US Sanctions Nobitex as Iran’s Crypto Lifeline Turns Traceable

The U.S. Treasury blacklisted Nobitex, Iran’s largest cryptocurrency exchange, on June 2, accusing the platform of moving money for the Islamic Revolutionary Guard Corps (IRGC, Iran’s elite military and intelligence force) and the country’s central bank. The action, run under a campaign the Treasury calls Economic Fury, also hit three smaller Iranian exchanges and five named executives.

Iran turned to crypto years ago to slip past a banking system Washington had largely closed to it. The blockchains it came to rely on are now why a U.S. agency, a stablecoin issuer and a pro-Israel hacking crew know more about the regime’s money than any correspondent bank ever disclosed.

What OFAC Put on the Blacklist

The Office of Foreign Assets Control (OFAC, the Treasury arm that administers U.S. sanctions) named four exchanges in a single Economic Fury designation, with Nobitex anchoring the list. The agency said the platform processed over 50% of all Iranian digital asset inflows in 2025 and was a conduit for payments tied to the IRGC, ransomware operators and Iran’s central bank, including transfers that moved funds out of the country during the internet blackouts that followed U.S. combat operations in Iran last June.

Three other platforms went on the list beside it, each accused of routing transactions to the IRGC and other designated entities.

The designated executives include Amir Hossein Rad, Nobitex’s chairman, co-founder and former chief executive, and Seyed Ali Khoee, its current CEO. OFAC also named two brothers from the Kharrazi family, one of the Islamic Republic’s most politically connected dynasties, whom a Reuters investigation published on May 1 had tied to the exchange’s founding under a rarely used surname.

Why Crypto Exposed Iran’s Money Instead of Hiding It

Sanctions cut Iran off from the dollar-clearing system and from SWIFT, the messaging network that carries most cross-border bank payments. Crypto looked like the door out. A rial holder could buy Tether, the dollar-pegged stablecoin known by its ticker USDT, and send value almost anywhere without touching a Western bank.

There is a catch built into the technology. A bank wire vanishes into private ledgers only the banks and their regulators can read. A blockchain transfer sits in public, permanently, and anyone with the right software can follow it from wallet to wallet for years. Firms like Chainalysis and Elliptic do exactly that for a living, and they have mapped large parts of Iran’s on-chain activity.

The numbers they surface are not small. Analysts estimate the IRGC touches roughly half of all Iranian on-chain volume, and the Central Bank of Iran has bought more than $500 million in USDT to hold value outside the banking system it can no longer reach. Every one of those purchases left a trail. Iran built a crypto economy worth about $7.8 billion in 2025 to survive sanctions, and in doing so it wrote much of its financial life into a ledger its adversaries can audit on demand.

The Hack That Leaked the Whole Playbook

The clearest proof of how exposed that ledger leaves Iran arrived a year ago. On June 18, 2025, a pro-Israel group calling itself Gonjeshke Darande, or Predatory Sparrow, drained about $90 million from Nobitex and, rather than steal the coins, sent them to burn addresses no one controls. Two days later it dumped the exchange’s entire source code online.

The leak handed investigators a manual. According to TRM Labs, a blockchain intelligence firm, the files showed how deeply the exchange was wired into both Iran’s domestic payment grid and a set of tools built to dodge Western detection. Among what the leaked Nobitex source code revealed:

• Hard-coded links to Iran’s domestic payment platforms, Shetab, PAY.IR, Vandar and IDPay, for moving cash in and out of crypto
• In-house privacy tools, internally named owshen, zpk and incentivized_mixer, designed to evade FinCEN (the U.S. Financial Crimes Enforcement Network) and blockchain analytics
• “VIP” accounts wired to bypass standard compliance checks
• Wallet infrastructure spanning more than 25 blockchains, from Bitcoin to Tron

Once that architecture was public, OFAC did not have to guess which wallets belonged to whom. The breach meant to embarrass Iran also did a sanctions analyst’s homework.

Tether Turned Into the Choke Point

The blacklist names the bad actors. The money gets stopped somewhere else, at the stablecoin issuer. In April, that point became impossible to miss.

On April 24, OFAC designated two wallets it identified as property of the Central Bank of Iran, with links to the IRGC’s Qods Force and to Hizballah, the Lebanese militant group. Tether then froze the USDT inside them. Because the company that issues a centralized stablecoin can blacklist any address at will, the coins did not move; they went dead on the chain.

• $344.2 million in USDT frozen across the two Central Bank of Iran wallets, the largest on-chain freeze of Iranian sovereign reserves on record, per TRM Labs
• About $370 million received across nearly 1,000 transactions over roughly five years, starting in March 2021
• One wallet sent nothing out; the other moved under $16 million against more than $228 million coming in
• Roughly $1 billion in Iranian crypto seized by the U.S. to date, Treasury Secretary Scott Bessent told Fox Business

That is the mechanism the Nobitex sanctions plug into. A designated exchange cannot easily touch dollar-backed stablecoins, and the issuers, sitting within reach of U.S. law, increasingly freeze first and ask later. Iran’s escape hatch runs straight through a company that answers to Washington.

Economic Fury Ties the Sanctions to the Nuclear File

The Nobitex designation is one piece of a campaign the Treasury launched this spring to choke off the regime’s revenue while Washington presses Tehran over its nuclear program. Bessent has been blunt about the logic.

While Iran’s economy is in free fall, the regime has chosen to co-opt digital asset technologies for its own corrupt agenda, including evading sanctions and transferring wealth out of the country.

Scott Bessent, the U.S. Treasury secretary, said that in the statement announcing the June designations. The timing is not incidental. U.S. combat operations against Iran began last June, and further airstrikes followed in February. During the June strikes, when Predatory Sparrow’s operations against Iran’s financial infrastructure were already underway, Nobitex transaction volume spiked an estimated 700% within minutes as Iranians and regime entities alike scrambled to move value.

Treasury has framed Economic Fury as a “follow the money” effort that runs through banks and blockchains alike, with the stated aim of keeping Iran from funding a weapon. Tehran keeps widening crypto’s role rather than retreating from it. Officials have floated requiring crypto payments from ships transiting the Strait of Hormuz, a move that would pull state revenue further on-chain, and further into view.

The Savers Caught Holding the Regime’s Rail

The exchange runs as an ordinary retail business, too. Nobitex has more than 11 million users, a large share of them ordinary Iranians using crypto to defend savings against a currency in collapse. Inflation hit 48.6% last October, and the rial has lost roughly 90% of its value against the dollar since 2018. For people watching their money evaporate, a dollar stablecoin on the Tron network has been one of the few hedges left.

Sanctions do not sort the two groups apart. When a major exchange or a stablecoin issuer freezes Iranian-linked accounts, the IRGC’s wallets and a Tehran shopkeeper’s wallet can both go dark at once. A Tehran-based blockchain researcher told Al Jazeera that designations have “almost entirely cut off” ordinary Iranians from the global crypto market, as foreign platforms drop Iranian counterparts to limit their own legal risk.

Some of that activity is already migrating to decentralized exchanges, which have no company to subpoena and no central operator to sanction, though they are clumsier to use and offer no fiat on-ramp inside Iran. The Kharrazi brothers and the executives named on June 2 lose access to any U.S.-reachable assets and to the dollar system. Their 11 million customers lose a familiar door to the one currency that has held its value.

Every wallet OFAC listed is still visible on the blockchain, balances and all, sitting where anyone can watch them. Iran left the banks to escape exactly that kind of permanent record. Washington is now using it to hunt the money down.