U.S. Treasury Expands Iran Sanctions to Digital Assets in Sweeping Economic Campaign

The United States has significantly expanded its sanctions framework targeting Iran, bringing the country’s digital-assets sector directly into the scope of a new campaign designed to disrupt the financial networks that support the Iranian regime and the Islamic Revolutionary Guard Corps (IRGC).

On August 24, 2026, the U.S. Department of the Treasury launched Operation Economic Outcast, a broad economic campaign targeting Iran and entities and individuals that Treasury says enable the regime’s activities. Treasury Secretary Scott Bessent described the initiative as an “economic D-Day,” while the department announced measures spanning digital assets, technology, gold, aviation and shipping.

Among the most consequential elements for the cryptocurrency industry is a new sectoral determination covering Iran’s digital-assets sector. According to Treasury and blockchain analytics firm Chainalysis, this is the first time the United States has used this particular sectoral tool under Executive Order 13902 to target Iran’s digital-assets economy.

The development potentially expands sanctions exposure well beyond Iranian companies and individuals. Foreign businesses operating anywhere in the world could face designation if they are determined to operate in or support the designated Iranian sector.

For cryptocurrency exchanges, over-the-counter brokers, payment intermediaries and other digital-asset businesses, the measure creates a new compliance consideration: exposure to Iran may no longer be limited to direct dealings with an already-sanctioned person or entity.

A new layer of secondary sanctions exposure

The significance of the digital-assets determination lies in how sectoral sanctions can be applied.

Under the new measure, OFAC can sanction foreign persons determined to operate in the designated sector of the Iranian economy. Chainalysis described the development as an expansion of secondary-sanctions exposure for the global crypto industry, particularly where businesses knowingly facilitate activity supporting Iran’s digital-assets sector.

Treasury’s August 24 announcement stated that OFAC can now sanction persons, regardless of where they are located, for operating in the five designated Iranian sectors covered by the new determinations: digital assets, technology, gold, aviation and shipping. Treasury said the measures were intended to increase pressure on the financial channels through which Iran generates revenue and circumvents existing restrictions.

The distinction is important for international financial institutions and cryptocurrency companies.

Previously, a company dealing with an Iranian-linked digital-asset business might have focused primarily on whether a particular counterparty, wallet or transaction was itself sanctioned. The new sectoral determination introduces another layer of risk: whether the company’s activities could be interpreted as supporting Iran’s designated digital-assets sector.

This does not mean that every transaction involving a digital asset with an Iranian connection automatically results in sanctions. The specific facts, applicable sanctions authorities and relevant OFAC guidance remain important. But the scope of potentially sanctionable activity has clearly widened.

Crypto increasingly enters Iran sanctions enforcement

The new policy builds on a series of U.S. enforcement actions against Iranian cryptocurrency infrastructure during 2026.

In June, OFAC designated four major Iranian cryptocurrency exchanges — Nobitex, Bitpin, Ramzinex and Wallex — in an action that Chainalysis described as a major escalation against Iran’s digital-asset economy. Chainalysis reported that Nobitex alone accounted for more than half of Iranian digital-asset inflows in 2025.

In July, OFAC also updated the designation of the Central Bank of Iran to include four additional cryptocurrency addresses. Chainalysis said those wallets had collectively received more than $165 million in stablecoins, with approximately $131 million subsequently frozen by the stablecoin issuer, Tether.

The sequence of actions illustrates a widening focus on cryptocurrency as part of Iran’s broader financial infrastructure.

Chainalysis estimates that the Iranian cryptocurrency ecosystem exceeded $7.78 billion in 2025. Its analysis also found that addresses associated with the IRGC accounted for more than half of the value received by the Iranian crypto ecosystem in the fourth quarter of 2025, with more than $3 billion in transfers during the year.

These figures represent blockchain-analysis estimates based on identified addresses and therefore do not necessarily capture every wallet or transaction connected to Iranian state actors.

Treasury targets Iranian intelligence-linked cyber activity

Operation Economic Outcast is not limited to financial intermediaries.

As part of the August 24 action, OFAC designated members of a group within Iran’s Ministry of Intelligence and Security (MOIS) that Treasury said had been involved in cyber operations targeting U.S. interests.

Among those designated were Behzad Mesri, identified as a group co-leader, and members Keyvan Fayyaz Ghareh Blagh and Arman Kahzadian. OFAC added cryptocurrency wallet addresses associated with the individuals across networks including Bitcoin, Ethereum and TRON.

According to Chainalysis’ analysis of the sanctions action, blockchain activity associated with the group included cryptocurrency theft, ransomware-related activity and payments connected with underground cyber infrastructure.

One address associated with Blagh reportedly received a $2,000 Bitcoin payment from a Russian-speaking initial-access broker. Chainalysis said its analysis also identified cryptocurrency deposits to at least two bulletproof-hosting providers and a ransom payment received by an address associated with Blagh.

The allegations form part of a wider U.S. law-enforcement effort against Iranian cyber actors. A superseding indictment unsealed by the U.S. Department of Justice on August 18 charged 17 Iranian nationals with cyber-related offenses. Chainalysis reported that several of the individuals targeted by the Treasury action were connected to that indictment.

The Treasury designations therefore demonstrate another feature of the new sanctions environment: cryptocurrency addresses can become part of the sanctions record alongside individuals and organizations, providing a direct mechanism for identifying blockchain-based financial infrastructure associated with designated actors.

The oil trade provides another crypto connection

Another major component of the August action concerns Iran’s oil trade and the use of cryptocurrency to facilitate payments.

Treasury designated Ivan Obukhov, a Ukrainian national based in the United Arab Emirates, whom it identified as a broker connected to Iranian shadow-fleet vessels.

According to the Treasury allegations cited by Chainalysis, Obukhov had processed more than $100 million in cryptocurrency payments since 2023 to facilitate oil sales on behalf of the IRGC’s Qods Force. Treasury also identified coordination with Mohammad Ahmed Suhil Fattouh, a UAE-based Syrian national and shadow-fleet broker known as “Captain Hamzah.”

The case illustrates why cryptocurrency has become increasingly relevant to sanctions enforcement surrounding Iran’s oil economy.

Traditional banking restrictions can make conventional cross-border settlement difficult for sanctioned entities. Digital assets, by contrast, can provide alternative mechanisms for transferring value across borders, even though transactions recorded on public blockchains can also provide investigators with an auditable trail.

That tension — between crypto’s ability to facilitate cross-border transfers and the visibility of blockchain transactions — is increasingly central to financial-crime enforcement.

Blockchain visibility becomes a compliance tool

The latest sanctions also highlight the growing importance of blockchain analytics in identifying financial relationships that may not be immediately apparent through conventional customer or counterparty information.

Unlike cash transactions, many cryptocurrency transactions are permanently recorded on public ledgers. The challenge for investigators and compliance teams is connecting wallet addresses to real-world individuals, organizations and activities.

This requires combining blockchain transaction data with other forms of intelligence, including sanctions information, corporate records, law-enforcement information and open-source intelligence.

Recent U.S. actions against Iranian cryptocurrency networks demonstrate how this approach is being incorporated into sanctions enforcement.

In July, for example, Chainalysis reported that blockchain analysis connected newly designated Central Bank of Iran addresses to upstream institutional liquidity providers and an Asia-based payment processor.

For compliance teams, the implication is that screening a customer’s name or legal entity alone may not provide a complete picture of sanctions exposure where cryptocurrency is involved.

What the new framework means for crypto compliance

The August 24 determination raises the importance of Iran-related exposure assessments across the digital-asset ecosystem.

For exchanges, OTC desks, payment providers, custodians and infrastructure companies, compliance reviews may increasingly need to consider not only direct relationships with sanctioned parties but also indirect exposure to Iranian digital-asset activity.

Particular areas of attention include:

• Iran-linked counterparties and customers
• Cryptocurrency wallet exposure
• OTC brokers and liquidity providers
• Payment intermediaries
• Digital-asset exchanges operating in higher-risk jurisdictions
• Transactions connected to Iranian oil trading
• Connections to the IRGC and IRGC-Qods Force
• Cybercrime and ransomware-linked cryptocurrency flows
• Third-party service providers supporting digital-asset transactions

The issue is especially relevant for businesses whose counterparties operate across multiple jurisdictions. A company may have no physical presence in Iran while still encountering Iranian exposure through a foreign exchange, broker, payment processor, liquidity provider or wallet.

Treasury has also made clear that the broader Operation Economic Outcast is intended to increase the consequences for foreign parties that continue facilitating Iran-related activity. The department said entities that facilitate money laundering or sanctions evasion on behalf of Iran could face exclusion from the U.S. financial system.

A broader sanctions campaign is already unfolding

The digital-assets determination is one element of a much larger campaign.

Treasury’s August 24 announcement covered five Iranian economic sectors and included sanctions against nearly 60 entities, individuals and vessels across multiple jurisdictions. Treasury said the targets were connected to activities including nuclear and missile procurement, cyber operations and oil-revenue generation.

The campaign has continued beyond its launch date.

On August 28, FinCEN proposed measures targeting Banque Misr UAE’s correspondent banking access to U.S. financial institutions, while OFAC separately designated individuals and entities connected to Iran’s financial networks.

On September 10, Treasury announced another Operation Economic Outcast action targeting networks that it said enable Kata’ib Hizballah and Lebanese Hizballah, alongside an enforcement action involving services provided to Iranian companies.

The continuing actions indicate that the August 24 announcement was structured as the beginning of an ongoing enforcement campaign rather than a standalone sanctions package.

The compliance landscape shifts from screening to network analysis

For financial institutions and digital-asset businesses, one of the broader implications is a shift from viewing sanctions compliance as a primarily name-based screening exercise toward a more comprehensive assessment of transaction networks and contextual risk.

The Iranian cases demonstrate why wallet attribution, transaction tracing and counterparty relationships can matter alongside traditional sanctions screening.

A cryptocurrency address may not carry a person’s name, but its transaction history can reveal connections to sanctioned entities, brokers, exchanges, payment processors or illicit services. Likewise, a seemingly ordinary commercial counterparty may sit within a larger network facilitating sanctioned oil revenues or other restricted activity.

As U.S. authorities expand the use of sectoral sanctions, the relevant compliance question can therefore extend beyond “Is this counterparty sanctioned?” to “What activity, sector and network does this transaction connect to?”

That distinction is likely to remain important as Operation Economic Outcast develops.

For global crypto businesses, the immediate consequence of the August 24 action is a broader sanctions perimeter around Iran’s digital-assets economy. For compliance teams, it increases the importance of combining sanctions screening with wallet intelligence, transaction monitoring, entity resolution and contextual investigation — particularly where Iran-linked digital-asset, oil-trade or cyber activity may intersect.

The U.S. Treasury’s subsequent actions suggest that the campaign is already expanding across financial institutions, aviation, shipping and other channels. The digital-assets sectoral determination places cryptocurrency firmly within that wider enforcement architecture and gives OFAC another mechanism for targeting the international networks through which Iranian-linked value moves.