The move targets 187 wallets reportedly used to fund terror activities, raising global concerns over crypto’s role in sanction evasion.
Israel Cracks Down on Crypto Linked to Iran’s IRGC
Israel’s Ministry of Defense has announced the seizure of 187 cryptocurrency wallets allegedly connected to Iran’s Islamic Revolutionary Guard Corps (IRGC), intensifying pressure on Iran’s financial networks amid escalating tensions.
- The operation was coordinated by the National Bureau for Counter Terror Financing (NBCTF).
- Authorities claim the wallets were used in “severe terror crimes”, reinforcing Israel’s stance that crypto is being used to bypass international sanctions.
- The IRGC is sanctioned by the U.S., EU, and Israel, and is labeled as a terrorist organization.
This marks a significant escalation in how governments are combating terror financing through digital assets.
$1.5 Billion in Activity, $1.5 Million Seized
While the seized wallets currently hold $1.5 million, blockchain analytics firm Elliptic reported that these addresses have historically moved over $1.5 billion in USDT (Tether).
- Elliptic’s co-founder Tom Robinson cautioned that it couldn’t independently verify the wallets’ ties to the IRGC.
- He added that many addresses might belong to crypto services or exchanges, and could be part of broader wallet infrastructure serving multiple users.
The vast difference between the total historical volume and current balance highlights the fluid nature of crypto transactions, where funds move rapidly and often anonymously.
Questions Linger Over Attribution and Evidence
Israel has not disclosed how it confirmed the wallets were IRGC-controlled. That lack of transparency is raising questions:
- Digital rights expert Amir Rashidi speculated that Israeli intelligence may have hacked into Iran’s infrastructure to identify the wallets.
- Rashidi also noted that some wallets could belong to exchanges or intermediaries indirectly tied to the IRGC, resembling how sanctioned institutions operate through front companies or affiliates.
This ambiguity reflects the challenges of attribution in blockchain investigations, even for state-level actors.
Cyber War and Sanctions Evasion Through Crypto
This is not the first time Israel—or groups aligned with its government—has targeted Iranian crypto assets.
- In June 2023, during the Twelve-Day War between Israel and Iran, the hacker group Predatory Sparrow breached Nobitex, Iran’s largest crypto exchange.
- The attackers stole approximately $90 million and “burned” the funds by sending them to inaccessible wallets, rendering them useless.
Crypto intelligence firms like TRM Labs and Elliptic have linked Nobitex to the IRGC, suggesting a pattern of state-supported crypto laundering operations.
This backdrop reinforces the view that digital currencies are a growing front in the geopolitical struggle between Iran and Israel.
Implications for the Crypto Ecosystem
The seizure sends a strong message to crypto service providers and regulators worldwide:
- Governments are willing to take direct action against wallets believed to be involved in illicit finance, even if attribution is partial.
- Exchanges and custodians may come under pressure to tighten compliance, especially regarding high-risk jurisdictions like Iran.
It also spotlights the dual-use nature of crypto: while offering financial freedom, it also enables sanction evasion and illicit flows when left unchecked.
