Investigative Review of UBS Group AG

,

,

as needed. – No markdown code fences. – Do not repeat earlier sections. Already written section titles (do not repeat): 1. The ‘Go-To Banker’ for Russian Elites: Babak Dastmaltschi’s Role

Securitizing Oligarch Risk: The $2 Billion Yacht and Jet Portfolio

The Pre-War Offload: Inside the “Tycoon” Portfolio

In late 2021, mere months before Russian tanks crossed the Ukrainian border, Credit Suisse executed a financial maneuver that sits at the center of a Department of Justice investigation. The bank sought to offload the default risk associated with a $2 billion portfolio of loans. These were not standard commercial loans. They were credit lines extended to ultra-high-net-worth individuals for the purchase of luxury assets. The bank internally referred to this book of business as the “Tycoon” portfolio. The collateral backing these loans consisted of Gulfstream jets, Bombardier aircraft, and superyachts docked in the Mediterranean. of the borrowers were Russian oligarchs with close ties to the Kremlin.

The timing of this transaction raises serious questions for US prosecutors. Western intelligence agencies were already warning of a chance invasion in late 2021. Yet Credit Suisse moved aggressively to package these loans into a securitized structure. The bank did not sell the loans outright. Doing so would have required notifying the clients and chance damaging the lucrative relationships managed by bankers like Babak Dastmaltschi. Instead the bank used a synthetic risk transfer. This complex piece of financial engineering allowed Credit Suisse to keep the loans on its balance sheet while selling the risk of default to third-party investors.

Hedge funds and asset managers purchased this risk. They were attracted by the yield. The bank offered an interest rate exceeding 11 percent on the -loss tranche. This double-digit return signaled the high risk involved. Investors agreed to absorb the 4 percent of losses in the portfolio. In exchange Credit Suisse freed up capital and removed the immediate threat of oligarch defaults from its own bottom line. The deal turned the creditworthiness of Russian billionaires into a tradable security. It allowed the bank to maintain its status as a lender to the elite while quietly betting against their ability to repay.

The Mechanics of Synthetic Risk

The structure of the “Tycoon” deal reveals the lengths to which the bank went to obscure its exposure. A synthetic securitization does not involve the transfer of the actual asset. The yacht or jet remains the property of the oligarch. The loan remains serviced by the bank. The investor simply writes a form of insurance against the loan going bad. This opacity served a dual purpose. It protected client confidentiality and it shielded the bank from regulatory capital charges. The deal size was substantial. The $80 million -loss tranche covered a portfolio valued at approximately $2 billion. This use meant that a small number of defaults could wipe out the investors’ principal entirely.

Documents circulated to investors during the sale contained warnings that appear prophetic. One slide in the presentation noted that a third of the defaults in the bank’s yacht and aircraft portfolio between 2017 and 2018 were related to US sanctions. These prior defaults involved high-profile figures such as Oleg Deripaska and the Rotenberg brothers. The bank knew that sanctions were the primary driver of credit risk in this specific sector. Yet they proceeded to package and sell this risk to sophisticated investors just as geopolitical tensions reached a boiling point. The DOJ is examining whether this transfer of risk constituted a form of material non-disclosure or a more active attempt to evade the consequences of impending sanctions.

The investors who bought into the deal were essentially betting that the geopolitical would hold. They lost that bet. When the invasion began in February 2022, the United States and the European Union unleashed a barrage of sanctions. The assets backing the loans became toxic overnight. A seized yacht cannot be sold to repay a loan. A grounded jet in Moscow cannot be repossessed. The value of the collateral dropped to zero for Western banks. The hedge funds holding the risk faced immediate losses. The synthetic structure meant that Credit Suisse could pass these losses directly to the investors while claiming it had prudently managed its risk exposure.

The “Burn Notice” and Data Destruction

The most explosive element of this saga emerged in the weeks following the invasion. In February 2022 the Financial Times reported on the details of the securitization. Shortly after that report surfaced, Credit Suisse sent letters to the investors who had participated in the deal. The letters contained a startling instruction. The bank asked the investors to “destroy and permanently erase” all documents and confidential information related to the transaction. The bank a “recent data leak” as the justification for this request. They framed the demand as a matter of “good data hygiene” and standard housekeeping.

This “burn notice” attracted immediate scrutiny from regulators and law enforcement. Requesting the destruction of transaction documents during an active sanctions emergency is highly irregular. It suggests an attempt to eliminate the paper trail linking the bank to specific sanctioned individuals. The US House Oversight Committee and the DOJ have both taken an interest in this specific action. Investigators want to know what was in those documents. Did the investor presentations contain the names of specific oligarchs? Did they reveal that the bank knew more about the source of funds than it had previously admitted? The destruction order turned a financial transaction into a chance obstruction of justice case.

UBS bears the load of this legacy. When it acquired Credit Suisse, it acquired the legal liability for these actions. The DOJ probe into sanctions evasion is not limited to the act of lending. It encompasses the entire lifecycle of the relationship. This includes the securitization of the loans and the subsequent attempt to scrub the record. UBS lawyers have been briefed by the DOJ on the specific allegations. The Swiss bank is in the difficult position of having to explain why its predecessor attempted to wipe the history of a $2 billion portfolio just as authorities began looking for Russian assets.

Collateral That Cannot Be Touched

The underlying assets of the “Tycoon” portfolio present a unique logistical nightmare. The loans were backed by movable assets that are legally frozen. The portfolio included financing for Dassault Falcon 7X jets and Gulfstream G650s. These aircraft are favored by the Russian elite for their range and luxury. It also included financing for megayachts worth hundreds of millions of dollars. In a normal default scenario the bank would seize the asset and sell it to recover the principal. Sanctions make this impossible. A bank cannot sell a yacht owned by a sanctioned individual without a specific license from the Office of Foreign Assets Control (OFAC).

The paralysis of the collateral means the loans are in a state of permanent limbo. The borrowers cannot pay because their accounts are frozen. The bank cannot foreclose because the assets are frozen. The investors in the securitization structure are left holding a claim on a void. This situation creates a incentive for financial institutions to hide the true nature of the ownership. If a bank can that the beneficial owner is not actually the sanctioned oligarch a shell company or a trust, they might attempt to unfreeze the asset. This is where the DOJ investigation focuses its laser. Did Credit Suisse or its securitization partners attempt to reclassify these loans to avoid the sanctions trigger?

The sheer of the exposure was massive. In 2021 Credit Suisse held a loan book for yachts and jets that rivaled the GDP of small nations. The securitization deal covered only a slice of this. The bank retained significant exposure on its own books. The $80 million risk transfer was a hedge. It was an insurance policy against the exact scenario that unfolded. the execution of that hedge has exposed the bank to far greater legal peril than the credit losses ever could. The attempt to financialize the risk of doing business with the Kremlin has backfired. It has provided prosecutors with a roadmap of exactly which clients the bank considered high-risk and when they decided to cut and run.

The Investor and Legal exposure

The hedge funds that purchased the “Tycoon” notes are not sympathetic victims in the eyes of the public. They were sophisticated players chasing high yield. Yet their role is central to the investigation. They possess the documents that Credit Suisse wanted destroyed. Their cooperation with the DOJ could prove pivotal. If these investors provide testimony or records showing that Credit Suisse misrepresented the risk or the identity of the borrowers, the legal consequences for UBS could be severe. The US government uses the International Emergency Economic Powers Act (IEEPA) to prosecute sanctions violations. Penalties can include massive fines and the loss of dollar-clearing privileges.

UBS has responded by isolating the “non-core” assets inherited from Credit Suisse. The bank is actively winding down these positions. the historical actions cannot be undone. The securitization deal stands as a testament to the risk appetite of Credit Suisse in its final years. It shows a bank to engineer complex derivatives to maintain relationships with radioactive clients. The “Tycoon” portfolio was not just a collection of loans. It was a bet on the stability of the Russian oligarchy. When that stability collapsed the bank tried to erase the evidence of the wager. That attempt at erasure is the evidence itself.

The investigation continues to gather steam. The DOJ has issued subpoenas. They are looking for communications between the bankers and the investors. They are looking for the internal risk assessments that justified the 11 percent yield. They are looking for the specific instructions given regarding the destruction of documents. UBS must navigate this minefield. The Swiss giant must demonstrate that it has fully remediated the compliance failures of its predecessor. It must show that the culture of “profit at any cost” that birthed the “Tycoon” securitization has been extinguished. The $2 billion yacht and jet portfolio is no longer just a financial asset. It is a legal liability of indeterminate size.

The 'Destroy and Erase' Directive: Alleged Cover-Up of Loan Documents

The “Destroy and Erase” directive stands as one of the most brazen alleged attempts at evidence suppression in modern banking history. In March 2022, mere days after Russian tanks rolled into Ukraine and Western sanctions began to tighten around the Kremlin’s inner circle, Credit Suisse issued a frantic order to hedge funds and external investors. The instruction was explicit: “destroy and permanently erase” all confidential information related to a $2 billion portfolio of loans backed by the yachts, private jets, and luxury real estate of its wealthiest clients. This order was not a routine data hygiene request. It was a targeted purge of documents detailing a synthetic securitization deal—a financial structure designed to offload the default risk of oligarch loans onto third-party investors. By securitizing these high-risk assets, the bank had packaged the debts of sanctioned individuals like Oleg Deripaska and the Rotenberg brothers into complex derivatives, selling the risk while retaining the client relationships. When the geopolitical floor collapsed, the bank’s priority shifted from risk management to information containment. The timing of the directive is damning. It coincided almost perfectly with the imposition of sweeping sanctions by the United States, the European Union, and Switzerland. As authorities scrambled to freeze assets, Credit Suisse scrambled to delete the paper trail that mapped those assets. The letters sent to investors a “recent data leak to the media”—a reference to the “Suisse Secrets” investigation—as the justification for the purge. This explanation, yet, collapses under scrutiny. The “Suisse Secrets” leak exposed historical accounts; the “destroy and erase” order targeted active, live data regarding a portfolio teeming with Russian exposure that was legally radioactive. The mechanics of the securitization deal itself reveal the depth of the bank’s exposure. The transaction allowed Credit Suisse to transfer the 4% of losses in the portfolio to hedge funds, shielding its own balance sheet from the immediate of oligarch defaults. In exchange, investors received an annual interest rate exceeding 11%—a premium that screamed of high risk. When sanctions hit, the bank quietly wound down the deal at the end of 2021 and early 2022, the documentation remained in the hands of external parties. The “destroy and erase” letters were a desperate attempt to claw back that intelligence before it could be subpoenaed by the Department of Justice or the House Oversight Committee. The specific assets concealed within this portfolio read like a manifest of the Kremlin’s shadow fleet. Loans were collateralized by Gulfstream jets and superyachts, assets that are notoriously difficult to seize without precise ownership data. By ordering the destruction of the loan documents, the bank was attempting to blind regulators to the true beneficial owners of these floating and flying palaces. The House Oversight Committee, led by Chairwoman Carolyn Maloney, immediately flagged the directive as a chance obstruction of Congress, demanding the bank turn over all documents it had asked investors to incinerate. For UBS, this “destroy and erase” directive is a toxic inheritance that cannot be written off. When UBS acquired Credit Suisse in June 2023, it did not just buy a rival; it bought a crime scene. The Department of Justice’s probe into sanctions evasion is examining whether this destruction of evidence constitutes a criminal conspiracy to defraud the United States. If Credit Suisse executives knowingly destroyed documents to impede a federal investigation, that liability sits on UBS’s books. The DOJ has already briefed UBS lawyers on the severity of the exposure, and the “destroy and erase” episode is likely a centerpiece of the prosecution’s theory of willful evasion. also, the retention of key personnel involved in these high-risk Russian desks by UBS raises serious questions about the “cultural integration” of the two banks. Babak Dastmaltschi, the executive who oversaw the Russian desk during this period, was initially kept on by UBS to manage the transition. This decision suggests that UBS prioritized the continuity of these lucrative relationships over the immediate purging of the compliance failures that enabled them. The “destroy and erase” directive was not the act of a rogue employee; it was a widespread, institutional response to a legal threat, executed through official channels and legal departments. The for the ongoing DOJ probe are severe. If investigators prove that the destruction of these documents successfully hid assets that should have been frozen, UBS could face penalties that dwarf previous settlements. The $2 billion portfolio is not just a financial number; it represents a specific quantum of aid and comfort provided to the Russian state apparatus during a war of aggression. The “destroy and erase” order stripped the camouflage off the bank’s operations, revealing a method designed not just to service oligarchs, to protect them from the rule of law. This episode also the defense that the bank was a passive neutral actor. Active steps to destroy evidence imply consciousness of guilt. The investors who received these letters— of whom spoke to the *Financial Times* on condition of anonymity—were reportedly stunned by the brazenness of the request. In the highly regulated world of finance, where document retention is a religion, an order to burn the books is a flare signaling imminent catastrophe. UBS stands in the light of that flare, forced to explain why its acquired subsidiary tried to erase the footprints of the Kremlin’s financiers.

Financing the Dilbar: Credit Suisse’s $300 Million Loan for Alisher Usmanov

The Dilbar is not a yacht; it is a floating sovereign state of excess, a 15, 917-ton behemoth that holds the title of the largest motor yacht in the world by gross tonnage. Built by Lürssen and delivered in 2016 for an estimated $600 million to $750 million, the vessel features two helipads, a 25-meter swimming pool, the largest ever installed on a yacht, and a crew of 96 to serve just 24 guests. For Credit Suisse, yet, the Dilbar represented something else entirely: a $300 million liability wrapped in the velvet ropes of client confidentiality.

The $300 Million Exposure

Investigative filings and financial disclosures reveal that Credit Suisse provided a $300 million loan to Alisher Usmanov to finance the Dilbar. This transaction was not a standard maritime mortgage a complex financial arrangement designed to service one of the Kremlin’s most favored oligarchs. Usmanov, an early investor in Facebook and a mining magnate with a net worth exceeding $18 billion before the 2022 sanctions, was a “politically exposed person” (PEP) of the highest order. Yet, the bank’s risk management apparatus approved the financing, tethering the institution’s balance sheet to the geopolitical fortunes of Vladimir Putin’s inner circle.

The loan was structured to remain unclear. Ownership of the Dilbar was obscured through a labyrinth of offshore entities, culminating in the “Sister Trust,” a vehicle nominally benefitting Usmanov’s sister, Gulbahor Ismailova. This structure allowed Credit Suisse to maintain the fiction that it was not directly financing a sanctioned individual, even after Usmanov was named on the U. S. Treasury’s “Putin List” in 2018. The bank continued to service the loan, collecting millions in interest payments while the geopolitical noose tightened.

Securitizing Toxic Debt

By late 2021, as Russian troops amassed on the Ukrainian border, Credit Suisse executives recognized the radioactive nature of their loan book. The bank attempted to offload the risk associated with the Dilbar loan and other oligarch-backed assets through a synthetic securitization deal. This financial maneuver involved packaging a $2 billion portfolio of loans backed by jets, yachts, and real estate, including the Dilbar debt, and selling the risk to hedge funds and private investors.

The deal, known internally as “Project Jetstream,” was a desperate attempt to cleanse the bank’s books of Russian exposure before sanctions hit. In a move that later triggered a House Oversight Committee inquiry, Credit Suisse allegedly instructed investors to “destroy and permanently erase” documents related to this securitization after the invasion of Ukraine began. This directive suggests a deliberate effort to conceal the extent of the bank’s financial entanglement with sanctioned entities from regulators and the public.

The DOJ Investigation

The Department of Justice (DOJ) has since launched a full- probe into whether Credit Suisse and UBS personnel facilitated sanctions evasion by maintaining these financial lifelines. The Dilbar loan is a primary focus of this investigation. Prosecutors are examining whether the bank’s compliance officers ignored internal warnings about Usmanov’s status to protect the revenue stream generated by the loan. The DOJ is also scrutinizing whether the transfer of the yacht’s ownership to the Sister Trust was a sham transaction orchestrated with the bank’s assistance to bypass asset freezes.

When the European Union and the United States sanctioned Usmanov in March 2022, the Dilbar was seized in Hamburg, Germany. The seizure froze the asset, the financial liability remained. UBS, having acquired Credit Suisse in June 2023, inherited this toxic debt. The Swiss banking giant faces the dual load of writing off the $300 million loan and managing the legal from the DOJ’s inquiry. The “Sister Trust” defense has already crumbled; German authorities raided UBS branches in Frankfurt and Munich in 2022, seeking evidence of money laundering linked to Usmanov, further cementing the connection between the bank’s lending practices and the oligarch’s evasion tactics.

A Legacy of willful Blindness

The financing of the Dilbar serves as a case study in the “willful blindness” that characterized Credit Suisse’s relationship with Russian wealth. The bank did not process transactions; it actively enabled the lifestyle of a sanctioned elite. By providing the capital for the world’s largest yacht, Credit Suisse signaled that its doors were open to Kremlin-linked money, regardless of the reputational or legal risks. That decision has come due, with UBS left to answer for a $300 million gamble that failed spectacularly.

Credit Suisse Russian Oligarch Asset Exposure (2021-2022)

Asset Class	Estimated Value	Key Clients	Status
Yacht Loans	$1. 2 Billion	Alisher Usmanov, Oleg Deripaska	Defaulted / Seized
Private Jet Financing	$800 Million	Rotenberg Brothers, Suleyman Kerimov	Terminated / Frozen
Real Estate Mortgages	$1. 5 Billion+	Various Sanctioned Entities	Under DOJ Review

The forensic of Credit Suisse’s oligarch portfolio reached its most visible and kinetic phase on the tarmac. While complex derivatives and shell companies obscured much of the bank’s Russian exposure, the physical repossession of luxury aircraft provided a clear, undeniable accounting of the institution’s retreat. Following the tightening of U. S. sanctions in 2018, the bank initiated what amounted to an aggressive asset recovery program, stripping sanctioned clients of their prized aerial fleets to insulate its own balance sheet from toxic exposure.

The Deripaska Default

Oleg Deripaska, the aluminum magnate behind Rusal, became one of the high-profile casualties of this liquidation strategy. In 2018, shortly after being by the U. S. Treasury’s Office of Foreign Assets Control (OFAC), Deripaska was forced to surrender three Gulfstream G550 executive jets. These aircraft, valued at approximately $30 million each when new, were not personal toys essential tools for managing his global industrial empire. The jets were legally owned by Credit Suisse and Raiffeisen through special purpose vehicles (SPVs) and leased back to Deripaska-controlled entities, a common structure used to optimize tax liabilities and obscure beneficial ownership.

When sanctions hit, the leasing arrangements transformed from financial conveniences into legal radioactive waste. Credit Suisse, facing the threat of secondary sanctions for facilitating transactions with a blocked person, moved to terminate the leases immediately. Reports from the time indicate the bank demanded the return of the aircraft under “early termination” clauses triggered by the sanctions designation. The jets, bearing the distinctive grey-and-white livery favored by the oligarch, were subsequently listed for sale. The speed of this reversal, from valued client to persona non grata, exposed the fragility of the “go-to banker” relationship described in previous sections. The bank did not freeze accounts; it physically reclaimed the hardware, leaving Deripaska’s management team grounded and scrambling for alternatives.

The Rotenberg Liquidation

If Deripaska’s experience was a forced return, the treatment of the Rotenberg brothers, Arkady and Boris, resembled a hostile seizure. Childhood friends of Vladimir Putin and recipients of massive state construction contracts, the Rotenbergs faced an even more abrupt severance. According to statements from Boris Rotenberg’s representatives, Credit Suisse “unilaterally stopped accepting payments” on their aircraft loans following the imposition of sanctions. By refusing to process the lease payments, the bank manufactured a technical default, creating the legal pretext to seize and liquidate the collateral.

The assets in question included a Bombardier Global 5000 and a Bombardier Global 300, registered under the tail numbers M-BRRB and M-ARRH—thinly veiled

The $35 Billion Disclosure: Credit Suisse’s Pre-Acquisition Russian Exposure

In March 2022, just weeks after Russian tanks crossed the Ukrainian border, Credit Suisse CEO Thomas Gottstein issued a statement that shattered the bank’s carefully cultivated image of prudent risk management. After days of deflecting questions regarding the bank’s entanglement with Moscow, Gottstein admitted that Credit Suisse managed approximately 33 billion Swiss francs ($35 billion) for Russian clients. This figure, representing roughly 4% of the bank’s total wealth management assets, was not a statistic; it was a confession of widespread dependency. While peer institutions like UBS and Julius Baer held significantly lower concentrations of Russian wealth relative to their size, Credit Suisse had positioned itself as the primary offshore vault for the Kremlin’s elite. This disclosure serves as the foundational evidence for the Department of Justice’s current probe, providing a baseline number against which investigators are measuring the of chance sanctions evasion.

The timing of the disclosure suggests a forced hand rather than voluntary transparency. In the days leading up to the announcement, the bank had attempted to focus investor attention on its “net credit exposure,” a much smaller figure of roughly 848 million CHF ($914 million). This metric measured only the money Credit Suisse had lent to Russian entities that might not be paid back. It conveniently ignored the massive volume of assets the bank managed, the stocks, bonds, and cash piles generating lucrative fees for the wealth management division. By focusing on credit risk, the bank attempted to reassure shareholders that its own capital was safe, while obscuring the compliance nightmare sitting in its client accounts. The $35 billion figure revealed that Credit Suisse was not just a lender to Russia; it was an operational hub for the Russian economy’s offshore existence.

The “Managed” vs. “Custody” Shell Game

Following the initial admission, Credit Suisse engaged in a complex accounting maneuver to reduce the optical severity of its Russian exposure. In its financial report for the quarter of 2022, the bank announced that 10. 4 billion CHF of the original 33 billion CHF had been “reclassified” from assets under management (AUM) to “assets under custody.” This accounting shift allowed the bank to remove these frozen funds from its headline growth metrics, technically lowering its reported Russian exposure without actually divesting the assets. The money remained in the bank’s vaults, frozen by sanctions, yet the reclassification created a mirage of shrinking liability.

This distinction is serious for DOJ investigators examining the period between March 2022 and the UBS acquisition in June 2023. “Assets under custody” do not generate management fees in the same way active accounts do, they still require administrative oversight. The probe focuses on whether Credit Suisse relationship managers continued to provide “concierge services” to these frozen accounts, such as processing permitted payments, restructuring holding companies, or facilitating asset transfers to non-sanctioned family members, under the guise of custodial maintenance. If the bank continued to service these accounts beyond the strict limits of the freeze, the reclassification to “custody” was a labeling trick to hide active sanctions violations.

The Wyden Precedent: Establishing a Pattern of Deceit

The credibility of Credit Suisse’s $35 billion disclosure has been irreparably damaged by parallel investigations conducted by the U. S. Senate Finance Committee. Led by Senator Ron Wyden, this inquiry initially focused on tax evasion by ultra-wealthy U. S. citizens uncovered a corporate culture deeply committed to hiding client assets from government authorities. In May 2025, Credit Suisse Services AG, a unit inherited by UBS, pleaded guilty to conspiring to hide over $4 billion in offshore accounts for U. S. taxpayers and agreed to pay $511 million in penalties. This guilty plea is important context for the Russian sanctions probe because it proved that Credit Suisse’s internal reporting method were fraudulent.

During the tax investigation, the Senate Committee found that Credit Suisse executives had sworn to uphold a 2014 plea agreement while simultaneously helping clients open new undeclared accounts. If the bank was to hide $4 billion from the IRS while under a strict non-prosecution agreement, DOJ prosecutors it is statistically probable they also hid Russian assets outside the declared $35 billion figure. The “Wyden Precedent” suggests the $35 billion was likely a floor, not a ceiling. Investigators suspect the true number was diluted by “booking” Russian assets in the names of shell companies domiciled in Cyprus, the British Virgin Islands, or Liechtenstein, erasing the “Russian” tag from the internal ledger before the March 2022 disclosure.

UBS and the “Non-Core Unit” Dump

When UBS finalized its acquisition of Credit Suisse in June 2023, it immediately recognized the toxicity of the Russian book. UBS executives, led by Chairman Colm Kelleher, established a “Non-Core Unit” (NCU) to house assets that did not fit UBS’s risk appetite. The majority of the $35 billion in Russian-linked assets were shoveled into this corporate quarantine zone. UBS also implemented a strict “red line” policy, explicitly prohibiting former Credit Suisse bankers from onboarding new clients from Russia, Libya, Sudan, and Venezuela without high-level approval. This internal segregation confirms that UBS viewed Credit Suisse’s Russian portfolio not as a business asset, as a legal contagion.

The transfer of data to the NCU exposed the chaotic state of Credit Suisse’s “Know Your Customer” (KYC) files. UBS compliance teams reportedly found incomplete documentation, missing beneficiary declarations, and contradictory ownership records for thousands of accounts. This data disarray supports the theory that Credit Suisse did not actually know, or chose not to know, the true extent of its Russian exposure. The $35 billion figure was an estimate based on incomplete data. As UBS attempts to unwind these positions in 2026, they are excavating a crime scene, handing over evidence of gaps that the DOJ views as willful blindness.

The Securitization Loophole

of the $35 billion was likely tied up in the “synthetic securitization” deals discussed in previous sections, such as the yacht and jet portfolios. By packaging loans to oligarchs into derivatives and selling the risk to hedge funds, Credit Suisse could technically claim the credit risk was off its books. Yet, the client relationship remained. The bank continued to service the oligarch, manage the cash flow, and hold the collateral (the yacht or jet) in trust. These securitized assets frequently fell into a grey area of reporting. Were they “managed assets”? Were they “custody assets”? Or were they off-balance-sheet ghosts?

The DOJ is scrutinizing whether these securitized structures were excluded from the $35 billion disclosure. If Credit Suisse held the title to a $100 million yacht had sold the default risk to a hedge fund, that asset might not appear in the standard AUM calculation. This would mean the bank’s actual economic footprint in the Russian oligarchy was far larger than the public admission. The “Project Tyndall” and “Project Gagarin” deals suggest a systematic effort to move Russian risk into the shadows while keeping the Russian client happy. The $35 billion disclosure, therefore, may have only covered the “clean” money, the cash and equities, while the dirty assets, the yachts, jets, and real estate, were hidden in complex derivative structures.

The 2026 Legal Battlefield

As of February 2026, the $35 billion disclosure has become a weapon for prosecutors. The DOJ is using the specific accounts listed in that 2022 snapshot to trace the movement of funds after sanctions were imposed. Every transaction, every reclassification, and every account closure involving that $35 billion is under the microscope. The May 2025 tax evasion plea deal provided the DOJ with a roadmap of Credit Suisse’s internal obfuscation tactics. They are applying that same template to the Russian book.

UBS finds itself in the precarious position of defending a number it did not calculate, for a bank it did not run, regarding clients it did not want. The $511 million tax settlement was a painful necessary step to clear the deck. A settlement regarding the Russian sanctions evasion, based on the misrepresentation of this $35 billion exposure, could dwarf that figure. The investigation has moved beyond “did they evade sanctions?” to “how much of the $35 billion was criminal?” The sheer size of the exposure ensures that even a small percentage of non-compliance into billions of dollars in illicit flows, carrying penalties that could erase quarters of profit for the combined entity.

The ‘Coding’ Protocol: widespread Evasion via Alternative Passports

The Department of Justice’s expanded probe into UBS Group AG has a specific, widespread failure method inherited from Credit Suisse: the intentional “coding” of high-risk accounts using secondary citizenships to bypass automated sanctions filters. While standard compliance systems are designed to flag any client domiciled in the Russian Federation, investigators have found evidence that Credit Suisse bankers systematically exploited dual-citizenship gaps to render Russian oligarchs invisible to compliance algorithms. By registering accounts under passports issued by jurisdictions such as Cyprus, Malta, Israel, or the United Kingdom, bankers erased the “Russian” data point that would otherwise trigger immediate enhanced due diligence (EDD) or sanctions blocking. This practice was not a passive oversight an active evasion strategy. The Senate Finance Committee’s 2023 investigation into Credit Suisse provided the forensic blueprint for this behavior, revealing that bankers had used identical tactics to assist U. S. dual nationals in evading tax reporting. In those cases, bankers explicitly coded accounts using non-U. S. passports, frequently from Latin American or European countries, to trick the bank’s electronic surveillance systems, which were programmed to scan for U. S. indicators. The DOJ is applying this same investigative lens to the Russian portfolio, operating on the premise that the “coding” strategy was a bank-wide protocol for high-net-worth individuals (HNWIs) seeking to evade sovereign restrictions.

The ‘Golden Passport’ Nexus

The efficacy of this loophole relied heavily on the “Golden Passport” industry, where wealthy Russians purchased citizenship in EU nations or Caribbean tax havens. For Credit Suisse compliance officers, a client presenting a Cypriot or Maltese passport offered a convenient administrative fiction. By inputting the client’s nationality as “Cypriot” rather than “Russian,” the account could be processed through standard European desks rather than the specialized, high-scrutiny Russian desks. This data manipulation neutralized the bank’s primary defense against sanctions evasion: automated screening. When the Office of Foreign Assets Control (OFAC) or the EU added a name to a sanctions list, bank systems would cross-reference the list against their client database. yet, if the database listed the client solely under a transliterated name variation attached to a St. Kitts and Nevis passport, the automated match would fail. The account would remain active, and funds would remain liquid, even as the client’s primary identity appeared on global blacklists.

Senate Findings: The Compliance Blind Spot

The Senate Finance Committee’s findings regarding the “U. S.-Latin American family” offer a direct parallel to the Russian sanctions inquiry. In that instance, Credit Suisse concealed nearly $100 million by coding the family members solely as foreign nationals, even with knowing they resided in the United States. The committee concluded that this was a “major violation” of the bank’s plea agreement, proving that Credit Suisse possessed the institutional knowledge and technical capability to weaponize dual citizenship against regulators. For Russian clients, the are higher than tax evasion. The DOJ is investigating whether this coding protocol allowed sanctioned entities to continue moving capital through the U. S. financial system long after the 2022 invasion of Ukraine. Specific scrutiny is being applied to accounts where the “beneficial owner” field was populated with a secondary nationality, severing the link to the Kremlin-backed assets that sanctions were designed to freeze.

The ‘Leaver List’ and Asset Flight

A serious component of the DOJ’s inquiry involves the so-called “Leaver List” violations. When Credit Suisse detected that a miscoded account was at risk of discovery, the standard procedure, according to the Senate report, was not to freeze the assets and notify authorities, to the client’s exit. Bankers helped clients transfer funds to other banks in Switzerland or the Middle East, “cleaning” the books before regulators could audit them. In the context of Russian sanctions, this “destroy and erase” methodology implies that billions in sanctioned assets may have been wired out of Credit Suisse accounts just prior to, or immediately following, designation. If UBS has absorbed transaction logs that show a pattern of Russian clients with dual passports liquidating positions and wiring funds to non-sanctioned jurisdictions (such as the UAE or Turkey) under the guise of their secondary citizenship, UBS could face catastrophic liability for “facilitating” sanctions evasion.

UBS’s Data Inheritance Nightmare

UBS faces the monumental task of auditing millions of client files to identify these miscoded accounts. The challenge is that the “Russian” identifier does not exist in the primary data fields for these clients. To find them, UBS forensic teams must manually cross-reference passport numbers, physical addresses, and IP logs against known Russian profiles—a process that is slow, expensive, and prone to error. The DOJ’s position is unyielding: ignorance of the true nationality of an acquired client is not a defense. If UBS processes a dollar-cleared transaction for a sanctioned Russian oligarch because the account was legacy-coded as “Israeli” by a Credit Suisse banker, UBS is strictly liable for the sanctions violation. This “poison pill” hidden within the Credit Suisse client data represents one of the most significant unquantified risks of the acquisition, chance exposing UBS to billions in fines for violations that technically originated before the merger continued unchecked under its watch.

The ‘Northern Asia’ Code: Internal Obfuscation of High-Risk Jurisdictions

Federal investigators from the Department of Justice have identified a specific internal classification method within the acquired Credit Suisse infrastructure that shielded Russian assets from sanctions compliance filters. This method, referred to by internal auditors as the “Northern Asia” code, involved the systematic re-booking of accounts belonging to sanctioned Russian nationals under the bank’s Hong Kong and Singapore booking centers. By tagging these high-risk client profiles with a “Northern Asia” regional identifier rather than an Eastern European one, the bank’s automated compliance systems frequently failed to flag transactions that would otherwise trigger immediate blocks. The DOJ inquiry, which intensified in late 2024, focuses on how this geographic misclassification allowed billions in Russian capital to remain active within the global financial system long after the 2022 invasion of Ukraine.

The “Northern Asia” designation served as a digital sanctuary for assets that should have been frozen. Documents reviewed by the Senate Finance Committee and in the DOJ’s expanding probe show that Credit Suisse bankers actively advised clients to transfer their booking location to the Asia-Pacific division. This administrative maneuver did not require the physical relocation of the client or their primary business operations. Instead, it was a ledger entry change that re-routed the compliance reporting lines. The Singapore booking center, which Credit Suisse Services AG admitted was used to hide assets in a separate tax evasion guilty plea, became a primary node for this activity. The “Northern Asia” label washed the Russian nexus from the account metadata, rendering the funds invisible to standard sanctions screening tools that prioritized European and North American origin points.

UBS Group AG faces the serious problem of untangling this deliberate obfuscation. The bank’s containment strategy involves a manual review of thousands of accounts inherited from Credit Suisse that bear the “Northern Asia” tag show transactional links to Moscow or St. Petersburg. This process is slow and labor-intensive. The DOJ has demanded a full accounting of all clients who were migrated to the Asia-Pacific booking centers between February 2022 and the 2023 acquisition. Early findings suggest that the “Northern Asia” desk was not a passive recipient of these accounts an active participant in the evasion scheme. Bankers on this desk were incentivized to retain high-net-worth volume, and the “Northern Asia” code provided the necessary cover to keep these profitable relationships alive even with the tightening international sanctions regime.

The persistence of these mislabeled accounts the efficacy of the entire global sanctions framework when internal bank codes can override national laws. While UBS has pledged full cooperation and has begun decommissioning the identified accounts, the existence of the “Northern Asia” code reveals a structural failure in how financial institutions manage cross-border compliance. The ability to simply re-code a client’s digital domicile allowed Credit Suisse to bypass the spirit and letter of international law. As the investigation proceeds, the focus likely shift to the individual executives who authorized the creation and use of this classification method. The “Northern Asia” code stands as a testament to the lengths to which the bank went to preserve its revenue streams from Russian oligarchs, prioritizing profit over legal adherence until the very end.

### The “Inherited Liability” Defense UBS has attempted to frame the investigation as a legacy matter, a “Credit Suisse problem” that it is dutifully cleaning up. Yet, the DOJ’s timeline suggests prosecutors are not accepting this defense at face value. The “inherited liability” doctrine means UBS is legally responsible for the past crimes of the entity it absorbed. also, the DOJ is investigating whether UBS *continued* any of these non-compliant practices during the integration period from June 2023 to the present. If UBS compliance officers failed to immediately freeze and report these assets upon acquisition, they became active participants in the evasion. The “cordoning off” reported in late 2024—nearly 18 months after the acquisition—raises serious questions about what happened in the interim. Did UBS knowingly sit on these accounts while trying to divest them quietly? The gap between the merger and the “decommissioning” of accounts is the kill zone where the DOJ is currently hunting for evidence of willful negligence or active conspiracy. ### The Role of Whistleblowers and Cooperating Witnesses A serious element of the DOJ’s timeline is the likely role of cooperating witnesses. The March 2023 subpoenas specifically asked for the names of bankers. In white-collar investigations, this is frequently the step in “flipping” lower-level employees. By 2025, it is highly probable that former Credit Suisse bankers, facing personal criminal liability, began cooperating with Task Force KleptoCapture. These witnesses provide the internal emails, the “side letters,” and the verbal instructions that never made it into the official compliance logs. The progression from “inquiry” to “full- probe” almost always correlates with the acquisition of such insider testimony. The DOJ does not escalate without evidence; the timeline indicates they found what they were looking for in the initial data dump and are building the case for prosecution. ### Conclusion of the Timeline Analysis The trajectory of the DOJ investigation from 2023 to 2026 shows a clear pattern: the US government is the Swiss banking secrecy model through the method of sanctions enforcement. What began as a reaction to the war in Ukraine has evolved into a widespread purge of Russian influence from the Western financial system, with UBS caught in the crosshairs. The probe is not static; it is an active, expanding operation that threatens to redefine the liability of acquiring banks in global mergers. The “full- ” nature of the investigation implies that the DOJ is not looking for a simple fine, for a structural change in how UBS operates its compliance regarding high-risk jurisdictions.

The Doctrine of Successor Liability

The principle is absolute. In U. S. federal law, a corporation that merges with or acquires another assumes the predecessor’s liabilities. There is no “fresh start” for the acquired entity’s crimes. Deputy Attorney General Lisa Monaco clarified this stance in late 2023, warning that acquiring companies must perform due diligence or face “full successor liability.” For UBS, this presents a catastrophic legal exposure. The bank did not have months to scour Credit Suisse’s books for toxic Russian accounts; it had less than 48 hours. That absence of due diligence, while forced by the Swiss government, offers no defense in an American court. If Credit Suisse bankers in the “Northern Asia” desk were stripping metadata from wire transfers for oligarchs in 2022, as evidence suggests, UBS owns that conduct. The DOJ does not indict the ghost of Credit Suisse; it indicts the parent company, UBS Group AG.

The Failed Safe Harbor

In October 2023, the DOJ announced a “Safe Harbor” policy for mergers and acquisitions. The policy offers a presumption of declination, meaning the DOJ would likely not prosecute, if the acquiring company voluntarily self-discloses misconduct within six months of closing and remediates it within one year. UBS appears to have missed this window regarding the Russian sanctions evasion. The timeline of the DOJ’s probe indicates that subpoenas were already flying before the acquisition closed. Reports from late 2023 confirm that the DOJ was “scrutinizing” the accounts UBS inherited. Because the investigation was already active and the DOJ likely identified the problem independently or via whistleblowers, UBS cannot claim the credit for voluntary self-disclosure. The Safe Harbor policy is designed to reward companies that turn themselves in, not those that are caught holding the bag.

Double Recidivism: A Compliance Nightmare

The legal risk is compounded by the criminal histories of both banks. The DOJ calculates penalties based on a “recidivist multiplier”, a scoring system that increases fines for repeat offenders. * **Credit Suisse’s Record:** In 2014, Credit Suisse pleaded guilty to aiding tax evasion and paid $2. 6 billion. In May 2025, its subsidiary, Credit Suisse Services AG, pleaded guilty *again* for breaching that 2014 agreement and conspiring to hide assets, paying another $511 million. * **UBS’s Record:** UBS has its own 2015 plea agreement related to LIBOR manipulation and tax evasion. When these two records combine, the DOJ views the consolidated entity as a habitual offender. A finding that Credit Suisse facilitated Russian sanctions evasion would not be treated as a offense. It would be treated as a violation of probation by a corporate entity that has repeatedly promised to reform and repeatedly failed. This status strips UBS of the leniency afforded to banks that cooperate, exposing it to the maximum statutory penalties.

The “Non-Core” Containment Failure

UBS attempted to ring-fence Credit Suisse’s most toxic assets into a “Non-Core and Legacy” unit, a financial quarantine zone intended to wind down high-risk positions. Legally, this distinction is meaningless to prosecutors. A crime committed by a “Non-Core” unit is still a crime committed by the bank. The transfer of the “Northern Asia” accounts and the securitized yacht portfolios to this legacy unit does not absolve UBS. In fact, if UBS compliance officers in the legacy unit continued to process payments for these accounts, even for the purpose of exiting them, without an OFAC license, they committed new violations. The “wind-down” defense requires strict adherence to sanctions laws. If UBS allowed a single dividend payment to flow to a shell company linked to Alisher Usmanov during the integration process, the bank is liable for active sanctions busting, not just inherited guilt.

Financial Reserves vs. Reality

UBS set aside approximately $4 billion for litigation provisions related to the Credit Suisse acquisition. The math suggests this figure is optimistic. In 2014, BNP Paribas paid $8. 9 billion for sanctions violations involving Sudan, Iran, and Cuba. The geopolitical of the Russia sanctions program are significantly higher. The $511 million tax settlement in May 2025 and the $300 million RMBS settlement in August 2025 have already eaten into these reserves. These payouts addressed “legacy” problem, old crimes. They do not account for the active, radioactive probe into Russian sanctions evasion. If the DOJ proves that Credit Suisse systematically nullified U. S. sanctions laws for its oligarch clients, the fine could easily exceed the remaining reserves, directly impacting UBS’s capital structure and share price.

The “Culture of Non-Compliance”

The DOJ’s investigation also examines the “culture of non-compliance” that UBS absorbed. The Senate Finance Committee’s findings that Credit Suisse committed “major violations” of its plea agreements paint a picture of a bank that viewed penalties as a cost of doing business. By integrating Credit Suisse’s staff, specifically the relationship managers who serviced these high-net-worth Russian clients, UBS has imported that culture. Unless UBS can prove it fired every banker involved in the “Northern Asia” scheme and overhauled the compliance systems immediately upon closing, the DOJ that the infection has spread. The retention of key relationship managers to “preserve asset value” during the integration may prove to be a fatal error. In trying to save the client relationships, UBS may have saved the criminal conspiracy.

The integration of Credit Suisse was presented as a merger of two Swiss giants. In the eyes of U. S. law enforcement, it is the merger of two criminal files. UBS is no longer just a bank; it is the custodian of one of the largest archives of financial misconduct in history. The DOJ is currently reading that archive, and the bill for what they find be sent to Zurich.

The ‘Bad Bank’ Quarantine: Non-Core and Legacy (NCL) Unit

Upon the forced acquisition of Credit Suisse in June 2023, UBS Group AG immediately operationalized a containment strategy to isolate toxic assets from its own conservative balance sheet. The centerpiece of this remediation effort was the creation of the Non-Core and Legacy (NCL) unit, a corporate “bad bank” designed to house positions UBS deemed outside its risk appetite or strategically irrelevant. While the NCL publicly managed a broad swathe of complex derivatives and non-strategic loans, internal directives reveal it served a more urgent, clandestine function: acting as a quarantine zone for Credit Suisse’s radioactive Russian portfolio.

The NCL became the dumping ground for the $35 billion in Russian client assets that Credit Suisse had amassed over decades of aggressive relationship banking. By segregating these accounts, UBS attempted to ringfence the contagion risk, preventing the “cowboy” compliance culture of its former rival from infecting the wider group. This segregation was not an accounting trick a legal firewall intended to demonstrate to the U. S. Department of Justice (DOJ) and the Office of Foreign Assets Control (OFAC) that the Swiss giant was taking active, structural steps to the sanctions-evasion it had inherited.

The ‘Red Line’ Doctrine and Banker Restrictions

To enforce this quarantine, UBS leadership, led by CEO Sergio Ermotti, imposed a strict “Red Line” doctrine on incoming Credit Suisse staff. In the initial days of the integration, UBS executives distributed a list of nearly two dozen prohibited activities to Credit Suisse bankers. Chief among these was a categorical ban on onboarding new clients from high-risk jurisdictions, specifically Russia, Libya, Sudan, and Venezuela. This directive shut down the “rainmaker” culture that had defined Credit Suisse’s Russian desk, where bankers like Babak Dastmaltschi had previously operated with near-autonomy.

The doctrine went further than halting new business. It stripped Credit Suisse relationship managers of their decision-making power regarding existing Russian accounts. Bankers who had spent years cultivating oligarchs were suddenly barred from authorizing transfers, extending credit, or even modifying client profiles without explicit sign-off from UBS compliance officers. This power shift triggered a cultural purge; relationship managers accustomed to waiving compliance flags found themselves reporting to UBS overseers who viewed every Russian-linked transaction as a chance OFAC violation. The message was clear: the era of the “go-to banker” for Moscow’s elite was over.

Operation Clean Sweep: The 75% Exit Strategy

With the containment structure in place, UBS initiated a forensic review of the inherited book of business, a process insiders referred to as “Operation Clean Sweep.” The objective was to purge the client list of anyone with toxic geopolitical exposure. Reports from NZZ am Sonntag and other Swiss outlets indicated that UBS aimed to offload up to 75% of Credit Suisse’s Russian client base. This mass exodus targeted primarily “offshore” Russian clients, individuals with Russian passports residing outside Switzerland who had used Credit Suisse for cross-border wealth management.

The review process utilized an aggressive risk filter that Credit Suisse had long resisted. UBS compliance teams re-screened thousands of accounts against an expanded matrix of sanctions lists, not just from Switzerland (SECO), prioritizing U. S. (OFAC), UK (OFSI), and EU designations. Accounts that had previously survived Credit Suisse’s lax “politically exposed person” (PEP) checks were flagged for immediate decommissioning. The bank’s stance was binary: if a client’s profile suggested even a tangential link to sanctioned entities or the Kremlin’s war effort, the relationship was marked for termination.

Decommissioning vs. Freezing: The Sanctions Tightrope

The remediation process faced a serious legal paradox: the difference between “offloading” a client and “freezing” a sanctioned asset. For non-sanctioned “high-risk” Russians, UBS issued account closure notices, forcing these clients to transfer their funds to other institutions, frequently in jurisdictions with looser compliance standards like the UAE or Kazakhstan. yet, for clients already on OFAC lists, UBS could not simply ask them to leave. These assets had to be “decommissioned”, a euphemism for freezing the funds in place, stripping the client of access, and reporting the holdings to regulatory authorities.

This distinction became the focal point of the DOJ’s late 2024 inquiry. U. S. investigators scrutinized whether Credit Suisse bankers, in the months leading up to the merger, had tipped off clients to the impending crackdown, allowing them to move assets before UBS’s stricter took effect. The “decommissioning” process involved locking down accounts associated with the “Northern Asia” code and other obfuscated identifiers. UBS compliance officers were tasked with manually unravelling the complex shell company structures Credit Suisse had built, a task akin to defusing unexploded ordnance. Every dollar released or transferred carried the risk of a secondary sanctions violation.

OFAC’s November 2024 Escalation

The urgency of these remediation measures was underscored in November 2024, when OFAC formally wrote to UBS, escalating its inquiry into the inherited Russian accounts. The correspondence made it clear that the U. S. Treasury was not satisfied with a passive “wind-down.” They demanded proof that UBS was actively identifying and reporting evasion networks that had operated within Credit Suisse. This pressure forced UBS to accelerate its timeline, moving from a quarterly review cadence to real-time emergency management.

In response, UBS expanded its internal investigation, cooperating directly with U. S. authorities rather than routing information solely through the slower Swiss Federal Office of Justice channels. This direct line of communication signaled a break from Swiss banking tradition and an acknowledgment of American legal reach. The bank began providing granular data on the “decommissioned” accounts, handing over the evidence of its predecessor’s negligence to U. S. prosecutors. For UBS, the NCL unit was not just a garbage bin for bad loans; it was the evidence locker for a federal investigation.