PRIVILEGED AND CONFIDENTIAL — ATTORNEY-CLIENT PRIVILEGE / ATTORNEY WORK PRODUCT
MEMORANDUM
TO: Victoria Chambers, Responsible Partner; Jasmine Thornton, Lead Associate
FROM: Nicholas Ferreira, Associate, White Collar & Investigations (Houston)
DATE: October 20, 2022
RE: Rajesh Malhotra — Controller's Knowledge of and Involvement in Payment Structuring Through Crescent Commercial Bank PJSC Intermediary Accounts
MATTER: Dunmore Energy Holdings Ltd. — DOJ Sanctions & Export Controls Inquiry
MATTER NO.: 1016-00009
PRIVILEGE DESIGNATION: This memorandum constitutes attorney work product prepared in anticipation of litigation and contains privileged attorney-client communications. It reflects the mental impressions, conclusions, opinions, and legal theories of counsel at Calderwood & Harkness LLP regarding ongoing investigative matters. This document should not be distributed outside the Calderwood & Harkness LLP investigation team without prior written authorization from Victoria Chambers. Any inadvertent disclosure does not constitute a waiver of any applicable privilege or protection.
I. Executive Summary
The purpose of this memorandum is to analyze the knowledge of, and involvement by, Rajesh Malhotra in the payment structuring identified by Ridgeline Advisory Group LLC (Engagement No. RAG-2022-0319) through intermediary accounts at Crescent Commercial Bank PJSC, Dubai, United Arab Emirates. The structured payments at issue form a central component of the ongoing Department of Justice inquiry into potential sanctions and export controls violations by Dunmore Energy Holdings Ltd. ("Dunmore" or "DEH") and its subsidiaries, including Dunmore Trading International Ltd. ("DTI").
Malhotra serves as Controller of DTI, based at DTI's principal office at Level 14, Gate Building 3, Dubai International Financial Centre, P.O. Box 506774, Dubai, UAE (DIFC License No. CL-4827). In that capacity, he reported directly to Sandra Whitfield, Chief Financial Officer of Dunmore Energy Holdings Ltd., who is based at the company's headquarters in Houston, Texas. Malhotra also maintained a dotted-line reporting relationship to Derek Hargrave, President of DTI, for purposes of day-to-day operational matters at the Dubai office.
The investigation has revealed the following key finding: Ridgeline Advisory Group LLC identified approximately $34.2 million in payments routed through a series of intermediary accounts at Crescent Commercial Bank PJSC, structured across 127 individual wire transactions executed between March 2020 and March 2022. These payments were structured to obscure the ultimate beneficial ownership of entities connected to Volkhov Industrial Group JSC, a Russian energy conglomerate that has been subject to escalating U.S. sanctions during the relevant period.
Based on my review of the documentary evidence, the forensic accounting analysis performed by Ridgeline, and two rounds of interviews with Malhotra, my assessment of Malhotra's role is as follows: Malhotra had operational responsibility for initiating and approving wire transfers from DTI accounts at Crescent Commercial Bank PJSC. The evidence suggests that Malhotra was aware of unusual payment routing patterns and received payment instructions that, in hindsight, bore hallmarks of structuring designed to evade compliance controls. However, the evidence does not support a conclusion that Malhotra had full comprehension of the sanctions-evasion purpose underlying the payment structuring. Rather, his knowledge appears to have been partial — he observed anomalies and irregularities but did not independently investigate their significance or escalate his concerns through appropriate channels, with the exception of a single informal conversation with Derek Hargrave in approximately March 2021.
Malhotra was interviewed on two occasions during the investigation. The first interview was conducted on June 20, 2022, in Dubai, during the first round of witness interviews. The second interview — a re-interview prompted by additional documentary findings and Ridgeline's interim forensic analysis — was conducted on March 8, 2023, in Dubai. Upjohn warnings were administered at both interviews in accordance with the firm's Witness Interview Protocol. As of the date of this memorandum, Malhotra has not retained separate personal counsel. The question of whether the investigation team should advise him to do so is addressed in Section VII below.
This memorandum should be read in conjunction with several related work product memoranda, as noted in the Conclusion and referenced throughout.
II. Background
A. The Payment Structuring Scheme
Between March 2020 and March 2022, DTI's Dubai trading desk executed a series of commodity trading transactions with two principal counterparties: Petronova Trading FZE and Zenith Petroleum DMCC.
Petronova Trading FZE is registered in the UAE and maintains its principal office at Office 1407, Al Shafar Tower, Dubai Internet City, Dubai, UAE. Petronova is managed by Sergei Volkov, a Russian national who is a resident of the UAE. Zenith Petroleum DMCC is likewise registered in the UAE, with offices at Unit 2201, Jumeirah Bay Tower X2, Cluster X, Jumeirah Lakes Towers, Dubai, UAE. Zenith Petroleum is managed by Farhan Qureshi, a Pakistani national and UAE resident. Both entities were established during the 2018–2019 timeframe and commenced trading relationships with DTI in early 2020.
The investigation has determined that these counterparties served as intermediaries in transactions ultimately connected to Volkhov Industrial Group JSC, a major Russian energy conglomerate headquartered at 12 Kutuzovsky Prospekt, Moscow 121248, Russia. Volkhov Industrial Group is chaired by Arkady Volkhov, a prominent Russian industrialist. Volkhov Industrial Group was designated under OFAC Directive 2 (sectoral sanctions targeting the energy sector of the Russian Federation) on November 15, 2019, pursuant to Executive Order 13662. Subsequently, Volkhov Industrial Group was added to the OFAC Specially Designated Nationals and blocked Persons List (the "SDN List"), subjecting it to full blocking sanctions, on April 6, 2022, pursuant to Executive Order 14024, in connection with the expanded sanctions regime imposed following Russia's full-scale invasion of Ukraine.
The trading activity at issue involved fourteen crude oil swap transactions totaling approximately $218.7 million in notional value. Based on its forensic analysis of trade documentation, shipping records, and financial flows, Ridgeline Advisory Group has determined that at least nine of these fourteen transactions — representing approximately $156.3 million in aggregate notional value — involved crude oil that was ultimately sourced from or destined for Volkhov-controlled entities. The intermediary counterparties (Petronova and Zenith Petroleum) served to interpose layers of apparent arm's-length transactions between DTI and the Volkhov-connected end parties.
The $34.2 million in structured payments that are the focus of this memorandum represent the financial flows associated with these transactions. These payments were routed through intermediary accounts at Crescent Commercial Bank PJSC in a manner designed to obscure the connection between DTI and the Volkhov-affiliated ultimate beneficial owners of the funds. The payment structuring involved the use of multiple sub-accounts, split-payment techniques, and intermediary entity designations, as described in greater detail in Sections III.C and V.A below.
The DTI banking relationship at Crescent Commercial Bank PJSC was managed on the bank's side by Khalid Mansour, a Relationship Manager based at the bank's head office at Al Maktoum Tower, DIFC, P.O. Box 335102, Dubai, UAE. Mansour served as the primary point of contact for DTI account-related matters throughout the relevant period and communicated regularly with Malhotra regarding account operations, payment processing, and beneficiary designations.
B. Rajesh Malhotra — Position and Responsibilities
Rajesh Malhotra holds the title of Controller of Dunmore Trading International Ltd. He has been based in Dubai since 2019, when he relocated from Dunmore's Singapore office to assume his current role following the expansion of DTI's Dubai operations.
Malhotra's responsibilities as Controller encompassed a broad range of financial and accounting functions for DTI. Specifically, his duties included: oversight of DTI's financial books and records; management of the accounts payable and accounts receivable functions; initiation and approval of wire transfers from DTI bank accounts; management of DTI's banking relationships, including, centrally, the accounts maintained at Crescent Commercial Bank PJSC; and preparation of monthly financial reports for submission to Sandra Whitfield (CFO, Dunmore Energy Holdings Ltd., Houston) and the broader Dunmore corporate finance team in Houston.
Malhotra served as one of three authorized signatories on DTI's accounts at Crescent Commercial Bank PJSC. The other two authorized signatories were Derek Hargrave (President, DTI) and Omar Al-Rashidi (Head of Middle East Operations). In practice, however, Malhotra was the signatory who most frequently authorized wire transfer transactions. Hargrave and Al-Rashidi primarily exercised their signatory authority during periods when Malhotra was absent from the office — on leave, traveling, or otherwise unavailable. The operational reality was that Malhotra served as the day-to-day gatekeeper for wire transfer execution.
Malhotra's role in the payment process was as follows: wire transfer requests were generated by the trading desk (typically by Natasha Sorokin, Head Trader, or, in some cases, by Omar Al-Rashidi) and submitted to Malhotra with supporting documentation. This supporting documentation generally consisted of trade confirmations, invoices from counterparties, and, where applicable, bills of lading or other shipping documentation. Malhotra was responsible for reviewing these materials, verifying that the payment amounts and beneficiary information corresponded to the underlying trade documentation, and authorizing payment execution through Crescent Commercial Bank's online banking platform.
It is significant to note that Malhotra had no formal compliance training specific to OFAC sanctions or U.S. export controls prior to the commencement of this investigation. This training deficiency is discussed at length in the memorandum of Conrad Reeves and Jasmine Thornton dated November 15, 2022 (Assessment of Dunmore's Pre-Existing Sanctions Compliance Program), which identified systemic shortcomings in the compliance training provided to Dunmore's overseas personnel, particularly those in financial and operational roles at DTI's Dubai office. The absence of sanctions-specific training is relevant to the assessment of Malhotra's state of mind and his failure to recognize and escalate the red flags to which he was exposed, as discussed in Section V below.
C. Reporting Lines
Malhotra's reporting relationships operated along two axes. His primary reporting line was to Sandra Whitfield, Chief Financial Officer of Dunmore Energy Holdings Ltd. in Houston, for all matters relating to financial reporting and internal controls. In this capacity, Malhotra prepared and submitted monthly financial reports summarizing DTI's financial performance, cash positions, and significant transactions. This reporting relationship was the channel through which DTI's financial data was consolidated into the parent company's financial statements.
Malhotra also maintained a functional and operational reporting relationship to Derek Hargrave, President of DTI, for purposes of day-to-day DTI operations. In practice, this meant that Hargrave directed Malhotra on operational matters arising in the Dubai office, including the prioritization of payment processing, the handling of time-sensitive transactions, and other matters that required real-time management decisions on the ground in Dubai.
Critically, Malhotra had no direct reporting line to Gerald Fisk, who served as Dunmore's Chief Compliance Officer in Houston until his departure on June 10, 2022, or to any other member of the compliance function. Under Dunmore's pre-existing organizational structure, compliance screening of counterparties was handled separately by the Houston-based compliance team operating under Fisk's direction. The compliance function was not integrated into the payment authorization workflow at DTI, and there was no mechanism by which Malhotra was required — or expected — to consult with compliance personnel before processing wire transfers.
Following Fisk's departure from the company on June 10, 2022, and the appointment of Priya Nayar as Chief Compliance Officer on August 1, 2022, the reporting structure was modified as part of the initial remediation measures implemented under the guidance of this investigation team. Malhotra began reporting transaction-level data to the new compliance function, and interim controls were put in place requiring compliance review of certain categories of transactions prior to payment execution. These remediation measures are addressed further in Section VIII.
III. Evidence Reviewed
A. Documents. The analysis in this memorandum is based on a comprehensive review of the following categories of documents:
1. Wire transfer records from Crescent Commercial Bank PJSC. The investigation team obtained complete wire transfer records covering the period from January 2019 through June 2022. Within this dataset, 127 individual wire transfers executed between March 2020 and March 2022, totaling approximately $34.2 million, have been identified by Ridgeline Advisory Group as involving the intermediary account structures at issue. These records include SWIFT message details, beneficiary account information, intermediary bank routing data, value dates, and transaction reference numbers.
2. DTI internal payment authorization forms. The investigation team reviewed the internal payment authorization records reflecting Malhotra's approval of wire transfers. These approvals were effectuated electronically through Crescent Commercial Bank's online banking platform, which generated time-stamped audit logs recording the identity of the authorizing signatory, the date and time of authorization, and the transaction details. These records constitute a key source of evidence establishing Malhotra's direct involvement in the processing of the structured payments.
3. Invoices from Petronova Trading FZE and Zenith Petroleum DMCC. These invoices were submitted to DTI's accounts payable function in connection with the commodity trading transactions at issue. The investigation team reviewed these invoices for consistency with the underlying trade confirmations and to assess whether the payment amounts and beneficiary designations on the invoices corresponded to the actual wire transfer instructions processed by Malhotra.
4. Internal DTI email communications involving Malhotra. The investigation team collected and reviewed Malhotra's email communications from DTI's email servers. The email data was processed and hosted by Nexagen Analytics Inc. (Project No. NX-DEH-2204) using predictive coding and keyword-search methodologies. The review identified several categories of communications relevant to the analysis, including Malhotra's correspondence with trading desk personnel regarding payment instructions, his communications with Khalid Mansour at Crescent Commercial Bank regarding account structures and beneficiary designations, and his internal communications with Derek Hargrave and Sandra Whitfield regarding DTI financial matters.
5. Malhotra's communications with Khalid Mansour at Crescent Commercial Bank. This subset of Malhotra's email communications is of particular significance to the analysis. These communications addressed topics including the establishment and management of sub-account structures at Crescent Commercial Bank, the designation of payment beneficiaries, and, in one notable exchange in November 2021, a request from Mansour for confirmation of the "ultimate beneficiary" of a series of transfers. This exchange is discussed in detail in Section IV.B below.
6. Monthly financial reports prepared by Malhotra for Sandra Whitfield. These reports, submitted on a monthly basis throughout the relevant period, summarize DTI's financial performance, trading activity, and cash flow. The investigation team reviewed these reports to assess the level of detail that Malhotra communicated to the CFO regarding DTI's payment activity and counterparty relationships, and to determine whether any of the red flags identified in the payment structuring analysis were reflected in or discernible from the information Malhotra reported upstream to Houston.
7. Ridgeline Advisory Group LLC forensic accounting report. Ridgeline's final forensic accounting report was delivered on April 1, 2023. As of the date of this memorandum, interim findings from Ridgeline's ongoing analysis are available to the investigation team through Dr. Margaret Liu, CPA, CFE, Engagement Lead. These interim findings include the payment flow analysis described in Section III.C below and have informed the interview strategy and document analysis reflected in this memorandum.
8. Relevant documents from first and second productions to DOJ. The investigation team reviewed pertinent documents from the first and second document productions made to the Department of Justice in connection with the inquiry (Bates range DEH-DOJ-000001 through DEH-DOJ-438916). These productions include corporate formation documents, bank account records, trade confirmations, compliance files, and internal communications that provide context for the payment structuring analysis.
B. Witness Interviews
The analysis in this memorandum draws upon the following witness interviews:
Rajesh Malhotra — First Interview (June 20, 2022). Malhotra's first interview was conducted on June 20, 2022, in Dubai, by the undersigned (Nicholas Ferreira). An Upjohn warning was administered at the outset of the interview in accordance with the firm's Witness Interview Protocol. Malhotra was advised that Calderwood & Harkness LLP represents Dunmore Energy Holdings Ltd. and its subsidiaries, not Malhotra individually; that the interview was being conducted in connection with an internal investigation; that the attorney-client privilege belongs to the company, not to Malhotra; and that the company may elect to waive the privilege and disclose the substance of the interview to third parties, including the government. Malhotra confirmed that he understood these advisements. No personal counsel was present on Malhotra's behalf. The interview lasted approximately three hours and forty-five minutes.
Rajesh Malhotra — Re-Interview (March 8, 2023). Malhotra was re-interviewed on March 8, 2023, in Dubai, by the undersigned and Jasmine Thornton. The Upjohn warning was re-administered at the outset of the re-interview. Malhotra again confirmed his understanding. No personal counsel was present. The re-interview was prompted by the availability of Ridgeline's interim forensic findings and the identification of specific documentary evidence, including email correspondence, that warranted further questioning. The re-interview lasted approximately five hours and fifteen minutes, with two breaks.
Omar Al-Rashidi — Interview (June 14, 2022). Al-Rashidi was interviewed on June 14, 2022, by Jasmine Thornton. Al-Rashidi has been designated a cooperating witness. His testimony is relevant to the Malhotra analysis because he provided information regarding Malhotra's awareness of the intermediary payment structures, the division of responsibilities between the trading desk and the Controller's function, and the manner in which payment instructions were communicated to Malhotra.
Derek Hargrave — Interview (May 25, 2022). Hargrave was interviewed on May 25, 2022, by Victoria Chambers. Hargrave's statements are relevant to the Malhotra analysis because they address Hargrave's delegation of payment authorization responsibility to Malhotra, Hargrave's characterization of his own role in directing payment routing, and the March 2021 conversation in which Hargrave allegedly instructed Malhotra to proceed with unfamiliar routing.
Sandra Whitfield — Interview (May 30, 2022). Whitfield was interviewed on May 30, 2022, by the undersigned. Whitfield's testimony is relevant because it addresses the nature and scope of Malhotra's role as Controller, the level of detail in the monthly financial reporting that Malhotra submitted to the CFO, and the degree to which Houston-based management had visibility into DTI's payment operations.
Natasha Sorokin — Interview (June 2, 2022). Sorokin was interviewed on June 2, 2022, by Jasmine Thornton and Liam Donahue. Sorokin's statements are relevant because they describe how the trading desk communicated payment instructions to Malhotra, the process by which specific payment routing instructions were generated, and the trading desk's relationship with Petronova Trading FZE and Zenith Petroleum DMCC.
C. Forensic Analysis
Ridgeline Advisory Group LLC has been engaged (Engagement No. RAG-2022-0319) to perform a forensic accounting analysis of DTI's financial transactions during the relevant period. Ridgeline's work includes tracing the flow of funds through the Crescent Commercial Bank PJSC intermediary accounts, identifying patterns consistent with deliberate structuring, and mapping the ultimate destination of payments that originated from DTI accounts.
Ridgeline's interim findings, as communicated to the investigation team by Dr. Margaret Liu, have identified the following key elements of the payment flow pattern:
First, payments from DTI to Petronova Trading FZE were routed to Petronova sub-accounts at Crescent Commercial Bank rather than to Petronova's primary trading account. These sub-accounts were established at various points during 2020 and 2021, and their establishment coincided temporally with the commencement and escalation of the suspect trading activity.
Second, from the Petronova sub-accounts, funds were further routed through at least two additional intermediary entities before reaching accounts associated with Volkhov-connected entities. This layering pattern is consistent with techniques commonly employed to obscure beneficial ownership and evade sanctions screening by correspondent banks and compliance monitoring systems.
Third, Ridgeline noted that 43 of the 127 transactions involved split payments — instances in which a single underlying trade was broken into multiple wire transfers of differing amounts, executed on different dates. This pattern is consistent with structuring designed to avoid internal authorization thresholds at DTI and to circumvent bank compliance review triggers at Crescent Commercial Bank PJSC. Ridgeline's analysis indicates that the split-payment amounts were typically calibrated to fall below the thresholds that would have triggered enhanced due diligence review under Crescent Commercial Bank's internal compliance protocols, as understood based on publicly available information regarding UAE banking compliance standards.
These interim findings have been instrumental in shaping the investigation team's analysis of Malhotra's knowledge and involvement, and they formed the basis for the specific lines of questioning pursued in the March 8, 2023 re-interview.
IV. Summary of Malhotra's Statements
A. First Interview (June 20, 2022)
During his first interview on June 20, 2022, Malhotra provided the following relevant testimony:
Malhotra confirmed his role as the primary person responsible for the day-to-day initiation and approval of wire transfers on DTI's accounts at Crescent Commercial Bank PJSC. He described his workflow in detail: wire transfer requests originated from the trading desk, typically prepared by Natasha Sorokin (Head Trader) or, in some cases, by Omar Al-Rashidi (Head of Middle East Operations). These requests were submitted to Malhotra together with supporting documentation, which generally included trade confirmations and invoices from the relevant counterparties. Malhotra stated that his role was to verify that the payment amounts and beneficiary information on the wire transfer requests matched the supporting documentation and to execute the transfers through Crescent Commercial Bank's online banking platform.
Malhotra acknowledged processing payments to both Petronova Trading FZE and Zenith Petroleum DMCC over the course of the relevant period. He characterized these payments as routine counterparty payments made in the ordinary course of DTI's commodity trading business. He stated that Petronova and Zenith Petroleum were among a number of counterparties with which DTI transacted regularly and that nothing about the payment requests initially struck him as unusual or warranting special attention.
When asked about the intermediary account structures at Crescent Commercial Bank — specifically, the use of Petronova sub-accounts as opposed to a single primary trading account — Malhotra stated that he was aware that Petronova maintained multiple sub-accounts at Crescent Commercial Bank. However, he stated that he did not inquire as to the reason for this arrangement. He characterized the use of multiple sub-accounts as "not unusual" for commodity trading companies operating in the UAE, noting that, in his experience, it was common for trading entities to maintain separate accounts for different business lines, geographic regions, or counterparty relationships.
Malhotra stated that he was not aware that Petronova Trading FZE or Zenith Petroleum DMCC had any connection to Volkhov Industrial Group JSC. He stated that, to his knowledge, DTI's trading relationships with Petronova and Zenith Petroleum were conducted on an arm's-length basis with those entities as the counterparties of record, and he had no reason to believe that any third party stood behind those entities or was the ultimate beneficiary of the transactions.
Malhotra acknowledged that Derek Hargrave occasionally instructed him to process payments on an expedited basis, sometimes before all supporting documentation had been received and reviewed. Malhotra characterized these instances as happening "rarely" and stated that they typically arose in connection with time-sensitive trades where delays in payment could jeopardize DTI's position or result in contractual penalties. He stated that, in those instances, he would process the payment upon Hargrave's instruction and complete the documentation review afterward.
When asked directly whether he had any knowledge that the payment routing through Crescent Commercial Bank intermediary accounts was designed to obscure the identity of the beneficial owners of the funds, Malhotra denied any such knowledge. He stated that he processed payments based on the instructions and documentation provided to him by the trading desk and that he did not independently investigate the ownership structures of DTI's counterparties or their banking arrangements.
Malhotra further stated that he was never informed by Gerald Fisk or anyone in the Houston compliance function that Petronova Trading FZE or Zenith Petroleum DMCC required enhanced due diligence or presented any compliance concerns. He stated that he understood counterparty compliance screening to be the responsibility of the Houston-based compliance team under Fisk's direction, and he did not view it as part of his role to duplicate that function. He acknowledged that he did not independently screen counterparties against OFAC or other sanctions lists.
B. Re-Interview (March 8, 2023)
The re-interview on March 8, 2023, was conducted with the benefit of additional documentary evidence and Ridgeline's interim forensic findings. Malhotra was confronted with specific evidence during this session, and his responses were notably more detailed and, in certain respects, more candid than those provided during the first interview.
Split-payment transactions. Malhotra was confronted with Ridgeline's specific findings regarding the 43 split-payment transactions, in which single trades were broken into multiple wire transfers of differing amounts executed on different dates. Malhotra acknowledged that he was aware of this splitting pattern. He stated, however, that he believed the splitting was directed by the counterparties — Petronova and Zenith Petroleum — for their own internal accounting and cash management purposes. He stated that it was not unusual, in his experience, for counterparties to request that a single trade payment be split across multiple invoices or installments, and he did not view the splitting as indicative of structuring or any attempt to evade compliance controls.
September 2021 email from Natasha Sorokin. Malhotra was shown a specific email exchange recovered from DTI's email servers, dated September 2021, in which Natasha Sorokin instructed Malhotra to "route the payment through the Petronova holding account, not the primary trading account." When asked about this communication, Malhotra acknowledged receiving the instruction. He stated that he followed Sorokin's direction because she was the responsible trader for the transaction and he assumed she had a legitimate business reason for specifying the particular account. He stated that he did not understand the significance of the instruction at the time and did not inquire as to why the payment should be routed through the holding account rather than the primary trading account.
November 2021 email exchange with Khalid Mansour. Malhotra was confronted with an email exchange between himself and Khalid Mansour at Crescent Commercial Bank, dated November 2021, in which Mansour asked Malhotra to confirm the "ultimate beneficiary" for a series of transfers routed through the Petronova sub-accounts. In response, Malhotra had listed Petronova Trading FZE as the ultimate beneficiary without disclosing any further upstream ownership information. When asked about this exchange during the re-interview, Malhotra stated that he listed Petronova because Petronova was the counterparty on DTI's books and records. He stated that he did not have information regarding Petronova's own ownership structure or the identity of any entity that might have been the ultimate beneficiary of the funds beyond Petronova. He acknowledged that he did not make any effort to investigate the question raised by Mansour or to consult with the compliance function before responding.
March 2021 conversation with Derek Hargrave. In what represents perhaps the most significant disclosure from the re-interview, Malhotra acknowledged that in approximately March 2021, he noticed that certain payment instructions he received from the trading desk specified routing through entities whose names he did not recognize and that did not appear on DTI's counterparty list. Malhotra stated that this caused him concern and that he raised the issue informally with Derek Hargrave. According to Malhotra, Hargrave told him to "proceed as instructed" and explained that the routing was "for tax efficiency purposes." Malhotra stated that he accepted Hargrave's explanation and processed the payments accordingly.
Notably, this admission regarding the March 2021 conversation with Hargrave was volunteered by Malhotra during the re-interview without prompting from a specific document. The investigation team had not, at the time of the re-interview, identified documentary evidence of this conversation. Malhotra's willingness to disclose this information sua sponte is relevant to the credibility assessment in Section V.D below.
Malhotra admitted that he did not escalate the matter to Sandra Whitfield (CFO), Gerald Fisk (CCO), or Marcus Wellbourne (General Counsel) following Hargrave's instruction. He stated that he believed Hargrave, as President of DTI and his operational superior in Dubai, had the authority to make determinations regarding payment routing, and that he did not feel it was his place to second-guess Hargrave's explanation or to go over Hargrave's head by reporting the matter to Houston.
Malhotra stated that he had no awareness that Volkhov Industrial Group JSC was subject to U.S. sanctions until the DOJ inquiry commenced in April 2022. He stated that prior to that point, he had not encountered the name "Volkhov Industrial Group" in connection with his work at DTI and did not associate any of the unfamiliar entity names in the payment routing instructions with any sanctioned party.
V. Analysis of Malhotra's Knowledge and Involvement
A. Malhotra's Operational Role in the Payment Structuring
The evidence establishes that Malhotra occupied a central operational position in the payment structuring through Crescent Commercial Bank PJSC intermediary accounts. As the sole person responsible for day-to-day wire transfer execution at DTI, Malhotra functioned as the operational "chokepoint" through which all 127 structured payments — representing approximately $34.2 million in aggregate value — flowed.
Malhotra processed payment instructions that included routing through intermediary accounts, split-payment structures, and payee designations that he acknowledged were, at times, unfamiliar to him. His electronic authorization was required for every wire transfer executed through the Crescent Commercial Bank online banking platform. Crescent Commercial Bank's records confirm that Malhotra's electronic approval appears on approximately 115 of the 127 transactions identified by Ridgeline as involving the intermediary account structures. The remaining 12 transactions were authorized directly by Derek Hargrave during periods when Malhotra was on leave or otherwise unavailable. There is no indication that any of the 127 transactions were authorized by the third signatory, Omar Al-Rashidi.
However, it is important to distinguish between Malhotra's operational role and the decision-making authority that drove the scheme. Malhotra's role was primarily ministerial and operational in nature. He did not originate the underlying trades, determine which counterparties DTI would transact with, or design the payment routing structures. Those decisions were made by the trading desk — principally by Natasha Sorokin and Derek Hargrave — and communicated to Malhotra in the form of payment instructions and supporting documentation. Malhotra's function was to verify the documentation and execute the payments, not to evaluate the business rationale for the transactions or the compliance implications of the counterparty relationships.
This distinction is significant for purposes of assessing both Malhotra's legal exposure and his potential value as a cooperating witness, as discussed in Sections VI and VII below.
B. Degree of Knowledge — Red Flags and Failure to Escalate
While Malhotra's operational role was ministerial, the evidence demonstrates that he was exposed to multiple red flags that should have prompted inquiry and escalation. These red flags include the following:
• Split-payment patterns. Malhotra was aware that 43 of the 127 transactions involved the splitting of single trades into multiple wire transfers of differing amounts, executed on different dates. While Malhotra characterized this practice as counterparty-directed and not inherently unusual, the volume and consistency of the pattern — affecting more than one-third of all transactions with the suspect counterparties — should have prompted inquiry as to whether the splitting served a legitimate business purpose.
• Instructions to route through specific sub-accounts. The September 2021 email from Natasha Sorokin, instructing Malhotra to "route the payment through the Petronova holding account, not the primary trading account," constituted an explicit direction to use an account other than the one that would ordinarily have been expected for the transaction. Malhotra acknowledged receiving this instruction but stated he did not inquire as to its significance.
• Crescent Commercial Bank inquiries about ultimate beneficiaries. The November 2021 email exchange with Khalid Mansour, in which Mansour specifically asked Malhotra to confirm the "ultimate beneficiary" of a series of transfers, should have alerted Malhotra that the bank's own compliance function had questions about the nature and purpose of the payment flows. Malhotra's response — listing Petronova as the ultimate beneficiary without further investigation — effectively terminated the bank's inquiry without providing the bank with the complete picture.
• Unfamiliar entity names in routing instructions. Malhotra's own admission that, in approximately March 2021, he noticed payment instructions specifying routing through entities that did not appear on DTI's counterparty list represents perhaps the most significant red flag to which he was exposed. Malhotra raised this issue with Derek Hargrave — the only instance in which Malhotra took any affirmative step in response to an anomaly — but accepted Hargrave's facially implausible "tax efficiency" explanation without further inquiry or escalation.
The critical failure in Malhotra's conduct is his failure to escalate any of these red flags through appropriate channels. Malhotra raised the unfamiliar entity names with Hargrave once, in March 2021, but accepted Hargrave's explanation and took no further action. He did not escalate to CFO Sandra Whitfield, who was his direct report on financial controls matters and who was based in Houston — outside the orbit of Hargrave's day-to-day influence. He did not escalate to CCO Gerald Fisk, notwithstanding that the anomalies he observed had obvious compliance dimensions. He did not escalate to General Counsel Marcus Wellbourne, who would have been the appropriate recipient of concerns about potential legal exposure.
The assessment of why Malhotra failed to escalate is central to the evaluation of his state of mind. Based on the totality of the evidence — including Malhotra's own statements, the corroborating testimony of other witnesses, and the organizational dynamics at DTI — the most likely explanation appears to be a combination of two factors. First, Malhotra exhibited a significant degree of deference to Hargrave's authority as President of DTI. Malhotra was based in Dubai and reported to Hargrave for day-to-day operational matters. The organizational culture at DTI, as described by multiple witnesses, was one in which Hargrave exercised considerable control over operations and did not encourage subordinates to question his decisions. Second, Malhotra's lack of sanctions compliance training left him without the framework to recognize the significance of the anomalies he observed. Without training in the mechanics of sanctions evasion, structuring, and the obligation to report suspicious activity, Malhotra may not have appreciated that the payment patterns he observed were red flags for sanctions violations as opposed to idiosyncratic features of commodity trading in the Middle East.
It bears emphasis that no evidence has been identified suggesting that Malhotra received any personal benefit or financial incentive from the payment structuring beyond his regular compensation. There is no indication of side payments, bonuses tied to the structured transactions, or any other form of consideration that would suggest a financial motive for Malhotra's participation in or acquiescence to the scheme.
C. Comparison with Other Key Individuals
To place Malhotra's role in proper perspective, it is useful to compare his position with those of other key individuals involved in the suspect transactions:
Derek Hargrave (President, DTI). Unlike Malhotra, Hargrave directed the trading relationships with Petronova and Zenith Petroleum, approved the selection of these entities as DTI counterparties, and exercised decision-making authority over the terms and structure of the transactions. Hargrave instructed Malhotra to proceed with unfamiliar payment routing, providing a facially implausible explanation ("tax efficiency"). The evidence strongly suggests that Hargrave had knowledge of, and directed, the payment structuring, as detailed in the memorandum of Jasmine Thornton dated September 1, 2022 (Derek Hargrave — Role in Suspect Transactions & Knowledge Assessment). Malhotra did not have authority over which counterparties DTI transacted with and did not participate in commercial negotiations with Petronova, Zenith Petroleum, or any Volkhov-connected entity.
Natasha Sorokin (Head Trader, DTI). Unlike Malhotra, Sorokin was the primary point of contact with Sergei Volkov at Petronova Trading FZE. Sorokin originated the specific payment routing instructions that were transmitted to Malhotra for execution — including the September 2021 instruction to route payments through the Petronova holding account. Sorokin's role was to direct the flow of funds; Malhotra's role was to execute those directions.
Gerald Fisk (former CCO, DEH). Unlike Malhotra, Fisk had institutional responsibility for the design and implementation of Dunmore's sanctions screening program. Fisk's failure to implement adequate protocols — including the failure to integrate compliance screening into the payment authorization workflow at DTI — created the environment in which the payment structuring was able to occur without detection. Malhotra, by contrast, had no compliance function responsibilities and was not charged with designing or implementing compliance controls.
Omar Al-Rashidi (Head of Middle East Operations, DTI). Al-Rashidi, who has been designated a cooperating witness, occupied a somewhat analogous operational position to Malhotra but with greater proximity to the trading desk. Al-Rashidi served as an authorized signatory on the Crescent Commercial Bank accounts but authorized only 12 of the 127 transactions. His testimony supports the characterization of Malhotra's role as ministerial rather than decision-making.
In summary, Malhotra's position is most accurately characterized as that of a "knowing but passive participant." He had awareness of irregularities in the payment flows he was processing but did not initiate, design, or benefit from the structuring scheme. His role was to execute instructions generated by others, and his failure was in not recognizing or acting upon the red flags those instructions presented.
D. Credibility Assessment
The investigation team's assessment of Malhotra's credibility is informed by his performance across two interviews, the consistency of his statements with the documentary record, and the corroboration provided by other witnesses.
During the first interview on June 20, 2022, Malhotra's statements were generally consistent with the documentary record. He accurately described his role and responsibilities, the payment authorization process, and the identities of the counterparties with which DTI transacted. However, his responses were notably lacking in specificity regarding the split-payment pattern and the intermediary account structures. He described Petronova and Zenith Petroleum as "routine" counterparties and characterized his awareness of the sub-account arrangements as unremarkable, without volunteering the kind of detail that the investigation team now understands he possessed. This reticence is characteristic of an initial interview in which the witness is uncertain of the scope of the investigation and the nature of the inquiry, but it also suggests a degree of initial minimization of his awareness.
During the re-interview on March 8, 2023, Malhotra provided substantially more detailed and candid responses when confronted with specific documents and forensic findings. His willingness to acknowledge the split-payment pattern, the September 2021 Sorokin email, and the November 2021 Mansour exchange — and to offer explanations for his conduct in each instance — reflects a progression toward greater candor. Most significantly, his voluntary disclosure of the March 2021 conversation with Hargrave regarding unfamiliar entity names — an admission that was not prompted by a specific document and that is potentially adverse to Malhotra's own interests — is a strong indicator of truthfulness and suggests a genuine effort to provide a complete account.
Malhotra's account is corroborated in material respects by the testimony of Omar Al-Rashidi, who stated that Hargrave and Sorokin controlled the payment routing instructions and that Malhotra "just processed what the trading desk sent him." Al-Rashidi's characterization is consistent with the organizational structure and the documentary evidence, which reflects that payment instructions flowed from the trading desk to Malhotra, not the reverse.
Overall, the credibility assessment is as follows: Malhotra appears to be a largely credible witness whose initial reticence in the first interview gave way to more forthcoming and detailed testimony in the re-interview. His account is generally consistent with the documentary evidence, and his key admissions are corroborated by other witnesses. However, his claim that he did not appreciate the significance of the payment anomalies he observed is difficult to fully credit given the volume, pattern, and duration of the irregular transactions. A reasonable person in Malhotra's position — even one without formal sanctions compliance training — might be expected to have recognized that the cumulative weight of the anomalies warranted more than a single informal inquiry to Derek Hargrave. The extent to which Malhotra's claimed lack of appreciation was genuine naivety versus willful avoidance of inconvenient knowledge is a question that may be subject to different interpretations, as discussed in Section VI.C below.
VI. Potential Legal Exposure
A. U.S. Sanctions Liability
The International Emergency Economic Powers Act ("IEEPA"), 50 U.S.C. §§ 1701–1706, and the implementing regulations administered by OFAC (including 31 C.F.R. Part 589, which implements Executive Order 13662 with respect to the Russian Federation) prohibit U.S. persons from engaging in transactions involving blocked persons on the SDN List. Under Directive 2, issued pursuant to Executive Order 13662, U.S. persons were further prohibited from engaging in certain categories of transactions — specifically, debt and equity transactions above specified thresholds — with persons identified as operating in the energy sector of the Russian Federation and designated on the Sectoral Sanctions Identifications List.
The threshold question with respect to Malhotra's individual sanctions liability is whether he qualifies as a "U.S. person" within the meaning of IEEPA and the relevant OFAC regulations. Malhotra is not a U.S. citizen or lawful permanent resident of the United States. He is an Indian national who has been resident in the UAE since 2019. Accordingly, he does not fall within the primary categories of "U.S. persons" subject to OFAC jurisdiction.
However, the jurisdictional analysis is complicated by the fact that Malhotra processed U.S. dollar-denominated wire transfers that, in the ordinary course, cleared through U.S. correspondent banks. To the extent that these transactions touched the U.S. financial system — by transiting through correspondent accounts at U.S. banks — they may create a jurisdictional nexus sufficient to support OFAC enforcement action or DOJ prosecution under theories of facilitation or causing a violation by a U.S. financial institution. This jurisdictional question is analyzed in greater detail in the memorandum of Jasmine Thornton dated May 10, 2022 (Corporate Structure & Jurisdictional Nexus — U.S. Person Analysis), and I defer to that analysis for the full treatment of this issue.
It is also significant that the conduct at issue largely predates the April 6, 2022 addition of Volkhov Industrial Group JSC to the SDN List, which imposed full blocking sanctions. The relevant sanctions framework during the March 2020–April 2022 period was Directive 2 under Executive Order 13662, which imposed narrower prohibitions limited to certain categories of debt and equity transactions with designated entities in the Russian energy sector. The application of Directive 2 to the specific commodity trading and payment transactions at issue presents interpretive questions that the investigation team has been analyzing separately.
On the basis of the foregoing, my assessment of Malhotra's individual criminal exposure under IEEPA is that it appears limited. This assessment is based on three principal factors: (1) Malhotra's role was operational and ministerial, not decision-making, with respect to the transactions at issue; (2) the jurisdictional questions regarding his status as a "U.S. person" present a significant hurdle for the government; and (3) the evidence does not establish that Malhotra acted with the willful intent to evade sanctions, which is a required element for criminal liability under IEEPA. However, while criminal prosecution appears unlikely, a civil enforcement theory under OFAC's strict liability framework is not inconceivable, particularly if the government takes an expansive view of the jurisdictional nexus created by the dollar-clearing transactions.
B. Export Control Liability
A separate strand of the DOJ inquiry concerns the export of oilfield equipment valued at approximately $12.4 million through Caspian Logistik GmbH, involving items classified under Export Administration Regulations ("EAR") Export Control Classification Numbers 2B350 and 2B999. These shipments are addressed in detail in other work product memoranda and are summarized here only to the extent relevant to Malhotra's exposure assessment.
The evidence indicates that the oilfield equipment export transactions did not involve Malhotra directly. Those shipments were managed by Yves Leclerc, Director of Logistics and Shipping, and were approved by Derek Hargrave. The logistics and shipping function operated independently of the Controller's office, and the payment flows associated with the equipment transactions were handled through separate DTI bank accounts that were not under Malhotra's primary management.
No evidence has been identified suggesting that Malhotra processed payments specifically tied to the equipment export transactions, participated in the export documentation process, or had knowledge of the shipment details or end-use/end-user information associated with those transactions.
Accordingly, my assessment is that Malhotra faces no significant individual exposure under the Export Control Reform Act ("ECRA"), 50 U.S.C. §§ 4801–4852, or the relevant EAR provisions, including § 746.5 (sanctions on Russia).
C. Conspiracy / Aiding and Abetting Theories
Even where a principal violation may not be directly attributable to Malhotra, the DOJ could theoretically pursue derivative liability under conspiracy or aiding-and-abetting theories.
A conspiracy charge under 18 U.S.C. § 371 (conspiracy to defraud the United States) or as part of a substantive IEEPA conspiracy theory would require evidence of an agreement between Malhotra and one or more co-conspirators to violate sanctions laws. The evidence reviewed to date suggests that Malhotra processed transactions at the direction of others — principally Hargrave and Sorokin — without entering into an agreement to engage in sanctions evasion. While Malhotra was aware of irregularities and accepted Hargrave's explanation without challenge, mere acquiescence in the face of suspicious circumstances does not, without more, establish the existence of a conspiratorial agreement. The government would need to prove that Malhotra understood the unlawful objective of the payment structuring and agreed to participate in furtherance of that objective. The evidence does not support that conclusion.
An aiding-and-abetting theory under 18 U.S.C. § 2 would require proof that Malhotra knowingly assisted in the commission of a sanctions violation — that is, that he acted with knowledge that his processing of the wire transfers facilitated a violation of IEEPA or the OFAC regulations. Malhotra's claimed lack of knowledge of the sanctions nexus — his assertion that he did not know Petronova or Zenith Petroleum were connected to Volkhov Industrial Group or that Volkhov was subject to U.S. sanctions — if credited by a factfinder, would undercut the knowledge element required for aiding-and-abetting liability.
The most significant vulnerability in Malhotra's position arises under a willful blindness theory. Under established precedent, a defendant may be found to have acted "knowingly" if the defendant was aware of a high probability that a circumstance existed (e.g., that the transactions facilitated sanctions evasion) and took deliberate actions to avoid confirming that probability. Malhotra's failure to investigate or escalate the multiple red flags to which he was exposed — particularly his acceptance of Hargrave's "tax efficiency" explanation for the unfamiliar entity routing in March 2021, without further inquiry — could be characterized by the government as deliberate avoidance of knowledge. The strength of a willful blindness argument would depend on the factfinder's assessment of whether Malhotra's passivity reflected genuine ignorance or a conscious decision not to look too closely at transactions he suspected were problematic.
My overall assessment of the risk of individual DOJ prosecution of Malhotra is that it is low but not zero. The primary factors counseling against prosecution are his ministerial role, the jurisdictional issues, and the absence of evidence of willful intent. The primary factor that could support prosecution is his failure to escalate red flags, particularly after the March 2021 Hargrave conversation, which could be framed as willful blindness by an aggressive prosecutor. However, given DOJ's resource constraints and its likely focus on higher-value targets — Hargrave, Sorokin, Fisk, and potentially Volkov and Qureshi — individual prosecution of Malhotra would appear to be an unlikely allocation of prosecutorial resources.
VII. Implications for DOJ Cooperation and Proffer Strategy
Malhotra is a potentially valuable cooperating witness for purposes of the company's proffer to DOJ. His value lies in three principal areas:
First, Malhotra can testify in detail to the mechanics of the payment structuring through Crescent Commercial Bank PJSC intermediary accounts. As the person who executed the wire transfers, Malhotra has first-hand knowledge of the payment flows, the account structures, the split-payment patterns, and the intermediary entities through which funds were routed. His testimony can provide the granular operational detail that will give substance to Ridgeline's forensic findings.
Second, Malhotra can testify to the roles of Derek Hargrave and Natasha Sorokin in directing payment routing. Most significantly, Malhotra's account of the March 2021 conversation in which Hargrave instructed him to "proceed as instructed" with unfamiliar entity routing, characterizing it as "for tax efficiency purposes," is direct evidence of Hargrave's knowledge of and participation in the structured payment scheme. This evidence is valuable for demonstrating Hargrave's culpability and for establishing that the payment structuring was directed from the senior management level of DTI.
Third, Malhotra can testify to the inadequacy of DTI's internal controls and the absence of compliance integration in the payment authorization process. His testimony that he received no OFAC training, had no compliance reporting obligation, and was not required to screen counterparties or beneficiaries against sanctions lists provides a concrete, witness-level illustration of the systemic compliance failures identified in the memorandum of Conrad Reeves and Jasmine Thornton dated November 15, 2022.
Malhotra's testimony corroborates and supplements that of Omar Al-Rashidi, the other cooperating witness with direct operational knowledge of DTI's Dubai operations. The two accounts are complementary: Al-Rashidi provides the perspective of the trading desk, while Malhotra provides the perspective of the finance function. Together, they offer a comprehensive picture of how payments were initiated, processed, and executed at DTI.
A key strategic consideration is whether to present Malhotra's March 2021 conversation with Hargrave in the proffer to DOJ. This evidence is valuable for demonstrating Hargrave's knowledge and culpability, as noted above. However, it also reveals Malhotra's awareness of red flags and his failure to escalate, which could be used by DOJ to assess Malhotra's own culpability. On balance, the recommendation is to include Malhotra's account in the investigation report submitted to DOJ. The investigation report is targeted for submission on May 15, 2023. The presentation of Malhotra's account should be framed to emphasize three points: (a) the operational mechanics of the payment scheme, as established through Malhotra's direct involvement; (b) Hargrave's direct involvement in directing structured payments, as evidenced by the March 2021 conversation; and (c) DTI's inadequate internal controls, as illustrated by Malhotra's lack of training, his absence of compliance reporting obligations, and the organizational structure that left him without a channel to escalate concerns.
A final consideration relates to the Upjohn warnings administered at both of Malhotra's interviews. Malhotra has been advised that the attorney-client privilege for the interviews belongs to Dunmore Energy Holdings Ltd. (not to Malhotra individually) and that the company may elect to disclose the substance of his interview statements to the government. Malhotra has acknowledged his understanding of these advisements. As noted above, Malhotra has not retained separate personal counsel as of the date of this memorandum.
Should Malhotra's interests diverge further from those of the company — particularly in light of the possibility that DOJ may seek to interview Malhotra directly — it is recommended that Malhotra be advised to retain personal counsel. The re-interview findings, including his admission of awareness of red flags and his failure to escalate, create a potential for conflict between his interests and those of the company. While this conflict is not yet acute, the prudent course is to ensure that Malhotra is in a position to receive independent legal advice before any direct engagement with the government. This recommendation should be discussed with Victoria Chambers before any communication with Malhotra on this subject.
VIII. Implications for Remediation
Malhotra's case provides a compelling illustration of the critical deficiencies in DTI's pre-existing compliance framework. The specific deficiencies highlighted by Malhotra's situation include the following:
• No requirement for the Controller to screen counterparties or payment beneficiaries against OFAC or other sanctions lists. Under the pre-existing organizational structure, sanctions screening was performed exclusively by the Houston-based compliance function. There was no requirement for the Controller or any other DTI finance staff member to perform independent screening at the payment-authorization stage. This created a gap in the compliance architecture through which transactions involving sanctioned parties could be processed without detection, particularly where the Houston compliance function failed to screen the counterparty in the first instance (as appears to have occurred with respect to Petronova and Zenith Petroleum).
• No escalation protocol for unusual payment routing or split-payment instructions