OFAC $344M Crypto Seizures Questioned: Analysts Suggest Non-Iranian Links

The U.S. Treasury’s Office of Foreign Assets Control (OFAC) may have misattributed $344 million in seized cryptocurrency wallets to Iranian actors, according to blockchain intelligence firm Nominis. The analysis suggests the wallets are more likely linked to other state entities, raising questions about the accuracy of sanctions enforcement and the evolving strategies of state-linked crypto use.

OFAC announced the seizure on April 24, 2026, as part of its broader Operation Epic Fury, a campaign aimed at economically pressuring Tehran. At the time, the wallets were identified as being tied to Iran’s Islamic Revolutionary Guard Corps (IRGC), a group with a history of using cryptocurrency to circumvent sanctions. However, Nominis CEO Snir Levi argues that the seized wallets exhibit structural and behavioral patterns inconsistent with previously documented IRGC-controlled assets.

“IRGC wallets typically distribute funds across multiple addresses, keep balances relatively low, and avoid prolonged exposure to mitigate seizure risk,” Levi stated in a report. In contrast, the frozen $340 million shows clustering patterns and operational behaviors that might align more closely with other state actors, possibly including Chinese networks. This raises critical questions about whether the funds are directly controlled by the IRGC or overlap with broader financial infrastructures.

The stakes are high given the scale of Operation Epic Fury. Treasury Secretary Scott Bessent revealed in a Fox Business interview last week that the U.S. has seized nearly $500 million in Iranian-linked crypto assets, a figure significantly higher than the $344 million initially disclosed. Bessent emphasized that these actions are part of a coordinated effort to destabilize Iran’s economy, which has already seen its currency devalue by up to 70% against the U.S. dollar.

Implications for Compliance and Sanctions Strategy

Nominis’ findings highlight a potential gap in traditional static sanctions typologies. Compliance teams may need to adopt advanced behavioral analysis and clustering techniques to identify evolving risk patterns. “State actors are adapting their blockchain strategies,” Levi noted, adding that this case underscores the need for dynamic monitoring tools in a rapidly shifting landscape of illicit crypto use.

OFAC’s recent enforcement actions are part of a broader trend targeting crypto-related financial crime. In the first quarter of 2024, the agency designated networks tied to Iranian proxies and money-laundering operations linked to Hamas. More recently, OFAC sanctioned Cambodian entities involved in digital asset fraud schemes and Southeast Asian operators targeting U.S. citizens. This multi-pronged approach aims to combat a wide array of threats, from election interference to financial scams.

While the $344 million seizure is a significant headline, its potential misclassification could have broader consequences for U.S. sanctions policy. Missteps in attribution risk undermining the credibility of enforcement efforts and could provide strategic leverage to adversarial states aiming to exploit gaps in U.S. oversight.

What’s Next?

As OFAC intensifies its focus on digital assets, scrutiny over its methodologies will likely increase. The next step may involve enhanced collaboration with blockchain analytics firms to refine attribution models and ensure sanctions are accurately targeting intended actors. For market participants, this serves as a reminder that compliance is not static; understanding evolving enforcement patterns is crucial to mitigating risk.

The crypto industry is watching closely. With nearly $500 million in assets tied to sanctions violations already frozen this year, the stakes for both state and private actors navigating this terrain are higher than ever.

Image source: Shutterstock