OFAC sanctioned 134 crypto wallets tied to ISIS-Okay, exposing a $2M terror financing community constructed on USDT and Monero.
The U.S. Treasury’s Workplace of Overseas Belongings Management sanctioned 134 cryptocurrency wallets tied to ISIS Khorasan Province on July 1, 2026. The addresses moved greater than $2 million and mark the second time OFAC has immediately focused the group’s crypto operations.
Blockchain analytics companies TRM Labs and Chainalysis each confirmed the replace to ISKP’s Specifically Designated Nationals itemizing. The wallets embrace 131 TRON addresses and three Monero addresses, in keeping with Chainalysis.
Tether has already frozen the balances held throughout all 131 TRON wallets.
Learn additionally:
OFAC Sanctions Crypto Rip-off Rings in Myanmar, Cambodia
How ISKP Funded Its Operations Via Crypto
ISKP has leaned on USDT for years, with particular person transactions starting from roughly $10 to $15,000. That sample factors to a large base of small donors fairly than a handful of enormous backers.
Since late 2023, the group has additionally pushed supporters towards Monero, asking for donations overtly via its Voice of Khurasan journal. The shift displays a broader effort to maneuver funds with much less visibility on-chain.
Chainalysis discovered that the 131 TRON wallets alone obtained over $1.4 million since 2023 and despatched out greater than $880,000.
A number of of these wallets confirmed heavy publicity to mainstream exchanges. Some additionally despatched funds on to crypto exchangers based mostly in Syria, in keeping with Chainalysis knowledge.
OFAC up to date its sanctions towards ISIS-Okay, including 134 cryptocurrency wallets (131 TRON, 3 Monero) as identifiers. In a separate enforcement motion, OFAC focused people linked to the Latin American legal group PCC for laundering illicit proceeds through crypto. Learn extra…
— Chainalysis (@chainalysis) July 1, 2026
Crypto Financing Tied to Lethal Assaults
TRM Labs has tracked ISKP’s cryptocurrency exercise since 2022, and the group’s fundraising has been linked to real-world violence.
In March 2024, 4 Tajik nationals attacked a Moscow theater, killing greater than 125 folks. TRM traced funds from the pockets that financed the attackers straight to an ISKP-controlled pockets inside hours of the assault.
Three months later, German authorities arrested a person at Cologne/Bonn airport holding German, Polish and Moroccan citizenship.
He had reportedly despatched near $1,700 in cryptocurrency to an ISKP-linked tackle. He had additionally utilized for a job on the Euro 2024 match, held in Germany that summer time.
TRM famous that ISKP had been urging supporters to focus on main sporting occasions round that interval.
🚨 OFAC simply sanctioned 134 crypto addresses tied to ISKP (ISIS’s Afghanistan affiliate) that moved over USD 2 million.
TRM has tracked this community since 2022 — together with tracing funds from the 2024 Moscow assault to an ISKP pockets inside hours.
Learn our full breakdown ➡️… pic.twitter.com/UTADB0oMv5
— TRM Labs (@trmlabs) July 1, 2026
Years of Disruption Have Not Stopped the Community
Regulation enforcement has chipped away at ISKP’s monetary infrastructure a number of occasions, with out shutting it down.
TRM knowledge helped result in the arrest of a key ISKP financier in Istanbul again in 2023. That very same yr, OFAC designated Maldivian nationwide Ali Shafiu, who labored in ISIS-Okay’s media workplace and managed a pockets with hyperlinks to different ISIS media-unit addresses.
In Could 2025, a joint Pakistani-Turkish operation captured Ozgur Altun close to the Afghanistan-Pakistan border.
Altun ran ISKP’s media and crypto operations, and experiences say he was carrying a major quantity of cryptocurrency on the time. His spouse, Ayse Altun, has been accused individually of utilizing crypto to assist finance ISIS-linked households in Syria.
Following the arrest, ISKP supporters shared new safety steerage on-line, and TRM knowledge reveals the group’s fundraising has since unfold additional throughout a number of subgroups.
In a separate motion taken the identical day, OFAC sanctioned two Brazilian nationals and 4 corporations linked to Primeiro Comando da Capital.
The legal group is accused of laundering greater than $30 million via crypto. It marks OFAC’s third motion towards that group since December 2021.