Full Breakdown
Iran's Cryptocurrency Activity Amid Internet Blackout and Military Conflict
3/15/2026, 1:58:19 AM
Surge in Cryptocurrency Transfers During Conflict
Following the U.S.-Israeli strikes on February 28, 2026, Iran experienced a nationwide internet blackout, yet significant cryptocurrency activity persisted. A cyber intelligence report from RAKIA revealed that hundreds of millions of dollars were transferred out of Iran during this period, with wallets linked to the Islamic Revolutionary Guard Corps (IRGC) receiving over $3 billion in cryptocurrency in 2025. Omri Raiter, CEO of RAKIA, noted a rapid increase in funds flowing from Iranian crypto accounts, indicating a robust financial infrastructure capable of operating under severe sanctions and communication restrictions.
Active Cryptocurrency Nodes Despite Connectivity Issues
Despite national internet connectivity dropping to approximately 1% of normal levels, RAKIA identified over 1,100 active cryptocurrency nodes within Iran. These nodes, primarily located in the Tehran–Qom corridor, suggest that certain networks maintained operations despite the blackout. Tom Malca, RAKIA’s head of cyber and AI research, emphasized that the presence of these nodes indicates a deliberate effort to circumvent the shutdown, as they require stable power and bandwidth.
Motivations Behind the Cryptocurrency Movement
Analysts propose two primary motivations for the surge in cryptocurrency transfers: funding for regional proxy groups and personal capital flight by individuals connected to the Iranian regime. Raiter stated, "The proxy war funding and the personal capital flight are two sides of the same coin," highlighting the interconnected nature of these financial flows. The report suggests that the funds were routed to areas historically associated with conflict-related financing, such as Lebanon and Yemen.
U.S. Investigations into Sanctions Evasion
The U.S. Justice Department is currently investigating whether the cryptocurrency exchange Binance facilitated sanctions evasion by Iranian networks. Reports indicate that over $1 billion in suspicious transactions linked to Iran-backed groups were identified. Binance has denied direct involvement with sanctioned entities and claims to cooperate with law enforcement to address suspicious activities. This scrutiny reflects broader concerns regarding the role of cryptocurrency in Iran's financial operations amid ongoing sanctions.
Criticism and Opposition
Critics argue that the Iranian government's internet shutdown is a deliberate measure to suppress dissent and control information flow. Raha Bahreini from Amnesty International described the blackout as a tactic to prevent further unrest, stating, "This is a government-imposed measure." The situation has left many Iranians with limited access to information and communication, exacerbating tensions within the country.
What's Next
As international scrutiny of cryptocurrency transactions linked to Iran intensifies, security agencies worldwide are likely to increase monitoring efforts. The developments underscore the evolving nature of modern warfare, where financial networks and digital assets play critical roles in geopolitical conflicts. Analysts anticipate that the situation will prompt further investigations into the use of cryptocurrencies in sanctions evasion and regional financing.
Verbatim Quotes
- "We've seen a surge of funds since the first hours of the war." — Omri Raiter, CEO of RAKIA
- "The proxy war funding and the personal capital flight are two sides of the same coin." — Omri Raiter, CEO of RAKIA
- "This is a government-imposed measure." — Raha Bahreini, Amnesty International
- "If a country or group develops a strong digital financial infrastructure, funds can continue to move even under sanctions and financial pressure." — Prof. Triveni Singh, Cyber Crime Expert
