Get a demo
Insights & research

OFAC sanctions exchanges Zedcex and Zedxion for assisting in Iranian sanctions evasion and IRGC operations

Stylized letter "E" in a 3D effect, set against a gradient green background.

By Elliptic

A stylized illustration of a building with a flag featuring the emblem of Iran and a cryptocurrency coin.

On January 30, 2025, the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned two UK-registered companies operating as unauthorized crypto exchanges, Zedcex and Zedxion, for their involvement in facilitating financial activity that allowed Iran to evade sanctions.

In addition, OFAC sanctioned seven Iranian individuals, six of whom are said to be connected to Iran’s Islamic Revolutionary Guard Corps (IRGC), the regime’s flagship security organization.

According to OFAC, the individuals listed in today’s designation are “responsible for the regime’s brutal crackdown on its own people.” This refers to Iran’s suppression of the civil riots that began in late December 2025. According to reports, more than 36,000 citizens died within two days (January 8-9) from the regime’s violent repression of the protests. 

Elliptic has taken urgent action to ensure that addresses that were included in the latest designations are available to screen and trace using our next-generation holistic blockchain analytics technology. Customers will now be able to ensure that they do not inadvertently process funds originating from, or being sent to, these designated addresses.

In addition to these exchanges and individuals, OFAC sanctioned Babak Zanjani, who OFAC reports was “freed from imprisonment in order to launder money for the regime.”

According to the press release, Zanjani has provided financial support for major IRGC projects and the Iranian regime as a whole. Zanjani is reportedly connected to Zedcex and Zedxion, both of which have processed funds linked to the IRGC. Per the press release: “This marks OFAC’s first designation of a digital asset exchange for operating in the financial sector of the Iranian economy.”

Today’s designations come in the wake of recent American and European sanctions against Iran and the IRGC. On January 29, the Council of the European Union sanctioned 15 individuals and six entities (some of which are related to the IRGC) for “serious human rights violations and Iran’s continued support to Russia’s war of aggression against Ukraine.”

In September, OFAC sanctioned a cryptoasset-enabled financial network for facilitating Iranian oil smuggling, listing Alireza Derakhshan and Arash Estaki Alivand “for their roles in coordinating funds transfers, including from the sale of Iranian oil, that benefits the IRGC-Qods Force (QF), and Iran’s Ministry of Defense and Armed Forces Logistics (MODAFL).”

Zedcex was indirectly sanctioned in September 2025 by Israel’s National Bureau for Counter Terror Financing (NBCTF’s ASO 41/25), when the latter published 187 crypto addresses affiliated to the IRGC.

Of these, five addresses were listed today by OFAC as belonging to Zedcex and Zedxion. Below are the seven addresses OFAC listed today; the final address was previously blacklisted by Tether in June 2025.

  • TGsNFrgWfbGN2gX25Wcf8oTejtxtQkvmEx
  • TTS9o5KkpGgH8cK9LofLmMAPYb5zfQvSNa
  • TCzq6m2zxnQkrZrf8cqYcK6bbXQYAfWYKC
  • TLvuvpfBKdxddxSsJefeiGCe9eVY8HUroE
  • TNuA5CQ6LB4jTHoNrjEeQZJmcmhQuHMbQ7
  • TASWbk6X1wiTku5TMmMQYqYFvshVEtfJy8
  • TCA9vmjsYw9MtPKEwRBtGhKFRfr4CLxJAv

The seven addresses listed today by OFAC have processed more than $389 million, with a single address, TLvuvpfBKdxddxSsJefeiGCe9eVY8HUroE, having received $149.3 million.

Babak Zanjani recently disclosed documents describing purchases of the USDT stablecoin by Iran’s central bank. Elliptic’s analysis of these transactions uncovered at least $507 million in total USDT acquisitions, likely used by the Central Bank of Iran to support the value of the rial.

The power of blockchain transparency

The inherent transparency of blockchain technology enables comprehensive visibility into financial flows, empowering all ecosystem participants to play a crucial role in identifying and reducing illicit funds.

When authorities and industry work together with speed and precision, we can ensure customers remain safe and secure while maintaining the integrity of the digital asset ecosystem.

FAQs

What is indirect sanctions exposure?
Indirect exposure is risk that arises when funds are connected to a sanctioned entity through one or more intermediate transactions, rather than coming directly from them. It can still create compliance risk even several hops away.
Why do ruble-backed stablecoins make this important?
They can carry value linked to sanctioned Russian actors, so a firm can become exposed without transacting with a sanctioned party directly. Detecting that link requires tracing exposure across hops.
How does Elliptic help identify indirect exposure?
Elliptic assesses how closely a wallet or transaction is connected to sanctioned entities across multiple hops and chains, so teams can configure rules that account for indirect as well as direct exposure.
What did Elliptic find about Iran and dollar stablecoins?
Elliptic's research indicates Iran-linked actors have acquired US dollar stablecoins worth at least half a billion dollars, showing how sanctioned actors can use stablecoins to access dollar value.
How can firms detect this kind of exposure?
Through blockchain analytics that attribute activity to sanctioned-linked actors and assess direct and indirect exposure across chains.

Dive deeper

All insights
Crypto regulatory affairs Sept 26

Crypto regulatory affairs: US Operation Economic Outcast looks to squeeze Iran’s crypto activity

Image features a professional headshot with a neutral background, emphasizing the subject's face and upper body.

By David Carlisle

Vice President of Policy and Regulatory Affairs

The fall of A7A5: how sanctions strangled the ruble stablecoin

Elliptic

How Bitcoin ATM scams work and how banks can spot the risk on-chain

Elliptic

Behind the FBI case against Huione: the $134 billion marketplace and money laundering operation exposed by Elliptic

Elliptic