"Nobitex processed more than 50 percent of all Iranian digital asset inflows in 2025," the U.S. Treasury said — a figure that underpins Washington’s decision to add Iran’s largest crypto exchange and several executives to its sanctions list.
What the Treasury and OFAC announced
The U.S. Treasury’s Office of Foreign Assets Control (OFAC) designated Nobitex and four named company executives as sanctioned entities, saying the exchange “provided significant support to the regime.” The action is part of the U.S. government’s broader “Economic Fury” campaign and also targeted three other Iranian cryptocurrency exchanges: Wallex, Bitpin, and Ramzinex.
OFAC named specific individuals in its designations: chairman Amir Hossein Rad; CEO Seyed Ali Khoee; co-founder Seyed Mohammad Ali Aghamir Mohammad Ali; and blockchain lead Seyed Mohammad Aghamir Mohammad Ali. The practical legal effects cited by Treasury are immediate: any property or assets of the designated entities and individuals that fall under U.S. jurisdiction are frozen, and U.S. persons are prohibited from doing any business with them.
Nobitex’s alleged role in sanctionable activity
Treasury statements assert that Nobitex facilitated payments tied to Iranian terrorist activities and sanctions evasion, including transactions linked to the Islamic Revolutionary Guard Corps (IRGC). According to the release, wallets used in transactions associated with ransomware threat actors were connected to IRGC-linked activity routed through the exchange.
The Treasury also alleged that “Nobitex helped the Central Bank of Iran access hundreds of millions of dollars in stablecoins used to prop up the plummeting value of the Iranian rial, while enabling regime insiders to access international digital asset exchanges and evade sanctions across multiple jurisdictions.” Those findings form the basis for the designation and the accompanying restrictions on U.S. engagement.
Blockchain intelligence: Chainalysis numbers for 2025
Independent blockchain analysis cited by the Treasury provides scale to the claims. Chainalysis estimated that the Iranian cryptocurrency ecosystem received nearly $7.8 billion in 2025. The firm further estimated that addresses associated with the IRGC accounted for over 50% of the value received by the Iranian crypto ecosystem in Q4 2025.
Chainalysis’ breakdown, as summarized by Treasury, attributes more than half of Iranian crypto inflows to Nobitex, with Wallex and Bitpin accounting for roughly 12% and 10% of inflows, respectively. Those shares help explain why OFAC targeted multiple exchanges in a single action.
Immediate operational effects and international pressure
Beyond the legal prohibitions on U.S. persons, Treasury framed the designation as a lever to apply international pressure: the sanctions create additional incentives for non-U.S. companies and allies to avoid dealing with the named exchanges and individuals. The release emphasized that foreign firms and counterparties are “reluctant to take risks” when U.S. designations carry secondary market and compliance consequences.
In practical terms, firms that operate cross-border payment rails, stablecoin services, or fiat-crypto on- and off-ramps now have a compliance-based reason to reassess counterparty risk exposure to the named platforms and people. The designation also increases scrutiny on flows identified as connected to IRGC-linked wallets and on stablecoin transfers to Iranian central authorities.
What this means for cryptocurrency firms, sanctions compliance teams, and incident responders
- Cryptocurrency firms and exchanges: Providers handling stablecoins, custody, or on/off ramps will face pressure to sever or deny relationships with Nobitex, Wallex, Bitpin, Ramzinex, and the named individuals to avoid secondary exposure. The Treasury’s claim that Nobitex enabled regime insiders to reach international exchanges is a direct compliance red flag.
- Sanctions compliance teams and regulators: Compliance officers will need to prioritize screening for wallets and flows tied to IRGC-associated addresses and to monitor stablecoin movements linked to central banking entities. Chainalysis’ Q4 2025 finding that IRGC addresses accounted for over 50% of value received underscores the scale of monitoring required.
- Incident responders and forensic analysts: Forensic teams should note Treasury’s linkage between Nobitex and wallets associated with ransomware threat actors, and recall that in June 2025 the Predatory Sparrow group claimed a breach of Nobitex, saying it stole roughly $90 million. Those events alter threat models for exchanges and responders alike.
The designations tie together on-chain analytics, prior intrusion claims, and standard sanctions tools. They raise immediate compliance and operational questions: how will non-U.S. counterparties handle existing ties to the named exchanges; will stablecoin issuers and international exchanges tighten onboarding and monitoring; and how quickly will on-chain tracing be turned into enforceable de-risking decisions? Treasury’s action makes those next moves the central issue for anyone who transacts with or monitors Iranian crypto flows.
