Verify a decision

{"actor":"system:backfill","investigation_id":"de767707-c9cc-4b3a-a429-cb1b084df0cc","kind":"publish","page_slug":"miloud-abderrahmane-isis-tron-facilitator-france","published_at":"2026-06-28T23:07:56.633Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Miloud Abderrahmane (ISIS TRON Facilitator, France)","sections":[{"content":"On June 22, 2026, OFAC designated Miloud Abderrahmane under section 1(b) of Executive Order 13224, as amended by Executive Order 13886, for having materially assisted, sponsored, or provided financial, material, or technological support for, or goods and services to or in support of, the Islamic State of Iraq and the Levant (ISIS/ISIL). He was designated alongside two other individuals — Abdelhakim Boukich (Syria) and Mukhtar Adamu Muhammad (Nigeria) — and six entities including Bitcoin Xchange (Syria), Spider and Alkaram (Turkey), and three Nigeria-based currency exchanges. The designation carries secondary sanctions risk for any persons or entities that transact with Abderrahmane or his identified wallet addresses.","heading":"OFAC Designation and Legal Basis","severity":"critical","sources":[{"credibility":1,"name":"U.S. Treasury Press Release: Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":1,"name":"OFAC Counter Terrorism Designations — June 22, 2026","type":"regulatory","url":"https://ofac.treasury.gov/recent-actions/20260622"}]},{"content":"Miloud Abderrahmane is a French national born in August 1992 (gender: male). He is also known by the alias 'GHAZI, Ibrahim' (alternatively reported as 'Ghazi Ibrahim'). He is listed as France-based on OFAC's SDN record. No further residential address or passport information has been published in open sources.","heading":"Identity and Personal Details","severity":"critical","sources":[{"credibility":1,"name":"OFAC Counter Terrorism Designations — June 22, 2026","type":"regulatory","url":"https://ofac.treasury.gov/recent-actions/20260622"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"}]},{"content":"According to OFAC, Abderrahmane conducted transactions with known ISIS affiliates, including individuals based in Syria, using the TRON (TRX) blockchain. OFAC published two TRON wallet addresses directly attributed to him: TBXMiRqUp1XH1zLazWu8cWitMAScv4HsYq and TDFj8tYzfLDkwEMo4MJ2DfrbpMztuCCnan. Both addresses are now blocked assets under U.S. sanctions law. On-chain intelligence firm Bitrace reported that one of the TRON addresses had exposure to ISIS-linked fundraising campaigns and that related predecessor addresses were frozen as early as March 28, 2024 by the Israeli National Bureau for Counter Terror Financing (NBCTF) under Administrative Seizure Order ASO 5/24 for links to terrorist financing. Despite earlier freezes, Bitrace noted that Abderrahmane allegedly adopted new addresses to continue fund activities after prior wallets were identified, and that multiple trading platforms failed to identify the continued sanctions risk.","heading":"Alleged Cryptocurrency Facilitation","severity":"critical","sources":[{"credibility":1,"name":"OFAC Counter Terrorism Designations — June 22, 2026","type":"regulatory","url":"https://ofac.treasury.gov/recent-actions/20260622"},{"credibility":2,"name":"TRM Labs: OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"Bitrace: U.S. OFAC Sanctions ISIS Crypto Financing Network — VASPs Must Stay Vigilant","type":"on_chain","url":"https://blog.bitrace.io/u-s-ofac-sanctions-isis-crypto-financing-network-vasps-must-stay-vigilant-against-sanctioned-fund-threats/"}]},{"content":"Beyond financial facilitation, OFAC's designation states that Abderrahmane also provided instructional and manufacturing information on explosives to ISIS supporters. This alleged dual role — combining cryptocurrency fund routing with operational/technical support — is noted by TRM Labs as an example of the frequent overlap between financial facilitation and direct operational support within these networks. No criminal charges or convictions in France or elsewhere had been reported in open sources as of the date of this investigation.","heading":"Alleged Operational Support: Explosives Instructions","severity":"critical","sources":[{"credibility":1,"name":"U.S. Treasury Press Release: Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"TRM Labs: OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"}]},{"content":"Abderrahmane's designation is part of a coordinated OFAC action targeting an ISIS financial infrastructure spanning Europe, the Middle East, and West Africa. Co-designees include Abdelhakim Boukich, a former Dutch national operating Bitcoin Xchange from Idlib, Syria, which transferred funds on behalf of ISIS associates from Norway, Belgium, the Netherlands, South Africa, and the United States. Two Turkish money service businesses — Spider Gayrimenkul ve Genel Ticaret and Alkaram Danismanlik Gayrimenkul — were also designated. In West Africa, Mukhtar Adamu Muhammad and three Lagos-based bureau de change firms were designated for links to ISIS's West Africa affiliate. The Chainalysis blog notes that the action targeted financial infrastructure helping individuals across Europe, the Middle East, and Africa move cryptocurrency to ISIS.","heading":"Broader ISIS Financing Network Context","severity":"high","sources":[{"credibility":1,"name":"U.S. Treasury Press Release: Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":2,"name":"Chainalysis: OFAC Sanctions ISIS Financial Facilitators","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"The Defiant: Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS","type":"news_article","url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis"}]},{"content":"The inclusion of specific TRON wallet addresses in an individual-level counterterrorism designation is notably rare. Most OFAC crypto-related actions target exchanges or custodians rather than publishing wallet addresses tied to a specific natural person. The two TRON addresses attributed to Abderrahmane are: TBXMiRqUp1XH1zLazWu8cWitMAScv4HsYq and TDFj8tYzfLDkwEMo4MJ2DfrbpMztuCCnan. Any U.S. person or entity — including virtual asset service providers (VASPs) globally subject to U.S. secondary sanctions risk — is prohibited from transacting with these addresses or with Abderrahmane. Bitrace advises VASPs to screen for these addresses and any cluster of addresses linked through the same on-chain pathways.","heading":"On-Chain Identifier Significance","severity":"critical","sources":[{"credibility":1,"name":"OFAC Counter Terrorism Designations — June 22, 2026","type":"regulatory","url":"https://ofac.treasury.gov/recent-actions/20260622"},{"credibility":2,"name":"Bitrace: U.S. OFAC Sanctions ISIS Crypto Financing Network — VASPs Must Stay Vigilant","type":"on_chain","url":"https://blog.bitrace.io/u-s-ofac-sanctions-isis-crypto-financing-network-vasps-must-stay-vigilant-against-sanctioned-fund-threats/"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"}]},{"content":"Bitrace's on-chain analysis found evidence of a pattern of sanctions evasion: prior addresses linked to Abderrahmane were frozen by Israel's NBCTF in March 2024, yet the actor allegedly continued financial activity by adopting new TRON wallet addresses. The two addresses published by OFAC in June 2026 are believed to be those replacement addresses. This pattern — where a sanctioned actor migrates to new wallets after prior addresses are frozen — presents a material compliance challenge for VASPs that rely on static blocklist screening rather than on-chain behavioral clustering.","heading":"Sanctions Compliance and Evasion Pattern","severity":"critical","sources":[{"credibility":2,"name":"Bitrace: U.S. OFAC Sanctions ISIS Crypto Financing Network — VASPs Must Stay Vigilant","type":"on_chain","url":"https://blog.bitrace.io/u-s-ofac-sanctions-isis-crypto-financing-network-vasps-must-stay-vigilant-against-sanctioned-fund-threats/"}]}],"sources_used":[{"credibility":1,"name":"U.S. Treasury Press Release: Treasury Targets ISIS Facilitators and Disrupts Terrorist Financial Networks","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0537"},{"credibility":1,"name":"OFAC Counter Terrorism Designations — June 22, 2026","type":"regulatory","url":"https://ofac.treasury.gov/recent-actions/20260622"},{"credibility":2,"name":"TRM Labs: OFAC Targets ISIS Crypto Financing Network, Including Bitcoin Xchange","type":"research","url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"},{"credibility":2,"name":"Chainalysis: OFAC Sanctions ISIS Financial Facilitators","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-isis-financial-facilitators-june-2026/"},{"credibility":2,"name":"Bitrace: U.S. OFAC Sanctions ISIS Crypto Financing Network — VASPs Must Stay Vigilant","type":"on_chain","url":"https://blog.bitrace.io/u-s-ofac-sanctions-isis-crypto-financing-network-vasps-must-stay-vigilant-against-sanctioned-fund-threats/"},{"credibility":2,"name":"The Defiant: Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS","type":"news_article","url":"https://thedefiant.io/news/regulation/treasury-sanctions-three-individuals-six-entities-routing-crypto-isis"},{"credibility":2,"name":"Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33048474/"}],"summary":"Miloud Abderrahmane is a French national designated by the U.S. Treasury's Office of Foreign Assets Control (OFAC) on June 22, 2026 under Executive Order 13224 for providing material support to ISIS, including routing TRON cryptocurrency to ISIS-affiliated individuals in Syria and elsewhere, and for allegedly providing explosive device manufacturing instructions to ISIS supporters. OFAC published two TRON wallet addresses directly tied to him on the Specially Designated Nationals (SDN) list, making this one of very few OFAC counterterrorism designations to include specific individual on-chain wallet identifiers rather than targeting an exchange or custodian.","timeline":[{"date":"2024-03-28","event":"The Israeli National Bureau for Counter Terror Financing (NBCTF) issued Administrative Seizure Order ASO 5/24, freezing TRON addresses allegedly linked to Abderrahmane for terrorist financing.","source":"Bitrace on-chain analysis","source_url":"https://blog.bitrace.io/u-s-ofac-sanctions-isis-crypto-financing-network-vasps-must-stay-vigilant-against-sanctioned-fund-threats/"},{"date":"2026-06-22","event":"OFAC designated Miloud Abderrahmane under Executive Order 13224 (as amended by EO 13886) for materially supporting ISIS through cryptocurrency transactions with ISIS affiliates in Syria and providing explosive device manufacturing instructions to ISIS supporters. Two TRON wallet addresses were added to the SDN list.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2026-06-22","event":"OFAC simultaneously designated five other entities/individuals in the same ISIS financial network action: Abdelhakim Boukich and Bitcoin Xchange (Syria), Spider and Alkaram (Turkey), Mukhtar Adamu Muhammad and three Nigeria-based currency exchanges.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0537"},{"date":"2026-06-22","event":"TRM Labs, Chainalysis, and Bitrace each published on-chain analysis and compliance guidance following the OFAC action targeting Abderrahmane and the broader ISIS crypto network.","source":"TRM Labs / Chainalysis / Bitrace","source_url":"https://www.trmlabs.com/resources/blog/ofac-targets-isis-crypto-financing-network-including-bitcoin-xchange"}]},"v":1}