The U.S. Treasury’s Office of Foreign Assets Control designated two Iranian maritime entities on July 29 for operating a state-backed extortion scheme in the Strait of Hormuz — one that collected payment in Bitcoin and other digital assets specifically to sidestep the Western financial controls that had already frozen nearly $1 billion in Iranian crypto holdings. The move closes a specific enforcement gap that exchange-level sanctions could not reach: peer-to-peer Bitcoin transfers from commercial shippers directly to IRGC-controlled wallets, where no centralized intermediary existed to designate, no KYC checkpoint to enforce, and no correspondent bank to pressure.
The two firms — the Persian Gulf Marine Insurance Company (PGMIC) and HormuzSafe Marine Services Authority — are what OFAC describes as the collection apparatus for an Islamic Revolutionary Guard Corps-backed insurance scheme that forces vessels to buy mandatory coverage before transiting one of the world’s most strategically critical waterways. In a separate but related action, OFAC also designated eight shipping companies and blocked eight tankers for their roles in Iran’s shadow petroleum fleet.
“With its economy in freefall and inflation in the triple digits, the regime is desperate for cash,” Treasury Secretary Scott Bessent said in the designation statement. “The United States will not allow Iran to hold global commerce hostage or use international shipping to finance the IRGC’s terrorism, aggression, and repression.”
Iran Charged Ships Bitcoin to Cross the World’s Most Important Oil Lane
The scheme OFAC formally dismantled on July 29 had been operating, in various forms, since mid-March 2026. Iran’s parliament codified the core payment system on March 30 as the “Strait of Hormuz Management Plan,” authorizing the IRGC to charge commercial vessels approximately $1 per barrel of cargo — roughly $2 million for a fully loaded supertanker — for a transit permit. Payment was accepted in Bitcoin, USDT (Tether), or Chinese yuan routed through Kunlun Bank via CIPS, the Chinese interbank payment system that bypasses SWIFT.
At peak Hormuz throughput, independent analysts estimated those tolls could generate between $600 million and $800 million per month.
PGMIC sits one layer above the raw toll system. Established by Iran’s Central Insurance regulator, it brokers and issues IRGC-approved insurance policies through the Persian Gulf Strait Authority (PGSA) — the same PGSA that OFAC had already designated as an IRGC-linked Specially Designated National under Executive Order 13224 on May 27. The coverage purports to protect vessels from seizures and security incidents — risks, as OFAC’s designation statement bluntly noted, “overwhelmingly created by Iran itself.”
Why Iran Chose Bitcoin — and What OFAC Cannot Do About Coins Already Collected
HormuzSafe is where the crypto architecture becomes analytically significant. Developed by Iran’s Ministry of Economy, the platform advertised maritime services including insurance, traffic control, security, and emergency response to vessels transiting the strait — and accepted payment in Bitcoin and other digital assets as part of what OFAC describes as the regime’s systematic effort to bypass Western sanctions infrastructure.
Iran’s preference for Bitcoin in the HormuzSafe model reflects a specific technical calculation. Tether’s USDT — the stablecoin that dominates Iran’s domestic crypto ecosystem — has a structural vulnerability from an evasion standpoint: Tether holds an admin key to its smart contracts that allows wallet-level freezes at the contract level, without any court order, propagating instantly across the blockchain network. In April 2026, OFAC coordinated with Tether to freeze $344.2 million held in two wallets attributed to Iran’s Central Bank — the largest single on-chain freeze of Iranian sovereign crypto reserves on record. Bitcoin has no such key. No central issuer exists. No admin can blacklist an address. A confirmed Bitcoin transaction is final.
That distinction is what made Bitcoin, alongside stablecoins, attractive for the HormuzSafe payment model. But it is also what limits what OFAC’s July 29 action can accomplish in retrospect. The entity designation creates full legal prohibitions — all PGMIC and HormuzSafe property within US jurisdiction is frozen, US persons are barred from any transaction with either entity, and secondary sanctions exposure applies to foreign firms that continue dealing with them. What the designation cannot do is freeze Bitcoin the IRGC has already received. Those coins, if they exist in IRGC-controlled wallets, are outside any freezing mechanism OFAC currently holds.
This is the structural ceiling of off-chain enforcement against a censorship-resistant currency, and the July 29 action makes it visible: OFAC’s appropriate and necessary response to the HormuzSafe scheme is to designate the human entity that collected Bitcoin, not to freeze the Bitcoin itself. The former is possible. The latter is not.
From Proposal to Sanctions Target: HormuzSafe’s Rapid Escalation
The trajectory of HormuzSafe illustrates how quickly Iran’s digital financial infrastructure evolved and how closely OFAC tracked it. Screenshots of the HormuzSafe website had circulated online as early as May 18, advertising digital insurance for maritime cargo with policies payable in Bitcoin — at which point analysts were still debating whether the platform was operational or merely aspirational. The site was inaccessible when reporters checked it at the time.
Disgraced Iranian financier Babak Morteza Zanjani — himself sanctioned by OFAC earlier in 2026 and previously convicted of stealing from Iran’s national oil company — had been promoting HormuzSafe to his social media followers, suggesting the platform was embedded from its launch in Iran’s existing sanctions-evasion financial network. Within roughly ten weeks of those initial screenshots, the US government had moved from monitoring the platform to formally designating it.
Leading blockchain analytics firms — including TRM Labs, Chainalysis, and Galaxy Digital — had examined public on-chain data in April and found limited direct evidence of Bitcoin moving at scale for Hormuz transit payments at that time. Chainalysis noted that the IRGC’s documented on-chain activity had historically relied more heavily on stablecoins as the medium of exchange. Wednesday’s OFAC designation marks Washington’s formal allegation that HormuzSafe was actively generating IRGC revenue through digital asset collections — regardless of which specific coin dominated the actual transactions.
Shadow Fleet: The Logistics Layer Behind Iran’s Petroleum Revenue
Beyond the insurance scheme, July 29’s action targeted the broader tanker network that has kept Iranian petroleum flowing to buyers — primarily in China — throughout the conflict period.
Eight tankers were blocked as property of designated persons:
WELL SAIL (Marshall Islands-flagged, IMO 9321938): managed by China-based Qi Hang Ship Management Limited; transported hundreds of thousands of barrels of Iranian petroleum products to the UAE in 2026LILY (Mozambique-flagged, IMO 9294331): operated by Hong Kong-based Confident Apex Limited; transported millions of barrels of Iranian oil since 2025AL SALMI (IMO 9298296): operated by Hong Kong-based Billion Nexus Int’l Co., Limited; hundreds of thousands of barrels to China since 2025BREEZE V (Barbados-flagged, IMO 9259355): operated by Hong Kong-based Nevada Spirit Company Limited; millions of barrels to China in 2026NATSUMI (Barbados-flagged, IMO 9331244): managed by Hong Kong-based Marinova Freight Limited; millions of barrels to China since 2022CRYSTAL (Vanuatu-flagged, IMO 9223887): managed by Hong Kong and Marshall Islands-based Vast Mighty Limited; millions of barrels to China in 2026NIRETA (Vanuatu-flagged, IMO 9237785): managed by Marshall Islands-based Ocean Tranquility Limited; hundreds of thousands of barrels to China in 2026YEHOPE (Barbados-flagged, IMO 9243320): owned by Marshall Islands-based Branch Saying International Trading Co Ltd; hundreds of thousands of barrels to China in 2026
All eight corresponding shipping companies were designated under Executive Order 13902. OFAC noted that since the start of 2026, it has sanctioned over 100 vessels tied to Iran’s shadow fleet in total.
OFAC’s Sequenced Campaign: How Each Layer Followed the Last
Wednesday’s action is the latest in a deliberate, layered 2026 campaign to dismantle Iran’s digital financial infrastructure — working from the bottom up, exchange by exchange, until reaching the operational point of contact where payments were actually demanded.
The campaign’s arc: In January 2026, OFAC designated two UK-registered cryptocurrency exchanges — Zedcex and Zedxion — for processing IRGC transactions, in the first-ever US designation of an IRGC-linked digital asset exchange. On May 27, OFAC designated the PGSA itself — the IRGC-backed body whose approvals the PGMIC insurance policies required. On June 2, OFAC sanctioned Iran’s four largest domestic cryptocurrency exchanges — Nobitex, Bitpin, Ramzinex, and Wallex — freezing nearly $500 million in digital assets linked to IRGC financing and cutting off approximately 78% of Iran’s domestic crypto volume in a single action. Nobitex alone had processed more than 50% of Iran’s domestic digital asset inflows in 2025.
In April, separately, OFAC had coordinated with Tether to freeze $344.2 million in USDT held in wallets attributed to Iran’s Central Bank. Treasury Secretary Bessent has stated that the broader campaign has seized more than $1 billion in cryptocurrency from Iranian exchanges and wallets since the conflict began.
The July 29 action against PGMIC and HormuzSafe fits the pattern: with domestic exchanges cut off and major stablecoin reserves frozen, OFAC has now reached the specific entities that were demanding Bitcoin directly from the commercial shippers who were the extortion scheme’s intended victims.
Can Exchange Designations Catch Up to Peer-to-Peer Bitcoin?
The HormuzSafe case establishes a category of crypto-enabled sanctions evasion that prior enforcement frameworks were not designed to address: not a passive exchange facilitating transactions in the background, but an active state mechanism requiring third parties — international commercial shippers — to transact in cryptocurrency as a precondition of safe passage through a strategically critical waterway.
The peer-to-peer structure is the key challenge. When the IRGC operates a toll system through direct wallet-to-wallet Bitcoin transfers, no exchange sits between the shipper and the IRGC. Designating Zedcex or Nobitex addresses the off-ramp infrastructure — where Iran converts crypto back into usable currency — but not the direct payment flow itself. The entity designation of HormuzSafe addresses the service provider that organized and collected those flows.
What remains structurally unresolved is the off-ramp infrastructure question. With Nobitex, Wallex, Bitpin, and Ramzinex designated, Iran’s domestic pathways for converting Bitcoin into Iranian rials are significantly constrained. The international infrastructure remains the open question — as TRM Labs global head of policy Ari Redbord noted in June, following the Nobitex action: “Enforcement and policy now need to grapple with the international gateways, not just the domestic exchanges.”
For the crypto industry broadly, the HormuzSafe case will intensify regulatory conversations that were already active following the June exchange designations. Bitcoin’s censorship-resistance — the property that makes it attractive to sanctioned actors — is not something any US regulator can unilaterally override on-chain. What OFAC has demonstrated it will do, and has now done methodically across six months of escalating enforcement, is pursue the entities, individuals, and correspondent infrastructure that interact with those assets off-chain, bringing the full weight of secondary sanctions exposure to bear on anyone who continues to do business with designated parties.
Frequently Asked QuestionsWhat is HormuzSafe, and why did OFAC sanction it?
HormuzSafe is a digital maritime services platform developed by Iran’s Ministry of Economy that advertised insurance, traffic control, security, and emergency response to commercial vessels transiting the Strait of Hormuz — and accepted payment in Bitcoin and other digital assets. OFAC designated it on July 29, 2026, because it was generating revenue for the Islamic Revolutionary Guard Corps while helping Iran exert control over one of the world’s most critical shipping lanes. The scheme required vessels to purchase IRGC-approved insurance — covering risks that the IRGC itself was largely responsible for creating — before they could transit the strait.
Why does Iran use Bitcoin rather than stablecoins like USDT for these payments?
Bitcoin’s appeal to sanctioned actors is structural: unlike Tether’s USDT, which has a central issuer holding an admin key that can freeze specific wallet addresses at the smart-contract level, Bitcoin has no central issuer and no admin key. When OFAC coordinated with Tether in April 2026, Tether froze $344.2 million in USDT from wallets attributed to Iran’s Central Bank within the same action — a freeze that propagated instantly across the blockchain. Bitcoin cannot be frozen the same way. However, blockchain analytics firms including TRM Labs, Chainalysis, and Galaxy Digital found limited direct on-chain evidence of Bitcoin moving at scale for Hormuz toll payments — suggesting USDT and Chinese yuan may have dominated actual transaction volume, with Bitcoin serving more as a stated payment option and geopolitical signal.
What does an OFAC designation actually do — and what can’t it do?
An OFAC designation freezes all property and interests in property of the designated entity that are within the United States or in the possession or control of US persons. It prohibits all transactions by US persons with the designated party. It also creates secondary sanctions exposure for non-US persons and companies that continue dealing with the designated entities — meaning foreign shipping companies, insurers, and banks risk their own access to the US financial system if they transact with PGMIC or HormuzSafe. What an OFAC designation cannot do is technically freeze Bitcoin already held in IRGC-controlled wallets. Those funds, if they exist in non-custodial wallets, are beyond any centralized freezing mechanism. OFAC’s enforcement reach is against the human and corporate entities who receive and control those assets — not the cryptographic keys themselves.
What is Iran’s shadow fleet, and how does it keep oil moving despite sanctions?
Iran’s shadow fleet is a network of tankers registered under flags of convenience — Barbados, Vanuatu, Mozambique, Marshall Islands — managed by shell companies in Hong Kong, China, and other jurisdictions, specifically structured to transport Iranian crude oil outside Western maritime oversight. The vessels operate without Western war-risk insurance, carry no standard P&I club coverage, and move Iranian petroleum primarily to China and the UAE. OFAC has designated more than 100 vessels linked to Iran’s shadow fleet since the start of 2026, with eight more blocked on July 29. The shadow fleet does not eliminate sanctions pressure on Iran — it adds logistical friction, compliance overhead, and reputational cost to every transaction — but it enables oil revenue flows to continue despite the absence of Western insurance and banking support.