OFAC Sanctions 134 ISIS-K Crypto Wallets in $2M Network

OFAC sanctioned 134 crypto wallets tied to ISIS-K, exposing a $2M terror financing network built on USDT and Monero.

The U.S. Treasury’s Office of Foreign Assets Control sanctioned 134 cryptocurrency wallets tied to ISIS Khorasan Province on July 1, 2026. The addresses moved more than $2 million and mark the second time OFAC has directly targeted the group’s crypto operations.

Blockchain analytics firms TRM Labs and Chainalysis both confirmed the update to ISKP’s Specially Designated Nationals listing. The wallets include 131 TRON addresses and three Monero addresses, according to Chainalysis. 

Tether has already frozen the balances held across all 131 TRON wallets.

Read also: 

How ISKP Funded Its Operations Through Crypto

ISKP has leaned on USDT for years, with individual transactions ranging from roughly $10 to $15,000. That pattern points to a wide base of small donors rather than a handful of large backers. 

Since late 2023, the group has also pushed supporters toward Monero, asking for donations openly through its Voice of Khurasan magazine. The shift reflects a broader effort to move funds with less visibility on-chain.

Chainalysis found that the 131 TRON wallets alone received over $1.4 million since 2023 and sent out more than $880,000. 

Several of those wallets showed heavy exposure to mainstream exchanges. Some also sent funds directly to crypto exchangers based in Syria, according to Chainalysis data.

Crypto Financing Tied to Deadly Attacks

TRM Labs has tracked ISKP’s cryptocurrency activity since 2022, and the group’s fundraising has been connected to real-world violence. 

In March 2024, four Tajik nationals attacked a Moscow theater, killing more than 125 people. TRM traced funds from the wallet that financed the attackers straight to an ISKP-controlled wallet within hours of the attack.

Three months later, German authorities arrested a man at Cologne/Bonn airport holding German, Polish and Moroccan citizenship. 

He had reportedly sent close to $1,700 in cryptocurrency to an ISKP-linked address. He had also applied for a job at the Euro 2024 tournament, held in Germany that summer. 

TRM noted that ISKP had been urging supporters to target major sporting events around that period.

Years of Disruption Have Not Stopped the Network

Law enforcement has chipped away at ISKP’s financial infrastructure multiple times, without shutting it down. 

TRM data helped lead to the arrest of a key ISKP financier in Istanbul back in 2023. That same year, OFAC designated Maldivian national Ali Shafiu, who worked in ISIS-K’s media office and controlled a wallet with links to other ISIS media-unit addresses.

In May 2025, a joint Pakistani-Turkish operation captured Ozgur Altun near the Afghanistan-Pakistan border. 

Altun ran ISKP’s media and crypto operations, and reports say he was carrying a significant amount of cryptocurrency at the time. His wife, Ayse Altun, has been accused separately of using crypto to help finance ISIS-linked families in Syria. 

Following the arrest, ISKP supporters shared new security guidance online, and TRM data shows the group’s fundraising has since spread further across multiple subgroups.

In a separate action taken the same day, OFAC sanctioned two Brazilian nationals and four companies linked to Primeiro Comando da Capital. 

The criminal organization is accused of laundering more than $30 million through crypto. It marks OFAC’s third action against that group since December 2021.

The post OFAC Sanctions 134 ISIS-K Crypto Wallets in $2M Network appeared first on Live Bitcoin News.