Three Iran choke points

As of September 2026: The SDNY matter is a civil forfeiture complaint whose allegations have not been proven in court. Binance is not a defendant. The sanctions designations are current US actions and may be challenged or amended.

Sanctions evasion is money laundering with a political motive. The goal is the same: move value without the money trail leading to the people or state it belongs to. In September 2026 three US actions, all under Treasury’s “Operation Economic Outcast,” showed three different ways that trail gets built, and three ways it gets cut. Treasury Secretary Scott Bessent announced the campaign on August 24, 2026, aiming to map and sever the channels Iran uses for oil smuggling, sanctions evasion and terrorist financing.

Choke point one: a bank

On September 14, Treasury designated Russia’s VTB Bank. It said VTB opened offices in Iran and built correspondent relationships with sanctioned Iranian banks, then set up correspondent accounts denominated in Iranian rials and Russian rubles to move billions of dollars in frozen Iranian assets and expand trade between the two countries. The action relied on Executive Order 13902, which covers Iran’s financial sector. VTB was already sanctioned over Russia’s war in Ukraine, in 2022 and again in 2025.

Why it works for evaders: trade settled in two non-dollar currencies never touches a US bank, so ordinary dollar screening never sees it. Why it gets caught: a bank of this size has other business, and the exposure it creates for everyone who deals with it is the lever. A foreign bank that keeps working with a designated one risks sanctions of its own.

Choke point two: an exchange

On September 17, Treasury designated BitBank, an Iranian digital asset exchange, along with its software developer and three associates of the already sanctioned financier Babak Zanjani. Treasury said Zanjani used BitBank between June and July 2026 to move “hundreds of millions of dollars’ worth of Bitcoin” to the Islamic Revolutionary Guard Corps.

Why it works for evaders: coins can leave a sanctioned economy without a bank wire. Why it gets caught: coins must eventually be sold or spent somewhere. The exchange is the point where value crosses back into ordinary finance, and it is a small, nameable target.

Choke point three: the proceeds

Also on September 14, prosecutors in Manhattan filed a civil forfeiture complaint against about $61 million in cryptocurrency they allege came from black-market sales of sanctioned Iranian oil. The complaint names two Chinese firms, Blessed Trust and Hexa Whale. It alleges they posed as a wealth-management firm and a commodities broker while using exchange trading accounts to convert oil proceeds into crypto, and that a linked cluster of unhosted addresses received and distributed more than $1.5 billion. Binance is not named as a defendant, and its spokesperson said the company does not permit transactions with sanctioned individuals. These are allegations only.

What investigators look for: a business whose stated activity does not match its account flows, wallet clusters that keep receiving large sums and forwarding them in bulk, and payments that pass through several intermediaries before reaching a regime linked party. The chain-hopping page explains how value is followed across addresses and chains.

What the three have in common

Each action goes after a node that many transactions must pass through: a correspondent bank, an exchange, a set of accounts at a trading platform. Evasion networks are built from many cheap moves, but they need a few expensive, visible institutions to turn value into something usable. That is why designations and forfeitures aim at institutions rather than individual transfers. For the broader picture of how signals like these become enforcement, see the detection section.