U.S. sanctions Iran’s Nobitex crypto exchange over ransomware- and IRGC-linked transactions

Updated: 2026.06.03 7D ago 1 sources

Ransomware Threat Actors & APTs Policy & Regulation

The U.S. sanctioned Nobitex, Iran’s largest cryptocurrency exchange, saying it helped process transactions tied to ransomware actors and Iran’s Islamic Revolutionary Guard Corps. The Treasury’s Office of Foreign Assets Control also designated Nobitex executives and targeted other Iranian exchanges including Wallex, Bitpin, and Ramzinex as part of its "Economic Fury" campaign, alleging sanctions evasion and terrorist-financing support rather than a software flaw or CVE-tracked vulnerability.

Why it matters: This matters because ransomware groups and state-linked actors depend on payment channels to move money, and sanctions can disrupt those routes while raising compliance risk for exchanges, companies, and users who interact with them. Organizations handling crypto exposure should review sanctions screening and watch for links to designated wallets and entities.

Sources

The U.S. sanctions Nobitex crypto exchange used by ransomware

Bill Toulas 2026.06.03 100% relevant

This article establishes a distinct new story about OFAC’s sanctions action against Nobitex and related Iranian exchanges for allegedly facilitating ransomware- and IRGC-linked crypto activity.