The $3.84B Mechanism: How it Worked
Published 6/25/2026, 3:24:58 AM
Between 2019 and 2026, the cryptocurrency exchange CoinEx emerged as a primary global conduit for Iranian capital, facilitating approximately $3.84 billion in transactions linked to the sanctioned regime [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2]. Investigative findings from TRM Labs and the Wall Street Journal indicate that CoinEx functioned as a "shadow banking" hub by maintaining permissive compliance policies that allowed Iranian users to bypass U.S. sanctions [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2].
The $3.84B Mechanism: How it Worked
CoinEx's role as a hub was driven by a combination of technical loopholes and deliberate policy choices that favored trading volume over regulatory compliance.
- The "Passport Loophole": For years, CoinEx's Know Your Customer (KYC) protocols were reportedly designed to block only users who explicitly provided Iranian-issued passports. This allowed Iranian nationals to register using other forms of identification or trade without full verification, effectively bypassing geographic restrictions [Source: https://www.facebook.com/WatcherGuru/posts/just-in-iran-moved-384-billion-through-coinex-crypto-exchange-to-bypass-us-sanct/1021008580285109/]. [Note: not independently confirmed].
- The Tron (TRX) Pipeline: A significant portion of Iranian flows utilized the Tron network and USDT (Tether). Domestic Iranian exchanges like Nobitex reportedly advised users to use Tron to trade "anonymously" and avoid asset freezes [Source: https://home.treasury.gov/news/press-releases/sb0519].
- Direct Exchange Linkages: Blockchain analytics show a massive, direct pipeline between CoinEx and major Iranian domestic exchanges. In 2024 alone, outflows from Iranian exchanges reached $4.18 billion, a 70% year-over-year increase, with CoinEx serving as a primary international destination [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2].
Key Actors and Beneficiaries
The flow of funds through CoinEx was deeply integrated with the Iranian state and military apparatus.
| Actor | Role in the Ecosystem |
|---|---|
| Central Bank of Iran (CBI) | Used the network to access hundreds of millions in stablecoins to stabilize the Iranian rial [Source: https://home.treasury.gov/news/press-releases/sb0519]. |
| IRGC (Revolutionary Guard) | Accounted for >50% of total value received by the Iranian crypto ecosystem in Q4 2025 [Source: https://www.chainalysis.com/blog/ofac-sanctions-iranian-crypto-exchanges-june-2026/]. |
| Nobitex | Iran's largest exchange; funneled users toward international hubs like CoinEx and Binance [Source: https://home.treasury.gov/news/press-releases/sb0519]. |
| Babak Morteza Zanjani | OFAC-designated financier linked to offshore infrastructure used for IRGC-linked stablecoin moves [Source: https://home.treasury.gov/news/press-releases/sb0519]. |
Timeline of Investigative Findings
- 2019: Commencement of the multi-billion dollar flow of Iran-linked funds through CoinEx [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2].
- 2024–2025: TRM Labs identifies CoinEx as a top-tier destination for Iranian outflows as other major exchanges (like Binance) tightened controls under U.S. Department of Justice pressure [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2].
- June 2, 2026: The U.S. Treasury (OFAC) executes its largest-ever action against the Iranian digital economy, sanctioning domestic exchanges including Nobitex, Wallex, Bitpin, and Ramzinex [Source: https://home.treasury.gov/news/press-releases/sb0519].
- June 25, 2026: Investigative reports confirm CoinEx processed $3.84 billion in total Iranian volume, highlighting its role as a critical "sanctions-evasion hub" [Source: https://www.wsj.com/finance/currencies/how-a-crypto-exchange-became-a-major-hub-for-illicit-iranian-cash-46e771a2].
Investigative Findings: The "Economic Fury" Context
The U.S. Department of the Treasury's "Economic Fury" initiative has specifically targeted this infrastructure. Findings indicate that these networks were used to move wealth during domestic unrest, facilitate ransomware laundering for IRGC-affiliated actors, and process transfers to U.S.-designated terrorist financiers [Source: https://home.treasury.gov/news/press-releases/sb0519]. [Note: The specific transfer amount and direct tracing to U.S.-designated terrorist financiers could not be independently verified from the available Treasury and TRM Labs documentation.]
CoinEx became a $3.84 billion hub by filling a vacuum left by more regulated exchanges, leveraging permissive KYC policies and direct technical links to sanctioned Iranian domestic exchanges. While the total volume is documented by blockchain analytics, CoinEx's internal compliance policies and official responses to these specific allegations remain largely opaque.