U.S. Sanctions Nobitex Over Alleged IRGC-Linked Transactions and Ransomware Wallets

· Original article ↗

Summary

OFAC sanctioned Iran’s Nobitex and three other exchanges, citing sanctions evasion, IRGC-linked transactions, and wallets associated with ransomware actors. Chainalysis estimated IRGC-linked addresses received over half of Iran’s crypto value in Q4 2025.

Key points

  • OFAC sanctioned Nobitex, Wallex, Bitpin, and Ramzinex, and designated Nobitex executives and founders.
  • The Treasury said Nobitex facilitated payments tied to terrorism, sanctions evasion, and IRGC-linked transactions, including activity associated with IRGC-affiliated ransomware actors.
  • The Treasury said Nobitex processed more than half of Iranian digital-asset inflows in 2025.
  • Chainalysis estimated Iran’s crypto ecosystem received nearly $7.8 billion in 2025; IRGC-linked addresses accounted for over half of the value received in Q4.
  • The sanctions freeze designated parties’ property and assets under U.S. jurisdiction and prohibit U.S. persons from doing business with them.
  • In June 2025, the group Predatory Sparrow claimed it breached Nobitex and stole about $90 million in digital assets; the article does not independently confirm the claim.

Article Details

Event Type
OFAC sanctions designation of Nobitex, other Iranian cryptocurrency exchanges, and named executives and founders over alleged facilitation of terrorist-related payments, sanctions evasion, and IRGC-linked transactions.
Impact
Assets of designated entities and individuals that fall under U.S. jurisdiction are frozen, and U.S. persons are prohibited from doing business with them. The sanctions may also increase pressure on foreign companies and U.S. allies to stop dealing with the designated parties. U.S. authorities said Nobitex transactions included wallets associated with ransomware actors linked to the IRGC.

People

Threat Actors

Countries

Industries

Related Articles