Audit log

Every state-changing event for OFAC ISIS-K 134-Address SDN Batch (July 2026): moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-07-31 12:32:38Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   7EAcpbgnvPXq…MPDpiP9ecopysha256 → base58

   verifying row…

   canonical bytes (27658 B) ▸

   {"actor":"system:backfill","investigation_id":"cc3a88d5-1ffa-41bd-b385-ee5e1f6acec5","kind":"publish","page_slug":"ofac-isis-k-134-address-sdn-batch-july-2026","published_at":"2026-07-31T12:32:38.343Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"OFAC ISIS-K 134-Address SDN Batch (July 2026)","sections":[{"content":"OFAC updated its existing designation of ISIL-Khorasan (ISIS-K), a U.S.-designated Foreign Terrorist Organization, on July 1, 2026, adding 134 digital currency addresses as new identifiers under Executive Order 13224. The action did not designate new individuals or legal entities but instead expanded the wallet-level footprint of an existing SDN entry. This marked the second instance of OFAC directly targeting ISIS-K crypto operations through direct address designation. The prior direct designation occurred in July 2023, when OFAC added cryptocurrency address identifiers in connection with Ali Shafiu, a Maldivian national and ISIS-K media office member. The July 2026 batch represents a significant escalation in scope, with 134 addresses compared to the single address included in 2023.","heading":"Regulatory Action and Designation","severity":"critical","sources":[{"credibility":2,"name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"regulatory","url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"credibility":2,"name":"U.S. Treasury Sanctions 134 Crypto Wallets Linked to ISIS-K Terror Network — Blockonomi","type":"news_article","url":"https://blockonomi.com/u-s-treasury-sanctions-134-crypto-wallets-linked-to-isis-k-terror-network"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Crypto Wallets, Tether Freezes Funds — Eastern Herald","type":"news_article","url":"https://easternherald.com/2026/07/02/ofac-isis-k-crypto-sanctions-tether-freeze-2026/"}]},{"content":"The 134 newly designated addresses consist of 131 wallets on the TRON (TRX) blockchain and 3 wallets on the Monero (XMR) network. The TRON addresses primarily held USDT (Tether), a centralized stablecoin operating via a TRC-20 smart contract. The 131 TRON wallets collectively received more than $1.4 million in inflows since 2023, and sent over $880,000 onward in outflows. Individual transaction sizes ranged from approximately $10 to $15,000. Outbound flows included transfers to crypto exchangers based in Syria, as identified by on-chain analytics. The three Monero addresses were included in the SDN listing but cannot be frozen at the protocol level, as Monero has no central issuer and employs ring signatures, stealth addresses, and RingCT to obscure transaction trails. No Bitcoin addresses were included in this batch.","heading":"Designated Addresses: Scope and Blockchain Breakdown","severity":"critical","sources":[{"credibility":2,"name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"},{"credibility":1,"name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action"}]},{"content":"The designated addresses are linked to the al-Azaim Foundation for Media (AFM), ISIS-K's official propaganda arm and the publisher of Voice of Khurasan (VoK), a multilingual magazine distributed to a global supporter base via Telegram and other platforms. Beginning with Issue 29 in September 2023, Voice of Khurasan began soliciting cryptocurrency donations — initially exclusively in Monero — in a dedicated section that framed contributions as religious charity (sadaqah). Subsequent issues expanded solicitations to include TRON-based USDT. The magazine claimed that a single donation token could purchase two pistols, 200 bullets, or sustain a mujahid's family, according to analysis by the Middle East Media Research Institute (MEMRI). The al-Azaim Foundation operated fundraising through multiple ISIS-K subgroup channels, lending the network resilience against takedowns of any single node.","heading":"al-Azaim Media Foundation and Propaganda-Driven Fundraising","severity":"critical","sources":[{"credibility":2,"name":"ISKP-Linked English Magazine 'Voice of Khurasan' Solicits Donations Via Monero Cryptocurrency — MEMRI","type":"research","url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations"},{"credibility":2,"name":"Newest Issue of ISKP-Linked English Magazine Continues to Solicit Donations in Cryptocurrency — MEMRI","type":"research","url":"https://www.memri.org/cjlab/newest-issue-iskp-linked-english-magazine-voice-khurasan-continues-solicit-donations"},{"credibility":2,"name":"Sadaqah Jariyah: The Thriving Cryptocurrency Fundraising Efforts Behind ISKP's Official Media — GNET","type":"research","url":"https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/"},{"credibility":2,"name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"}]},{"content":"Tether Limited, the issuer of USDT, froze the token balances held in all 131 designated TRON addresses at the moment the SDN list update was published on July 1, 2026. Tether executed the freeze using a built-in blacklist function in the USDT TRC-20 smart contract, which allows the company to unilaterally block transfers from specific addresses without any judicial process at the wallet level. The action required no court order and was completed without delay, demonstrating the real-time compliance capacity of centralized stablecoin issuers. Analysts noted that this mechanism effectively means TRON-based USDT operates as a permissioned payment rail rather than a censorship-resistant bearer asset. In a prior related action in January 2026, Tether had frozen $182 million in USDT across five TRON wallets in a separate enforcement context. The three Monero addresses named in the July 2026 SDN batch cannot be subject to equivalent enforcement, as Monero's protocol has no central issuer or freeze mechanism.","heading":"Tether's Enforcement Response and TRON Stablecoin Compliance","severity":"high","sources":[{"credibility":2,"name":"Tether Freezes 131 TRON Wallets OFAC Sanctioned Over ISIS-K — CoinLaw","type":"news_article","url":"https://coinlaw.io/tether-freezes-131-tron-wallets-ofac-isis-k/"},{"credibility":2,"name":"Tether Freezes ISIS-K Tron Wallets: Stablecoin Compliance Just Got Very Real — CryptoDaily","type":"news_article","url":"https://cryptodaily.co.uk/2026/07/tether-freezes-isis-k-tron-wallets"},{"credibility":2,"name":"Tether Freezes 131 Tron Wallets Tied to ISIS-K After US Sanctions — Unchained","type":"news_article","url":"https://unchainedcrypto.com/tether-freezes-over-130-tron-wallets-tied-to-terror-group/"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"}]},{"content":"On-chain analysis by Nominis mapped the broader network beyond the 134 designated addresses. According to that analysis, 80 to 90 percent of funds leaving the sanctioned addresses moved into deposit addresses that were not included in the SDN designation, representing what Nominis characterized as the primary vulnerability in sanctions screening. One OTC desk connected to the network was assessed as handling approximately $102,000 in flows, with connections to Turkey-based counterparties and links to prior terrorist financing cases. Mainstream crypto exchanges and regional exchangers — including Syria-based operators — served as exit points for outbound funds. Chainalysis noted that the network reflected ISIS-K's use of TRON for speed and low fees, combined with Monero for privacy, representing a deliberate dual-rail fundraising strategy. The Rise of Monero as ISKP's preferred privacy coin was documented by GNET Research as early as October 2024.","heading":"Network Architecture and Off-Ramp Analysis","severity":"critical","sources":[{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Wallets: NOMINIS Maps the Wider Network","type":"research","url":"https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network"},{"credibility":2,"name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/"},{"credibility":2,"name":"Blockchain Analytics Firm Chainalysis Analyzes OFAC's Expansion of ISIS-K Crypto Sanctions — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/"}]},{"content":"Ozgur Altun, also known by the alias Abu Yasir al-Turki, was identified as the key individual behind ISIS-K's media and cryptocurrency operations prior to his capture. A joint Pakistani and Turkish intelligence operation apprehended Altun near the Afghanistan-Pakistan border in May or June 2025. He was described as the highest-ranking Turkish member of ISIS and played a central role in the group's propaganda distribution and financial logistics networks. Reporting indicated that Altun was in possession of a significant amount of cryptocurrency at the time of his capture. His wife, Ayse Altun, was separately accused of using cryptocurrency to facilitate financing for ISIS-affiliated families in Syria. Following Altun's arrest, ISIS-K's online users reportedly circulated precautionary guidance about digital operational security, though the group's fundraising infrastructure — decentralized across multiple subgroups — remained resilient.","heading":"Key Individuals: Ozgur Altun (Abu Yasir al-Turki)","severity":"high","sources":[{"credibility":2,"name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"news_article","url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"credibility":2,"name":"Turkish ISKP Regional Leader's Arrest Sets Back Operations — Militant Wire","type":"news_article","url":"https://www.militantwire.com/p/turkish-iskp-regional-leaders-arrest"},{"credibility":2,"name":"Top ISIS Operative Captured in Joint Turkish-Pakistani Intelligence Operation — Anadolu Agency","type":"news_article","url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851"}]},{"content":"On June 22, 2026, OFAC separately designated three individuals and six entities for facilitating ISIS financial operations through crypto and informal money networks — a distinct but contextually related action that preceded the July 1 ISIS-K wallet batch by nine days. Key entities designated in the June 2026 action included Bitcoin Xchange, a Syria-based money service business established in late 2020 by Abdelhakim Boukich, a former Dutch national; Spider Gayrimenkul Ve Genel Ticaret Limited Sirketi and Alkaram Danismanlik Gayrimenkul Ic Ve Dis Genel Ticaret Limited Sirketi, two Turkey-based money service businesses owned and controlled by Mohamad Alhmidan (previously sanctioned in March 2016); and three Nigeria-based exchange bureaus — Nine to Nine Exchange Bureau de Change Limited, Manhattan Bureau de Change Limited, and Generation Currency Bureau de Change Limited — linked to Mukhtar Adamu Muhammad, an ISIS West Africa facilitator. OFAC stated that Bitcoin Xchange and Boukich had transferred funds on behalf of ISIS associates originating from Norway, Belgium, the Netherlands, South Africa, and the United States. A third individual, Miloud Abderrahmane, a French national, was also designated in the June action.","heading":"Prior Related Enforcement: June 2026 ISIS Financial Facilitators Action","severity":"critical","sources":[{"credibility":1,"name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis Blog","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — The Defiant","type":"news_article","url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis"}]},{"content":"On-chain tracing by TRM Labs and investigative outlets linked wallets within the ISIS-K crypto network to real-world attacks. In the March 22, 2024 Crocus City Hall attack in Moscow, four Tajik nationals killed more than 125 people. According to reporting, ISIS-K transferred approximately $2,525 in cryptocurrency to the attackers in tranches — the first tranche of $550 was received shortly after a wallet was created, with subsequent tranches of $325, $550 (twice), and $1,100 transferred on the day of the attack between 07:20 and 18:55 UTC. TRM Labs reported tracing these funds from the attackers' wallet back to an ISKP-controlled wallet within hours of the attack. A separate June 2024 incident involved the arrest of an individual in Germany in connection with an alleged plot against the European Football Championship; that individual had allegedly transferred approximately $1,700 in cryptocurrency to an ISKP-linked address. These incidents are documented in the FinCEN April 2025 Advisory on ISIS Financing as illustrative cases of small-value, operationally directed crypto transfers.","heading":"Historical Attack Links: Crocus Hall and Euro 2024 Plot","severity":"critical","sources":[{"credibility":2,"name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"credibility":2,"name":"Media Outlets Find Crypto Wallet of ISIS Tajikistan Wing Used to Transfer Payment for Moscow Oblast Attack — Ukrainska Pravda","type":"news_article","url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/"},{"credibility":1,"name":"FinCEN Advisory on ISIS Financing (April 2025)","type":"regulatory","url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf"}]},{"content":"The inclusion of three Monero addresses in the July 2026 SDN batch highlights an acknowledged enforcement gap. Unlike TRON-based USDT — where Tether can execute near-instantaneous blacklisting — Monero's protocol employs ring signatures, stealth addresses, and RingCT (Ring Confidential Transactions) to obfuscate sender identities, receiver identities, and transaction amounts. There is no central issuer or protocol-level mechanism through which any authority can freeze a Monero balance. The SDN designation of Monero addresses serves a legal deterrence function — U.S. persons and entities are prohibited from transacting with the designated addresses — but the practical enforcement capacity against the addresses themselves is limited. GNET Research documented ISIS-K's deliberate adoption of Monero beginning in fall 2023 precisely because of these privacy properties, describing it as ISKP's preferred cryptocurrency for terrorist financing as of October 2024.","heading":"Monero Privacy Enforcement Gap","severity":"high","sources":[{"credibility":2,"name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"},{"credibility":2,"name":"Soliciting Terror: ISKP Digital Communications and Financing Tactics Through Voice of Khurasan — GNET Research","type":"research","url":"https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/"}]}],"sources_used":[{"credibility":2,"name":"OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"credibility":1,"name":"US Treasury sanctions over 100 ISIS-K crypto addresses — CoinDesk","type":"news_article","url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action"},{"credibility":2,"name":"OFAC Sanctions 100+ ISIS-K Crypto Addresses — Chainalysis Blog","type":"research","url":"https://www.chainalysis.com/blog/isis-designation-crypto-addresses-july-2026/"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Wallets: NOMINIS Maps the Wider Network","type":"research","url":"https://www.nominis.io/insights/ofac-sanctions-134-isis-k-wallets-nominis-maps-the-wider-network"},{"credibility":2,"name":"OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly — TFTC","type":"news_article","url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"},{"credibility":1,"name":"Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"OFAC Sanctions ISIS Financial Facilitators — Chainalysis Blog","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"Tether Freezes 131 TRON Wallets OFAC Sanctioned Over ISIS-K — CoinLaw","type":"news_article","url":"https://coinlaw.io/tether-freezes-131-tron-wallets-ofac-isis-k/"},{"credibility":2,"name":"Tether Freezes 131 Tron Wallets Tied to ISIS-K After US Sanctions — Unchained","type":"news_article","url":"https://unchainedcrypto.com/tether-freezes-over-130-tron-wallets-tied-to-terror-group/"},{"credibility":2,"name":"ISKP-Linked English Magazine 'Voice of Khurasan' Solicits Donations Via Monero Cryptocurrency — MEMRI","type":"research","url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations"},{"credibility":2,"name":"The Rise of Monero: ISKP's Preferred Cryptocurrency for Terror Financing — GNET Research","type":"research","url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/"},{"credibility":2,"name":"Sadaqah Jariyah: The Thriving Cryptocurrency Fundraising Efforts Behind ISKP's Official Media — GNET Research","type":"research","url":"https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/"},{"credibility":2,"name":"Soliciting Terror: ISKP Digital Communications and Financing Tactics Through Voice of Khurasan — GNET Research","type":"research","url":"https://gnet-research.org/2024/12/12/soliciting-terror-iskp-digital-communications-and-financing-tactics-through-voice-of-khurasan/"},{"credibility":2,"name":"Top ISIS Operative Captured in Joint Turkish-Pakistani Intelligence Operation — Anadolu Agency","type":"news_article","url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851"},{"credibility":2,"name":"Turkish ISKP Regional Leader's Arrest Sets Back Operations — Militant Wire","type":"news_article","url":"https://www.militantwire.com/p/turkish-iskp-regional-leaders-arrest"},{"credibility":2,"name":"Media Outlets Find Crypto Wallet of ISIS Tajikistan Wing Used to Transfer Payment for Moscow Oblast Attack — Ukrainska Pravda","type":"news_article","url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/"},{"credibility":1,"name":"FinCEN Advisory on ISIS Financing (April 2025)","type":"regulatory","url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — The Defiant","type":"news_article","url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis"},{"credibility":2,"name":"Blockchain Analytics Firm Chainalysis Analyzes OFAC's Expansion of ISIS-K Crypto Sanctions — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/288998-blockchain-analytics-firm-chainalysis-analyzes-ofacs-expansion-of-isis-k-crypto-sanctions/"},{"credibility":2,"name":"U.S. Treasury Sanctions 134 Crypto Wallets Linked to ISIS-K Terror Network — Blockonomi","type":"news_article","url":"https://blockonomi.com/u-s-treasury-sanctions-134-crypto-wallets-linked-to-isis-k-terror-network"}],"summary":"On July 1, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its Specially Designated Nationals (SDN) listing for the Islamic State Khorasan Province (ISKP/ISIS-K) by adding 134 cryptocurrency wallet addresses — 131 on the TRON blockchain and 3 on the Monero network — that collectively moved over $2 million in alleged terrorist financing funds since 2023. Tether, the issuer of USDT, froze all 131 TRON-based addresses within hours of the SDN update using its TRC-20 contract blacklist function, while the three Monero addresses remain technically unenforceable due to Monero's privacy architecture and lack of a central issuer. The action forms part of a broader U.S. government campaign in mid-2026 targeting ISIS crypto financing infrastructure across multiple continents.","timeline":[{"date":"2015-09-01","event":"OFAC designates ISKP (ISIS-K) as a Specially Designated Global Terrorist organization.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2022-01-01","event":"ISIS-K and its supporters begin raising and moving funds on-chain, per on-chain analytics documentation.","source":"GNET Research / TRM Labs","source_url":"https://gnet-research.org/2025/03/14/sadaqah-jariyah-the-thriving-cryptocurrency-fundraising-efforts-behind-iskps-official-media/"},{"date":"2023-07-01","event":"OFAC first directly designates a cryptocurrency address tied to ISIS-K, connected to Maldivian national Ali Shafiu and ISKP's media office.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2023-09-01","event":"Voice of Khurasan Issue 29 — the first issue to include a dedicated cryptocurrency donation solicitation — published, requesting Monero donations.","source":"MEMRI","source_url":"https://www.memri.org/cjlab/english-magazine-voice-khurasan-linked-islamic-state-khurasan-province-iskp-solicits-donations"},{"date":"2023-01-01","event":"ISKP financier arrested in Istanbul, per TRM Labs reporting.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2024-03-22","event":"Crocus City Hall attack in Moscow: four Tajik nationals kill 125+ people. Approximately $2,525 in cryptocurrency traced to ISIS-K-controlled wallet as attack funding.","source":"TRM Labs / Ukrainska Pravda","source_url":"https://www.pravda.com.ua/eng/news/2024/03/29/7448665/"},{"date":"2024-06-01","event":"Individual arrested in Germany for alleged plot against the European Football Championship; approximately $1,700 in cryptocurrency allegedly transferred to an ISKP-linked address.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/ofac-sanctions-134-iskp-cryptocurrency-addresses-tied-to-usd-2-million-in-terrorist-financing"},{"date":"2024-10-04","event":"GNET Research publishes analysis identifying Monero as ISKP's preferred cryptocurrency for terrorist financing.","source":"GNET Research","source_url":"https://gnet-research.org/2024/10/04/the-rise-of-monero-iskps-preferred-cryptocurrency-for-terror-financing/"},{"date":"2025-04-01","event":"FinCEN publishes Advisory on ISIS Financing documenting crypto-enabled attack funding patterns including the Crocus Hall case.","source":"FinCEN","source_url":"https://www.fincen.gov/system/files/advisory/2025-04-01/FinCEN-Advisory-ISIS-508C.pdf"},{"date":"2025-05-01","event":"Ozgur Altun (Abu Yasir al-Turki), the key individual behind ISIS-K media and cryptocurrency operations, captured near the Afghanistan-Pakistan border in a joint Pakistani-Turkish intelligence operation. Significant cryptocurrency found in his possession.","source":"Anadolu Agency / TRM Labs","source_url":"https://www.aa.com.tr/en/turkiye/top-isis-operative-captured-in-joint-turkish-pakistani-intelligence-operation/3585851"},{"date":"2026-01-01","event":"Tether freezes $182+ million in USDT across five TRON wallets in a separate enforcement action, demonstrating the stablecoin's real-time sanctions compliance capacity.","source":"TFTC","source_url":"https://www.tftc.io/ofac-isis-k-crypto-addresses-tether-freeze-tron-sdn"},{"date":"2026-06-22","event":"OFAC designates three individuals and six entities for routing crypto to ISIS — including Syria-based Bitcoin Xchange and Turkey-based MSBs Spider and Alkaram — as part of a broader ISIS financial network disruption.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2026-07-01","event":"OFAC adds 134 cryptocurrency addresses (131 TRON, 3 Monero) to the existing ISIS-K SDN designation. The addresses collectively moved over $2 million since 2023. Tether simultaneously freezes all 131 TRON addresses.","source":"CoinDesk / TRM Labs / Chainalysis","source_url":"https://www.coindesk.com/policy/2026/07/02/us-treasury-sanctions-over-100-isis-k-crypto-addresses-in-latest-enforcement-action"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 62193d25-8934-40de-a41e-a4fd26383292copy