Insights

This news bulletin is provided by the International Trade Group of Crowell & Moring. If you have questions or need assistance on trade law matters, please contact Anand Sithian or Simeon Yerokun or any member of the International Trade Group.

U.S. Government and private sector sources continue to report efforts by Democratic People’s Republic of Korea (DPRK) nationals to infiltrate companies around the world by posing as information technology (IT) professionals, in order to get hired by U.S. and other businesses and gain access to sensitive company systems. Crowdstrike, a U.S. cybersecurity company, has reported a 220% increase in the number of companies infiltrated by North Korean threat actors over the last 12 months. In particular, a DPRK-affiliated group known as “Famous Chollima” has leveraged artificial intelligence and deepfake technology to generate synthetic identities, as well as resumes and CVs, draft communications, and conduct job interviews. Enforcement actions brought by the U.S. Department of Justice identify victims in the cryptocurrency sector, including decentralized finance (“DeFi”) projects. In addition, media reports indicate that North Korean hackers are purportedly offering fake job offers targeting employees in the cryptocurrency sector, with the goal of stealing crypto.

The Best Lawyers in America 2026 Recognizes 43 Crowell & Moring Attorneys, One Selected as Lawyer of the Year

On July 28, 2025, Cadence Design Systems Inc. (“Cadence” or “the Company”), a global electronic design automation (“EDA”) technology company based in San Jose, California, agreed to plead guilty in a settlement with the U.S. Department of Justice’s National Security Division (“NSD”) and the U.S. Attorney’s Office for the Northern District of California. Through its guilty plea, Cadence agreed to resolve charges that it committed criminal violations of export controls by selling EDA hardware, software, and semiconductor design intellectual property (“IP”) technology to the National University of Defense Technology (“NUDT”), a Chinese military university on the U.S. Entity List since 2015 due to its involvement in military and nuclear simulation activities. In addition, Cadence simultaneously resolved a civil enforcement action brought by the U.S. Department of Commerce, Bureau of Industry and Security (“BIS”) related to the same underlying conduct.

Historically, SEC-registered investment advisers have not been subject to comprehensive AML regulation under the Bank Secrecy Act (“BSA”) unless they also qualify as a broker-dealer or other BSA-regulated financial institution. Notwithstanding the absence of a formal requirement to date, many SEC-registered investment advisers have voluntarily adopted AML programs in line with industry expectations and investor demands. However, on August 28, 2024, FinCEN issued its Final Rule, establishing anti-money laundering/countering the financing of terrorism (“AML/CFT”) requirements for Covered Advisers similar to those that apply to broker-dealers. The Final Rule, which was scheduled to take effect on January 1, 2026, required Covered Advisers to maintain written AML programs, perform customer due diligence, file Suspicious Activity Reports (“SARs”) and other reports required of BSA-regulated financial institutions, and retain standard AML records.  

This news bulletin is provided by the International Trade Group of Crowell & Moring. If you have questions or need assistance on trade law matters, please contact Anand Sithian or Simeon Yerokun or any member of the International Trade Group.

 

On June 9, 2025, U.S. Department of Justice (“DOJ”) Deputy Attorney General Todd Blanche issued new Foreign Corrupt Practices Act (“FCPA”) enforcement guidelines (“the Guidelines”). DOJ issued the Guidelines in response to the Trump Administration’s February 2025 Executive Order (“EO”), which paused FCPA enforcement pending the issuance of new guidance from the Attorney General. The new Guidelines resolve lingering doubts about the future of FCPA enforcement under the Trump administration and provide important insights into the key factors DOJ will consider when deciding whether to pursue FCPA investigations or enforcement actions.

In a May 12, 2025 speech that signaled both a recalibration of and recommitment to prosecuting white-collar crime, Matthew R. Galeotti, the newly appointed Head of the Department of Justice’s Criminal Division, said that the Division is “turning a new page” and embracing an enforcement approach that aims to elevate efficiency, predictability, and fairness. The changes he outlined aim to incentivize self-reporting, narrow corporate monitorships, and refocus whistleblowers.

This news bulletin is provided by the International Trade Group of Crowell & Moring. If you have questions or need assistance on trade law matters, please contact Jana del-Cerro, Anand Sithian, or Simeon Yerokun or any member of the International Trade Group.

Since December of last year, the status of the CTA has been in a state of perpetual flux, following a dizzying series of federal court rulings and FinCEN announcements. On February 28, 2025, we reported that FinCEN paused enforcement actions for entities required to report under the CTA’s Beneficial Ownership Information Reporting Rule (BOI Rule) until FinCEN issued an interim final rule providing new guidance regarding the BOI Rule’s requirements and associated deadlines. Then, on March 2, 2025, Treasury went a step further, indicating that it would altogether cease enforcement against U.S. citizens and domestic reporting companies for violations of the BOI Rule, explaining that it would instead issue proposed rulemaking to narrow the scope of the BOI Rule to “foreign reporting companies” only and set new reporting deadlines. 

On February 20, 2025, the Securities and Exchange Commission (SEC) announced the formation of the Cyber and Emerging Technologies Unit, known as “CETU,” which will replace the Crypto Assets and Cyber Unit (“CACU”).

This news bulletin is provided by the International Trade Group of Crowell & Moring. If you have questions or need assistance on trade law matters, please contact Jana del-Cerro, Anand Sithian, or Simeon Yerokun or any member of the International Trade Group.

On February 28, 2025, we reported that the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) paused enforcement actions for entities required to report under the CTA’s BOI Rule (Reporting Companies) for failure to file or update beneficial ownership information (BOI) reports by a previously-announced March 21, 2025, deadline. FinCEN had explained that the pause would last until it issued an interim final rule further updating reporting deadlines and providing new guidance around the BOI Rule’s requirements.

We previously reported that the Corporate Transparency Act’s Beneficial Ownership Information Reporting Rule (BOI Rule) was back in effect as of February 18, 2025, with a stay of the final nationwide block to enforcement. At that time, the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) extended the BOI Rule’s reporting deadline until March 21, 2025 (in cases where the originally-applicable deadline had expired) for entities required to report, which includes certain entities formed or registered to do business in the United States (Reporting Companies). 

On February 18, 2025, a District Court judge in the Eastern District of Texas entered an order staying the last remaining nationwide injunction of the CTA’s Beneficial Ownership Information Reporting Rule (BOI Rule) in Smith v. U.S. Dep’t of the Treasury.  The BOI Rule requires certain entities formed or registered to do business in the U.S. (Reporting Companies) to report information about themselves and their natural-person beneficial owners to the Financial Crimes Enforcement Network (FinCEN), a bureau of the Treasury Department.  Following the court’s order, FinCEN issued an alert notifying Reporting Companies that the BOI Rule is back in effect with an amended deadline of March 21, 2025.