{"investigation":{"slug":"ofac-isis-k-134-address-sdn-batch-july-2026","entity_name":"OFAC ISIS-K 134-Address SDN Batch (July 2026)","trust_score":0,"severity_base":null,"score_modifier":-17.4,"confidence":0.92,"status":"under_investigation","content_type":"investigation","summary":"On July 1, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) added 134 cryptocurrency wallet addresses (131 on TRON and 3 on Monero) to the existing SDN entry for the Islamic State Khorasan Province (ISIS-K/ISKP); the addresses collectively moved over $2 million since 2023 and are linked to the group's propaganda arm, the al-Azaim Media Foundation, which solicited donations through its Voice of Khurasan magazine. Tether froze all 131 TRON addresses at or within hours of the update, while the three Monero addresses cannot be frozen because of that network's privacy design. The action followed a June 22, 2026 OFAC designation of ISIS financial facilitators and money-service businesses in Syria, Türkiye and Nigeria.","sections":[{"content":"On July 1, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) updated its existing designation of ISIL-Khorasan (ISIS-K, also ISKP), the Islamic State's Afghanistan/Pakistan-based affiliate and a U.S.-designated Foreign Terrorist Organization, by adding 134 digital currency addresses as identifiers under Executive Order 13224 (as amended by Executive Order 13886). The addition comprised 131 TRON (TRX) addresses and 3 Monero (XMR) addresses. The action did not designate new individuals or legal entities; it expanded the wallet-level footprint of an existing SDN entry. Blockchain analytics firms described it as the largest single-day terrorist crypto designation of 2026. It was the second time OFAC directly targeted ISIS-K crypto operations through address designation; the first, in July 2023, added a single address in connection with Ali Shafiu, a Maldivian national and ISIS-K media office member (see Prior Disruptions). U.S. persons and entities are prohibited from transacting with any of the designated addresses, and non-U.S. persons face secondary sanctions risk. This is a civil/regulatory sanctions designation, not a criminal conviction; the underlying terrorism-financing allegations had not been adjudicated in a U.S. court as of the source pages' writing.","heading":"Regulatory Action: July 1, 2026 SDN Designation Update","sources":[{"url":"https://ofac.treasury.gov/recent-actions/20260701","name":"OFAC Recent Actions — Counter Narcotics Designations; Counter Terrorism Designations and Designation Update (July 1, 2026)","type":"regulatory","credibility":1},{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","credibility":2},{"url":"https://blockonomi.com/u-s-treasury-sanctions-134-crypto-wallets-linked-to-isis-k-terror-network","name":"U.S. Treasury Sanctions 134 Crypto Wallets Linked to ISIS-K Terror Network — Blockonomi","type":"news_article","credibility":2},{"url":"https://easternherald.com/2026/07/02/ofac-isis-k-crypto-sanctions-tether-freeze-2026/","name":"OFAC Sanctions 134 ISIS-K Crypto Wallets, Tether Freezes Funds — Eastern Herald","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The TRON addresses primarily held USDT (Tether), a centralized stablecoin issued via a TRC-20 smart contract; USDT on TRON has been ISIS-K's dominant cryptocurrency for years owing to its low fees and wide exchange support. According to Chainalysis, the 131 TRON wallets received more than $1.4 million in inflows since 2023 and sent more than $880,000 onward over the same period. TRM Labs reported that total flows across all 134 addresses exceeded $2 million. Individual transaction sizes ranged from roughly $10 to $15,000. Chainalysis reported that the wallets showed 'heavy exposure to mainstream services' and that some outbound transfers went to Syria-based cryptocurrency exchangers. No Bitcoin addresses were included in the batch. A sample of the designated addresses (ten TRON addresses and one Monero address, listed on this page) was retrieved from OFAC's official recent-actions notice and checked for well-formedness: each sampled TRON address passed Base58Check checksum validation with the TRON mainnet 0x41 prefix, and the sampled Monero address matches the standard 95-character, prefix-'4' mainnet format. The complete list of all 131 TRON and 3 Monero addresses was not independently reproduced; secondary sources report only the aggregate counts, and OFAC's SDN list remains the authoritative source for the full, current list.","heading":"Designated Addresses and On-Chain Activity","sources":[{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2},{"url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","credibility":1},{"url":"https://blockonomi.com/tether-freezes-usdt-in-131-tron-wallets-as-u-s-sanctions-target-isis-k-crypto-network/","name":"Blockonomi: Tether Freezes USDT in 131 ISIS-K-Linked TRON Wallets","type":"news_article","credibility":2},{"url":"https://ofac.treasury.gov/recent-actions/20260701","name":"OFAC Recent Actions — Counter Narcotics Designations; Counter Terrorism Designations and Designation Update (July 1, 2026)","type":"regulatory","credibility":1},{"url":"https://sanctionssearch.ofac.treas.gov/","name":"OFAC Sanctions List Search","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"The designated addresses are linked to the al-Azaim Foundation for Media (AFM, also al-Azaim Media Foundation), ISIS-K's official propaganda arm and publisher of Voice of Khurasan (also transliterated Voice of Khorasan), a multilingual magazine addressed to English-speaking as well as Russian- and Central Asian-language readerships and distributed via Telegram and other encrypted platforms. Donation addresses were printed in the magazine and cross-promoted on Telegram channels and affiliated websites, and contributions were framed as religious charity (sadaqah). According to the Middle East Media Research Institute (MEMRI), the magazine claimed a single donation could buy two pistols or 200 bullets, or sustain a mujahid's family. Sources differ on when and how the crypto solicitations began. One MEMRI report states that Issue 29, in September 2023, was the first to carry a dedicated crypto donation section, initially soliciting Monero exclusively, with later issues adding TRON-based USDT. A MEMRI JTTM report instead dates the start of open Monero solicitation to Issue 31, published around December 22, 2023, alongside an existing USDT/TRON channel, with later issues adding Bitcoin. Other coverage describes AFM soliciting across TRON, Monero and Bitcoin. Bitcoin addresses solicited through the publication were not included in the July 2026 designation. Coverage describes the campaigns as a low-value, high-volume small-donor model rather than large institutional transfers. AFM ran fundraising through multiple ISIS-K subgroup channels, giving the network resilience against takedown of any single node. These characterizations rest on blockchain analysis and reporting rather than a criminal indictment and should be treated as allegations.","heading":"al-Azaim Media Foundation and Propaganda-Driven Fundraising","sources":[{"url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations","name":"ISKP-Linked English Magazine 'Voice of Khurasan' Solicits Donations Via Monero Cryptocurrency — MEMRI","type":"research","credibility":2},{"url":"https://www.memri.org/cjlab/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations","name":"Newest Issue of ISKP-Linked English Magazine Continues to Solicit Donations in Cryptocurrency — MEMRI","type":"research","credibility":2},{"url":"https://www.memri.org/jttm/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations-0","name":"MEMRI JTTM: Voice of Khurasan Continues to Solicit Crypto, Adds Bitcoin","type":"research","credibility":2},{"url":"https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/","name":"Sadaqah Jariyah: The Thriving Cryptocurrency Fundraising Efforts Behind ISKP's Official Media — GNET Research","type":"research","credibility":2},{"url":"https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/","name":"Soliciting Terror: ISKP Digital Communications and Financing Tactics Through Voice of Khurasan — GNET Research","type":"research","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2},{"url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","credibility":2},{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","credibility":2},{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","credibility":1},{"url":"https://en.wikipedia.org/wiki/Voice_of_Khorasan","name":"Voice of Khorasan — Wikipedia","type":"other","credibility":3}],"severity":"critical"},{"content":"On-chain analysis by NOMINIS mapped the network beyond the 134 designated addresses. It estimated that 80 to 90 percent of funds leaving the sanctioned addresses moved into deposit addresses that were never themselves designated, which it characterized as the primary vulnerability in sanctions screening. One OTC desk connected to the network was assessed as handling about $102,000 in flows, with connections to Turkey-based counterparties and links to prior terrorist financing cases. Mainstream crypto exchanges and regional exchangers, including Syria-based operators, served as exit points. Chainalysis described the network as reflecting ISIS-K's use of TRON for speed and low fees combined with Monero for privacy, a deliberate dual-rail fundraising strategy, and documented a broader cluster of addresses connected to the designated wallets. TRM Labs reported that the wider ISKP fundraising network has decentralized further across multiple subgroups following successive disruptions.","heading":"Network Architecture and Off-Ramps","sources":[{"url":"https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network","name":"OFAC Sanctions 134 ISIS-K Wallets: NOMINIS Maps the Wider Network","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","credibility":2},{"url":"https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/","name":"Blockchain Analytics Firm Chainalysis Analyzes OFAC's Expansion of ISIS-K Crypto Sanctions — Crowdfund Insider","type":"news_article","credibility":2},{"url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/","name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2}],"severity":"critical"},{"content":"Tether Limited, the issuer of USDT, froze the balances held in all 131 designated TRON addresses. Reports differ slightly on timing: some describe the freeze as taking effect at the moment the SDN update was published on July 1, 2026, others as occurring within hours of it. Tether used the blacklist function (administrative key) built into the USDT TRC-20 contract, which lets it block transfers from specific addresses without a court order; the freeze prevented any further outgoing USDT transfers from the wallets. Tether has reported freezing over $4.4 billion in digital assets across its history of law-enforcement cooperation, about $2.1 billion of it at U.S. agency request, across more than 2,300 investigations in 65 countries; the ISIS-K freeze is documented as one of the largest single terrorist-financing freeze actions it has carried out. In a separate, earlier 2026 action (reported as January 2026), Tether froze $182 million in USDT across five TRON wallets. Commentators said the episode shows TRON-based USDT operates as permissioned infrastructure subject to real-time, government-directed asset controls rather than as a censorship-resistant bearer asset.","heading":"Tether's Freeze of the TRON Wallets","sources":[{"url":"https://coinlaw.io/tether-freezes-131-tron-wallets-ofac-isis-k/","name":"Tether Freezes 131 TRON Wallets OFAC Sanctioned Over ISIS-K — CoinLaw","type":"news_article","credibility":2},{"url":"https://cryptodaily.co.uk/2026/07/tether-freezes-isis-k-tron-wallets","name":"Tether Freezes ISIS-K Tron Wallets: Stablecoin Compliance Just Got Very Real — CryptoDaily","type":"news_article","credibility":2},{"url":"https://unchainedcrypto.com/tether-freezes-over-130-tron-wallets-tied-to-terror-group/","name":"Tether Freezes 131 Tron Wallets Tied to ISIS-K After US Sanctions — Unchained","type":"news_article","credibility":2},{"url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","credibility":1},{"url":"https://blockonomi.com/tether-freezes-usdt-in-131-tron-wallets-as-u-s-sanctions-target-isis-k-crypto-network/","name":"Blockonomi: Tether Freezes USDT in 131 ISIS-K-Linked TRON Wallets","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/07/02/tether-freezes-131-isis-k-tron-wallets-post-us-sanctions/","name":"CryptoTimes: Tether Freezes 131 ISIS-K TRON Wallets Post US Sanctions","type":"news_article","credibility":2},{"url":"https://crypto.news/tether-freezes-usdt-in-131-isis-k-linked-tron-wallets-chainalysis/","name":"Tether freezes USDT in 131 ISIS-K-linked TRON wallets — crypto.news","type":"news_article","credibility":2}],"severity":"high"},{"content":"The three Monero addresses cannot be frozen. Monero uses ring signatures, stealth addresses and RingCT (Ring Confidential Transactions) to obscure senders, receivers and amounts, and has no central issuer or protocol-level mechanism through which any authority can blacklist an address. Their designation therefore serves mainly a legal deterrence function. OFAC has not publicly disclosed enforcement measures specific to these addresses beyond the SDN listing. GNET Research documented ISIS-K's deliberate adoption of Monero from fall 2023 because of these privacy properties, describing it in October 2024 as ISKP's preferred cryptocurrency for terrorist financing. Any exchange, OTC desk, mining pool, DeFi protocol or financial institution that processes transactions involving the 134 designated addresses risks OFAC sanctions violations. For the TRON addresses, Tether's freeze neutralizes USDT movement, but non-USDT assets on TRON and any balances dispersed before the freeze remain a concern. The Monero addresses present an ongoing unmitigated risk with no automated detection mechanism comparable to Tether's freeze, and counterparties transacting with second- or third-degree cluster addresses identified by Chainalysis may also carry exposure.","heading":"Monero Enforcement Gap and Counterparty Exposure","sources":[{"url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/","name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","credibility":2},{"url":"https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/","name":"Soliciting Terror: ISKP Digital Communications and Financing Tactics Through Voice of Khurasan — GNET Research","type":"research","credibility":2},{"url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","credibility":2},{"url":"https://www.techtimes.com/articles/319593/20260703/tether-froze-131-isis-k-wallets-hours-three-monero-addresses-remain-untouched.htm","name":"TechTimes: Tether Froze 131 ISIS-K Wallets in Hours — Three Monero Addresses Remain Untouched","type":"news_article","credibility":2},{"url":"https://cryptodaily.co.uk/2026/07/tether-freezes-isis-k-tron-wallets","name":"Tether Freezes ISIS-K Tron Wallets: Stablecoin Compliance Just Got Very Real — CryptoDaily","type":"news_article","credibility":2},{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","credibility":2},{"url":"https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/","name":"Blockchain Analytics Firm Chainalysis Analyzes OFAC's Expansion of ISIS-K Crypto Sanctions — Crowdfund Insider","type":"news_article","credibility":2},{"url":"https://cryptoslate.com/tether-freezes-isis-k-wallets-proving-that-stablecoins-now-side-inside-a-sanctions-machine/","name":"CryptoSlate: Tether Freezes ISIS-K Wallets Proving That Stablecoins Now Sit Inside a Sanctions Machine","type":"news_article","credibility":2}],"severity":"high"},{"content":"In July 2023, OFAC designated Ali Shafiu, a Maldivian national in ISIS-K's media office, together with one TRON address (TVacWx7F5wgMgn49L5frDf9KLgdYy8nPHL) that received about $18,000 in USDT on TRON and showed on-chain links to other ISIS-K and ISIS media-unit wallets. Also in 2023, an ISKP financier was arrested in Istanbul, according to TRM Labs. Ozgur Altun, alias Abu Yasir al-Turki, described as the highest-ranking Turkish member of ISIS and the key figure behind ISIS-K's media and cryptocurrency operations, was captured near the Afghanistan-Pakistan border in a joint operation by Pakistan's ISI and Turkey's MIT. Reports date the capture to May or June 2025 (Anadolu Agency and TRM Labs-based reporting point to May; the Jamestown Foundation to June). He was reportedly carrying a significant amount of cryptocurrency. His wife, Ayse Altun, was detained in Pakistan in July 2025 and extradited to Turkey; she is accused of using cryptocurrency to finance ISIS-affiliated families in Syria. After Altun's arrest, ISIS-K online users reportedly circulated digital operational-security guidance, while the group's decentralized fundraising infrastructure remained resilient.","heading":"Key Individuals and Prior Disruptions","sources":[{"url":"https://www.chainalysis.com/blog/ofac-sanctions-al-qaeda-isis-ali-shafiu/","name":"Chainalysis: OFAC Sanctions ISIS Operative Ali Shafiu — Highlights Crypto Address","type":"research","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2},{"url":"https://jamestown.org/ozgur-altun-turkish-media-mastermind-for-is-kp-arrested/","name":"Jamestown Foundation: Ozgur Altun — Turkish Media Mastermind for IS-KP Arrested","type":"news_article","credibility":2},{"url":"https://www.sspconline.org/counter-terrorism-perspectives/ozgur-altun-turkish-media-mastermind-iskp-arrested-pakistan","name":"SSPC: Ozgur Altun Turkish Media Mastermind for ISKP Arrested in Pakistan","type":"news_article","credibility":2},{"url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851","name":"Top ISIS Operative Captured in Joint Turkish-Pakistani Intelligence Operation — Anadolu Agency","type":"news_article","credibility":2},{"url":"https://www.militantwire.com/p/turkish-iskp-regional-leaders-arrest","name":"Turkish ISKP Regional Leader's Arrest Sets Back Operations — Militant Wire","type":"news_article","credibility":2}],"severity":"high"},{"content":"Nine days before the ISIS-K wallet batch, on June 22, 2026, OFAC designated three individuals and six entities under Executive Order 13224 for allegedly facilitating ISIS financial transfers through crypto and informal money networks across Europe, the Middle East and West Africa. Treasury said the action aimed to disrupt the routing of funds among ISIS's regional affiliates. Named parties included Abdelhakim Boukich, a Syria-based former Dutch national who Treasury said established (in late 2020) and controls Bitcoin Xchange, a Syria-based money service business; Miloud Abderrahmane, a French national whom Treasury said conducted transactions with ISIS affiliates in Syria and gave supporters guidance on explosives, and with whom OFAC associated TRON wallet addresses; Mohamad Alhmidan, previously designated in March 2016, who owns and controls the Turkey-based money service businesses Spider Gayrimenkul Ve Genel Ticaret Limited Sirketi and Alkaram Danismanlik Gayrimenkul Ic Ve Dis Genel Ticaret Limited Sirketi; and Nigeria-based ISIS-West Africa facilitator Mukhtar Adamu Muhammad, linked to three Nigerian bureaux de change: Nine to Nine Exchange Bureau de Change Limited, Manhattan Bureau de Change Limited and Generation Currency Bureau de Change Limited. The source pages differ on which three people count as the newly designated individuals (see merge notes). OFAC said Bitcoin Xchange and Boukich transferred funds for ISIS associates from Norway, Belgium, the Netherlands, South Africa and the United States. Treasury Secretary Scott Bessent said: 'ISIS continues to seek new methods and tools to finance terrorist attacks. The United States will leverage every tool at its disposal to crush ISIS's remaining capabilities and protect American lives.'","heading":"Related Enforcement: June 22, 2026 ISIS Financial Facilitators Action","sources":[{"url":"https://home.treasury.gov/news/press-releases/sb0537","name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury","type":"regulatory","credibility":1},{"url":"https://ofac.treasury.gov/recent-actions/20260622","name":"Counter Terrorism Designations — OFAC Recent Actions (June 22, 2026)","type":"regulatory","credibility":1},{"url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange","name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/","name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis Blog","type":"research","credibility":2},{"url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis","name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — The Defiant","type":"news_article","credibility":2}],"severity":"critical"},{"content":"On-chain tracing by TRM Labs and investigative outlets linked wallets in the ISIS-K crypto network to real-world attacks. In the March 22, 2024 Crocus City Hall attack near Moscow, four Tajik nationals killed more than 125 people. According to reporting, ISIS-K sent about $2,525 in cryptocurrency to the attackers in tranches: a first tranche of $550 shortly after a wallet was created, then $325, $550 (twice) and $1,100 on the day of the attack between 07:20 and 18:55 UTC. TRM Labs traced funds from the attackers' wallet back to an ISKP-controlled address within hours of the attack. In June 2024, an individual was arrested in Germany over an alleged plot against the European Football Championship; that person had allegedly sent about $1,700 in cryptocurrency to an ISKP-linked address. FinCEN's April 2025 Advisory on ISIS Financing cites these cases as examples of small-value, operationally directed crypto transfers.","heading":"Links to Attacks: Crocus City Hall and Euro 2024 Plot","sources":[{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/in-wake-of-moscow-attack-understanding-isis-use-of-cryptocurrencies","name":"TRM Labs: In Wake of Moscow Attack — Understanding ISIS' Use of Cryptocurrencies","type":"research","credibility":2},{"url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/","name":"Media Outlets Find Crypto Wallet of ISIS Tajikistan Wing Used to Transfer Payment for Moscow Oblast Attack — Ukrainska Pravda","type":"news_article","credibility":2},{"url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf","name":"FinCEN Advisory on ISIS Financing (April 2025)","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"Industry and regulatory commentary on the action attributes TRON's recurring appearance in terrorism-financing and sanctions-evasion cases to its low fees and deep USDT liquidity, which suit high-volume, low-value transfers like the al-Azaim donation campaigns. Coverage of the July 1, 2026 OFAC action set noted a separate, unrelated designation the same day of a Brazil-linked network associated with Primeiro Comando da Capital (PCC) that allegedly used cryptocurrency to move over $30 million in illicit proceeds. This describes an industry pattern, not a finding against the TRON network or the TRON Foundation, which was not named or sanctioned in either action.","heading":"Broader Pattern: TRON in Terrorism and Sanctions-Evasion Financing","sources":[{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network","name":"OFAC Sanctions 134 ISIS-K Wallets: NOMINIS Maps the Wider Network","type":"research","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2015-09","event":"OFAC designates ISKP (ISIS-K) as a Specially Designated Global Terrorist organization.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2016-03","event":"Mohamad Alhmidan, later named again in the June 2026 action, is first designated by OFAC.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2022","event":"ISIS-K and its supporters begin documented use of cryptocurrency (primarily Bitcoin, Ethereum and TRON) to receive donations and move funds, with addresses controlled by the al-Azaim Foundation for Media identified by TRM Labs.","source":"TRM Labs / GNET Research","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2023","event":"An ISKP financier is arrested in Istanbul, per TRM Labs reporting.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2023","event":"According to Chainalysis, the 131 TRON addresses later designated by OFAC begin receiving inflows, eventually totaling more than $1.4 million.","source":"Chainalysis","source_url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/"},{"date":"2023-07","event":"OFAC designates Ali Shafiu, a Maldivian national in ISIS-K's media office, and one associated TRON address: the first direct U.S. crypto-address action against ISIS-K.","source":"Chainalysis / TRM Labs","source_url":"https://www.chainalysis.com/blog/ofac-sanctions-al-qaeda-isis-ali-shafiu/"},{"date":"2023-09","event":"Voice of Khurasan Issue 29, described by MEMRI as the first issue with a dedicated cryptocurrency donation section, is published, requesting Monero. (MEMRI JTTM instead dates the start of open Monero solicitation to Issue 31 in December 2023.)","source":"MEMRI","source_url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations"},{"date":"2023-12","event":"Voice of Khorasan Issue 31 is published; per MEMRI JTTM, al-Azaim begins openly soliciting Monero donations, citing its privacy features, alongside existing USDT/TRON solicitation.","source":"MEMRI JTTM","source_url":"https://www.memri.org/jttm/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations-0"},{"date":"2024-03","event":"Crocus City Hall attack near Moscow (March 22): four Tajik nationals kill more than 125 people. About $2,525 in cryptocurrency sent to the attackers is traced to an ISIS-K-controlled wallet.","source":"TRM Labs / Ukrainska Pravda","source_url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/"},{"date":"2024-06","event":"An individual is arrested in Germany over an alleged plot against the European Football Championship; about $1,700 in cryptocurrency was allegedly sent to an ISKP-linked address.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2024-10","event":"GNET Research publishes analysis identifying Monero as ISKP's preferred cryptocurrency for terrorist financing.","source":"GNET Research","source_url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/"},{"date":"2025-04","event":"FinCEN publishes its Advisory on ISIS Financing, citing crypto-enabled attack funding including the Crocus City Hall case.","source":"FinCEN","source_url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf"},{"date":"2025-05","event":"Ozgur Altun (alias Abu Yasir al-Turki), key figure behind ISIS-K media and crypto operations, is captured near the Afghanistan-Pakistan border in a joint Pakistani-Turkish intelligence operation, reportedly carrying significant cryptocurrency. Reports differ on the month: May 2025 (Anadolu Agency) or June 2025 (Jamestown Foundation).","source":"Anadolu Agency / Jamestown Foundation","source_url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851"},{"date":"2025-07","event":"Ayse Altun, wife of Ozgur Altun, is detained in Pakistan and extradited to Turkey over allegations of using cryptocurrency to finance ISIS-linked families in Syria.","source":"SSPC / Jamestown Foundation","source_url":"https://www.sspconline.org/counter-terrorism-perspectives/ozgur-altun-turkish-media-mastermind-iskp-arrested-pakistan"},{"date":"2026","event":"In a separate enforcement action (reported as January 2026), Tether freezes $182 million in USDT across five TRON wallets.","source":"TFTC","source_url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"},{"date":"2026-06-22","event":"OFAC designates three individuals and six entities, including Syria-based Bitcoin Xchange, Turkey-based MSBs Spider and Alkaram, and three Nigerian bureaux de change, for allegedly routing funds to ISIS; Secretary Bessent warns of continued enforcement.","source":"U.S. Department of the Treasury / OFAC","source_url":"https://home.treasury.gov/news/press-releases/sb0537","date_evidence":"Date of Action: June 22, 2026"},{"date":"2026-07","event":"Tether freezes all USDT balances in the 131 designated TRON addresses at or within hours of the SDN update, without court intervention; the 3 Monero addresses remain unfreezable.","source":"Blockonomi / CryptoTimes / Unchained","source_url":"https://blockonomi.com/tether-freezes-usdt-in-131-tron-wallets-as-u-s-sanctions-target-isis-k-crypto-network/"},{"date":"2026-07","event":"Mainstream and crypto media (CoinDesk, Unchained, Chainalysis blog and others) report on the designation and Tether's freeze.","source":"CoinDesk","source_url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action"},{"date":"2026-07-01","event":"OFAC adds 134 cryptocurrency addresses (131 TRON, 3 Monero) to the existing ISIL Khorasan (ISIS-K) SDN entry; the addresses collectively moved over $2 million since 2023.","source":"OFAC Recent Actions / CoinDesk / TRM Labs / Chainalysis","source_url":"https://ofac.treasury.gov/recent-actions/20260701","date_evidence":"Release Date 07/01/2026"}],"sources_used":[{"url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","archive_url":"http://web.archive.org/web/20260731130935/https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing","credibility":2,"archive_timestamp":"2026-07-31T13:09:35+00:00"},{"url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260709011714/https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action","credibility":1,"archive_timestamp":"2026-07-09T01:17:14+00:00"},{"url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","archive_url":"http://web.archive.org/web/20260723122703/https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/","credibility":2,"archive_timestamp":"2026-07-23T12:27:03+00:00"},{"url":"https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network","name":"OFAC Sanctions 134 ISIS-K Wallets: NOMINIS Maps the Wider Network","type":"research","archive_url":"https://web.archive.org/web/20260731130626/https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network","credibility":2,"archive_timestamp":"2026-07-31T13:06:26+00:00"},{"url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","archive_url":"http://web.archive.org/web/20260703144116/https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn","credibility":2,"archive_timestamp":"2026-07-03T14:41:16+00:00"},{"url":"https://home.treasury.gov/news/press-releases/sb0537","name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury","type":"regulatory","archive_url":"http://web.archive.org/web/20260624200913/https://home.treasury.gov/news/press-releases/sb0537","credibility":1,"archive_timestamp":"2026-06-24T20:09:13+00:00"},{"url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/","name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis Blog","type":"research","archive_url":"http://web.archive.org/web/20260727005858/https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/","credibility":2,"archive_timestamp":"2026-07-27T00:58:58+00:00"},{"url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange","name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","archive_url":"http://web.archive.org/web/20260727203718/https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange","credibility":2,"archive_timestamp":"2026-07-27T20:37:18+00:00"},{"url":"https://coinlaw.io/tether-freezes-131-tron-wallets-ofac-isis-k/","name":"Tether Freezes 131 TRON Wallets OFAC Sanctioned Over ISIS-K — CoinLaw","type":"news_article","archive_url":"http://web.archive.org/web/20260731154940/https://coinlaw.io/tether-freezes-131-tron-wallets-ofac-isis-k/","credibility":2,"archive_timestamp":"2026-07-31T15:49:40+00:00"},{"url":"https://unchainedcrypto.com/tether-freezes-over-130-tron-wallets-tied-to-terror-group/","name":"Tether Freezes 131 Tron Wallets Tied to ISIS-K After US Sanctions — Unchained","type":"news_article","archive_url":"http://web.archive.org/web/20260731125620/https://unchainedcrypto.com/tether-freezes-over-130-tron-wallets-tied-to-terror-group/","credibility":2,"archive_timestamp":"2026-07-31T12:56:20+00:00"},{"url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations","name":"ISKP-Linked English Magazine 'Voice of Khurasan' Solicits Donations Via Monero Cryptocurrency — MEMRI","type":"research","archive_url":"http://web.archive.org/web/20260731130207/https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations","credibility":2,"archive_timestamp":"2026-07-31T13:02:07+00:00"},{"url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/","name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","archive_url":"http://web.archive.org/web/20260520143703/https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/","credibility":2,"archive_timestamp":"2026-05-20T14:37:03+00:00"},{"url":"https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/","name":"Sadaqah Jariyah: The Thriving Cryptocurrency Fundraising Efforts Behind ISKP's Official Media — GNET Research","type":"research","archive_url":"http://web.archive.org/web/20260415163202/https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/","credibility":2,"archive_timestamp":"2026-04-15T16:32:02+00:00"},{"url":"https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/","name":"Soliciting Terror: ISKP Digital Communications and Financing Tactics Through Voice of Khurasan — GNET Research","type":"research","archive_url":"http://web.archive.org/web/20260218113826/https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/","credibility":2,"archive_timestamp":"2026-02-18T11:38:26+00:00"},{"url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851","name":"Top ISIS Operative Captured in Joint Turkish-Pakistani Intelligence Operation — Anadolu Agency","type":"news_article","archive_url":"http://web.archive.org/web/20260315181804/https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851","credibility":2,"archive_timestamp":"2026-03-15T18:18:04+00:00"},{"url":"https://www.militantwire.com/p/turkish-iskp-regional-leaders-arrest","name":"Turkish ISKP Regional Leader's Arrest Sets Back Operations — Militant Wire","type":"news_article","archive_url":"http://web.archive.org/web/20260731130628/https://www.militantwire.com/p/turkish-iskp-regional-leaders-arrest","credibility":2,"archive_timestamp":"2026-07-31T13:06:28+00:00"},{"url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/","name":"Media Outlets Find Crypto Wallet of ISIS Tajikistan Wing Used to Transfer Payment for Moscow Oblast Attack — Ukrainska Pravda","type":"news_article","archive_url":"http://web.archive.org/web/20260525104205/https://www.pravda.com.ua/eng/news/2024/03/29/7448665/","credibility":2,"archive_timestamp":"2026-05-25T10:42:05+00:00"},{"url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf","name":"FinCEN Advisory on ISIS Financing (April 2025)","type":"regulatory","archive_url":"http://web.archive.org/web/20260105160938/https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf","credibility":1,"archive_timestamp":"2026-01-05T16:09:38+00:00"},{"url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis","name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — The Defiant","type":"news_article","archive_url":"http://web.archive.org/web/20260727095125/https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis","credibility":2,"archive_timestamp":"2026-07-27T09:51:25+00:00"},{"url":"https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/","name":"Blockchain Analytics Firm Chainalysis Analyzes OFAC's Expansion of ISIS-K Crypto Sanctions — Crowdfund Insider","type":"news_article","archive_url":"http://web.archive.org/web/20260730150513/https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/","credibility":2,"archive_timestamp":"2026-07-30T15:05:13+00:00"},{"url":"https://blockonomi.com/u-s-treasury-sanctions-134-crypto-wallets-linked-to-isis-k-terror-network","name":"U.S. Treasury Sanctions 134 Crypto Wallets Linked to ISIS-K Terror Network — Blockonomi","type":"news_article","archive_url":"http://web.archive.org/web/20260731125008/https://blockonomi.com/u-s-treasury-sanctions-134-crypto-wallets-linked-to-isis-k-terror-network/","credibility":2,"archive_timestamp":"2026-07-31T12:50:08+00:00"},{"url":"https://easternherald.com/2026/07/02/ofac-isis-k-crypto-sanctions-tether-freeze-2026/","name":"OFAC Sanctions 134 ISIS-K Crypto Wallets, Tether Freezes Funds — Eastern Herald","type":"news_article","credibility":2},{"url":"https://www.memri.org/cjlab/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations","name":"Newest Issue of ISKP-Linked English Magazine Continues to Solicit Donations in Cryptocurrency — MEMRI","type":"research","credibility":2},{"url":"https://cryptodaily.co.uk/2026/07/tether-freezes-isis-k-tron-wallets","name":"Tether Freezes ISIS-K Tron Wallets: Stablecoin Compliance Just Got Very Real — CryptoDaily","type":"news_article","archive_url":"https://web.archive.org/web/20260730150500/https://cryptodaily.co.uk/2026/07/tether-freezes-isis-k-tron-wallets","credibility":2,"archive_timestamp":"2026-07-30T15:05:00+00:00"},{"url":"https://blockonomi.com/tether-freezes-usdt-in-131-tron-wallets-as-u-s-sanctions-target-isis-k-crypto-network/","name":"Blockonomi: Tether Freezes USDT in 131 ISIS-K-Linked TRON Wallets","type":"news_article","archive_url":"http://web.archive.org/web/20260704231728/https://blockonomi.com/tether-freezes-usdt-in-131-tron-wallets-as-u-s-sanctions-target-isis-k-crypto-network/","credibility":2,"archive_timestamp":"2026-07-04T23:17:28+00:00"},{"url":"https://www.cryptotimes.io/2026/07/02/tether-freezes-131-isis-k-tron-wallets-post-us-sanctions/","name":"CryptoTimes: Tether Freezes 131 ISIS-K TRON Wallets Post US Sanctions","type":"news_article","archive_url":"http://web.archive.org/web/20260731011233/https://www.cryptotimes.io/2026/07/02/tether-freezes-131-isis-k-tron-wallets-post-us-sanctions/","credibility":2,"archive_timestamp":"2026-07-31T01:12:33+00:00"},{"url":"https://www.techtimes.com/articles/319593/20260703/tether-froze-131-isis-k-wallets-hours-three-monero-addresses-remain-untouched.htm","name":"TechTimes: Tether Froze 131 ISIS-K Wallets in Hours — Three Monero Addresses Remain Untouched","type":"news_article","archive_url":"http://web.archive.org/web/20260704025433/https://www.techtimes.com/articles/319593/20260703/tether-froze-131-isis-k-wallets-hours-three-monero-addresses-remain-untouched.htm","credibility":2,"archive_timestamp":"2026-07-04T02:54:33+00:00"},{"url":"https://www.memri.org/jttm/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations-0","name":"MEMRI JTTM: Voice of Khurasan Continues to Solicit Crypto, Adds Bitcoin","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/ofac-sanctions-al-qaeda-isis-ali-shafiu/","name":"Chainalysis: OFAC Sanctions ISIS Operative Ali Shafiu — Highlights Crypto Address","type":"research","archive_url":"http://web.archive.org/web/20260514042951/https://www.chainalysis.com/blog/ofac-sanctions-al-qaeda-isis-ali-shafiu/","credibility":2,"archive_timestamp":"2026-05-14T04:29:51+00:00"},{"url":"https://jamestown.org/ozgur-altun-turkish-media-mastermind-for-is-kp-arrested/","name":"Jamestown Foundation: Ozgur Altun — Turkish Media Mastermind for IS-KP Arrested","type":"news_article","archive_url":"http://web.archive.org/web/20260325190704/https://jamestown.org/ozgur-altun-turkish-media-mastermind-for-is-kp-arrested/","credibility":2,"archive_timestamp":"2026-03-25T19:07:04+00:00"},{"url":"https://www.sspconline.org/counter-terrorism-perspectives/ozgur-altun-turkish-media-mastermind-iskp-arrested-pakistan","name":"SSPC: Ozgur Altun Turkish Media Mastermind for ISKP Arrested in Pakistan","type":"news_article","archive_url":"http://web.archive.org/web/20260414060015/https://www.sspconline.org/counter-terrorism-perspectives/ozgur-altun-turkish-media-mastermind-iskp-arrested-pakistan","credibility":2,"archive_timestamp":"2026-04-14T06:00:15+00:00"},{"url":"https://www.trmlabs.com/resources/blog/in-wake-of-moscow-attack-understanding-isis-use-of-cryptocurrencies","name":"TRM Labs: In Wake of Moscow Attack — Understanding ISIS' Use of Cryptocurrencies","type":"research","archive_url":"http://web.archive.org/web/20260713215034/https://www.trmlabs.com/resources/blog/in-wake-of-moscow-attack-understanding-isis-use-of-cryptocurrencies","credibility":2,"archive_timestamp":"2026-07-13T21:50:34+00:00"},{"url":"https://cryptoslate.com/tether-freezes-isis-k-wallets-proving-that-stablecoins-now-side-inside-a-sanctions-machine/","name":"CryptoSlate: Tether Freezes ISIS-K Wallets Proving That Stablecoins Now Sit Inside a Sanctions Machine","type":"news_article","archive_url":"http://web.archive.org/web/20260723110433/https://cryptoslate.com/tether-freezes-isis-k-wallets-proving-that-stablecoins-now-side-inside-a-sanctions-machine/","credibility":2,"archive_timestamp":"2026-07-23T11:04:33+00:00"},{"url":"https://www.banklesstimes.com/articles/2026/07/02/tether-blocks-131-isis%E2%80%91k-tron-wallets-in-sweeping-usdt-terror-crackdown/","name":"BanklessTimes: Tether Freezes 131 ISIS-K TRON Wallets After OFAC Sanctions Update","type":"news_article","archive_url":"http://web.archive.org/web/20260702104911/https://www.banklesstimes.com/articles/2026/07/02/tether-blocks-131-isis%e2%80%91k-tron-wallets-in-sweeping-usdt-terror-crackdown/","credibility":2,"archive_timestamp":"2026-07-02T10:49:11+00:00"},{"url":"https://ofac.treasury.gov/recent-actions/20260701","name":"OFAC Recent Actions — Counter Narcotics Designations; Counter Terrorism Designations and Designation Update (July 1, 2026)","type":"regulatory","archive_url":"http://web.archive.org/web/20260826181613/https://ofac.treasury.gov/recent-actions/20260701","credibility":1,"archive_timestamp":"2026-08-26T18:16:13+00:00"},{"url":"https://ofac.treasury.gov/recent-actions/20260622","name":"Counter Terrorism Designations — OFAC Recent Actions (June 22, 2026)","type":"regulatory","archive_url":"http://web.archive.org/web/20260826182222/https://ofac.treasury.gov/recent-actions/20260622","credibility":1,"archive_timestamp":"2026-08-26T18:22:22+00:00"},{"url":"https://sanctionssearch.ofac.treas.gov/","name":"OFAC Sanctions List Search","type":"regulatory","archive_url":"http://web.archive.org/web/20260909070913/https://sanctionssearch.ofac.treas.gov/","credibility":1,"archive_timestamp":"2026-09-09T07:09:13+00:00"},{"url":"https://crypto.news/tether-freezes-usdt-in-131-isis-k-linked-tron-wallets-chainalysis/","name":"Tether freezes USDT in 131 ISIS-K-linked TRON wallets — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260729214606/https://crypto.news/tether-freezes-usdt-in-131-isis-k-linked-tron-wallets-chainalysis/","credibility":2,"archive_timestamp":"2026-07-29T21:46:06+00:00"},{"url":"https://en.wikipedia.org/wiki/Voice_of_Khorasan","name":"Voice of Khorasan — Wikipedia","type":"other","archive_url":"http://web.archive.org/web/20260903172552/https://en.wikipedia.org/wiki/Voice_of_Khorasan","credibility":3,"archive_timestamp":"2026-09-03T17:25:52+00:00"}],"source_tags":[],"addresses":[{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TUoixKFaWVsHxGWgnYyMzpkrT22YqU7VvH","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TBtRqkiFzyuwe8nSAGQghxygAfwAF5eERq","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TTs7KRq39547ruAsxb9brAPuTLy7h3U6H1","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TVttWTHTCU9kULP51m9BaHpmCW8H1BJJNQ","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TCqKhk7MpPnGH3UfygE1TRzUo92a5tuVy6","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TSbGiFzG9xFXUYgGA6RwbS3jvKNpeA4c3R","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TVXHp8bMrpRd5HGy3w1yu9f87qwRrMHFp8","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TQ8a74SiDig3EDSC14tosLACWLbvaNYwCJ","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TWdqVcA3NyrNv71NgbMwKv3C5XMxj4XjSp","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; passes Base58Check TRON address validation.","chain":"TRON","address":"TX1zyMrYZNbtQx7yPZp4adZV5NbToGNrkS","source_url":"https://ofac.treasury.gov/recent-actions/20260701"},{"note":"Listed under ISIL Khorasan SDN designation update, July 1, 2026; matches the standard 95-character, prefix-'4' Monero mainnet address format. Full list of all 131 TRON and all 3 Monero addresses could not be independently verified in full by this investigation; authoritative source is OFAC's SDN list.","chain":"Monero","address":"44dZUJ7w1T3fKAvFW8XyXUVoAGSbFvXef2wcbnsjNKGWYorpLJBjth5VKSFhLGkpYKJb2J341tdZHBnbpv72WL7e8zuxfR2","source_url":"https://ofac.treasury.gov/recent-actions/20260701"}],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-07-31T12:32:28.177584+00:00","updated_at":"2026-10-27T18:40:22.609+00:00"},"source_quality":{"total":39,"tier1":5,"tier2":7,"tier3":0,"unrated":27},"follower_count":null,"content_updated_at":"2026-10-27T18:40:23.312Z","last_fact_checked_at":"2026-10-27T18:40:22.952Z","fact_check_next_allowed_at":"2026-11-03T18:40:22.952Z","update_next_allowed_at":null}