OFAC Iran Crypto Sanctions: No Names Needed Now

Until Monday, US sanctions on Iran's crypto activity worked the way most people assume sanctions work: Treasury's Office of Foreign Assets Control identified a specific wallet address, exchange or person, put it on the Specially Designated Nationals list, and everyone else's job was to screen against that list and avoid it. That was the model behind June's "Economic Fury" campaign, which named Iranian exchanges Nobitex, Wallex, Bitpin and Ramzinex directly.

EO 13902 sectoral authority works differently. It lets Treasury declare an entire sector of Iran's economy — previously reserved for finance and petroleum — sanctionable as a category. Digital assets now sit in that category. Practically, that means a business doesn't need to appear on any list to create sanctions exposure for a counterparty; it just needs to be operating in Iran's digital-asset sector. TRM Labs, which tracks on-chain sanctions risk for exchanges and compliance teams, put it plainly in its analysis of the order: address-list screening alone is "no longer sufficient."

Yes, and that's the part worth paying attention to if you use a global exchange, OTC desk or custodian rather than an Iranian one. Secondary sanctions have always been designed to reach beyond the sanctioned country — that's the entire point of the word "secondary" — but the sectoral shift widens who can get caught. An exchange in Dubai, Istanbul or Almaty that has never had an Iranian address on its own sanctions list can now carry exposure simply by processing volume that touches Iran's digital-asset sector, even without a designated counterparty.

Monday's designations gave that risk a concrete face. Treasury sanctioned Ivan Obukhov, a Ukrainian broker, and his UAE-registered firm Foscom FZE, alleging he moved more than $100 million in crypto since 2023 to help facilitate oil sales for the IRGC-Quds Force, Iran's foreign paramilitary arm. Neither Obukhov nor Foscom is an Iranian platform — they're exactly the kind of offshore intermediary the new authority is built to catch. Treasury also listed 30 Bitcoin, Ethereum and Tron addresses tied to the Mabna Institute, an Iran-linked hacking-for-hire operation whose four alleged operators were named in a Justice Department superseding indictment on August 18. TRM traced roughly $16.8 million moving through those addresses since 2018, with 92% of it running through just ten addresses controlled by a single defendant — a case study in how a small number of wallets can route a lot of value before anyone notices.

OFAC itself is the clearest winner in terms of reach. It can now pursue non-Iran-based facilitators — brokers, OTC desks, exchanges with Gulf or Central Asia exposure — without drafting a new executive order for each one. That's a meaningful shift in how fast follow-on enforcement can move.

On-chain compliance vendors also stand to gain. TRM Labs, Chainalysis and Elliptic all sell tools that screen transaction flows for sanctions exposure, and a sector-based standard is a harder problem than list-based screening — it means selling deeper, ongoing monitoring rather than a one-time address check. Expect these firms to lean into that pitch with exchanges and OTC desks over the next few weeks.

The losers are less visible but more numerous: offshore intermediaries that have never been individually designated but carry incidental Iran-adjacent flow through legitimate business in sanctioned-adjacent corridors. A UAE or Turkish exchange with genuine, non-Iran clientele now has to prove a negative — that none of its volume touches Iran's digital-asset sector — rather than simply confirming no counterparty appears on a list. That's a heavier, more expensive compliance lift, and it will likely mean tighter KYC and geo-fencing on anything with an Iran nexus, whether or not the customer in question has done anything wrong.

The pattern to watch is whether OFAC follows through with visible, near-term designations of additional non-Iran-based facilitators — more Obukhovs, not just more Iranian platforms. If it does, within weeks rather than months, it meaningfully raises the practical cost of routing Iran-linked value through crypto, and validates the sectoral approach as a real deterrent rather than a legal ceiling that mostly sits unused.

The uncertainty cuts the other way too. Iran's crypto evasion persisted straight through June's Economic Fury SDN listings and asset freezes, and a sector-wide designation is authority, not enforcement — decentralized routing and jurisdictions that don't cooperate with US sanctions could blunt the practical deterrent again unless follow-on designations actually arrive at pace. Treasury has also pointed compliance teams to updated FAQs (1250 and 1257) to clarify where the significant-transaction threshold sits, which suggests even OFAC expects exchanges to need help figuring out exactly how far this reaches. For now, the safest assumption for any exchange or desk with Gulf, Turkish or Central Asian flow is that the burden of proof has shifted onto them, whether or not Treasury ever gets around to naming them specifically.