PRIVILEGED AND CONFIDENTIAL — ATTORNEY-CLIENT PRIVILEGE / ATTORNEY WORK PRODUCT
CALDERWOOD & HARKNESS LLP 1750 Pennsylvania Avenue NW, Suite 800 Washington, DC 20006
MEMORANDUM
TO: Victoria Chambers, Responsible Partner Jasmine Thornton, Lead Associate Conrad Reeves, Senior Counsel, Export Controls & Sanctions
FROM: Liam Donahue, Working Associate, White Collar & Investigations (New York)
DATE: July 20, 2022
RE: Caspian Logistik GmbH — Export Shipment Analysis & End-User Certificate Review
MATTER: Dunmore Energy Holdings Ltd. — DOJ Sanctions & Export Controls Inquiry (Matter No. 1016-00009)
CONFIDENTIALITY LEGEND: This memorandum is protected by the attorney-client privilege and constitutes attorney work product prepared in anticipation of litigation. It is prepared at the direction of counsel for Dunmore Energy Holdings Ltd. in connection with the pending DOJ inquiry. Do not distribute without authorization of Victoria Chambers.
Right-click to update Table of Contents
I. Executive Summary
The purpose of this memorandum is to analyze approximately $12.4 million in oilfield drilling equipment and components exported by Dunmore Trading International Ltd. ("DTI") through Caspian Logistik GmbH ("Caspian Logistik"), a Hamburg-registered logistics company, between approximately August 2020 and January 2022. Over this eighteen-month period, DTI facilitated seven discrete shipments of controlled oilfield equipment and components — including drilling mud pump components, wellhead assemblies, blowout preventer components, rotary steerable drilling system parts, mud logging equipment, and coiled tubing units — that were routed through Caspian Logistik's Hamburg operations for onward delivery to purported end users in Kazakhstan, Azerbaijan, and, in one instance, Russia.
Caspian Logistik served as the principal logistics intermediary for these shipments, managing freight forwarding, container bookings, customs filings, and related shipping documentation. The items shipped are classified under the Export Administration Regulations ("EAR") at Export Control Classification Numbers ("ECCN") 2B350 and ECCN 2B999, both of which encompass dual-use oilfield equipment subject to license requirements for export or re-export to Russia and Belarus.
Our analysis of the end-user certifications ("EUCs") associated with the seven identified shipments reveals significant irregularities that call into question the authenticity of the stated end users and, more critically, point to the potential falsification of end-user statements designed to conceal the true Russian end users. Specifically, the evidence developed to date — including forensic financial analysis, corporate registry searches, document review, and witness interviews — strongly suggests that the ultimate consignee for a substantial majority of these shipments was Volkhov Industrial Group JSC ("Volkhov" or "VIG"), a major Russian energy conglomerate headquartered in Moscow. Volkhov has been subject to OFAC Directive 2 sectoral sanctions since November 15, 2019 (pursuant to Executive Order 13662), and was subsequently added to the OFAC Specially Designated Nationals and blocked Persons ("SDN") List on April 6, 2022 (pursuant to Executive Order 14024), subjecting it to comprehensive blocking sanctions.
These exports potentially violated EAR §746.5 (governing exports to Russia and Belarus), OFAC prohibitions on transactions involving designated Russian energy-sector entities under Directive 2 of Executive Order 13662, and federal false-statement statutes (18 U.S.C. §1001) related to the submission of fraudulent end-user certifications. The evidence further suggests that the scheme involved deliberate structuring of payment flows through intermediary entities to obscure the ultimate source and destination of funds, and that the logistics routing through Hamburg was specifically designed to create a layer of separation between the U.S.-origin components and their Russian end destination.
This memorandum draws upon multiple workstreams and investigative resources. The document review component relies on the production managed by Nexagen Analytics Inc. (Project No. NX-DEH-2204), which has processed and hosted the electronic and hard-copy documents produced in response to the grand jury subpoena and internal investigation requests. Forensic financial analysis was conducted by Ridgeline Advisory Group LLC (Engagement No. RAG-2022-0319), under the direction of Dr. Margaret Liu, which traced payment flows associated with the equipment transactions through multiple layers of intermediary accounts. The memorandum also incorporates findings from two key witness interviews: the interview of Yves Leclerc, Director of Logistics & Shipping at DTI, conducted on June 22, 2022 by Amara Osei; and the interview of Derek Hargrave, President of DTI, conducted on May 25, 2022 by Victoria Chambers. Additional context is drawn from the interview of Natasha Sorokin, conducted on June 2, 2022 by Jasmine Thornton and Liam Donahue, as well as from cross-reference memoranda prepared by other members of the Calderwood & Harkness investigative team, as cited throughout.
Our key finding is as follows: of the seven shipments analyzed, the evidence strongly suggests that end-user certificates were falsified to misrepresent the ultimate consignees for at least six of the seven shipments, and that the seventh shipment — which openly identified a Russian end user — proceeded without the required BIS license. The evidence further indicates that Caspian Logistik, under its Managing Director Klaus Weidemann, was complicit in or, at minimum, aware of the true Russian end-user destinations and actively participated in the logistics arrangements designed to obscure those destinations. Within DTI, the evidence points to the direct involvement and knowledge of Derek Hargrave (President, DTI) and Natasha Sorokin (Senior Trader, DTI), with Yves Leclerc (Director of Logistics & Shipping, DTI) possessing at least partial knowledge and having attempted, in one instance, to escalate concerns that were overridden by Hargrave.
This memorandum is organized as follows: Section II provides background on the relevant entities and the procedural context of the DOJ inquiry. Section III sets forth the applicable legal framework, including the EAR, OFAC sanctions authorities, end-user certificate requirements, and the U.S. person jurisdictional nexus. Section IV describes the scope of the equipment exports, including a detailed shipment schedule. Section V presents our analysis of the end-user certifications and their irregularities. Section VI assesses the roles of key individuals. Section VII summarizes the forensic financial analysis of payment flows. Section VIII analyzes the potential legal violations. Section IX evaluates the evidence of knowledge and intent. Section X discusses the connection to the broader Petronova/Volkhov investigation. Section XI sets forth our recommendations for immediate actions, further investigation, and remediation. Section XII lists document and interview references, and Section XIII identifies appendices that are referenced but not included in this memorandum.
II. Background
A. Dunmore Trading International Ltd. — Overview
Dunmore Trading International Ltd. ("DTI") is a limited company organized and registered under the laws of the Dubai International Financial Centre ("DIFC"), holding DIFC License No. CL-4827. DTI's principal office is located at Level 14, Gate Building 3, Dubai International Financial Centre, P.O. Box 506774, Dubai, United Arab Emirates. DTI was established as the primary overseas trading desk for Dunmore Energy Holdings Ltd. ("DEH" or "Dunmore"), responsible for the execution of crude oil, refined products, and oilfield equipment transactions across the Middle East, Central Asia, and other international markets.
Dunmore Energy Holdings Ltd. is a Cayman Islands exempted company (Registration No. MC-334821), with its operational headquarters at 1200 McKinney Street, Suite 3400, Houston, Texas 77010. DEH serves as the ultimate parent entity for the Dunmore group of companies, which includes, among other subsidiaries, DTI, Dunmore upstream Americas LLC (a Delaware limited liability company discussed further below), and Dunmore Renewables GmbH (a German entity based in Hamburg). The corporate structure of the Dunmore group and the interrelationships among its subsidiaries are analyzed in detail in Jasmine Thornton's May 10, 2022 memorandum on corporate structure and U.S. person analysis, which is incorporated by reference herein.
DTI was supervised during the period at issue by Derek Hargrave, who held the title of President, Dunmore Trading International Ltd. Hargrave was the most senior DTI executive with direct operational authority over the trading desk's activities, including both crude oil and equipment transactions. Hargrave reported to DEH's executive leadership in Houston, though the precise lines of reporting authority and the degree of oversight exercised by Houston over DTI's day-to-day operations remain subjects of ongoing investigation. Hargrave was placed on administrative leave effective July 1, 2022, following the initiation of the internal investigation into the matters described herein, and was formally separated from the company effective October 1, 2022.
Several additional DTI personnel are central to the equipment export transactions at issue in this memorandum:
• Natasha Sorokin, Senior Trader, DTI. Sorokin was the primary commercial officer responsible for sourcing and negotiating oilfield equipment transactions. She maintained the key commercial relationships with counterparties, including Sergei Volkov of Petronova Trading FZE, and communicated directly with equipment end users or their purported representatives regarding specifications and delivery requirements. Sorokin is a Russian-American dual national. She was placed on administrative leave effective May 16, 2022, and was formally separated from DTI effective September 15, 2022.
• Yves Leclerc, Director of Logistics & Shipping, DTI. Leclerc, a French national based in Dubai, was the operational point of contact for all shipping and logistics matters, including coordination with Caspian Logistik GmbH. Leclerc arranged container bookings, managed shipping documentation, and received end-user certificates from the freight forwarder. Leclerc has not been placed on administrative leave and is currently cooperating with the internal investigation.
• Rajesh Malhotra, Controller, DTI. Malhotra was responsible for the financial processing of equipment transactions, including the issuance and receipt of payments through Crescent Commercial Bank PJSC in Dubai. Malhotra maintained the banking relationships and processed wire transfers and payment instructions. Malhotra is based in Dubai and remains employed by DTI.
• Omar Al-Rashidi, Head of Middle East Operations, DTI. Al-Rashidi has been identified as a cooperating witness in connection with the internal investigation and has provided information regarding DTI's operations and the relationships among key personnel. Al-Rashidi's role in the equipment export transactions appears to have been peripheral, though his knowledge of the broader DTI operational environment has been useful in contextualizing the conduct at issue.
B. Caspian Logistik GmbH — Corporate Profile
Caspian Logistik GmbH is a Gesellschaft mit beschränkter Haftung (GmbH) — a limited liability company organized under the laws of the Federal Republic of Germany. The entity is registered with the Hamburg Handelsregister (commercial register) and maintains its registered address at Mönckebergstraße 22, 20095 Hamburg, Germany. The Managing Director (Geschäftsführer) of Caspian Logistik is Klaus Weidemann, a German national who has served in that capacity since the company's founding.
Caspian Logistik held itself out to customers and industry counterparties as a specialized logistics provider for oilfield and industrial equipment, with particular expertise in shipping routes from Northern Europe — principally the Port of Hamburg — to Central Asia (Kazakhstan, Uzbekistan, Turkmenistan) and the Middle East (UAE, Saudi Arabia, Oman). The company offered comprehensive freight forwarding services, including container booking, customs clearance, documentation preparation, insurance coordination, and transshipment management. Caspian Logistik maintained relationships with multiple international shipping lines and had established logistics corridors through the Black Sea and Caspian Sea regions, which are relevant to the routing of the shipments at issue.
It is important to note that the relationship between DTI and Caspian Logistik predates the conduct under investigation. According to DTI records reviewed in the Nexagen document set, Caspian Logistik had been used as a logistics provider for legitimate shipments of industrial equipment since approximately 2017. These earlier shipments, which predate the period of concern, appear on their face to have been routine commercial transactions with verifiable end users and standard documentation. The fact that the relationship had a legitimate commercial foundation may have contributed to a reduced level of scrutiny within DTI when the nature of the shipments began to shift toward the suspect transactions identified herein.
Caspian Logistik GmbH is currently under investigation by German authorities for potential violations of German and European Union export control regulations involving dual-use items falling within EAR Category 2. Our firm has been in contact with German counsel (Hessler & Krug, Hamburg) regarding the status of the German investigation, though we have not had direct contact with Klaus Weidemann or his personal legal representatives. The existence of the parallel German investigation has implications for the coordination of the U.S. and German enforcement proceedings and for any potential mutual legal assistance requests.
C. Volkhov Industrial Group JSC — Designation Status
Volkhov Industrial Group JSC (Joint Stock Company) is a major Russian energy and industrial conglomerate headquartered at 12 Kutuzovsky Prospekt, Moscow 121248, Russian Federation. The company is chaired by Arkady Volkhov, who also serves as its principal beneficial owner. Volkhov Industrial Group operates across the Russian energy sector, including upstream exploration and production, oilfield services, pipeline construction, and related industrial activities. The company controls a network of subsidiaries and affiliated entities, both within Russia and internationally, which are relevant to the sanctions analysis discussed in this memorandum and in Conrad Reeves's OFAC 50% Rule analysis (June 20, 2022).
The sanctions designation history of Volkhov Industrial Group is as follows:
• November 15, 2019: Volkhov Industrial Group JSC was designated under OFAC Directive 2, issued pursuant to Executive Order 13662 of March 20, 2014 ("Blocking Property of Additional Persons Contributing to the Situation in Ukraine"). Directive 2 imposed sectoral sanctions on specified entities operating in the energy sector of the Russian Federation, prohibiting U.S. persons from engaging in certain categories of transactions with the designated entities, including the provision of goods, services, or technology in support of exploration or production for deepwater, Arctic offshore, or shale projects. The Directive 2 prohibitions were targeted rather than comprehensive — they did not constitute a full asset freeze or blocking of all transactions — but they significantly restricted the types of commercial dealings that U.S. persons could lawfully conduct with Volkhov.
• April 6, 2022: Volkhov Industrial Group JSC was added to the OFAC Specially Designated Nationals and blocked Persons ("SDN") List pursuant to Executive Order 14024 of April 15, 2021 ("Blocking Property With Respect To Specified Harmful Foreign Activities of the Government of the Russian Federation"). The SDN listing imposed comprehensive blocking sanctions, requiring U.S. persons to block all property and interests in property of Volkhov Industrial Group and prohibiting all transactions with the entity. While the SDN listing postdates the last identified shipment (January 2022), the earlier Directive 2 designation was in effect throughout the entire period of the equipment export conduct at issue.
The distinction between the Directive 2 sectoral sanctions and the subsequent full SDN blocking sanctions is significant for the legal analysis in Section VIII of this memorandum. Under Directive 2, the prohibitions were limited to specific categories of energy-sector transactions, and the question of whether a particular equipment export fell within the scope of those prohibitions requires careful analysis of the nature of the equipment, the end use, and the specific Directive 2 restrictions. Under the full SDN listing, by contrast, all transactions involving Volkhov are prohibited, and the analysis is more straightforward. However, because the SDN listing was not imposed until April 6, 2022 — after the final identified shipment in January 2022 — the Directive 2 analysis is the primary OFAC framework applicable to the conduct at issue.
D. Procedural Context
The investigation that gives rise to this memorandum was initiated following the receipt of a federal grand jury subpoena. Grand Jury Subpoena No. GJ 22-418 was issued on April 19, 2022, by the United States District Court for the District of Columbia, in connection with Grand Jury 22-2. The subpoena was directed to Dunmore Energy Holdings Ltd. and sought the production of all documents related to Caspian Logistik GmbH and any export, re-export, or transfer of oilfield equipment or components to Russia, Belarus, or any entity appearing on the OFAC SDN List, the BIS Entity List, or the BIS Denied Persons List, from January 1, 2019 forward. The subpoena also requested corporate formation documents, banking records, correspondence with specified individuals and entities, and internal compliance program materials.
The DOJ investigation is being led by the National Security Division, Counterintelligence and Export Control Section ("CES"). The lead prosecutor is Assistant United States Attorney Meredith Calloway, who is supported by trial attorneys Samuel Kovacs and Diana Pressman. AUSA Calloway has served as the primary point of contact for Calderwood & Harkness in connection with the investigation and has communicated, through counsel, the government's interest in the full scope of DTI's oilfield equipment transactions, the role of Caspian Logistik as a logistics intermediary, and the adequacy of Dunmore's pre-existing compliance program. The FBI case agent assigned to the investigation is Special Agent Paul Reinhardt of the FBI Counterintelligence Division, Washington Field Office. SA Reinhardt has participated in the government's document requests and has been present at the proffer sessions conducted to date.
Dunmore Energy Holdings Ltd. retained Calderwood & Harkness LLP to conduct the internal investigation and to represent the company in connection with the DOJ inquiry. The firm's engagement commenced on or about April 25, 2022, six days after the receipt of the grand jury subpoena. The internal investigation has proceeded on multiple parallel workstreams, of which the Caspian Logistik equipment export analysis is one. Other workstreams include the crude oil swap transactions involving Petronova Trading FZE and Zenith Petroleum DMCC, the beneficial ownership analysis of Petronova, the assessment of the pre-existing compliance program, the structured payment analysis, and the individual liability assessments for key personnel.
III. Applicable Legal Framework
A. Export Administration Regulations (EAR)
The Export Administration Regulations, codified at 15 C.F.R. Parts 730–774, govern the export, re-export, and transfer (in-country) of dual-use items — that is, items that have both commercial and potential military or proliferation-related applications — from the United States, as well as items subject to U.S. jurisdiction that are located outside the United States. The EAR is administered by the Bureau of Industry and Security ("BIS") within the U.S. Department of Commerce. The statutory authority for the EAR is provided by the Export Control Reform Act of 2018 ("ECRA"), codified at 50 U.S.C. §§ 4801–4852, which established a comprehensive framework for the control of exports and re-exports in the interest of national security, foreign policy, and nonproliferation objectives.
EAR §746.5, as amended, imposes specific license requirements and policy restrictions on exports, re-exports, and transfers (in-country) to Russia and Belarus. These requirements were significantly expanded following Russia's invasion of Ukraine in February 2022, but the pre-February 2022 version of §746.5 also imposed license requirements for certain categories of items, including items classified under EAR Category 2 (Materials Processing). Throughout the period of the equipment export conduct at issue in this memorandum (August 2020 through January 2022), §746.5 required a license for the export or re-export to Russia of items classified under the ECCNs relevant to this analysis, and the licensing policy was one of presumptive denial for items that would contribute to Russia's energy sector capabilities.
The items at issue in the seven identified shipments fall under two Export Control Classification Numbers within EAR Category 2:
• ECCN 2B350: This classification encompasses equipment that can be used in the production of chemical weapons precursors, as well as certain types of processing equipment with broader industrial applications. In the oilfield context, specific drilling and processing equipment components — including certain wellhead assemblies, valve systems, and specialized sensors — fall within Category 2 (Materials Processing) under ECCN 2B350. The classification of these items under 2B350 is based on their technical parameters and potential applications, as analyzed in Conrad Reeves's May 5, 2022 memorandum on EAR §746.5 and ECCN classification, which provides a detailed item-by-item classification analysis.
• ECCN 2B999: This classification covers specific processing equipment not elsewhere specified within Category 2, including certain oilfield drilling components and parts that do not meet the precise technical thresholds of other ECCNs within Category 2 but are nonetheless controlled for reasons related to regional stability, anti-terrorism, or national security. Items classified under ECCN 2B999 include drilling mud pump components, downhole tool assemblies, rotary steerable drilling system parts, and coiled tubing units, as identified in the shipment schedule set forth in Section IV.B below.
With respect to license exception availability, our initial assessment — which is consistent with Conrad Reeves's May 5, 2022 classification analysis — is that no license exceptions were available for the export or re-export of items classified under ECCN 2B350 or ECCN 2B999 to Russia during the period at issue. The relevant license exceptions under Part 740 of the EAR (including, inter alia, License Exception TMP for temporary exports, License Exception RPL for servicing and replacement of parts, and License Exception GOV for government-related transactions) either do not apply to Russia-destined items in the relevant ECCNs or have specific exclusions for items controlled under Category 2 when the destination is a country subject to the sanctions restrictions of §746.5. Accordingly, any export or re-export of the items at issue to a Russian end user or ultimate destination required a specific BIS license, and no such license was obtained or applied for by DTI, Caspian Logistik, or any other party to these transactions.
The enforcement provisions of ECRA, 50 U.S.C. §§ 4819–4820, provide both civil and criminal penalties for violations of the EAR. Civil penalties may include fines of up to the greater of $300,000 per violation or twice the value of the transaction at issue. Criminal penalties for willful violations include fines of up to $1,000,000 per violation and imprisonment of up to twenty years. The criminal penalties require proof of willfulness — that is, that the defendant acted with knowledge that the conduct was unlawful or with willful blindness to the legal requirements.
B. OFAC Sanctions — Directive 2 and SDN Implications
The Office of Foreign Assets Control ("OFAC") within the U.S. Department of the Treasury administers and enforces economic sanctions programs targeting specific countries, entities, and individuals. The Russia-related sanctions relevant to this memorandum are implemented through regulations codified at 31 C.F.R. Part 589 and through a series of Executive Orders.
Directive 2 under Executive Order 13662. Executive Order 13662, issued on March 20, 2014, authorized the imposition of sectoral sanctions on specified sectors of the Russian economy. Directive 2, as amended, prohibits U.S. persons from transacting in, providing financing for, or otherwise dealing in new debt of longer than 90 days maturity or new equity of persons determined to operate in the energy sector of the Russian Federation identified on OFAC's Sectoral Sanctions Identifications ("SSI") List. In addition, Directive 2 prohibitions were interpreted by OFAC guidance to encompass certain categories of goods, services, and technology provided in support of exploration or production for deepwater, Arctic offshore, or shale projects in Russia, when such goods, services, or technology are provided to or for the benefit of Directive 2-designated entities. Volkhov Industrial Group JSC was designated under Directive 2 effective November 15, 2019. Accordingly, from that date forward, U.S. persons were prohibited from engaging in the categories of transactions specified in Directive 2 with Volkhov or its Directive 2-designated subsidiaries.
Executive Order 14024 and Full SDN Designation. Executive Order 14024, issued on April 15, 2021, expanded U.S. sanctions authorities with respect to Russia by authorizing the blocking of property and interests in property of persons determined to operate or have operated in specified sectors of the Russian economy, or to be owned or controlled by, or to have acted or purported to act for or on behalf of, the Government of the Russian Federation. Pursuant to E.O. 14024, Volkhov Industrial Group JSC was added to the SDN List on April 6, 2022, subjecting it to comprehensive blocking sanctions. Under the SDN designation, all property and interests in property of Volkhov Industrial Group that are in the United States or in the possession or control of U.S. persons must be blocked (frozen), and U.S. persons are generally prohibited from engaging in any transactions with Volkhov. However, as noted above, the SDN designation postdates the last identified shipment (January 2022), and the Directive 2 analysis is therefore the primary OFAC framework for the shipments at issue.
Criminal Penalties under IEEPA. The International Emergency Economic Powers Act ("IEEPA"), 50 U.S.C. §§ 1701–1706, provides the statutory authority underlying the Executive Orders and OFAC regulations governing Russia sanctions. Section 1705 of IEEPA imposes criminal penalties for willful violations of OFAC sanctions, including fines of up to $1,000,000 and imprisonment of up to twenty years. Civil penalties under IEEPA may reach the greater of $356,579 per violation (as adjusted for inflation) or twice the value of the transaction. The willfulness standard for criminal IEEPA prosecutions requires proof that the defendant acted with knowledge that the conduct was unlawful, though willful blindness may satisfy this standard.
C. End-User Certificate Requirements
The EAR requires that exporters obtain and maintain accurate end-user statements for controlled items. Specifically, 15 C.F.R. §748.11 sets forth requirements for end-user certifications that must accompany certain license applications and that serve as documentary evidence of the identity of the ultimate consignee and end user for controlled items. While the specific regulatory requirements for EUCs vary depending on the transaction type and the applicable license condition, the fundamental principle is that the exporter must obtain a certification from the end user confirming the identity of the end user, the end use of the items, and the commitment not to re-export, transfer, or divert the items without proper authorization.
Additionally, 15 C.F.R. §744.11 establishes the "knowledge" standard for end-use and end-user controls. Under this provision, no person may export, re-export, or transfer items subject to the EAR with "knowledge" that the items will be used in prohibited end uses or diverted to prohibited end users. The term "knowledge" is defined broadly under the EAR to include not only actual knowledge but also an awareness of a high probability of the existence of a relevant fact, unless the person actually believes the fact does not exist. This standard encompasses willful blindness — that is, deliberate avoidance of knowledge of facts that would make a transaction unlawful.
The submission of false end-user certifications has significant legal consequences. At the federal level, false statements in connection with export transactions may give rise to charges under 18 U.S.C. §1001, which criminalizes the knowing and willful making of materially false, fictitious, or fraudulent statements or representations in any matter within the jurisdiction of the executive, legislative, or judicial branch of the United States Government. False EUCs may also form the basis for specific export control charges under the EAR, which prohibit false or misleading representations in connection with export, re-export, or transfer transactions. The EAR specifically prohibits the making of any false or misleading representation, statement, or certification in connection with any item subject to the regulations. See 15 C.F.R. §764.2(g).
For purposes of this memorandum, the critical legal question regarding the EUCs is whether DTI personnel — specifically Hargrave, Sorokin, and Leclerc — knew or had reason to know that the stated end users on the EUCs were not the true ultimate consignees for the equipment, and that the equipment was actually destined for end users in Russia, including entities affiliated with Volkhov Industrial Group. The evidence developed to date, as discussed in Sections V and IX below, strongly suggests that the answer is yes.
D. U.S. Person Nexus
The applicability of the EAR and OFAC sanctions to the transactions at issue depends in significant part on the existence of a sufficient U.S. jurisdictional nexus. Both the EAR and OFAC regulations apply to "U.S. persons" and to transactions involving items subject to U.S. jurisdiction, but the precise contours of the jurisdictional nexus vary between the two regulatory frameworks.
The U.S. person and jurisdictional nexus analysis for the Dunmore corporate structure is addressed in detail in Jasmine Thornton's May 10, 2022 memorandum, which is incorporated by reference. For purposes of this memorandum, the key points of the jurisdictional nexus analysis are as follows:
First, DTI's use of U.S.-dollar-denominated payments processed through U.S. correspondent banking channels creates a direct U.S. jurisdictional nexus for the transactions. Under OFAC's interpretation of IEEPA and the relevant Executive Orders, the processing of a U.S.-dollar-denominated transaction through a U.S. financial institution — including through a correspondent banking relationship — brings the transaction within the scope of U.S. sanctions jurisdiction, even if the underlying parties are non-U.S. persons located outside the United States. The evidence developed by Ridgeline Advisory Group confirms that payments for the equipment transactions at issue were processed in U.S. dollars through correspondent banking channels at U.S. financial institutions, as discussed in Section VII below.
Second, Dunmore upstream Americas LLC (EIN 84-2937561), a Delaware limited liability company and DEH subsidiary, with its principal office at 1200 McKinney Street, Suite 3400, Houston, Texas 77010, directly procured certain equipment components from U.S.-based manufacturers for inclusion in the shipments at issue. The involvement of a U.S. entity in the procurement chain creates a direct EAR nexus for those items, as the items are of U.S. origin and subject to the EAR regardless of their subsequent physical location or the nationality of the parties involved in downstream transactions. The procurement records reviewed in the Nexagen document set indicate that Dunmore upstream Americas LLC purchased components from at least two U.S. manufacturers — the names and specific components are addressed in Appendix A — and shipped those components to Hamburg for consolidation with European-sourced items by Caspian Logistik.
Third, Natasha Sorokin is a Russian-American dual national, which renders her a "U.S. person" for purposes of both the EAR and OFAC regulations. As a U.S. person, Sorokin was independently subject to the prohibitions of the EAR and OFAC sanctions, regardless of her physical location in Dubai or the nationality of the entities on whose behalf she was acting.
IV. Scope of Equipment Exports
A. Overview of Shipments
Between August 2020 and January 2022, DTI facilitated the export of oilfield drilling equipment and components in seven discrete shipments with a total aggregate value of approximately $12.4 million. All seven shipments were routed through Caspian Logistik GmbH in Hamburg, which served as the logistics intermediary responsible for freight forwarding, consolidation, container booking, documentation, and customs clearance.
The equipment shipped across these seven transactions encompasses a range of oilfield drilling and production components, including drilling mud pump components, wellhead assemblies and valves, downhole tool assemblies, blowout preventer ("BOP") components, rotary steerable drilling system parts, mud logging equipment and sensors, and coiled tubing units and components. These items are essential components of modern oilfield drilling operations and have significant commercial value in the global energy equipment market.
The shipments originated from multiple sourcing points, reflecting the international nature of the Dunmore group's procurement operations and the global supply chain for oilfield equipment:
• U.S.-origin components were procured by Dunmore upstream Americas LLC from manufacturers located in Houston, Texas, and other U.S. locations. These components were shipped from U.S. ports to Hamburg, Germany, for consolidation with other items at Caspian Logistik's warehouse and logistics facilities. The U.S.-origin components are directly subject to the EAR as items of U.S. origin, and their inclusion in the shipments creates an unambiguous EAR jurisdictional nexus.
• European-origin components were sourced from third-party manufacturers in Germany, the Netherlands, and the United Kingdom. These components were delivered to Caspian Logistik in Hamburg for consolidation with U.S.-origin items. While these components may not be of U.S. origin, they may nonetheless be subject to the EAR under the de minimis rule (15 C.F.R. §734.4) or the foreign direct product rule (15 C.F.R. §734.9), depending on whether they incorporate controlled U.S.-origin content or are the direct product of U.S.-origin technology or software. The de minimis and direct product rule analyses for these items are addressed in Conrad Reeves's May 5, 2022 classification memorandum.
• In all cases, the consolidated shipments were dispatched from the Port of Hamburg by Caspian Logistik to the stated end-user destinations, using commercial shipping lines and standard containerized freight.
B. Detailed Shipment Schedule
The following table summarizes the seven identified shipments, including the shipment date, equipment description, ECCN classification, approximate value, and stated end user as identified on the accompanying end-user certificate. A more detailed version of this table, including Bates references for source documents, vessel and container identification numbers, and port-of-discharge information, is provided in Appendix A.
Total: Seven identified shipments; aggregate value approximately $12,400,000.
Several observations about the shipment pattern are noteworthy. First, the shipments were spaced at approximately two- to three-month intervals over an eighteen-month period, suggesting a sustained and recurring procurement relationship rather than isolated or opportunistic transactions. Second, only three named end users appear across all seven shipments — "Central Asia Energy Services" (three shipments), "Caspian Drilling Solutions Ltd." (three shipments), and "Ural Technical Supplies" (one shipment) — indicating a concentrated customer base that, as discussed in Section V below, raises significant red flags. Third, the equipment shipped constitutes a comprehensive suite of drilling and production components that, taken together, would support a fully operational upstream drilling program — a pattern consistent with a systematic effort to equip a specific end user's drilling operations rather than to supply disparate customers with individual components. Fourth, the aggregate value of approximately $12.4 million, while substantial, represents only a portion of the total transaction flows between DTI and entities ultimately connected to Volkhov Industrial Group, as discussed in Section X below.
C. Sourcing and Procurement Process
The procurement and export process for the equipment transactions followed a consistent operational pattern across all seven shipments, based on our review of the purchase orders, invoices, correspondence, and other documents in the Nexagen document set.
Natasha Sorokin, as Senior Trader, was the primary commercial point of contact for the equipment transactions. Sorokin communicated with counterparties regarding equipment specifications, quantities, pricing, and delivery schedules. The correspondence reviewed indicates that Sorokin received technical specifications and equipment requirements from individuals who, based on the email addresses and contextual indicators discussed in Section V below, appear to have been affiliated with the ultimate Russian end users rather than with the stated Kazakh and Azerbaijani entities named on the EUCs. Sorokin coordinated with Dunmore upstream Americas LLC in Houston and with European-based manufacturers to source the required components.
Yves Leclerc, as Director of Logistics & Shipping, managed the logistics and shipping documentation for each transaction. Leclerc arranged container bookings with Caspian Logistik, coordinated the delivery of components from various sourcing points to Caspian Logistik's Hamburg facility for consolidation, and managed the preparation and review of shipping documentation, including bills of lading, packing lists, commercial invoices, and customs declarations. Notably, Leclerc received the end-user certificates from Caspian Logistik GmbH — not directly from the stated end users — a procedural irregularity that is discussed further in Section V below.
Purchase orders and invoices reviewed within the responsive production (Bates-stamped documents in the Nexagen system) consistently identify DTI as the purchasing entity and Caspian Logistik GmbH as the consignee and freight forwarder. The purchase orders bear DTI's DIFC address and reference DTI's commercial accounts. The invoices from equipment suppliers are directed to DTI, with payment instructions referencing DTI's accounts at Crescent Commercial Bank PJSC in Dubai.
Rajesh Malhotra, as Controller, processed all payments for the equipment transactions through Crescent Commercial Bank PJSC, where DTI maintained its primary operating accounts. Malhotra's payment processing for the equipment transactions is included within the broader universe of $34.2 million in structured payment flows identified by Ridgeline Advisory Group across all DTI transaction types during the period March 2020 through March 2022. The relationship manager at Crescent Commercial Bank for the DTI accounts was Khalid Mansour. The payment flows associated with the equipment transactions are discussed in greater detail in Section VII below.
Under DTI's internal authorization matrix, all equipment transactions exceeding $500,000 in value required the approval of the DTI President. Accordingly, Derek Hargrave approved all seven of the identified shipments, as each exceeded the $500,000 threshold. The authorization records for these transactions, including Hargrave's approvals, have been reviewed in the Nexagen document set and are referenced in Appendix E.
V. End-User Certificate Analysis
A. Structure of the End-User Certifications
Each of the seven identified shipments was accompanied by an end-user certificate ("EUC") purportedly signed by an authorized representative of the stated end user. The EUCs were presented to DTI as documentary evidence of the identity, location, and intended use of the equipment, and served as the primary — and, as discussed below, the essentially sole — compliance documentation relied upon by DTI to satisfy its end-user verification obligations under the EAR.
The EUCs followed a standard format that is common in the international oilfield equipment trade. Each certificate contained the following certifications, expressed in substantially similar language across all seven documents:
(i) The items described in the certificate would be used solely by the named end user at the identified location and for the stated commercial purpose (oilfield drilling and production operations).
(ii) The items would not be re-exported, transferred, or diverted to any third party, country, or destination without prior written authorization from the exporter and, where applicable, from the relevant governmental authorities.
(iii) The items would not be used in connection with the design, development, production, stockpiling, or use of chemical, biological, or nuclear weapons, or in connection with missiles capable of delivering such weapons, or for any military end use.
The EUCs were submitted to Caspian Logistik GmbH in its capacity as the freight forwarder and logistics agent for the transactions, and were provided by Caspian Logistik to DTI. This is a critical procedural point: DTI did not receive the EUCs directly from the stated end users, but rather received them through the intermediary of Caspian Logistik. This chain of custody for the EUCs means that Caspian Logistik — and specifically Klaus Weidemann, who managed the DTI account — served as the gatekeeper for the authenticity and reliability of the end-user documentation.
B. Stated End Users — Analysis
1. "Central Asia Energy Services" (Almaty, Kazakhstan)
"Central Asia Energy Services" is identified as the end user on the EUCs for Shipments 1, 3, and 6, representing a total stated value of approximately $4.7 million. These shipments comprised drilling mud pump components (Shipment 1, August 2020), downhole tool assemblies (Shipment 3, February 2021), and mud logging equipment and sensors (Shipment 6, October 2021).
Our investigation has revealed the following concerning this purported entity:
Corporate registry searches. Through local counsel in Kazakhstan (Aitken & Partners, Almaty), we conducted searches of the Kazakh state corporate registry and the national register of business entities. These searches revealed no entity registered under the exact name "Central Asia Energy Services" at the address listed on the EUCs or at any other address in Almaty or elsewhere in Kazakhstan. While there are entities in Kazakhstan with similar names in the energy services sector, none match the precise corporate name, address, or identified representative ("Mr. A. Karimov, Director") stated on the EUCs. The absence of a verifiable corporate registration for the named end user is a significant indicator that "Central Asia Energy Services" is a fictitious or shell entity created for the purpose of providing false end-user documentation.
Address verification. The address listed on the EUCs for "Central Asia Energy Services" was investigated through local counsel and corresponds to a shared commercial office space — a serviced office facility — in central Almaty. Inquiries with the facility management confirmed that no tenant or occupant matching the name "Central Asia Energy Services" maintained a presence at that address during the relevant period. The address appears to have been a virtual office or mail-forwarding address rather than a functioning business premises.
Email domain analysis. Correspondence related to these shipments, reviewed within the Nexagen document set, was conducted using email addresses associated with a domain purportedly belonging to "Central Asia Energy Services." Technical analysis of the email metadata — including IP address geolocation and mail server identification — revealed that the email communications originated from IP addresses geolocated in Moscow, Russia, not Almaty, Kazakhstan. This finding is strongly inconsistent with the representation that "Central Asia Energy Services" was a Kazakhstan-based entity conducting legitimate commercial operations from Almaty.
Financial tracing. Ridgeline Advisory Group's forensic analysis traced the payment flows associated with Shipments 1, 3, and 6. The payments originated from DTI's accounts at Crescent Commercial Bank PJSC and were routed through a series of intermediary accounts at banks in the UAE, Turkey, and Georgia before reaching Caspian Logistik. Critically, Ridgeline's tracing identified that the ultimate source of funding for these transactions — that is, the payments from the purported "buyer" that originally placed the orders — was traceable to accounts held by Petronova Trading FZE and its affiliated entities. Petronova Trading FZE is managed by Sergei Volkov and has been identified in a separate workstream (see Liam Donahue's June 15, 2022 beneficial ownership analysis and Conrad Reeves's June 20, 2022 OFAC 50% Rule analysis) as being beneficially owned or controlled by interests connected to Volkhov Industrial Group. The payment trail from Petronova through intermediary shell entities to the funding of these equipment transactions is a critical piece of evidence linking the transactions to Volkhov.
Conclusion. Based on the foregoing — the absence of corporate registration, the non-existent business premises, the Russian-origin email communications, and the Petronova/Volkhov-connected funding trail — we conclude that "Central Asia Energy Services" appears to be a fictitious or shell entity created and used to mask the true Russian end user for Shipments 1, 3, and 6. The entity has no verifiable commercial existence in Kazakhstan and appears to have been manufactured solely for the purpose of providing facially compliant end-user documentation.
2. "Caspian Drilling Solutions Ltd." (Baku, Azerbaijan)
"Caspian Drilling Solutions Ltd." is identified as the end user on the EUCs for Shipments 2, 4, and 7, representing a total stated value of approximately $6.1 million. These shipments comprised wellhead assemblies and valves (Shipment 2, November 2020), BOP components (Shipment 4, May 2021), and coiled tubing units and components (Shipment 7, January 2022).
Our investigation has revealed the following:
Corporate registry searches. An entity with a similar name — though not an exact match — was identified in the Azerbaijani corporate registry through inquiries conducted by local counsel in Baku (Gasimov & Associates). However, the registered address of the Azerbaijani entity does not match the address listed on the EUCs. Furthermore, initial inquiries suggest that the legitimate Azerbaijani entity is a small-scale oilfield services company with annual revenues that would be inconsistent with the procurement of $6.1 million in advanced drilling equipment over a fourteen-month period. It is unclear at this stage whether the name of the legitimate entity was misappropriated for the EUCs or whether a separate fictitious entity was created using a confusingly similar name.
Interview evidence — Yves Leclerc. During his interview on June 22, 2022, conducted by Amara Osei, Leclerc stated that the shipping documentation for all three consignments addressed to "Caspian Drilling Solutions Ltd." was handled entirely by Caspian Logistik GmbH. Leclerc stated that he never had direct contact with any representative of "Caspian Drilling Solutions Ltd." — all communications regarding these shipments were conducted through Klaus Weidemann at Caspian Logistik. This is a significant departure from standard commercial practice, in which a logistics agent typically facilitates introductions and communications between the shipper and the consignee, and raises serious questions about whether Weidemann was acting not merely as a logistics intermediary but as the orchestrator of the end-user documentation.
Freight forwarding records — actual delivery destinations. Freight forwarding records from Caspian Logistik, obtained through cooperation with German counsel (Hessler & Krug, Hamburg), reveal a critical discrepancy between the stated destination and the actual routing of the equipment. For at least Shipments 2 and 4 — the wellhead assemblies and BOP components — the freight forwarding records indicate that the actual delivery destination was Novorossiysk, Russia, a major Black Sea port, not Baku, Azerbaijan. The bills of lading for these shipments, while facially listing Baku as the destination, were apparently amended or supplemented by Caspian Logistik with routing instructions directing the shipping line to deliver the containers to Novorossiysk. Analysis of the vessel tracking data and customs declarations further confirms that the vessels carrying these shipments called at Novorossiysk rather than at any Azerbaijani port.
The routing of Shipment 7 (coiled tubing units, January 2022) is still under investigation, as the freight forwarding records for this shipment are incomplete. However, the pattern established by Shipments 2 and 4 raises a strong inference that Shipment 7 was similarly diverted.
Financial tracing. Ridgeline Advisory Group's forensic analysis traced payments to Caspian Logistik for freight and logistics services on these three shipments and identified that the funds were routed through accounts linked to subsidiaries of Volkhov Industrial Group. The payment routing pattern is consistent with the pattern identified for the "Central Asia Energy Services" shipments, involving multiple layers of intermediary accounts designed to obscure the ultimate source of funds.
Conclusion. Based on the foregoing evidence, we conclude that "Caspian Drilling Solutions Ltd." was either a front entity specifically created to provide false end-user documentation or its name was misappropriated from the legitimate (but apparently unrelated) Azerbaijani entity to create the false EUCs. In either case, the equipment shipped under the name of "Caspian Drilling Solutions Ltd." was actually destined for Volkhov-affiliated operations in Russia, with the goods delivered through the port of Novorossiysk rather than to any consignee in Azerbaijan.
3. "Ural Technical Supplies" (Yekaterinburg, Russia)
"Ural Technical Supplies" is identified as the end user on the EUC for Shipment 5, with a stated value of approximately $1.6 million. This shipment comprised rotary steerable drilling system parts, classified under ECCN 2B999.
This is the only EUC among the seven that openly names a Russian end user and provides a Russian address. The significance of this fact should not be understated: it represents either a departure from the pattern of concealment employed in the other six shipments, or — perhaps more likely — a lapse in the operational security of the scheme, reflecting a degree of carelessness or confidence that the transaction would not be scrutinized.
Our investigation has revealed the following:
Corporate registry searches. Russian corporate registry searches, conducted through publicly available databases and open-source intelligence resources, confirm the existence of an entity named "Ural Technical Supplies" based in Yekaterinburg, Russia. This entity is a known distributor of industrial and oilfield equipment in the Urals region, with historical commercial ties to Volkhov Industrial Group JSC. The entity has been identified in Russian business databases as a distributor and service provider for Volkhov's upstream drilling operations in Western Siberia and the Urals region.
EAR analysis. This shipment raises the most straightforward EAR §746.5 issue among the seven identified transactions. The items were classified under ECCN 2B999, which requires a BIS license for export or re-export to Russia. No BIS license was obtained or applied for by DTI, Caspian Logistik, or any other party. The absence of a license is not in dispute, as our review of DTI's records and BIS's public licensing database confirms that no license application was submitted.
OFAC Directive 2 analysis. In addition to the EAR violation, Shipment 5 raises OFAC Directive 2 concerns. Given the historical commercial ties between Ural Technical Supplies and Volkhov Industrial Group, and given that Volkhov was designated under Directive 2 effective November 15, 2019 — nearly two years before this August 2021 shipment — the provision of oilfield equipment to a Volkhov-affiliated distributor would constitute a prohibited dealing under Directive 2 to the extent the equipment was destined for use in Volkhov's energy-sector operations. The Directive 2 analysis requires a determination of whether the specific equipment and end use fell within the categories of transactions prohibited by Directive 2, which is addressed in Section VIII below.
Interview evidence — Yves Leclerc. During his interview on June 22, 2022, Leclerc stated that he recognized the Russian destination for Shipment 5 as a compliance concern and escalated the issue internally to Derek Hargrave. According to Leclerc, he informed Hargrave that the shipment was addressed to a Russian entity and that he believed a BIS license might be required. Leclerc stated that Hargrave instructed him to proceed with the shipment, stating that it was "covered" — a characterization that Hargrave has not adequately explained. Leclerc stated that he understood Hargrave's instruction to mean that some form of authorization or compliance clearance had been obtained, though Leclerc acknowledged that he did not independently verify this claim and did not request documentation of any license or authorization. This episode is discussed further in Section VI below in connection with the individual knowledge and scienter assessments.
Conclusion. Shipment 5, with its openly stated Russian end user and established Volkhov affiliations, represents a direct and largely undeniable violation of EAR §746.5 and a potential Directive 2 violation. The absence of a BIS license is confirmed, and the Leclerc interview evidence suggests that the violation was committed with the knowledge and approval of DTI's President.
C. Signature Authentication Concerns
Our review of the end-user certificates has identified concerns regarding the authenticity of the signatures appearing on the documents. While we have not engaged a formal forensic document examiner at this stage, a preliminary visual comparison of the signatures across the seven EUCs has revealed the following:
• EUCs for "Central Asia Energy Services": The three EUCs bearing the name of "Central Asia Energy Services" (Shipments 1, 3, and 6) are signed by a "Mr. A. Karimov, Director." Visual comparison of the signatures across the three certificates — which span a period from August 2020 to October 2021, approximately fourteen months — reveals that the signatures appear virtually identical in size, stroke pattern, pen pressure, and positioning on the document. This degree of uniformity across three separate signing events is highly unusual and raises a strong inference that the signatures were produced using a rubber stamp, a pre-signed template, or a digitally reproduced image of a single signature. Genuine signatures, even from the same individual, typically exhibit natural variation in stroke, pressure, and positioning.
• EUCs for "Caspian Drilling Solutions Ltd.": The three EUCs bearing the name of "Caspian Drilling Solutions Ltd." (Shipments 2, 4, and 7) are signed by a "Mr. R. Hasanov, Operations Manager." Similar to the "Central Asia Energy Services" EUCs, the signatures of "Mr. R. Hasanov" display a high degree of uniformity across the three documents, again suggesting the use of a stamp, pre-signed form, or digital reproduction rather than genuine, independent signing events.
• EUC for "Ural Technical Supplies": The single EUC for "Ural Technical Supplies" (Shipment 5) bears a signature from a "Mr. V. Petrov, Procurement Director." As there is only one document bearing this signature, a comparative analysis is not possible. However, the signature is included in the recommendation for formal forensic examination.
Recommendation: If the DOJ requests formal analysis of the EUC signatures, or if the matter proceeds to enforcement or litigation, we recommend engaging a qualified forensic document examiner to conduct a full questioned document analysis of the seven EUCs. Such an analysis would involve examination of the original documents (or highest-quality copies available) using magnification, digital comparison, and other forensic techniques to determine whether the signatures are genuine, stamped, photocopied, or digitally reproduced. The results of such an analysis could provide significant evidentiary support for the conclusion that the EUCs were fabricated.
D. Red Flags That Should Have Been Detected
The transactions described in this memorandum were accompanied by numerous compliance red flags that, under a reasonably designed and implemented export controls and sanctions compliance program, should have been identified, escalated, and investigated before the shipments were authorized. The failure of DTI's pre-existing compliance program to detect or act upon these red flags is addressed in the assessment conducted by Conrad Reeves and Jasmine Thornton (November 15, 2022), but the specific red flags relevant to the equipment export transactions are enumerated here for reference:
1. Unfamiliar or unverifiable end users with no prior commercial relationship. The three stated end users — "Central Asia Energy Services," "Caspian Drilling Solutions Ltd.," and "Ural Technical Supplies" — had no prior commercial relationship with DTI and did not appear in DTI's customer records before the first equipment shipment in August 2020. A compliance program with adequate customer onboarding procedures would have required independent verification of these entities before authorizing transactions of this magnitude.
2. End-user addresses that did not correspond to verifiable business premises. As discussed above, the address listed for "Central Asia Energy Services" corresponded to a shared commercial office space with no permanent occupant, and the address listed for "Caspian Drilling Solutions Ltd." did not match the registered address of the similarly named Azerbaijani entity. Basic due diligence — such as a corporate registry search, a site visit, or a request for audited financial statements — would have revealed the