Notifications
Clear all
Topic starter
11/07/2026 8:30 pm
TL;DR: Iran’s crypto ecosystem reached more than $7.78 billion in 2025, with activity spiking around conflict, sanctions pressure, and domestic unrest, while IRGC-linked addresses accounted for about 50% of total values received in Q4 2025, according to Chainalysis. The pattern shows how political instability can turn blockchain activity into both a financial pressure valve and an illicit finance channel.
NHIMG editorial — based on content published by Chainalysis: Iran's crypto activity, IRGC dominance, and protest-driven Bitcoin withdrawals
By the numbers:
- Iran’s crypto ecosystem reached over $7.78 billion in 2025.
- The Iranian rial has lost approximately 90% of its value since 2018.
- In the fourth quarter of 2025, IRGC-associated addresses accounted for approximately 50% of Iran’s total crypto ecosystem.
Questions worth separating out
Q: How should teams handle crypto activity spikes during political unrest?
A: Treat them as contextual risk events, not just volume anomalies.
Q: Why does self-custody complicate financial crime monitoring?
A: Self-custody removes the intermediary controls that exchanges and banks normally provide.
Q: What breaks when attribution depends on blockchain addresses alone?
A: Address-only analysis breaks when control is layered through facilitators, shell entities, or indirect wallets.
Practitioner guidance
- Reweight alerting for conflict-linked spikes Tune transaction monitoring to elevate alerts when volume or withdrawal patterns change during protests, blackouts, or military escalation.
- Strengthen wallet attribution workflows Combine blockchain intelligence with sanctions lists, entity resolution, and beneficial ownership review to reduce false confidence in counterparty identity.
- Treat exchange exits as governance events Create a review step for large transfers from managed exchange accounts into personal self-custody wallets, especially where destination risk is unknown.
What's in the full report
Chainalysis' full report covers the operational detail this post intentionally leaves for the source:
- Per-event transaction charts showing how Iranian activity moved around bombings, strikes, and protest periods.
- The IRGC-associated address analysis behind the more than $3 billion received in 2025.
- Methodology notes on how the report defines lower-bound estimates and attributed wallet sets.
- The exchange withdrawal pattern analysis behind the shift into personal Bitcoin wallets.
👉 Read Chainalysis' analysis of Iran's crypto flows, sanctions pressure, and unrest →
Iran's crypto flows under pressure: what should practitioners watch?
Explore further
11/07/2026 9:00 pm
Crypto under sanctions pressure is now an identity and governance problem, not only a financial one. When value moves through self-custodial wallets, the relevant control question becomes who controls the counterparty, not just whether a wallet exists. That shifts the burden onto sanctions screening, entity resolution, and ongoing ownership review, especially when proxy networks obscure the real actor. Practitioners should treat counterparty identity as a living control, not a one-time onboarding event.
A question worth separating out:
Q: Who is accountable when crypto flows may involve sanctioned or state-linked actors?
A: Accountability sits with the exchange, compliance, and investigative teams that decide how much confidence to assign to the destination and whether to freeze, escalate, or continue monitoring. In practice, teams need documented thresholds for provisional attribution, since crisis-driven flows often remain ambiguous for days or weeks.
👉 Read our full editorial: Iran's crypto ecosystem shows how sanctions and unrest reshape flows
