Citibank faces hefty penalty for sanctions breaches