In late February 2026, Iran experienced a near-total internet shutdown following a joint military strike by the United States and Israel. Tehran severed most connections to the global network, leaving only a government whitelist intact. Despite this digital blackout, one vital financial service continued operating without interruption: Nobitex, the country's largest cryptocurrency exchange.
Nobitex's resilience during such an extreme measure underscores its importance to both Iranian citizens and the ruling elite. The exchange has become a cornerstone of Iran's crypto economy, processing billions of dollars in transactions and serving approximately 11 million users—nearly 12% of the population. But its operations have drawn intense scrutiny from global regulators and blockchain analytics firms due to its deep ties to sanctioned entities and state institutions.
The Scale of Iran's Crypto Giant
Nobitex is far from a niche platform. TRM Labs recorded an observed volume of roughly $5 billion between 2025 and March 2026. Earlier, Chainalysis noted that asset inflows to Nobitex addresses exceeded the combined total of Iran's next 10 largest crypto exchanges. The platform offers a wide range of services: spot and margin trading, yield-bearing products, liquidity pools, digital gift cards, and crypto-collateralized lending. It also caters to institutional clients with specialized terms such as increased limits and high-speed APIs.
But what truly caught the attention of analysts was not the retail side. It was evidence suggesting that Nobitex functions as a national currency gateway for a country cut off from SWIFT. Iran's banks cannot directly access international payment systems due to US and EU sanctions, and cryptocurrency offers an alternative route for trade and capital movement.
Shadow Banking Network
Multiple investigations have documented how Nobitex helps the Iranian leadership avoid economic pressure. In January 2026, Elliptic published a report detailing systematic purchases of the USDT stablecoin by Iran's central bank. Transactions totaling at least $507 million were routed through a broker in the UAE and sent primarily to Nobitex. Once the stablecoins were on the platform, they could be sold for Iranian rials, effectively allowing the central bank to conduct foreign exchange interventions outside the international banking system.
A Reuters investigation linked Nobitex's founders, brothers Ali and Mohammad Kharrazi, to one of Iran's most influential political and clerical families. The agency also discovered that one of the earliest investors in the exchange was Mohammad Baqer Nahvi, vice president of Safiran Airport Services—a company placed on the OFAC SDN List in 2022 for organizing flights to supply Iranian drones to Russia.
Further analysis by Elliptic and Chainalysis found connections between Nobitex and wallets associated with Hamas, the Houthi Ansar Allah movement, the propaganda outlet Gaza Now, and the sanctioned Russian exchange Garantex. These links indicate that the platform is not just a domestic service but part of a broader financial infrastructure supporting proxies and partners of the Iranian regime.
Technical Evasion Mechanisms
The exchange appears to have been built from the outset to operate under sanctions. In June 2025, portions of Nobitex's source code and internal documentation were leaked online. According to security researchers, the code contained modules for generating stealth addresses, transaction batching and splitting, endpoint switching, and specific logic designed to bypass compliance checks. A document titled "Nobitex Privacy" described a strategy to evade FinCEN tools and Western blockchain analytics.
These technical measures are not unique, but their systematic integration into a single exchange serving millions of users is notable. They allow the platform to obfuscate transaction trails, making it harder for analytics firms to trace funds to sanctioned parties. The leaked documents suggest a deliberate effort to stay one step ahead of international regulators.
OFAC's Strategic Restraint
Given these findings, one might expect the US Treasury to add Nobitex to its SDN List (Specially Designated Nationals and Blocked Persons List) by analogy with Garantex. However, that has not happened. The US Treasury has previously sanctioned Iran-linked crypto exchanges, but those platforms were registered in the United Kingdom. Nobitex is incorporated in Iran as a purely local company.
On the same day Reuters published its investigation, OFAC clarified that Iranian digital asset exchanges are already considered blocked financial institutions, regardless of whether they are individually named on the SDN List. For a platform physically based in Iran, however, this clarification has limited practical effect: its core operations revolve around Iranian users and neutral foreign intermediaries. An SDN listing would trigger secondary sanctions against any non-US counterparties worldwide, provide grounds for bulk asset freezes by stablecoin issuers, and force foreign exchanges and OTC desks to cut ties or face designation themselves.
Why hasn't OFAC taken that step? Several theories have emerged. First, the US Treasury may be following a different strategy for local Iranian platforms, preferring targeted measures such as sanctions against specific addresses, designation of exchange houses (as seen in a recent case involving exchanges allegedly servicing shadow oil revenues), or designation of individuals and OTC brokers. Second, an individual SDN listing might be considered redundant because US persons are already prohibited from transacting with Iranian exchanges—formal restrictions already exist.
Another hypothesis is the "human shield" effect. Nick Smart, Chief Intelligence Officer at Crystal Intelligence, told Reuters that the platform hosts a high concentration of ordinary Iranian users. Separating the regime's financial activities from those of civilians is nearly impossible because their assets are commingled on the same platform. Freezing all funds would harm millions of ordinary Iranians who rely on Nobitex to hedge against rampant inflation. This would represent a massive social cost with uncertain strategic benefits.
The Garantex case stands in contrast: that platform operated primarily as a B2B hub for shadow capital, making it possible to physically seize its servers without causing widespread damage to retail users. A similar action against Nobitex would be far more complicated.
Finally, some analysts argue that sanctions against Nobitex would be less effective without simultaneous measures against "exit" points where funds leave the country: foreign exchanges, stablecoin issuers, OTC brokers, and banks. The value of an SDN listing lies not at the "entry point" but at the points where funds are converted into fiat or moved to non-Iranian entities.
The Double-Edged Sword
The Nobitex case highlights a fundamental dilemma facing regulators in the age of mass crypto adoption. On one hand, the exchange provides Iranians cut off from the global economy a degree of financial freedom: a way to protect savings from rial inflation and access dollar liquidity. On the other hand, the state uses the same infrastructure for its own purposes—central bank currency interventions, funding regional proxies, and evading sanctions.
Chainalysis places Iran alongside Russia and North Korea, noting that for all three states, "what were once experimental and opportunistic tactics have matured into institutionalized strategies embedded within national economic and security policy." The Iranian model—a mass retail platform based in an unreachable territory with offshore proxy structures—appears to be a working template that other sanctioned regimes are likely to replicate.
This raises a reverse question for regulators themselves. What is the acceptable cost of sanctions pressure when the regime's funds and the savings of millions of ordinary users are physically commingled on a single platform? Can the assets of 11 million people be frozen to cut off a state's financial channel? Or does that cross a red line that the SDN mechanism, in its current form, is not designed to handle? OFAC has not yet provided a public answer, but the Nobitex case continues to sharpen the debate.
Source: Cointelegraph News