The $850 Million Pipeline: Unpacking the Sanctions Evasion Network

A previously undisclosed internal investigation report has shed light on the operations of a sophisticated international financial network. The report suggests that entities linked to Iranian financier Babak Zanjani allegedly utilized a cryptocurrency exchange to establish channels for moving funds. The apparent objective was to help Iran's Islamic Revolutionary Guard Corps (IRGC) circumvent financial sanctions imposed by Western nations.

Anatomy of the Network

The network operated through multiple, interconnected channels rather than a single route. The investigation identified at least 21 individual and corporate trading accounts involved. A notable hub was an account on a crypto platform called Zedcex, which facilitated nearly $830 million in cumulative transaction volume.

  • Central Figure: Iranian businessman Babak Zanjani, already under U.S. Treasury sanctions, is the core individual linked to the network.
  • Funds Conduit: Tajikistani businessman Sukhrob Oimakhmadov, labeled a "high-value client" by the exchange, received over $10 million into his account, with some sources allegedly traced to IRGC-linked wallets.
  • Supporting Channels: The network also involved a Turkish payment firm, ZedPay, and a specific crypto token, USDZ, used for transactions.

Tracking the Funds

Behind the large transaction volumes was a movement of funds toward specific endpoints. The report traced at least $67 million from two key accounts within the network to digital wallets flagged as associated with the IRGC. Approximately $56 million was withdrawn from the Zedcex platform account to these related wallets.

The transactions occurred consistently over a period, indicating the network likely functioned as a sustained, organized system for fund movement.

Responses and Implications

The cryptocurrency exchange in question, Binance, issued a response. A company spokesperson stated that its compliance team had identified the suspicious activity and taken action. All accounts found to be linked to sanctions violations have been restricted and are being offboarded.

The exchange also clarified the distinction between "total transaction volume" and "net fund flow." Repeated trading between accounts inflates the total, but the net amount ultimately reaching sanctioned entities may differ. The company acknowledged past shortcomings in the speed and efficiency of its internal control processes.

This case underscores the ongoing challenges regulators face in monitoring cross-border fund flows, particularly those leveraging emerging crypto technologies to bypass sanctions. With Babak Zanjani and his associates already on the U.S. Treasury's sanctions list, the details in this report may prompt further investigative actions.