The United States Department of the Treasury’s Office of Foreign Assets Control (OFAC) has taken a decisive step in disrupting Iran’s digital financial infrastructure by officially designating Nobitex, the nation’s largest cryptoasset exchange, as a Specially Designated National (SDN). In a coordinated effort to dismantle the financial networks supporting the Iranian regime, the Treasury also leveled sanctions against three other prominent Iranian exchanges—Wallex, Bitpin, and Ramzinex—alongside four high-ranking executives linked to Nobitex’s operations. These actions mark a significant escalation in the U.S. government’s strategy to curb the use of digital assets for sanctions evasion, terrorism financing, and the stabilization of Iran’s volatile domestic economy.
The announcement, finalized on June 2, 2026, signals a transition from general prohibitions to specific, targeted enforcement. While Iranian financial institutions have long been under a blanket of restrictions, the formal listing of these specific exchanges on the SDN List provides global financial institutions, stablecoin issuers, and virtual asset service providers (VASPs) with clear legal mandates to freeze assets and cease all interactions. According to data provided by blockchain analytics firm Elliptic, the four sanctioned exchanges have collectively processed at least $40 billion in cryptoasset transactions, with Nobitex alone facilitating more than half of all digital asset inflows into Iran during the 2025 fiscal year.
The Leadership Behind Nobitex and Regime Ties
The Treasury’s designation extends beyond the corporate entities to the individuals who orchestrate their operations, highlighting the deep-seated connections between Iran’s crypto industry and its political elite. Among those sanctioned is Amir Hossein Rad, the co-founder, chairman, and former CEO of Nobitex, who has been instrumental in scaling the exchange to its current market dominance. Joining him on the SDN List are Ali Aghamir and Mohammad Aghamir, both co-founders of the platform.
The Aghamir brothers are of particular interest to international intelligence and regulatory bodies due to their membership in the Kharrazi family. This lineage places them within the immediate inner circle of Supreme Leader Ali Khamenei, suggesting that Nobitex does not operate as a purely private enterprise but rather as a strategic tool for the Iranian state. Also designated was Seyed Ali Khoee, the current CEO of Nobitex, who is responsible for the exchange’s day-to-day operations and its compliance—or lack thereof—with international anti-money laundering (AML) standards.
By targeting these executives, the U.S. Treasury is invoking the "50% Rule." This regulatory principle dictates that any entity owned 50% or more, directly or indirectly, by one or more blocked persons is also considered blocked. This ensures that any shell companies or secondary ventures managed by Rad, the Aghamirs, or Khoee are automatically subject to the same stringent restrictions as Nobitex itself.
A History of Illicit Financial Flows and Global Terror Links
The evidence supporting these designations is rooted in years of blockchain forensic analysis. Investigations by Elliptic and other blockchain monitoring firms have consistently linked Nobitex to wallets and transaction patterns associated with the Islamic Revolutionary Guard Corps (IRGC). Furthermore, the exchange has been identified as a conduit for funds moving to and from the sanctioned Russian exchange Garantex, which was blacklisted by the U.S. in 2022 for its role in laundering ransom payments and facilitating Russian illicit finance.
The Treasury’s findings also highlight a more direct threat to international security: the use of Iranian exchanges to fund regional and global proxy groups. Blockchain data has traced transactions between Nobitex-controlled addresses and wallets tied to Hamas, as well as hacking groups affiliated with the Democratic People’s Republic of Korea (DPRK). Additionally, the platform has been used by Syrian actors to move capital across borders, bypassing the Caesar Act and other international sanctions designed to isolate the Assad regime.
One of the most alarming aspects of the investigation involves the timing of transaction surges. Elliptic reported that outflows from Nobitex spiked significantly within minutes of the first US-Israeli military strikes in the region. These surges continued even during state-mandated internet blackouts within Iran. The Treasury asserts that these movements were not the result of retail panic but were instead coordinated efforts to shield the wealth of the regime and its elite members from potential seizure or economic collapse during the height of the conflict.
Propping Up the Rial: The $507 Million USDT Acquisition
A central component of the Treasury’s case involves the Central Bank of Iran’s (CBI) use of Nobitex to manipulate the domestic currency market. In January 2026, reports emerged that the CBI had acquired at least $507 million in Tether (USDT), the world’s most widely used stablecoin. Forensic analysis showed that until mid-2025, the vast majority of these funds were routed through Nobitex.
The mechanism was straightforward but effective: the Iranian government used its reserves to purchase USDT on the global market, moved those assets through Nobitex, and then sold them for Iranian rials. This influx of hard-currency-pegged assets was designed to artificially support the value of the rial, which has been in a state of freefall due to hyperinflation and international isolation. The U.S. Treasury specifically cited this research as a primary justification for the June 2026 designations, noting that the exchanges acted as de facto agents of the CBI in its effort to circumvent the global financial system.
The Shift in Legal Framework: From E.O. 13902 to E.O. 13224
The significance of the June 2, 2026, designation lies in the specific legal authorities invoked. Prior to this date, Iranian crypto exchanges were generally considered "off-limits" under Executive Order 13902, which authorizes sanctions against any person operating in the financial sector of the Iranian economy. They were also blocked under E.O. 13599 and the Iranian Transactions and Sanctions Regulations (ITSR) as "Iranian financial institutions."
However, the new listing adds a counterterrorism designation under Executive Order 13224. This is a much more severe classification, as it is reserved for entities that provide support to terrorists or acts of terrorism. By linking Nobitex and its counterparts to the IRGC and ransomware activity, the U.S. government has triggered "secondary sanctions."
Secondary sanctions are a powerful tool because they apply to non-U.S. persons. This means that any foreign financial institution (FFI) or offshore crypto exchange that continues to do business with Nobitex, Wallex, Bitpin, or Ramzinex now faces the risk of being cut off from the U.S. financial system themselves. For stablecoin issuers like Tether or Circle, this provides the clear legal grounds—and the urgent necessity—to freeze any assets associated with these exchanges’ known addresses.
Implications for the Global Crypto Industry and Compliance
The designation of these four exchanges creates an immediate and complex challenge for compliance departments worldwide. While the core obligation to avoid Iranian entities has existed for years, the formalization of these names on the SDN List removes any ambiguity. Compliance officers must now ensure that their screening tools are updated to catch not only the primary exchanges but also the "shadow" wallets and subsidiary entities controlled by the designated executives.
The ripple effects will likely be felt most acutely in the "gray market" of crypto, where offshore exchanges have often turned a blind eye to Iranian traffic. With the threat of secondary sanctions looming, these platforms must now choose between maintaining their Iranian user base and retaining access to the U.S. dollar-clearing system.
Furthermore, the case of Nobitex serves as a landmark example of how blockchain transparency can be used against state actors. The very technology that the Iranian regime used to bypass traditional banking—the public ledger of the blockchain—became the primary evidence used by the U.S. Treasury to map their illicit activities. The ability of firms like Elliptic to track half a billion dollars in USDT back to the Central Bank of Iran demonstrates that the "pseudonymity" of crypto is a fragile shield against sophisticated forensic analysis.
Chronology of the Escalation
The road to the June 2026 sanctions was marked by several key milestones:
- Mid-2022: U.S. Treasury sanctions Russian exchange Garantex, identifying it as a major hub for illicit Iranian and Russian flows.
- Early 2025: Nobitex accounts for 50% of all Iranian digital asset inflows, signaling its emergence as a systemic financial entity.
- January 2026: Investigative reports reveal the CBI’s $507 million USDT acquisition strategy facilitated by Nobitex.
- April 2026: Large-scale crypto outflows are detected during regional military escalations, suggesting regime-led capital flight.
- June 2, 2026: OFAC officially designates Nobitex, Wallex, Bitpin, and Ramzinex under counterterrorism and financial sector executive orders.
As the Iranian regime continues to seek alternative methods for survival in the face of international pressure, the U.S. Treasury’s move against Nobitex and its peers represents a major closing of the "crypto loophole." This action underscores the reality that as digital assets become more integrated into the global economy, they will be subject to the same—if not greater—levels of scrutiny as the traditional financial systems they were intended to bypass. For the global crypto industry, the message is clear: the era of regulatory ambiguity regarding sanctioned jurisdictions is over.
