Iran, Russia, North Korea and other targets of sanctions have dramatically increased their use of virtual currencies to duck U.S. pressure, handling around $100 billion worth of crypto last year alone, firms that track the flows say.
They are also becoming more sophisticated in how they navigate the market, creating their own digital tokens and crypto exchanges to help process transactions , the firms and Western authorities say.
Iran and Russia have used virtual cash to buy drones and weapon parts, and Russia has used it to pay salaries for seafarers who smuggle their sanctioned crude around the world, according to Western officials and crypto analytics firms. North Korea, which has mastered the art of stealing crypto through hacks and other cybercrimes, has used it to buy fuel and military equipment, officials say.
Using crypto enables them to bypass traditional banks, which play a central role in policing sanctions imposed by the U.S. and others.
"Crypto has changed the sanctions evasion game significantly," said Kaitlin Martin, a senior intelligence analyst at analytics firm Chainalysis. It estimates that cryptocurrency addresses linked to sanctioned entities received over $100 billion in 2025, almost eight times the amount received in 2024.
Russia considers international sanctions to be illegal under international law and has "deployed and developed alternative mechanisms that allow the economy to function normally," Kremlin spokesman Dmitry Peskov said. North Korea recently called allegations that it engages in cybercrimes "absurd slander" and an extension of Washington's "hostile policy" toward Pyongyang. Tehran didn't reply to a request for comment.
Western officials are struggling to keep up as crypto becomes more popular for sanctions evasion. Although the U.S. has temporarily waived sanctions on Iranian oil as it negotiates a possible peace agreement with Tehran, it still considers sanctions to be a key tool to pressure adversaries worldwide. Washington is holding out the possibility of restoring oil sanctions on Iran if a peace deal isn't achieved.
Last month, Washington sanctioned four Iranian crypto exchanges, including its largest, Nobitex. Treasury Secretary Scott Bessent said the U.S. has seized $1 billion in crypto from Iran. Nobitex and another sanctioned platform, Bitpin, denied they facilitate illegal activities and said their customers are ordinary people. The other two exchanges didn't reply to requests for comment.
In the U.K., authorities in May blacklisted one of the world's largest crypto exchanges on suspicion of supporting Russia's government. The exchange, HTX, said it would work with authorities to promptly address any concerns.
Getting a firm grip on the market is nearly impossible, because much of the industry isn't regulated, and transactions can be done anonymously, making them hard to trace.
The Iranian crypto platforms recently sanctioned by Washington are only the most prominent nodes in a larger network, said Ari Redbord, head of policy at analytics firm TRM Labs, which monitors more than 100 Iranian crypto exchanges.
"Their takedown does not dismantle the architecture underneath them," he said. If anything, he said, the market is becoming harder to police.
"Over the last year, Iran and Russia have moved from one-off crypto transactions to building layered sanctions evasion programs."
In Allah's name
Unlike traditional money, which is usually linked to bank accounts, crypto transactions aren't easily identifiable. Digital wallets holding crypto are represented by numbers and letters, with no names attached. Anyone can create a wallet and hold or transfer crypto with minimal disclosure of where they got their funds.
Hamas, the U.S.-designated terrorist group and Iran ally, has asked for donations in crypto, according to the Federal Bureau of Investigation. Last year, an FBI agent came across one of the group's requests on Telegram, according to a court request filed by the FBI to seize the funds.
When a confidential source for the agent contacted the email provided, the source received instructions to visit a money transfer office that converts traditional currencies into crypto, and then provide the teller with a wallet address where the money should be sent, the FBI said.
"It is necessary not to inform the party that will undertake the transfer on your behalf of our identity," the instruction said. It also said Hamas changed the wallet address for donations constantly to avoid detection.
"May Allah write you the reward and reward you with all good," the instruction said.
Eight wallets Hamas used for donations received $70,000 in cryptocurrency during a two-week period, according to the FBI agent.
Hamas didn't respond to a request for comment.
Iranian crypto
In Iran, dozens of crypto exchanges have popped up in recent years, driven in part by demand from everyday citizens who need ways to transfer money and build savings amid a weakened rial currency and Western sanctions.
Iran's Islamic Revolutionary Guard Corps has used crypto exchanges -- both at home and abroad -- to get paid for oil sales, particularly from China, its biggest customer.
The Wall Street Journal has reported how billions of dollars have moved through Binance, the world's largest crypto exchange, to networks financing the Revolutionary Guard. Binance has called the reporting inaccurate, adding that it didn't permit any transactions with individuals or digital wallets that were sanctioned at the time and that Binance took all appropriate actions once they were. The company filed a lawsuit against the Journal over its reporting . A Journal spokesperson said it stands by its reporting.
The Journal has also reported that CoinEx, an eight-year-old exchange founded by a Chinese engineer, has played a growing role in connecting Iran's crypto operations to the world as the country tries to evade sanctions. CoinEx said it doesn't "provide services to any sanctioned entity or individual" and has "never knowingly provided any form of facilitation to any party after it was designated."
Russian workarounds
Russia has also become more sophisticated in using crypto, Western authorities say, since the U.S. shut Russian banks off from the global financial system in response to the Ukraine war.
Last year, a company owned by Ilan Shor, a sanctioned Moldovan oligarch, and Promsvyazbank, a Russian state-owned bank sanctioned for its role in serving the country's defense sector, joined forces to create a token called A7A5, according to Western authorities and crypto-analytics firms.
The token is pegged to Russia's currency and can be used in its place to get around restrictions on how rubles can be transferred abroad. Users buy the token using rubles inside Russia and then change it to another cryptocurrency, such as the stablecoin Tether, which can be used internationally or converted into U.S. dollars.
At a conference in Russia last year, Shor said part of A7A5's appeal is that it "has no risk of being frozen." Neither his company nor Promsvyazbank replied to requests for comment.
Kaitlin Martin from Chainalysis said she detected payments to China-based drone vendors that were sourced from A7A5-to-stablecoin swaps. Her firm estimated that in total A7A5 processed over $90 billion in transactions last year.
Even though the U.S. and other countries sanctioned the company behind A7A5, the currency continues to be used.
Russian businesses are also using other crypto. A Moscow-based supplier for Rosatom, a Kremlin-controlled nuclear company, needed $1 million worth of equipment from an Asian firm, but couldn't transfer the money because of sanctions, according to an indictment filed by the U.S. government last year.
The funds were converted into cryptocurrency and sent to a digital wallet belonging to a Russian man, Iurii Gugnin, in the U.S., the indictment said. Gugnin then allegedly used a crypto exchange to convert the virtual currency into dollars, which were deposited in his company's account at a New York bank.
From there, prosecutors said Gugnin transferred the $1 million to the bank account of the Asian firm, in South Korea.
Rosatom said it couldn't verify the allegations in the indictment, which targets Gugnin, but said it "carries out its financial activities through lawful and legitimate channels." It also said it views sanctions targeting Russian enterprises as discriminatory.
Gugnin moved more than $500 million through the U.S. financial system on behalf of Russian and other clients, according to U.S. prosecutors. Through him, Russian clients were able to procure U.S. technology components, including a computer server that faced export controls for antiterrorism reasons, the prosecutors said.
Gugnin was arrested last year and in April pleaded guilty to four charges, including conspiracy to launder money and sanctions violation. A lawyer for Gugnin didn't reply to requests for comment.
Write to Patricia Kowsmann at patricia.kowsmann@wsj.com
(END) Dow Jones Newswires
July 04, 2026 17:31 ET (21:31 GMT)
Copyright (c) 2026 Dow Jones & Company, Inc.
Comments