Skip to main content
AVOID.NET

ISIS-K Crypto Funding Network (OFAC July 2026)

avoid.net/isis-k-crypto-funding-network-ofac-july-20260/100·95% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4XiCtG…ZGMZ

Summary

On July 1, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) added 134 cryptocurrency wallet addresses to its Specially Designated Nationals (SDN) list under the existing ISIS-Khorasan Province (ISIS-K) designation, representing the largest single terrorist crypto designation of 2026. The 131 TRON-based addresses and 3 Monero addresses collectively moved over $2 million and were used by ISIS-K's media arm, the al-Azaim Media Foundation, to solicit and channel cryptocurrency donations. Tether immediately froze all 131 TRON wallets; the 3 Monero addresses remain technically unfreezable due to the network's privacy architecture.

Connected Entities

2 entities
Wallets
TVacWx…nPHL
Organizations
ISIS-K Crypto Funding Network (OFAC July 2026)
Relationships
  • TVacWx7F5wgMgn49L5frDf9KLgdYy8nPHLmentioned withISIS-K Crypto Funding Network (OFAC July 2026)(50%)
Have evidence about ISIS-K Crypto Funding Network (OFAC July 2026)?

Timeline(9 events)

2022

ISIS-K begins documented use of cryptocurrency — primarily Bitcoin, Ethereum, and TRON — to receive donations and move funds, with addresses controlled by the al-Azaim Foundation for Media identified by TRM Labs.

TRM Labs

31 July 2023

OFAC designates Ali Shafiu (Maldivian national, ISIS-K media office member) and one associated TRON address showing on-chain links to ISIS-K media-unit wallets, marking the first direct U.S. crypto-focused action against ISIS-K.

Chainalysis

22 December 2023

Voice of Khorasan issue 31 published; al-Azaim Media Foundation begins openly soliciting Monero donations, citing the currency's privacy features, alongside existing USDT/TRON solicitation.

MEMRI JTTM

22 March 2024

Four Tajik nationals attack Crocus City Hall in Moscow, killing more than 125 people. TRM Labs traces cryptocurrency funds from the attackers' wallet to an ISIS-K-controlled address within hours of the attack.

TRM Labs

June 2025

Ozgur Altun (alias Abu Yasir al-Turki), identified as ISIS-K's media and crypto operations director, is apprehended near the Pakistan-Afghanistan border in a joint Pakistan ISI and Turkish MIT intelligence operation. He is reportedly carrying significant cryptocurrency at the time of capture.

Jamestown Foundation

8 July 2025

Ayse Altun, wife of Ozgur Altun, is detained in Pakistan and subsequently extradited to Turkey on allegations of using cryptocurrency to finance ISIS-linked families in Syria.

SSPC / Jamestown Foundation

22 June 2026

U.S. Treasury issues a separate set of ISIS-related designations targeting global facilitators including a Syria-based Bitcoin exchange operator, with Secretary Bessent warning of continued enforcement.

U.S. Department of the Treasury

July 2026

OFAC adds 134 cryptocurrency addresses — 131 TRON and 3 Monero — to the existing ISIS-Khorasan Province SDN entry. This is described as the largest single terrorist crypto designation of 2026. Total flows across the addresses exceed $2 million.

Chainalysis / CoinDesk

July 2026

Within hours of the OFAC SDN update, Tether freezes all USDT balances in the 131 designated TRON addresses without court intervention. The 3 Monero addresses remain technically unfreezable.

Blockonomi / CryptoTimes
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 18 of 19 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 7/30/2026, 12:14:58 PM

last updated: 8/26/2026, 9:06:40 PM

4 views

avoid.net — verified advice for a post-truth world