OFAC's 'Iranian' Crypto Seizures Questioned by Analyst, Pointing to Evolving State Actor Tactics

Blockchain intelligence firm Nominis challenges the U.S. Treasury's attribution of over $340M in seized crypto to Iran, suggesting evolving state actor tactics and new compliance c
The U.S. Treasury Department's recent seizure of over $340 million in cryptocurrency, attributed to Iranian state actors as part of 'Operation Economic Fury,' is facing scrutiny from a leading blockchain intelligence firm. While Treasury Secretary Scott Bessent publicly linked the wallets to Tehran, a new analysis suggests the reality may be far more complex, pointing to the evolving tactics of state-sponsored illicit finance.
Nominis Challenges OFAC's Attribution
Blockchain intelligence firm Nominis, in an analysis published Sunday, contends that the characteristics of the recently seized wallets do not align with previously established patterns of Iranian state-sponsored entities, specifically the Islamic Revolutionary Guard Corps (IRGC).
Nominis CEO Snir Levi highlighted key differences: "While the use of cryptocurrency by the Islamic Revolutionary Guard Corps (IRGC) is well established, this case presents structural and behavioral characteristics that diverge meaningfully from previously observed patterns."
Levi explained that IRGC-linked wallets typically exhibit consistent operational behaviors, such as distributing funds across numerous wallets, maintaining relatively low individual balances (often a few million USD), avoiding long-term retention of holdings, and structuring activity to minimize exposure to seizure. The wallets targeted in the latest OFAC action, however, reportedly deviate from these established norms.
"The behavioral divergence observed in this case raises a critical question: To what extent does the frozen $340 million reflect direct IRGC control, versus infrastructure that overlaps with broader, potentially foreign, financial networks," Levi added, suggesting the possibility of other state actors or more complex networks at play.
Operation Economic Fury: US Pressure on Tehran
Treasury Secretary Scott Bessent has been vocal about 'Operation Economic Fury,' a sweeping U.S. campaign designed to exert maximum economic pressure on Iran. Bessent claimed that the U.S. has seized nearly $500 million in Iranian cryptocurrency assets as part of this initiative, a figure higher than the $344 million in crypto assets previously disclosed, which included a significant amount of USDT frozen by Tether at OFAC's request.
Speaking on Fox Business, Bessent stated, "We are freezing bank accounts everywhere. More importantly, we are making people less willing to deal with the regime." He also cited the collapse of one of Iran's largest banks and a 60-70% depreciation of its currency against the U.S. dollar as evidence of the operation's impact.
Evolving Threats and Compliance Challenges
The Nominis analysis underscores a critical challenge for financial institutions and compliance teams: the rapid evolution of state actors' use of blockchain infrastructure. Levi stressed that "static typologies are no longer sufficient and behavioral analysis and clustering are critical for identifying risk."
This case serves as a stark reminder that even well-documented actors like the IRGC, and potentially other state actors, are continuously refining their methods for leveraging decentralized networks. For traders, investors, and builders in the crypto space, understanding these evolving geopolitical and regulatory landscapes is paramount, as it directly impacts market stability, liquidity, and the broader perception of digital assets.
Key points: Blockchain intelligence firm Nominis is challenging the U.S. Treasury's attribution of over $340 million in seized crypto to Iranian state actors. • The operational patterns of the seized wallets reportedly diverge from known Iranian state-sponsored activities, suggesting potentially other state actors or more sophisticated networks. • This case highlights the rapidly evolving sophistication of state actors in utilizing blockchain technology, demanding advanced behavioral analysis from compliance teams. • The discrepancy in reported seizure amounts ($340M vs. $500M) and the true ownership of the funds remain key points of contention and ongoing investigation.
FAQ
What is Operation Economic Fury?
Operation Economic Fury is a U.S. economic pressure campaign targeting Iran, which includes freezing assets and aiming to destabilize its economy through various sanctions and enforcement actions.
Why is the attribution of these seized wallets being questioned?
Blockchain intelligence firm Nominis found that the structural and behavioral patterns of the seized wallets do not match typical operational characteristics of known Iranian state-sponsored entities like the IRGC, suggesting alternative or more complex origins.


