Data Analytic Investments
RIPPLE book coverRIPPLE — the book·numbered first edition·$9.99Buy now
Research

61 million dollars in crypto, 1.5 billion in oil money: what the SDNY forfeiture complaint alleges about the Iranian route through Binance accounts — and what it does not

On 14 September 2026 the US Attorney's Office for the Southern District of New York filed a civil forfeiture complaint for about 61 million dollars in cryptocurrency. The allegation: two Chinese companies converted black-market Iranian oil proceeds into crypto through accounts at Binance, and a web of unhosted wallets moved more than 1.5 billion dollars onward to IRGC-linked services. The mechanism as the complaint describes it, the officials' words, and the caveat that none of it is yet proven. Sourced.

D
DAI Research Desk
6 min read
61 million dollars in crypto, 1.5 billion in oil money: what the SDNY forfeiture complaint alleges about the Iranian route through Binance accounts — and what it does not

A civil forfeiture complaint is a document about property, not about people. It asks a court to declare that a specific pile of money was involved in a crime and belongs to the United States. It does not charge anyone. That distinction shapes everything else in the filing announced on 14 September 2026 by the US Attorney's Office for the Southern District of New York, which seeks about 61 million dollars in cryptocurrency that it says came from black-market sales of Iranian oil. This article records the mechanism the complaint describes, the figures it gives, and what a filing of this kind can and cannot establish.

🎧 Audio edition — the full article read aloud, 8 minutes, MP3: doj-iran-61m-forfeiture-2026-09-audio-EN.mp3

The headline figures

The release is titled "U.S. Attorney Seeks Forfeiture Of $61 Million In Cryptocurrency From The Iranian Military's Black-Market Oil Sales". Two numbers carry the story. The first is the 61 million dollars in cryptocurrency that has been seized and is now the subject of the forfeiture action. The second is larger: the complaint alleges that the wider network laundered more than 1.5 billion dollars in illicit oil proceeds. The 61 million is what the government has its hands on; the 1.5 billion is what it says flowed through.

The mechanism, as the complaint describes it

The route has three stages in the government's account. First, two Chinese companies, named in the release as Blessed Trust and Hexa Whale, operated trading accounts at Binance, described as UAE-based, and used them to convert the proceeds of Iranian oil sold outside sanctions into cryptocurrency. The release says they provided "on-ramp" services using US-based cryptocurrency issuers, which is the government's way of saying the conversion ran through dollar-denominated stablecoins issued by American companies.

Second, the funds moved to a series of interconnected unhosted wallet addresses that the complaint groups under a single label, "Entity A". Unhosted means the private keys were held by the users themselves, not by an exchange. Third, from Entity A the money was distributed, the complaint says, to money-services businesses connected to the Islamic Revolutionary Guard Corps, to IRGC addresses directly, and to Iranian cryptocurrency exchanges.

For readers new to the vocabulary, the difference between a hosted exchange account and an unhosted wallet is the difference between money held at a bank and cash held at home; the tracing methods differ accordingly. The basic terms are introduced on our Kripto Akadémia page, and the RIPPLE book documents, case by case, how enforcement actions have shaped one company's decade.

What the officials said

Deputy US Attorney Sean S. Buckley: "Today's action demonstrates our determination to deprive the Government of Iran and its terrorist proxies of the illegal money they rely on." FBI Assistant Director James C. Barnacle, Jr.: "Today's complaint demonstrates the FBI's ability to follow the money, root out illicit schemes, and halt the stream of cryptocurrency." The quoted government sentence that summarises the case reads: "As alleged in the complaint filed today, the Government of Iran used a network of cryptocurrency actors in China and elsewhere to launder more than $1.5 billion in illicit oil money intended to benefit the Iranian military and the terror-designated IRGC."

The exchange's role, as far as the documents go

The Wall Street Journal, reporting on the filing late on Monday, framed it as a disclosure of Binance's role and noted that around 1.5 billion dollars was sent back to Iran through a series of interrelated digital wallets. It is worth being exact about what the public release does and does not say. It names Binance as the venue where the two Chinese companies held trading accounts. It does not, in the material we read, allege that the exchange itself was a knowing participant, and the action is against the cryptocurrency, not against the exchange. Whether the complaint's full text goes further is something we have not verified; we record the release as written.

A related point: the same office filed a second set of civil forfeiture complaints, reported by the FBI's New York field office, against more than 15.3 million dollars allegedly used to fund an Iranian oil distribution network. The relationship between the two filings, and whether the 15.3 million is part of or separate from the 61 million, is not stated in the material we read and is marked here as not verified.

Why the stablecoin detail matters

The phrase "U.S.-based cryptocurrency issuers" is the technical hinge of the case. Dollar stablecoins are issued by companies that can freeze tokens at specific addresses when a court or a sanctions authority requires it. That is how a seizure of on-chain funds becomes possible at all: the government does not need the private keys if the issuer can freeze and reissue. Earlier this year, in July, US authorities said they had frozen Iran-linked crypto held mostly in a dollar stablecoin. The current complaint is the formal step that turns a freeze into a forfeiture claim.

For the broader market this is a compliance story more than a price story. Sourced, real-time market data for the assets involved is on our Market Observation page; the case itself will be decided on documents, not on charts. Our Analyst Room course page describes what that material covers, and yesterday's piece on Kaiko's institutional data round shows the other side of the same trend: the demand for exactly this kind of traceability.

What the complaint does not establish

The release's own caveat is the right place to end: "A civil forfeiture complaint is merely an allegation that money or property was involved in or represents the proceeds of a crime. These allegations are not proven until a court awards a judgment in favor of the United States." No individual has been charged in the material we read. The 1.5 billion figure is an allegation about flows, not a seized amount. And the on-chain attribution, from named companies to "Entity A" to IRGC-linked recipients, is the government's analysis, which the owners of the funds are entitled to contest.

Sources

Educational content. Not investment advice. Data Analytic Investments Kft. is an educational and market-information provider; it is not a crypto-asset service provider and does not offer investment recommendations.

Explore Topics

#civil forfeiture#Iran#IRGC#Binance#sanctions#stablecoins#DOJ#SDNY#on-chain tracing
D

Written by

DAI Research Desk

Content creator and writer sharing insights and stories.

Share · Megosztás:XFacebookLinkedInWhatsAppTelegramE-mail

Related Research

OFAC designates BitBank: what the 17 September Treasury release says about bitcoin, the IRGC and the Strait of Hormuz, and what it does not
Research

OFAC designates BitBank: what the 17 September Treasury release says about bitcoin, the IRGC and the Strait of Hormuz, and what it does not

On 17 September 2026 the US Treasury's Office of Foreign Assets Control designated the Iranian digital-asset exchange BitBank, its developer Pishtaz Simorgh and three individuals linked to the sanctioned financier Babak Zanjani. This article documents the release: the alleged bitcoin transfers to the IRGC, the Hormuz Safe link, the legal authority, and the limits of what the text establishes.

5 min readDAI Research Desk
#OFAC#sanctions#Iran
Two Robinhood engineers charged over pre-listing trades on Hyperliquid: what the two complaints say, token by token — and what they do not
Research

Two Robinhood engineers charged over pre-listing trades on Hyperliquid: what the two complaints say, token by token — and what they do not

On 15 September 2026 the US Attorney's Office for the Southern District of New York unsealed complaints against two Robinhood software engineers. The allegation: they bought perpetual futures on Hyperliquid before Robinhood announced new token listings, on at least ten occasions each, and each made more than 50,000 dollars. The tokens, the dates, the two counts, the maximum sentences, and what is still only an accusation. Sourced.

6 min readDAI Research Desk
#Robinhood#Hyperliquid#perpetual futures
Ripple Burns 15 Million RLUSD: What the Reports Say, What Ripple's Own Pages Say, and What Nobody Has Shown Yet
Research

Ripple Burns 15 Million RLUSD: What the Reports Say, What Ripple's Own Pages Say, and What Nobody Has Shown Yet

On 10 September 2026 two crypto news sites reported that 15 million RLUSD were sent from the stablecoin's treasury to the Ethereum null address. This article separates the reported event from Ripple's own documentation, adds the four other Ripple and XRP items of the same 24 hours, and lists what is still missing — starting with a transaction hash.

6 min readDAI Research Desk
#RLUSD#Ripple#XRP