Contract analysis

I. EXECUTIVE SUMMARY This memorandum analyzes Belmont Ridge Bank National Association's ("BRB" or the "Bank") exposure to enforcement action by the Office of Foreign Assets Control ("OFAC") within the U.S. Department of the Treasury arising from the failure to screen approximately 3,800,000 NovaPay Technologies Inc. ("NovaPay") transactions against OFAC sanctions lists during calendar year 2023. The memorandum furthe

II. BACKGROUND AND FACTUAL SUMMARY A. Belmont Ridge Bank NA — Institutional Overview Belmont Ridge Bank National Association is a nationally chartered commercial bank organized and existing under the laws of the United States, OCC Charter No. 48271, FDIC Certificate No. 31845. The Bank is headquartered at 680 Lexington Avenue, 22nd Floor, New York, New York 10022, and is a wholly owned subsidiary of Belmont Ridge Fin

III. OFAC ENFORCEMENT FRAMEWORK — LEGAL ANALYSIS A. OFAC's Statutory Authority OFAC administers and enforces comprehensive economic and trade sanctions programs based on U.S. foreign policy and national security objectives. OFAC's primary statutory authorities derive from two principal legislative frameworks: The International Emergency Economic Powers Act (IEEPA), 50 U.S.C. § 1701 et seq. IEEPA authorizes the Presid

1. Voluntary Self-Disclosure. Whether the entity voluntarily self-disclosed the apparent violation to OFAC. As discussed in detail in Section III.C below, a voluntary self-disclosure is the single most significant mitigating factor under the Enforcement Guidelines and results in a presumptive reduction in the base penalty amount.

2. Willfulness or Recklessness. Whether the apparent violation was the result of willful or reckless conduct, as opposed to negligence, an inadvertent error, or a systems-based deficiency. Willful or reckless conduct is an aggravating factor that weighs in favor of a more severe enforcement response, including potential classification of the case as "Egregious." The failure to remediate the NovaPay screening gap afte

3. Sanctions Compliance Program. The existence, nature, and adequacy of the entity's sanctions compliance program at the time of the apparent violation. OFAC expects U.S. financial institutions to maintain robust, risk-based sanctions compliance programs that include, at a minimum: (a) management commitment; (b) risk assessment; (c) internal controls (including sanctions screening); (d) testing and auditing; and (e)

4. Remedial Response. The speed, effectiveness, and comprehensiveness of the entity's remedial response upon learning of the apparent violation. BRB's remediation efforts — including the engagement of Calderwood & Harkness LLP, the Thornfield independent assessment, the Veridian TMS upgrade, the increase in BSA/AML staffing, and the Board-approved $42.5 million remediation budget — are substantial and will be viewed

5. Individual Characteristics of the Entity. The size, sophistication, and commercial activities of the entity, as well as its transaction volume with sanctioned countries or parties and its prior enforcement history. BRB's status as a $38.7 billion national bank with significant BaaS-related cross-border payment processing capabilities places it in a category of institutions from which OFAC expects a high standard o

6. Harm to Sanctions Program Objectives. Whether the apparent violation resulted in actual harm to the objectives of the applicable sanctions program — for example, whether sanctioned parties or jurisdictions actually benefited from the unscreened transactions. This factor cannot be fully evaluated until the retroactive screening lookback is complete. If the lookback reveals no actual sanctions violations, this facto

7. Cooperation with OFAC. Whether the entity cooperated with OFAC's investigation, including the timeliness, completeness, and accuracy of information provided to OFAC. A VSD filing is the most concrete and significant form of cooperation BRB can demonstrate. Conversely, the failure to file a VSD — particularly where the apparent violation is likely already known to OFAC through interagency channels — could be charac

IV. RISK ASSESSMENT — POTENTIAL OFAC PENALTY EXPOSURE A. Scenario Analysis BRB's potential OFAC penalty exposure is contingent upon the results of the retroactive screening lookback currently being conducted on the approximately 3,800,000 unscreened NovaPay transactions. Until those results are available, the analysis must necessarily proceed on the basis of scenarios reflecting different possible outcomes. C&H has i

V. MITIGATING FACTORS FAVORING A VSD FILING A. OFAC's Framework Rewards Self-Disclosure As detailed in Section III above, a voluntary self-disclosure is the single most significant mitigating factor under OFAC's Enforcement Guidelines. The framework is explicitly designed to incentivize self-reporting: entities that come forward proactively receive substantially more favorable treatment than those whose violations ar