This was very low-hanging fruit. SGTL's own bank flagged and froze multiple transactions. Internal emails copped to circumvention and a test payment from a US bank account...
Why did this case take four years to conclude, and what does that say about OFSI's capacity for more complex investigations?