Iran’s Islamic Revolutionary Guard Corps (IRGC) has used two cryptocurrency exchanges registered in the UK to maneuver roughly $1 billion since 2023, based on a brand new evaluation from blockchain intelligence agency TRM Labs.
The 2 exchanges, Zedcex and Zedxion, appeared to function as separate firms however functioned as a single enterprise. Between 2023 and 2025, IRGC-linked transactions accounted for 56% of the exchanges’ complete quantity. The overwhelming majority of those transfers used Tether (USDT) on the Tron blockchain, chosen for its low transaction prices and excessive liquidity.
How the Operation Grew Over Time
The dimensions of IRGC exercise by these platforms elevated dramatically 12 months over 12 months. In 2023, roughly $24 million in IRGC-linked funds moved by the exchanges, representing 60% of their complete exercise. This surged to $619 million in 2024, when IRGC transactions peaked at 87% of all change quantity. By 2025, IRGC-linked flows declined to $410 million, accounting for 48% of complete transactions.
TRM Labs traced the exchanges’ operations by making small deposits and withdrawals to map their inner infrastructure. Investigators additionally adopted exercise tied to 187 pockets addresses that Israeli authorities designated as IRGC-controlled in September 2025.
Supply: trmlabs
The funds moved by a community connecting IRGC-controlled wallets, offshore intermediaries, and main Iranian cryptocurrency exchanges together with Nobitex, Wallex, and Aban Tether. This integration meant sanctioned army funds flowed into Iran’s broader crypto financial system, the place bizarre residents additionally commerce digital property.
The Man Behind the Exchanges
Company information hyperlink each exchanges to Babak Zanjani, one in all Iran’s most infamous sanctions-evasion financiers. America and European Union previously sanctioned Zanjani in 2013 for laundering billions of {dollars} in oil income on behalf of regime entities, together with the IRGC.
Zanjani was later arrested in Iran and sentenced to loss of life for embezzling from the Nationwide Iranian Oil Firm. His sentence was commuted in April 2024 after he repaid roughly $2.1 billion. By December 2024, he had been launched from jail.
Zedxion Alternate Ltd was included in Might 2021, with Babak Morteza appointed as director in October that 12 months. Zedcex Alternate Ltd was included in mid-2022, simply days after Zanjani formally exited Zedxion. Each firms shared an identical digital workplace addresses and listed the identical successor director. Regardless of processing billions in cryptocurrency, each exchanges filed dormant accounts by June 2025, claiming no lively buying and selling operations within the UK.
Since his launch, Zanjani has re-emerged by DotOne Holding Group, a conglomerate spanning cryptocurrency, logistics, and telecommunications. In July 2025, he claimed to have suggested Iran’s Central Financial institution to transition the nation’s banking system onto blockchain infrastructure.
Direct Hyperlinks to Terrorist Financing
TRM Labs uncovered direct transfers exceeding $10 million from IRGC wallets to Sa’id Ahmad Muhammad al-Jamal, a Yemeni nationwide whom the U.S. Treasury sanctioned in 2021. Al-Jamal operates a smuggling community that generates income for Yemen’s Houthis and supplies materials help to the IRGC. These transfers occurred with out routing by intermediaries or mixers, demonstrating the direct nature of the terrorist financing.
The investigation additionally revealed that Zedxion built-in with Zedpay, a cellular cost processor working from Turkey. Zedpay maintained relationships with Turkish monetary entities together with Vepara, whose license was later suspended amid anti-money laundering considerations, and Vakif Katilim, a state-owned Islamic financial institution beforehand scrutinized for facilitating Iran-linked monetary exercise. This connection prolonged the exchanges’ capabilities past digital buying and selling into fiat settlement and real-world funds.
Worldwide Response and Enforcement
Israel’s Ministry of Protection took motion in September 2025, ordering the seizure of 187 cryptocurrency wallets allegedly belonging to the IRGC. These wallets had collectively acquired $1.5 billion in USDT over time, although they presently maintain solely $1.5 million. TRM Labs related Zedcex-attributed wallets on to addresses designated on this Israeli seizure order.
Tether, the corporate behind USDT, executed its largest-ever freeze of Iranian-linked funds on July 2, 2025. The stablecoin issuer blocklisted 42 addresses, many with publicity to each Iranian exchanges and IRGC-affiliated addresses beforehand flagged by Israeli authorities. This motion eliminated important liquidity from Iran’s crypto market at a essential time.
The timing coincided with extreme financial stress on Iran. The Iranian rial hit report lows in late December 2025, reaching 1.42 million per U.S. greenback—a decline of roughly 40% since June 2025. This foreign money disaster has pushed tens of millions of Iranians towards cryptocurrency as a strategy to protect their financial savings.
Infrastructure Constructed for Evasion
Not like typical cryptocurrency abuse by criminals, this operation represents state-aligned actors constructing persistent monetary infrastructure. Elements of the change operations had been hosted by ChainUp, a Singapore-based firm that gives white-label change companies together with custody, pockets administration, and buying and selling programs. This infrastructure allowed the exchanges to scale quickly whereas sustaining separate pockets infrastructure for various actions.
“This isn’t opportunistic crypto misuse—it’s a sanctioned army group working exchange-branded infrastructure offshore,” stated Ari Redbord, World Head of Coverage at TRM Labs. The findings present Iranian-linked actors testing extra persistent crypto infrastructure somewhat than conducting one-off transactions.
Miad Maleki, a former U.S. Treasury official who labored on Iran sanctions efforts, instructed The Washington Put up that “the $1 billion determine over two years demonstrates that digital currencies have gotten a monetary channel for Iran’s shadow banking equipment.”
Each exchanges declare on their web sites to adjust to anti-money-laundering rules. Zedcex lists Iran amongst its prohibited jurisdictions, whereas Zedxion doesn’t. Neither change responded to questions from The Washington Put up. The UK Treasury’s Workplace of Monetary Sanctions Implementation additionally declined to remark.
Iran’s Rising Crypto Dependence
The broader context reveals Iran’s growing reliance on cryptocurrency for sanctions evasion. Roughly 22% of Iran’s inhabitants—about 10 million individuals—now makes use of or owns cryptocurrency. Crypto outflows from Iran totaled $4.18 billion in 2024, representing a 70% enhance from the earlier 12 months. Analysis from August 2025 exhibits that 1.4% of Iran’s annual GDP now flows by cryptocurrency channels.
Iran additionally controls about 4.2% of world Bitcoin mining energy, ranking fifth worldwide, although an estimated 95% of mining operations run illegally. The nation’s low cost electrical energy prices between $0.01 and $0.05 per kilowatt-hour make mining engaging regardless of the dangers.
The Monetary Occasions lately reported that Iran is seeking to settle for crypto funds in its gross sales of ballistic missiles, warships, and different superior weapons. This represents a major escalation in Iran’s efforts to bypass Western sanctions by blockchain know-how.
The Digital Entrance Line
This case demonstrates how cryptocurrency has turn out to be central to geopolitical conflicts and sanctions evasion. The sophistication of the operation—utilizing UK company constructions, white-label infrastructure suppliers, and Turkish cost processors—exhibits Iran’s evolution from sporadic crypto use to constructing sturdy monetary rails that conventional banking can not attain.
The problem for regulators and compliance officers is critical. These exchanges introduced themselves as standard buying and selling platforms with anti-money laundering packages. But company filings exhibiting dormant standing and nominal administrators stood in sharp distinction to billions in on-chain exercise. The hole between paper compliance and operational actuality enabled years of sanctions evasion by lightly-regulated offshore constructions.
As digital property turn out to be extra central to world finance, the flexibility of sanctioned actors to construct parallel monetary infrastructure poses rising challenges for worldwide enforcement efforts.
Sven Luiv Sven Luiv Read More
