U.S. Sanctions Iranian Firm for Role in Illicit Cryptocurrency Operations
In a significant move reflecting ongoing efforts to clamp down on financial misconduct, U.S. authorities have imposed sanctions on an Iranian company identified as Shelbit, which stands accused of facilitating over $6 billion in illegal cryptocurrency transactions over the past two years. This development highlights the increasing reliance on digital assets by various entities, including those connected to the Iranian government, to circumvent international financial sanctions.
The United States Treasury Department’s Office of Foreign Assets Control (OFAC) has not only targeted Shelbit but also its founder, Siavash Kayvanpour. Additionally, a network of associated entities operating across multiple countries—including the United Arab Emirates, Poland, and Georgia—has also been sanctioned. The actions extend to another cryptocurrency exchange based in Iran, known as Aban Tether, further amplifying the U.S. stance against illicit financial networks that undermine global security.
Blockchain analytics firm TRM Labs has provided detailed insights into Shelbit’s operations. According to a blog post published on August 7, 2023, the firm characterized Shelbit as a "crypto exchange in name only." The analysis suggested that the platform’s function was primarily as a conduit for illicit financial activity rather than a legitimate cryptocurrency exchange that holds customer funds.
Shelbit received particular attention for its financial interactions with wallets controlled by the Islamic Revolutionary Guard Corps (IRGC), a designated terrorist organization by the U.S. The analysis indicates that the exchange enabled approximately $6.3 billion in transactions between May 2024 and March 2026, primarily involving funds transferred in dollar-pegged stablecoins. This underscores the significant role Shelbit played in facilitating money flows for activities potentially linked to terrorism and other illicit endeavors.
Scott Bessent, Secretary of the Treasury, emphasized the U.S. government’s determination to dismantle such networks. In a statement, he remarked, “The Iranian regime’s reliance on digital assets and shadow banking networks is further evidence that Economic Fury is working. We will continue to increase the economic pressure. Whether in dollars, rials, or crypto, Treasury will hunt down and dismantle the illicit financial networks that keep the regime afloat.” This declaration sets the tone for a heightened focus on utilizing cryptocurrencies, particularly by entities in sanctioned nations, complicating financial monitoring and enforcement efforts.
Further analysis by TRM Labs revealed that Shelbit’s wallets consistently held minimal balances. The firm noted that value entering the platform was often swiftly transferred out, with incoming and outgoing amounts aligning closely—within 0.1%. This operating pattern suggests that Shelbit functioned effectively as a settlement conduit rather than a traditional exchange that retains customer funds.
A staggering 88% of the activity, estimated at about $5.6 billion, was traced to the TRON network, predominantly involving stablecoins. This indicates a clear preference among users to engage in transactions with a degree of stability and security. One particularly alarming connection surfaced in September when Shelbit reportedly processed over $2 million in just four transactions on a single day, sending the funds to a wallet associated with Hamas. This involvement in terrorist financing activities underscored the platform’s role in a much larger web of illicit financial activity.
Moreover, TRM Labs tracked a notable $318 million linked to a sanctioned Russian payment network known as A7, indicating that Shelbit served multiple sanctioned economies. The firm’s analytical report also pointed to collaborations with various sanctioned Russian and Central Asian services, further highlighting the extensive and troubling nature of its operations.
Beyond facilitating illicit monetary flows, Shelbit reportedly became a significant player in the realm of online gambling. According to TRM, the firm’s primary clientele comprised a Farsi-language online gambling network consisting of over 2,000 websites. Notable figures in the Iranian social media landscape, such as Sasha Sobhani—a son of a former senior Iranian diplomat—and influencer Pooyan Mokhtari, have been publicly linked to these gambling platforms. Both deny endorsing any illicit activities, with Sobhani insisting that his role was limited to advertisement and Mokhtari categorically rejecting allegations of association with the IRGC.
TRM Labs traced around $72.6 million in exposure between Shelbit and 55 distinct online gambling platforms, revealing a direct correlation between the gambling network and the illicit cryptocurrency operations. This intricate web of connections illustrates the depth of financial activities extending beyond traditional avenues, solidifying the notion that cryptocurrencies can serve as a medium for both innovation and exploitation in the global financial landscape.
The imposed sanctions on Shelbit and its affiliates signify a larger narrative of international law enforcement agencies combating the growing intersection of digital assets with organized crime and international terrorism. As the landscape of financial transactions evolves, the necessity for vigilant oversight and comprehensive legislation becomes increasingly apparent.