Audit log

Every state-changing event for ISIS Nigeria-Turkey Crypto Financing Entities (Nine to Nine, Manhattan Bureau, Generation Currency, Spider, Alkaram): moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-06-28 23:15:03Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 429,547,672

   sig

   56oDmEBSqCpR…K5atDco5copyexplorer ↗

   hash

   Dne7uiXJhV87…i7J6k73Vcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (19346 B) ▸

   {"actor":"system:backfill","investigation_id":"7f614e32-5f72-4495-923a-46890c56396d","kind":"publish","page_slug":"isis-nigeria-turkey-crypto-financing-entities-nine-to-nine-manhattan-bureau-generation-currency-spider-alkaram","published_at":"2026-06-28T23:15:03.614Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"ISIS Nigeria-Turkey Crypto Financing Entities (Nine to Nine, Manhattan Bureau, Generation Currency, Spider, Alkaram)","sections":[{"content":"On June 22, 2026, OFAC designated three individuals and six entities — including the five entities under review — pursuant to Executive Order 13224, as amended, for having materially assisted, sponsored, or provided financial, material, or technological support for ISIS. The broader action also designated French national Miloud Abderrahmane (for conducting crypto transactions with ISIS affiliates and providing ISIS supporters with explosives-manufacturing information) and Syria-based Abdelhakim Boukich (for controlling Bitcoin Xchange, a Syria-based money service business). Two TRON blockchain wallet addresses linked to Abderrahmane were added to the SDN list: TBXMiRqUp1XH1zLazWu8cWitMAScv4HsYq and TDFj8tYzfLDkwEMo4MJ2DfrbpMztuCCnan. All U.S. persons are prohibited from transacting with the designated entities, and any assets within U.S. jurisdiction are subject to blocking.","heading":"OFAC Designation and Legal Authority","severity":"critical","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury press release","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"}]},{"content":"Nine to Nine Exchange Bureau de Change Limited, Manhattan Bureau de Change Limited, and Generation Currency Bureau de Change Limited are Lagos- and Kano-based currency exchange businesses operating under the ownership and control of Mukhtar Adamu Muhammad (date of birth: August 2, 1990; address: No. 45 Abimbola Street, off Capital Road, Morcas Agege, Lagos State, Nigeria; passport numbers A11904741 and A07422697). OFAC alleges Muhammad served as a financial facilitator for ISIS in West Africa (ISIS-WA) and that these three bureaux de change were used as conduits for moving ISIS-linked funds. The businesses are now on the U.S. Specially Designated Nationals (SDN) list alongside Muhammad. No specific transaction volumes or cryptocurrency types processed by these Nigerian entities were publicly disclosed in the Treasury press release or accompanying analytical reports.","heading":"Nigerian Bureaux de Change: Nine to Nine, Manhattan Bureau, Generation Currency","severity":"critical","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"Nigerian Mukhtar Muhammad, three Lagos firms hit in U.S. ISIS funding sweep — P.M. News Nigeria","type":"news_article","url":"https://pmnewsnigeria.com/2026/06/23/nigerian-mukhtar-muhammad-three-lagos-firms-hit-in-u-s-isis-funding-sweep/"},{"credibility":2,"name":"US Sanctions Three Nigeria-Based Firms, Nigerian National For Allegedly Financing ISIS Network — Sahara Reporters","type":"news_article","url":"https://saharareporters.com/2026/06/24/us-sanctions-three-nigeria-based-firms-nigerian-national-allegedly-financing-isis"},{"credibility":2,"name":"US Releases Actual Locations of Bureau De Change in Nigeria Used in Financing Terrorism — Legit.ng","type":"news_article","url":"https://www.legit.ng/world/1715918-us-releases-fresh-list-bureau-de-change-nigeria-financing-terrorism-location/"}]},{"content":"Spider Gayrimenkul Ve Genel Ticaret Limited Sirketi (trading as 'Spider') originated as a hawala operation in Syria, where it was used to transfer money from parts of Syria under ISIS control to other regions not controlled by ISIS. Spider subsequently relocated operations to Turkey. Alkaram Danismanlik Gayrimenkul Ic Ve Dis Genel Ticaret Limited Sirketi (trading as 'Alkaram') operates as a front company for Spider. Both entities are owned and controlled by Mohamad Alhmidan, who was previously designated by OFAC in March 2016 for facilitating logistical and financial support for ISIS, including supporting foreign terrorist fighters. The June 2026 designations of Spider and Alkaram represent an extension of Alhmidan's prior SDN designation to the corporate vehicles he allegedly established or repurposed for ISIS financial facilitation.","heading":"Turkey-Based Hawala Operators: Spider and Alkaram","severity":"critical","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":1,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — GlobalSecurity.org (Treasury text mirror)","type":"regulatory","url":"https://www.globalsecurity.org/security/library/news/2026/06/sec-260622-treasury01.htm"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"}]},{"content":"According to TRM Labs analysis, the broader ISIS financing network operated through layered infrastructure: ISIS-affiliated Telegram channels circulated cryptocurrency donation campaigns; Syria-based exchangers such as Bitcoin Xchange received cryptocurrency and converted it to cash, charging commissions of 2–5%; and funds were distributed to ISIS-linked displacement camp ecosystems including al-Hol and Roj in Syria. The Nigerian bureaux de change and Turkish hawala operators served as the cash-out and value-transfer rails connecting ISIS supporters in Europe (France, Belgium, the Netherlands, Norway) and Africa (South Africa, Nigeria) to ISIS affiliates in Syria and West Africa. TRM Labs identified exchanger-controlled addresses through address-reuse patterns spanning multiple ostensibly unrelated ISIS donation campaigns — different beneficiaries, posting accounts, and narratives — allowing analysts to cluster addresses under common operator control. Bitcoin Xchange, the Syria-based node in the same June 2026 action, allegedly processed approximately $10 million across hundreds of transactions linked to ISIS fundraising campaigns.","heading":"Network Structure and Cryptocurrency Methods","severity":"critical","sources":[{"credibility":2,"name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"}]},{"content":"OFAC publicly identified two TRON blockchain wallet addresses linked to Miloud Abderrahmane, the French national designated in the same action: TBXMiRqUp1XH1zLazWu8cWitMAScv4HsYq and TDFj8tYzfLDkwEMo4MJ2DfrbpMztuCCnan. Transfers from Abderrahmane's wallets allegedly went to wallets used in Syria- and Gaza-based donation campaigns. No on-chain wallet addresses were publicly disclosed for the five entities under review (Nine to Nine, Manhattan Bureau, Generation Currency, Spider, or Alkaram) in the Treasury press release or the analytical reports reviewed. The primary asset class associated with the broader network is TRON-based cryptocurrency, though Bitcoin and other assets are referenced in the context of Bitcoin Xchange's operations.","heading":"On-Chain Evidence and Identified Wallet Addresses","severity":"high","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"}]},{"content":"The June 2026 action reflects a geographically distributed network. The Nigerian bureaux de change are linked to ISIS-West Africa (ISIS-WA), the regional affiliate that has expanded operations across the Lake Chad Basin and broader West Africa. Mukhtar Adamu Muhammad's role as a financial facilitator for ISIS-WA places the Lagos-based bureaux de change at the intersection of the global ISIS financing network and its West African operational arm. The Turkish entities (Spider and Alkaram) bridge the Syria-based core of ISIS with its diaspora financial supporters in Europe. Nigerian press outlets reported that U.S. authorities disclosed specific physical addresses of the bureaux de change within Nigeria, though those addresses were not independently verified in this investigation.","heading":"Geographic Reach and ISIS-WA Connection","severity":"high","sources":[{"credibility":2,"name":"US discloses actual locations of Nigeria's Bureau De Change used in terrorism financing — Escrowhold","type":"news_article","url":"https://www.escrowhold.com/us-discloses-actual-locations-of-nigerias-bureau-de-change-used-in-terrorism-financing/"},{"credibility":2,"name":"U.S. Treasury sanctions ISIS financial facilitators across Europe, Middle East and West Africa — Traders Union","type":"news_article","url":"https://tradersunion.com/news/financial-news/show/2443938-us-treasury-sanctions-isis-financiers/"},{"credibility":2,"name":"Fresh US Sanctions Hit Nigeria-Linked ISIS Funding Network — News Central TV","type":"news_article","url":"https://newscentraltv.com/fresh-us-sanctions-hit-nigeria-linked-isis-funding-network/"}]},{"content":"The owner of Spider and Alkaram, Mohamad Alhmidan, was first designated by OFAC in March 2016 for facilitating logistical and financial support for ISIS, including support for foreign terrorist fighters traveling to join the group. The June 2026 action designating Spider and Alkaram extends the sanctions perimeter to the corporate entities Alhmidan allegedly operates or controls. The pattern of designating an individual and subsequently designating their associated corporate vehicles is consistent with OFAC's counter-terrorism enforcement methodology.","heading":"Prior Designation of Mohamad Alhmidan","severity":"critical","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"}]},{"content":"All five entities are now on the U.S. SDN list. Any U.S. person or financial institution that transacts with these entities risks secondary sanctions exposure and potential civil or criminal liability. Cryptocurrency exchanges operating in the United States or serving U.S. persons are required to screen counterparties against the SDN list and must block or reject transactions involving these entities. The identification of TRON wallet addresses in the associated designation underscores OFAC's increasing focus on on-chain traceability. Compliance teams at virtual asset service providers (VASPs), banks, and money service businesses should treat any counterparty linked to these entities as a high-risk relationship requiring enhanced due diligence or rejection.","heading":"Regulatory Consequences and Compliance Implications","severity":"critical","sources":[{"credibility":2,"name":"US Department Of Treasury Targets Crypto-Enabled Networks Supporting ISIS In June 2026 Sanctions — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/06/287193-us-department-of-treasury-targets-crypto-enabled-networks-supporting-isis-in-june-2026-sanctions/"},{"credibility":2,"name":"OFAC Sanctions ISIS Operators for Financing Terror Group with Crypto — FINCHANNEL","type":"news_article","url":"https://finchannel.com/ofac-sanctions-isis-operators-for-financing-terror-group-with-crypto/131854/crime/2026/06/"}]}],"sources_used":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":1,"name":"Treasury Targets ISIS Facilitators — GlobalSecurity.org (Treasury text mirror)","type":"regulatory","url":"https://www.globalsecurity.org/security/library/news/2026/06/sec-260622-treasury01.htm"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — The Defiant","type":"news_article","url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis"},{"credibility":2,"name":"US Department Of Treasury Targets Crypto-Enabled Networks Supporting ISIS In June 2026 Sanctions — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/06/287193-us-department-of-treasury-targets-crypto-enabled-networks-supporting-isis-in-june-2026-sanctions/"},{"credibility":2,"name":"Nigerian Mukhtar Muhammad, three Lagos firms hit in U.S. ISIS funding sweep — P.M. News Nigeria","type":"news_article","url":"https://pmnewsnigeria.com/2026/06/23/nigerian-mukhtar-muhammad-three-lagos-firms-hit-in-u-s-isis-funding-sweep/"},{"credibility":2,"name":"US Sanctions Three Nigeria-Based Firms, Nigerian National For Allegedly Financing ISIS Network — Sahara Reporters","type":"news_article","url":"https://saharareporters.com/2026/06/24/us-sanctions-three-nigeria-based-firms-nigerian-national-allegedly-financing-isis"},{"credibility":2,"name":"OFAC Sanctions ISIS Operators for Financing Terror Group with Crypto — FINCHANNEL","type":"news_article","url":"https://finchannel.com/ofac-sanctions-isis-operators-for-financing-terror-group-with-crypto/131854/crime/2026/06/"},{"credibility":2,"name":"U.S. Treasury sanctions ISIS financial facilitators across Europe, Middle East and West Africa — Traders Union","type":"news_article","url":"https://tradersunion.com/news/financial-news/show/2443938-us-treasury-sanctions-isis-financiers/"},{"credibility":2,"name":"US Releases Actual Locations of Bureau De Change in Nigeria Used in Financing Terrorism — Legit.ng","type":"news_article","url":"https://www.legit.ng/world/1715918-us-releases-fresh-list-bureau-de-change-nigeria-financing-terrorism-location/"},{"credibility":2,"name":"Fresh US Sanctions Hit Nigeria-Linked ISIS Funding Network — News Central TV","type":"news_article","url":"https://newscentraltv.com/fresh-us-sanctions-hit-nigeria-linked-isis-funding-network/"},{"credibility":2,"name":"US discloses actual locations of Nigeria's Bureau De Change used in terrorism financing — Escrowhold","type":"news_article","url":"https://www.escrowhold.com/us-discloses-actual-locations-of-nigerias-bureau-de-change-used-in-terrorism-financing/"},{"credibility":2,"name":"U.S. sanctions expose terror financing amid growing security threats — The Guardian Nigeria","type":"news_article","url":"https://guardian.ng/featured/u-s-sanctions-expose-terror-financing-amid-growing-security-threats/"}],"summary":"On June 22, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) designated five entities as nodes in an ISIS cryptocurrency financing network: three Nigerian bureaux de change (Nine to Nine Exchange Bureau de Change Limited, Manhattan Bureau de Change Limited, and Generation Currency Bureau de Change Limited), each owned and controlled by Mukhtar Adamu Muhammad, an alleged ISIS-West Africa financial facilitator based in Lagos; and two Turkey-based money service businesses (Spider Gayrimenkul Ve Genel Ticaret Limited Sirketi and Alkaram Danismanlik Gayrimenkul Ic Ve Dis Genel Ticaret Limited Sirketi), both owned and controlled by Mohamad Alhmidan, who was previously designated by OFAC in March 2016. These entities allegedly served as the cash-conversion and hawala infrastructure through which ISIS supporters across Europe, the Middle East, and Africa routed cryptocurrency to the Islamic State.","timeline":[{"date":"2016-03-01","event":"OFAC first designates Mohamad Alhmidan for facilitating logistical and financial support for ISIS, including supporting foreign terrorist fighters.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2020-01-01","event":"Bitcoin Xchange, a Syria-based money service business linked to a separate node in the ISIS financing network, is established in late 2020 according to TRM Labs analysis.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"date":"2026-06-22","event":"OFAC designates three individuals (Miloud Abderrahmane, Abdelhakim Boukich, Mukhtar Adamu Muhammad) and six entities (Nine to Nine Exchange Bureau de Change, Manhattan Bureau de Change, Generation Currency Bureau de Change, Spider, Alkaram, Bitcoin Xchange) under Executive Order 13224 for materially supporting ISIS. Two TRON wallet addresses linked to Abderrahmane are added to the SDN list.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2026-06-23","event":"Nigerian press outlets report the physical addresses of the three Lagos-based bureaux de change disclosed by U.S. authorities.","source":"P.M. News Nigeria","source_url":"https://pmnewsnigeria.com/2026/06/23/nigerian-mukhtar-muhammad-three-lagos-firms-hit-in-u-s-isis-funding-sweep/"},{"date":"2026-06-24","event":"Chainalysis, TRM Labs, and multiple crypto and general news outlets publish analyses of the June 22 designations, detailing on-chain methodology used to identify ISIS-linked exchanger clusters.","source":"Chainalysis / TRM Labs","source_url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0318cf5c-e093-49cb-ad63-4591fbf755d3copy