{"id":93345,"date":"2026-05-01T19:28:18","date_gmt":"2026-05-01T19:28:18","guid":{"rendered":"https:\/\/www.europesays.com\/iran\/93345\/"},"modified":"2026-05-01T19:28:18","modified_gmt":"2026-05-01T19:28:18","slug":"irans-largest-crypto-exchange-enables-irgc-to-move-millions-despite-sanctions","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/iran\/93345\/","title":{"rendered":"Iran&#8217;s largest crypto exchange enables IRGC to move millions despite sanctions"},"content":{"rendered":"<p>LONDON (Reuters) \u2014 The sons of a powerful family with close ties to Iran\u2019s new supreme leader control the country\u2019s largest cryptocurrency exchange, transforming it from a startup into a conduit to the global economy used by both blacklisted state institutions and ordinary citizens.<\/p>\n<p>Nobitex was founded in 2018 by brothers Ali and Mohammad Kharrazi under an alternative family name. It claims 11 million users, more than 10% of Iran\u2019s population. While Iran is subject to blanket Western economic sanctions, the exchange has avoided being designated by the United States and its allies.<\/p>\n<p>Locked out of international banking and facing a devalued rial and rampant inflation, ordinary Iranians use the exchange to buy and hold cryptocurrency.<\/p>\n<p>But Nobitex has also processed between tens and hundreds of millions of dollars in transactions linked to sanctioned groups including Iran\u2019s central bank and powerful Islamic Revolutionary Guard Corps (IRGC), a Reuters investigation has found.<\/p>\n<p>Nobitex is used by the Iranian state to route money to allies outside the conventional banking system, according to an analysis of blockchain records by crypto analytic firm Crystal Intelligence and interviews with four private financial investigators.<\/p>\n<p>\n\t\t\tGet The Times of Israel&#8217;s Daily Edition<br \/>\n\t\t\tby email and never miss our top stories\n\t\t<\/p>\n<p>\t\t\t\tBy signing up, you agree to the <a href=\"https:\/\/www.timesofisrael.com\/terms\" rel=\"nofollow noopener\" target=\"_blank\">terms<\/a><\/p>\n<p>Reuters also spoke with nine Iranians who have worked for or with Nobitex. Six of the former employees interviewed by Reuters said they were aware that Nobitex was used by Iran\u2019s government and its security agencies to bypass stringent Western financial sanctions.<\/p>\n<p>Nobitex told Reuters there had never been any agreement with any Iranian government agency, and none of the employees interviewed by Reuters knew of one.<\/p>\n<p>\u201cWe have faced significant operational restrictions from the Iranian government, including office raids, domain blocking, and banking gateway closures,\u201d Nobitex said. \u201cThese actions are entirely inconsistent with the notion that we are receiving any form of governmental support.\u201d<\/p>\n<p>Nobitex has publicly stated its aim is to enable Iranians to invest in crypto despite \u201cthe shadow of sanctions\u201d and advises its clients on how best to avoid their transactions being monitored or intercepted by Western governments.<\/p>\n<p>To hide its tracks, Nobitex changes the wallet addresses it uses for fund transfers, and has also developed cryptographic tools to further obfuscate the links between related wallets because of \u201cincreasing restrictions related to international sanctions,\u201d according to a 2021 annual report.<\/p>\n<p>Additionally, Nobitex advises clients to layer transactions using multiple wallet addresses to make them harder for Western investigators to track.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2026\/05\/AP22161385849992-e1777652935409.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3814555\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AP22161385849992-e1777652935409-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tIllustrative: A woman uses an ATM machine at a branch of Bank Melli Iran, at the Grand Bazaar of Tehran, Iran, on June 10, 2020. (AP Photo\/Vahid Salemi)<\/p>\n<p>During a 2025 hack\u00a0of Nobitex by the group Predatory Sparrow, about $90 million worth of cryptocurrency was sent to inaccessible wallets labelled with profane anti-IRGC names. In an indication of Nobitex\u2019s vast resources, the company and its shareholders \u2013 including the brothers \u2013 directly reimbursed customers whose money had been taken.<\/p>\n<p>The firm has continued processing transactions throughout the war with the US and Israel that began on February 28, even during a government-imposed nationwide internet shutdown and widespread power outages in Tehran, according to three blockchain analysis firms that track activity involving Nobitex and other exchanges.<\/p>\n<p>During that time Nobitex has processed more than $100 million in transactions, about 20% of its usual activity, according to Crystal Intelligence, which has been investigating Iranian cryptocurrency flows for more than four years.<\/p>\n<p>Brothers concealed illustrious ties<\/p>\n<p>Ali and Mohammad Kharrazi are the third generation of their family at the heart of Iran\u2019s ruling establishment since the 1979 Islamic Revolution. Kharrazis have advised supreme leaders and occupied key political, diplomatic and religious posts.<\/p>\n<p>The clan is related by marriage to all three supreme leaders of the Islamic Republic: the revolutionary founder Ayatollah Ruhollah Khomeini, the late Ali Khamenei, and Khamenei\u2019s son Mojtaba.<\/p>\n<p>The brothers \u2013 using the family surname Aghamir \u2013 built Nobitex into the country\u2019s dominant cryptocurrency provider. It handles an estimated 70% of Iran\u2019s crypto transactions.<\/p>\n<p>It\u2019s not unheard of for some Iranians to have and use alternative family names. But the brothers appear to be the only ones in their immediate family to routinely distance themselves from their famous bloodline.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2026\/05\/AP040924012970-e1777654243523.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3814565\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AP040924012970-e1777654243523-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tIran\u2019s then-Foreign Minister Kamal Kharrazi, addresses the 59th session of the United Nations General Assembly at UN headquarters in New York on September 24, 2004. (AP Photo\/Richard Drew)<\/p>\n<p>Inside the company, the brothers concealed the Kharrazi name even from those closest to them, according to seven of the former employees and professional acquaintances Reuters interviewed. Some of these sources said they have known the brothers since their university days. Then, as now, they did not use the Kharrazi name.<\/p>\n<p>Rumors about the brothers\u2019 identity emerged in 2024 when a Chinese blog reported that their father was a principal stakeholder of the crypto exchange through his son Mohammad, who was using the Aghamir surname.<\/p>\n<p>Of the nine former employees and professional acquaintances interviewed by Reuters, only one learned of the brothers\u2019 family ties directly from them. Another said he discovered it after researching them.<\/p>\n<p>Among those most surprised was a former coworker who counted Mohammad as a close friend of many years standing and expressed shock when Reuters disclosed the Kharrazi family connection to him.<\/p>\n<p>\u201cI was pretty open about my criticism for the regime, and my colleagues were, too,\u201d said another former Nobitex employee. Discovering the brothers\u2019 family name \u201cmade me afraid. I did a lot of hate speech against the regime and religion.\u201d<\/p>\n<p>Concerns among staffers about their employer\u2019s links to the government deepened after a company connected to one of Nobitex\u2019s main investors, Mohammad Bagher Nahvi, was sanctioned by the US for supplying drones to Russia, according to three former employees.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2025\/12\/AFP__20251112__83U843R__v1__HighRes__IranDefence-e1777653469522.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3705421\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AFP__20251112__83U843R__v1__HighRes__IranDefence-e1777653469522-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tIllustrative: A Shahed-161 drone is displayed during an exhibition showcasing missiles and drones in Tehran, Iran, November 12, 2025. (ATTA KENARE \/ AFP)<\/p>\n<p>The company, Safiran Airport Services, coordinated \u201cflights between Iran and Russia, including those associated with transporting Iranian UAVs, personnel, and related equipment,\u201d the US Treasury Department said in September 2022, seven months after Russia invaded Ukraine.<\/p>\n<p>Safiran is listed as a private company whose vice chairman is Nahvi, Nobitex\u2019s former chairman. He was one of the exchange\u2019s first and largest investors.<\/p>\n<p>Company faced regime pressure<\/p>\n<p>The original board of directors for Nobitex consisted of brothers Ali and Mohammad along with Amir Hosein Rad. All three studied at the elite Sharif University of Technology, Tehran\u2019s equivalent to the Massachusetts Institute of Technology.<\/p>\n<p>Rad, who is not related to the brothers, and Ali were the public faces of the company, with Rad as chief executive. Mohammad was the blockchain expert.<\/p>\n<p>The founding brothers\u2019 elite connections did not spare the company from having to balance\u00a0competing demands of various\u00a0powerful arms of the Iranian state, said former employees interviewed by Reuters.<\/p>\n<p>Iran\u2019s central bank periodically barred exchanges including Nobitex from accessing the domestic banking system.<\/p>\n<p>Shortly after Nobitex opened for business in 2018, the IRGC visited the firm\u2019s Tehran offices and questioned Rad, who was then CEO, three former employees said. A few years later, they swooped in again, arrested Rad, confiscated staff laptops, and sealed the office, two of the people said. There is no indication he was ever charged.<\/p>\n<p>Explanations swirled around the office about the reason for the various IRGC visits. One of the people said they were payback for Nobitex\u2019s refusal to process IRGC funds linked to sanctioned oil sales. Two others said a jealous competitor had falsely claimed Nobitex was ripping people off.<\/p>\n<p>In a December 2025 interview with an Iranian podcaster, Rad said his arrest in 2021 involved a misunderstanding about the relationship between Nobitex and another company with questionable business practices. Rad, who did not name the other company, described that arrest as \u201cone of the side effects of working in Iran. I think there are very few entrepreneurs in Iran who haven\u2019t experienced something like this.\u201d<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2026\/05\/AP25026620956320-e1777654526812.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3814570\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AP25026620956320-e1777654526812-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tIran\u2019s then-Supreme Leader Ayatollah Ali Khamenei, center, accompanied by the armed forces commanders, visits an exhibition of the Revolutionary Guard\u2019s aerospace achievements, in Iran, November 19, 2023. (Office of the Iranian Supreme Leader via AP)<\/p>\n<p>The IRGC is involved in every significant facet of Iran\u2019s economy and would take a keen interest in a company as critical to the economy as Nobitex, according to a former senior US Treasury official who helped design America\u2019s Iran sanctions policy.<\/p>\n<p>\u201cAs soon as a business becomes meaningfully profitable you will see the government coming in and taking its slice,\u201d said Miad Maleki, who worked in the US Treasury Department from 2017 to 2025 and was former associate director of the Office of Foreign Assets Control. He is now a senior fellow at Foundation for Defense of Democracies.<\/p>\n<p>\u201cYou can\u2019t have a successful business in Iran without it being controlled by the regime,\u201d said Maleki.<\/p>\n<p>Despite the pressure from the regime, Nobitex flourished \u2013 and with it the fortunes of the Kharrazi brothers.<\/p>\n<p>The company moved to a flashy new office in 2021 with chill-out areas where staff could play video games, watch movies or gaze at the panoramic views of the Alborz Mountains, five of the former employees said. Their accounts matched photos posted by the company on LinkedIn. Female employees weren\u2019t required to wear headscarves, and the offices stayed open on religious holidays.<\/p>\n<p>A home address linked to Mohammad\u2019s national ID number is in one of Tehran\u2019s wealthiest neighborhoods.<\/p>\n<p>By the end of 2022, the exchange said it had 4.3 million users and 268 employees. Sanctions that had locked Iranians out of the global financial system turbocharged Nobitex\u2019s appeal to its Iranian clientele. Essentially, Iranians could not legally create accounts at exchanges like Binance, but they could with Nobitex, which gave them access to global crypto markets that are subject to patchy international regulation.<\/p>\n<p>The atmosphere changed somewhat in 2022, following nationwide protests triggered by the death of a young woman, Mahsa Amini, in police custody. Amini was arrested for allegedly violating hijab laws.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2024\/09\/AFP__20240915__36FZ482__v1__HighRes__FilesIranWomenRights-e1764310187439.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3375783\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AFP__20240915__36FZ482__v1__HighRes__FilesIranWomenRights-e1764310187439-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tThis UGC image posted on Twitter reportedly on October 26, 2022 shows an unveiled woman standing on top of a vehicle as thousands make their way towards Aichi cemetery in Saqez, Mahsa Amini\u2019s hometown in the western Iranian province of Kurdistan, to mark 40 days since her death in morality police custody. (UGC \/ AFP)<\/p>\n<p>\u201cThe building\u2019s security and the morality police started controlling the hijab of female employees and threatened to seal the office,\u201d said one former employee.<\/p>\n<p>Office dress codes were enforced more firmly after that, according to two former employees.<\/p>\n<p>\u201cManagement became stricter about headscarves and security protocols,\u201d said one person who regularly visited Nobitex\u2019s offices and knew the founders well. \u201cUp until then the company looked like a tech start-up.\u201d<\/p>\n<p>Obscured addresses<\/p>\n<p>Evidence of how Nobitex fits into Iran\u2019s sanctions-evasion machinery surfaced through an unlikely source: Babak Zanjani, an Iranian billionaire convicted of fraud.<\/p>\n<p>Zanjani has long been a key figure in Iran\u2019s sanctions-evasion networks. He was sentenced to death by Iranian authorities in 2016 for embezzlement. His sentence was commuted in 2024. But Zanjani remains locked in a public spat with Iran\u2019s central bank, which accused him of failing to repay the stolen billions.<\/p>\n<p>In a December tirade against the central bank, Zanjani published wallet addresses on social media that enabled outside crypto analysts to uncover a complex sanctions-evasion scheme, with Nobitex at the core.<\/p>\n<p>Part of the scheme involved moving at least $20 million in sanctioned central bank funds to wallet addresses controlled by Nobitex, according to Smart, of Crystal Intelligence, and another crypto analyst.<\/p>\n<p>Zanjani didn\u2019t respond to requests for comment.<\/p>\n<p>The transactions were a fraction of a larger network of wallets controlled by Iran\u2019s central bank that bought more than $500 million of cryptocurrencies between November 2024 and June 2025, according to the blockchain analysis firm\u00a0Elliptic.<\/p>\n<p>About $347 million of that was sent by the central bank, which is sanctioned by the United States, to Nobitex in the first six months of 2025, Elliptic said.<\/p>\n<p>Routing the money through Nobitex after a series of transactions can have the effect of blurring the source of the funds.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2026\/05\/AFP__20200622__1TW1RW__v2__HighRes__IranHealthVirus-e1777654198315.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3814564\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AFP__20200622__1TW1RW__v2__HighRes__IranHealthVirus-e1777654198315-640x400.jpg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tIllustrative: An Iranian woman walks by a money exchange office in the capital Tehran on June 22, 2020. (ATTA KENARE \/ AFP)<\/p>\n<p>Nobitex said any allegedly illicit money that passes through the exchange represents \u201ca very small fraction of overall volume\u201d and happened without the company\u2019s knowledge.<\/p>\n<p>\u201cWhere suspicious or non-compliant conduct is identified,\u201d it said, \u201cNobitex\u2019s approach is firm, including permanent account closure.\u201d The statement did not define \u201cnon-compliant conduct.\u201d<\/p>\n<p>Estimates of Nobitex\u2019s total illicit transactions range widely. They are mostly derived from wallet addresses identified and sanctioned by governments including\u00a0Israel\u00a0and the United States.<\/p>\n<p>Elliptic has identified an estimated $366 million that was processed through the exchange. Chainalysis puts the figure closer to $68 million; Crystal Intelligence estimates $22 million in direct transfers from sanctioned wallets. Even the upper estimate is only 3% of the total $11 billion in cryptocurrency processed by Nobitex.<\/p>\n<p>All firms cautioned the true figure is likely significantly higher.<\/p>\n<p>Among Iran\u2019s allies, at least two of the firms found Nobitex transactions involving accounts linked to Yemen\u2019s Iran-backed Houthi rebels, who are also under Western sanctions.<\/p>\n<p>\t<a href=\"https:\/\/static-cdn.toi-media.com\/www\/uploads\/2025\/10\/AFP__20251017__797E2NR__v1__HighRes__YemenIsraelPalestinianConflictProtest-e1767546346840.jpg\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-3668182\" src=\"https:\/\/www.europesays.com\/iran\/wp-content\/uploads\/2026\/05\/AFP__20251017__797E2NR__v1__HighRes__YemenIsraelPalestinianConflictProtest-e1767546346840-640x400.jp.jpeg\" alt=\"\" width=\"600\" height=\"375\"\/><\/a><br \/>\n\t\tSupporters of Yemen\u2019s Houthis brandish weapons during a rally condemning Israel, in Sanaa on October 17, 2025. (Mohammed HUWAIS \/ AFP)<\/p>\n<p>Nobitex\u2019s key role in Iran\u2019s financial system was laid bare during this year\u2019s war with the United States and Israel.<\/p>\n<p>Since February 28, most ordinary Iranians have been unable to access the internet due to a government-imposed blackout meant to suppress dissent. Yet Nobitex has continued to operate. Nobitex did not respond to questions about how it kept access to the internet during the blackout.<\/p>\n<p>Internet monitoring firm Netblocks says only those on a \u201cstate-approved whitelist\u201d \u2013 between 1% and 2% of the population \u2013 have had access to the internet during that time, as the state cracks down on satellite links and VPNs.<\/p>\n<p>Crystal Intelligence has found that some in that tiny elite have withdrawn at least $54 million from the exchange during the war, much of it vanishing abroad to brokers who turn crypto into cash with few questions asked.<\/p>\n<p>On April 1, Nobitex posted a message intended to reassure customers that \u201cdespite instability in infrastructure and service systems,\u201d their money was safe and accessible.<\/p>\n<p>The statement made no direct reference to the war. But the conflict struck close to the Kharrazi brothers that day, when an airstrike targeted the apartment of their great-uncle, Kamal, who served as Iran\u2019s foreign minister and as adviser to both Ali and Mojtaba Khamenei.<\/p>\n<p>Kamal\u2019s wife was killed instantly, while he succumbed to his injuries days later, according to state news.<\/p>\n<p>Mojtaba Khamenei, the new supreme leader who lost his own wife and father in an airstrike on the war\u2019s first day, extended his condolences on state media and asked for divine exaltation of \u201cthe distinguished Kharrazi family.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"LONDON (Reuters) \u2014 The sons of a powerful family with close ties to Iran\u2019s new supreme leader control&hellip;\n","protected":false},"author":2,"featured_media":93346,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9693,34,6475,16376],"class_list":{"0":"post-93345","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-iran","8":"tag-cryptocurrency","9":"tag-iran","10":"tag-iran-sanctions","11":"tag-islamic-revolutionary-guard-corps-irgc"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@iran\/116500975217515469","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts\/93345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/comments?post=93345"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts\/93345\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/media\/93346"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/media?parent=93345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/categories?post=93345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/tags?post=93345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}