What did analysts say about the crypto wallets seized by OFAC?

Analysts from Nominis said the wallets seized by the US Treasury may not actually be linked to Iran. They found behavioural patterns that differ from known activity associated with Iranian entities like the Islamic Revolutionary Guard Corps (IRGC).

How much crypto was seized and why is it significant?

More than $340 million in crypto was frozen, with total seizures under Operation Economic Fury reaching up to $500 million. This is a major enforcement action and highlights how governments are targeting crypto-linked financial networks.

Why do analysts doubt the link to Iran?

Nominis found that the wallets did not match typical IRGC behaviour, such as spreading funds across many wallets and keeping balances low. Instead, these wallets showed different patterns, raising the possibility of other state actors being involved.

What is Operation Economic Fury?

Operation Economic Fury is a US-led campaign aimed at applying financial pressure on Iran. It includes freezing crypto assets, bank accounts, and other financial resources tied to suspected Iranian networks.

What role did Tether play in this case?

Tether helped freeze over $344 million in USDT linked to the sanctioned wallets. This shows how stablecoin issuers can cooperate with authorities to enforce sanctions in crypto markets.

How does this impact crypto investors and traders?

This highlights that crypto assets can be frozen or seized, especially if linked to sanctioned entities. For investors, it reinforces the importance of compliance and understanding counterparty risk.

What are the risks of misidentifying wallet ownership?

If wallets are wrongly attributed to a specific country or group, it could lead to incorrect enforcement actions or geopolitical tensions. It also shows how difficult blockchain attribution can be.

Does this mean blockchain tracking is unreliable?

Not necessarily, but it shows that simple tracking methods are no longer enough. Analysts now need behavioural analysis and clustering techniques to better understand wallet ownership and activity.

Analyst questions Iran link in seized crypto wallets

Written by Brie CarterPublished May. 4 2026Last Updated May. 4 2026

Crypto wallets seized by US authorities and linked to Iran may instead be tied to other state actors, according to new analysis from Nominis.

The wallets, which held more than $340 million and were frozen by the US Treasury’s Office of Foreign Assets Control, show behavioural patterns that differ from known activity linked to Iran’s Islamic Revolutionary Guard Corps.

“While the use of cryptocurrency by the Islamic Revolutionary Guard Corps is well established, this case presents structural and behavioral characteristics that diverge meaningfully from previously observed patterns,”

Said Snir Levi.

Levi noted that IRGC-linked wallets typically distribute funds across multiple addresses with smaller balances and avoid holding assets for extended periods, unlike the wallets flagged in this case.

The findings raise questions over whether the frozen funds reflect direct Iranian control or overlap with broader financial networks potentially involving other state actors.

The seizures form part of Operation Economic Fury, a US campaign targeting Iran’s financial system, with Treasury Secretary Scott Bessent stating that up to $500 million in crypto assets have been seized.

Authorities, including Tether, have frozen significant holdings, including more than $344 million in USDT linked to sanctioned wallets.

The case highlights the growing complexity of blockchain-based financial networks, with analysts warning that evolving tactics by state actors are making attribution and compliance increasingly challenging.