCoin had been marketed as a digital currency while U.S. prosecutors alleged that it lacked a genuine public, verifiable blockchain and operated as a multibillion-dollar pyramid scheme. The leaked banking records placed that alleged crypto fraud inside a wider institutional problem: money could pass through established financial intermediaries even after compliance systems detected warning signs.

What the files established

ICIJ said more than 2,100 suspicious activity reports, or SARs, had been shared with its reporting network. The consortium and 108 media partners in 88 countries spent 16 months analyzing the leaked material alongside court files, public records, interviews and other confidential documents.

The investigation reported that banks had moved more than $2 trillion in payments they considered suspicious over an 18-year period. That figure was an aggregation of transactions described in the leaked reports, not a measurement of proven money laundering or the entire global banking system. The documents were also not a representative sample of every SAR filed with the Financial Crimes Enforcement Network.

A SAR is a notice from a financial institution to U.S. authorities concerning irregular or potentially criminal activity. It is neither a criminal charge nor proof that the customer, bank or transaction violated the law. ICIJ expressly warned readers against treating the reports as adjudicated findings.

FinCEN had acknowledged the planned reporting on September 1, 2020, describing the SARs as unlawfully disclosed and referring the leak to the Justice Department and Treasury’s inspector general. The agency warned that unauthorized publication could affect investigations and the security of reporting institutions. That response did not authenticate every reported transaction or address the merits of ICIJ’s individual findings.

The established OneCoin case

The OneCoin context did not depend entirely on the leak. On March 8, 2019, the U.S. Attorney’s Office for the Southern District of New York announced charges against Ignatova and the arrest of her brother, Konstantin Ignatov. Prosecutors alleged that victims had invested billions of dollars after OneCoin’s operators misrepresented how the purported cryptocurrency was created and valued.

The Justice Department said its investigation found that OneCoin’s value was set internally rather than through market supply and demand, that coins were not mined as represented, and that the operation lacked a true public and verifiable blockchain. Prosecutors also alleged that OneCoin proceeds had been routed through investment-fund accounts to conceal their origin. Those statements described the government’s evidence and allegations as they stood; charges against an individual did not themselves establish guilt.

ICIJ’s September 20 public client index connected Ignatova, categorized under fraud allegations, with BNY Mellon as the institution filing SARs. The index cautioned that its categories reflected allegations or suspicious activity that prompted reporting and were not necessarily evidence of misconduct by every listed party.

Why the disclosure mattered

The files complicated a familiar cryptocurrency-policy narrative. OneCoin’s branding invoked cryptocurrency, but the reported movement of associated funds depended on correspondent banks, shell entities and conventional accounts. The episode therefore concerned both digital-asset fraud and the ability of traditional financial institutions to identify beneficial owners, investigate counterparties and act before funds left their reach.

BNY Mellon told ICIJ that it took the integrity of the financial system seriously, complied with applicable laws and assisted authorities, including by filing SARs. Filing a report could demonstrate that a bank detected suspicious activity; the leak alone did not establish whether the bank could legally have stopped a particular transfer or whether regulators acted on the notice.

September 21 clarification

Contemporaneous cryptocurrency reporting on September 21, 2020 quantified the OneCoin-linked transactions flagged by BNY Mellon at a combined $137 million. CoinDesk described one approximately $30 million transfer made in 2016 and reported in a February 2017 SAR. Those figures came from interpretations of leaked records rather than a public FinCEN adjudication, so they clarify the September 20 release without converting suspicion into a proven offense.