ISIS-K Crypto Funding Network (OFAC July 2026)
Summary
On July 1, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) added 134 cryptocurrency wallet addresses to its Specially Designated Nationals (SDN) list under the existing ISIS-Khorasan Province (ISIS-K) designation, representing the largest single terrorist crypto designation of 2026. The 131 TRON-based addresses and 3 Monero addresses collectively moved over $2 million and were used by ISIS-K's media arm, the al-Azaim Media Foundation, to solicit and channel cryptocurrency donations. Tether immediately froze all 131 TRON wallets; the 3 Monero addresses remain technically unfreezable due to the network's privacy architecture.
Connected Entities
2 entities · 10 linked investigations- TVacWx7F5wgMgn49L5frDf9KLgdYy8nPHL→mentioned with→ISIS-K Crypto Funding Network (OFAC July 2026)(50%)
Timeline(9 events)
2022-01-01
ISIS-K begins documented use of cryptocurrency — primarily Bitcoin, Ethereum, and TRON — to receive donations and move funds, with addresses controlled by the al-Azaim Foundation for Media identified by TRM Labs.
TRM Labs2023-07-31
OFAC designates Ali Shafiu (Maldivian national, ISIS-K media office member) and one associated TRON address showing on-chain links to ISIS-K media-unit wallets, marking the first direct U.S. crypto-focused action against ISIS-K.
Chainalysis2023-12-22
Voice of Khorasan issue 31 published; al-Azaim Media Foundation begins openly soliciting Monero donations, citing the currency's privacy features, alongside existing USDT/TRON solicitation.
MEMRI JTTM2024-03-22
Four Tajik nationals attack Crocus City Hall in Moscow, killing more than 125 people. TRM Labs traces cryptocurrency funds from the attackers' wallet to an ISIS-K-controlled address within hours of the attack.
TRM Labs2025-06-01
Ozgur Altun (alias Abu Yasir al-Turki), identified as ISIS-K's media and crypto operations director, is apprehended near the Pakistan-Afghanistan border in a joint Pakistan ISI and Turkish MIT intelligence operation. He is reportedly carrying significant cryptocurrency at the time of capture.
Jamestown Foundation2025-07-08
Ayse Altun, wife of Ozgur Altun, is detained in Pakistan and subsequently extradited to Turkey on allegations of using cryptocurrency to finance ISIS-linked families in Syria.
SSPC / Jamestown Foundation2026-06-22
U.S. Treasury issues a separate set of ISIS-related designations targeting global facilitators including a Syria-based Bitcoin exchange operator, with Secretary Bessent warning of continued enforcement.
U.S. Department of the Treasury2026-07-01
OFAC adds 134 cryptocurrency addresses — 131 TRON and 3 Monero — to the existing ISIS-Khorasan Province SDN entry. This is described as the largest single terrorist crypto designation of 2026. Total flows across the addresses exceed $2 million.
Chainalysis / CoinDesk2026-07-01
Within hours of the OFAC SDN update, Tether freezes all USDT balances in the 131 designated TRON addresses without court intervention. The 3 Monero addresses remain technically unfreezable.
Blockonomi / CryptoTimesDecision Log
- #1publish⛓ pending7/30/2026, 12:15:07 PMhash: 8jkcaPNPYpnTnhL827Lb2Ny3z8NfsMxAwN2bUG8tDWCi
16 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/30/2026, 12:14:58 PM
last updated: 7/30/2026, 3:07:06 PM
avoid.net — verified advice for a post-truth world