TL;DR: Iran’s local exchanges continue operating while many international platforms restrict Iranian users, creating scrutiny around how these venues interact with the wider crypto ecosystem and exposure to regulated exchanges, according to Chainalysis. The governance issue is not just sanctions compliance, but the identity and transaction controls needed to trace counterparties, offboard risky access, and support AML enforcement.
Editorial analysis by NHI Mgmt Group, based on content published by Chainalysis: “Crypto Crime Intelligence Brief: Farhad Exchange”.
Key questions
Q: How should AML teams handle exchange exposure when local venues connect to sanctioned markets?
A: Treat exchange exposure as a network risk rather than a venue-by-venue screen.
Q: Why do sanctions controls fail when transaction provenance is incomplete?
A: Sanctions controls fail when teams cannot explain where funds came from, how they moved, and who controlled the receiving accounts.
Q: What are the warning signs that exchange network risk is being undercounted?
A: Common warning signs include repeated transfers through the same exchange clusters, inconsistent KYC quality across venues, and investigations that rely on a single platform view.
Practitioner guidance
- Map exchange adjacency and counterparty clusters Identify which local venues, regulated exchanges, and wallet clusters create repeated exposure paths into sanctioned or higher-risk activity.
- Strengthen entity resolution across cases Merge KYC records, wallet intelligence, and transaction history so investigators can track the same actor across multiple exchange touchpoints.
- Set escalation rules for high-risk exchange links Require enhanced review when funds touch venues with sanctions sensitivity, poor transparency, or repeated proximity to regulated entities.
Bottom line: The article shows that exchange risk in sanctioned markets is created by connectivity, not by any single platform acting alone.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Counterparty visibility is now a governance control, not an investigative luxury. When exchanges in restricted markets remain connected to broader crypto rails, the control gap is the inability to explain who the counterparty really is at the point of transfer. That means sanctions and AML teams need entity-level visibility, not just address-level alerts. The practitioner conclusion is to treat traceability as an operating control, not a post-incident forensics task.
A question worth separating out:
Q: Should compliance teams prioritise counterparty tracing over simple user screening?
A: Yes, when the article’s risk comes from exchange connectivity rather than a single onboarding event. User screening is necessary, but it is not sufficient if funds can move through local exchanges into regulated venues or higher-risk networks. Counterparty tracing gives compliance teams the context they need to decide whether the exposure is acceptable or escalates to sanctions concern.
👉 Read our full editorial: Iran’s local exchange links show sanctions and AML exposure