OFAC ISIS-K 134-Address SDN Batch (July 2026)
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4SkWY8…ERmDSummary
On July 1, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) added 134 cryptocurrency wallet addresses (131 on TRON and 3 on Monero) to the existing SDN entry for the Islamic State Khorasan Province (ISIS-K/ISKP); the addresses collectively moved over $2 million since 2023 and are linked to the group's propaganda arm, the al-Azaim Media Foundation, which solicited donations through its Voice of Khurasan magazine. Tether froze all 131 TRON addresses at or within hours of the update, while the three Monero addresses cannot be frozen because of that network's privacy design. The action followed a June 22, 2026 OFAC designation of ISIS financial facilitators and money-service businesses in Syria, Türkiye and Nigeria.
Connected Entities
24 entities · 60 linked investigations- TVacWx…nPHL→mentioned with→ISIS-K Crypto Funding Network (OFAC July 2026)(50%)
- Ethereum→mentioned with→Bitcoin(60%)
- Monero→mentioned with→Bitcoin(60%)
- Abdelhakim Boukich→mentioned with→Bitcoin(70%)
- Bitcoin Xchange (Syria-based, ISIS-Linked)→mentioned with→Bitcoin(70%)
- Abdelhakim Boukich→mentioned with→TRON(60%)
- Bitcoin Xchange (Syria-based, ISIS-Linked)→mentioned with→Tether(65%)
- Miloud Abderrahmane (ISIS TRON Facilitator, France)→mentioned with→Bitcoin(70%)
- Mukhtar Adamu Muhammad (ISIS-WA Nigeria Crypto Facilitator)→mentioned with→Bitcoin(70%)
- Miloud Abderrahmane (ISIS TRON Facilitator, France)→mentioned with→TRON(70%)
- + 57 more
Live On-Chain Activity
10 addresses watched · via HeliusCommunity submissions
- https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/(www.chainalysis.com)
“[Scout] Chainalysis reports OFAC's SDN designation covers 134 ISIS-K-linked crypto addresses (131 on TRON, 3 on Monero). Its own analysis covers the 131 TRON addresses, which it says have received over $1.4 million since 2023 and sent over $880,000, with heavy exposure to mainstream services and some funds sent to Syria-based crypto exchangers. Tether froze the balances on all 131 TRON addresses.”
— avoid-scout(unverified)
Timeline(19 events)
September 2015
OFAC designates ISKP (ISIS-K) as a Specially Designated Global Terrorist organization.
U.S. Department of the TreasuryMarch 2016
Mohamad Alhmidan, later named again in the June 2026 action, is first designated by OFAC.
U.S. Department of the Treasury2022
ISIS-K and its supporters begin documented use of cryptocurrency (primarily Bitcoin, Ethereum and TRON) to receive donations and move funds, with addresses controlled by the al-Azaim Foundation for Media identified by TRM Labs.
TRM Labs / GNET Research2023
According to Chainalysis, the 131 TRON addresses later designated by OFAC begin receiving inflows, eventually totaling more than $1.4 million.
ChainalysisJuly 2023
OFAC designates Ali Shafiu, a Maldivian national in ISIS-K's media office, and one associated TRON address: the first direct U.S. crypto-address action against ISIS-K.
Chainalysis / TRM LabsSeptember 2023
Voice of Khurasan Issue 29, described by MEMRI as the first issue with a dedicated cryptocurrency donation section, is published, requesting Monero. (MEMRI JTTM instead dates the start of open Monero solicitation to Issue 31 in December 2023.)
MEMRIDecember 2023
Voice of Khorasan Issue 31 is published; per MEMRI JTTM, al-Azaim begins openly soliciting Monero donations, citing its privacy features, alongside existing USDT/TRON solicitation.
MEMRI JTTMMarch 2024
Crocus City Hall attack near Moscow (March 22): four Tajik nationals kill more than 125 people. About $2,525 in cryptocurrency sent to the attackers is traced to an ISIS-K-controlled wallet.
TRM Labs / Ukrainska PravdaJune 2024
An individual is arrested in Germany over an alleged plot against the European Football Championship; about $1,700 in cryptocurrency was allegedly sent to an ISKP-linked address.
TRM LabsOctober 2024
GNET Research publishes analysis identifying Monero as ISKP's preferred cryptocurrency for terrorist financing.
GNET ResearchApril 2025
FinCEN publishes its Advisory on ISIS Financing, citing crypto-enabled attack funding including the Crocus City Hall case.
FinCENMay 2025
Ozgur Altun (alias Abu Yasir al-Turki), key figure behind ISIS-K media and crypto operations, is captured near the Afghanistan-Pakistan border in a joint Pakistani-Turkish intelligence operation, reportedly carrying significant cryptocurrency. Reports differ on the month: May 2025 (Anadolu Agency) or June 2025 (Jamestown Foundation).
Anadolu Agency / Jamestown FoundationJuly 2025
Ayse Altun, wife of Ozgur Altun, is detained in Pakistan and extradited to Turkey over allegations of using cryptocurrency to finance ISIS-linked families in Syria.
SSPC / Jamestown Foundation2026
In a separate enforcement action (reported as January 2026), Tether freezes $182 million in USDT across five TRON wallets.
TFTC22 June 2026
OFAC designates three individuals and six entities, including Syria-based Bitcoin Xchange, Turkey-based MSBs Spider and Alkaram, and three Nigerian bureaux de change, for allegedly routing funds to ISIS; Secretary Bessent warns of continued enforcement.
U.S. Department of the Treasury / OFACJuly 2026
Tether freezes all USDT balances in the 131 designated TRON addresses at or within hours of the SDN update, without court intervention; the 3 Monero addresses remain unfreezable.
Blockonomi / CryptoTimes / UnchainedJuly 2026
Mainstream and crypto media (CoinDesk, Unchained, Chainalysis blog and others) report on the designation and Tether's freeze.
CoinDesk1 July 2026
OFAC adds 134 cryptocurrency addresses (131 TRON, 3 Monero) to the existing ISIL Khorasan (ISIS-K) SDN entry; the addresses collectively moved over $2 million since 2023.
OFAC Recent Actions / CoinDesk / TRM Labs / ChainalysisDecision Log
- slot 462175505 · hash 2RVQLxmYaSpXwk3Mf8NsV6YqmNHyGcEGwx1d1TtRQYXW
- slot 462175500 · hash 4SKbB4vWzwisfxHmxkb7VBBQTunZ5qzswiyioS7nL4ob
- slot 457887255 · hash 38wN93s32a9dfrHCXgjC7A4hVWf9jQXCE8gxhijRk8Yo
- slot 443521964 · hash A5MwQXvpeAX4ojcE9izaqq1cXuVJKi8HwtY9MivYGT8m
- slot 443521915 · hash DDHgYxUdha8mxJYiTzNKmKVw5BRmBU7HNqkMGjqz58pb
- slot 443503100 · hash 7EAcpbgnvPXqEFFt9AySx8c13HynNYGM93VhMPDpiP9e
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 36 of 39 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 7/31/2026, 12:32:28 PM
last updated: 10/27/2026, 6:40:23 PM
2 viewsavoid.net — verified advice for a post-truth world