Key Highlights
- U.S. Treasury designated 134 cryptocurrency addresses associated with ISIS-K, comprising 131 TRON network addresses and 3 Monero wallets
- These addresses processed incoming transactions exceeding $1.4 million and outgoing transfers surpassing $880,000 since 2023
- Tether immediately froze all 131 designated TRON wallet balances upon receiving the sanctions notification
- A concurrent enforcement action sanctioned two Brazilian individuals and four entities linked to PCC criminal organization for laundering more than $30 million through cryptocurrency
- Leading blockchain compliance platforms such as Chainalysis have incorporated the sanctioned addresses into their screening databases
On July 1, 2026, the United States Treasury Department’s Office of Foreign Assets Control (OFAC) expanded its Specially Designated Nationals list by adding 134 digital currency wallet addresses connected to ISIS-Khorasan, the terror organization’s branch operating in Afghanistan and Pakistan.
The designation encompasses 131 addresses operating on the TRON blockchain network alongside 3 Monero wallet addresses. In response to the sanctions announcement, Tether immediately took action by freezing the entire balance held across all 131 TRON-based addresses.
ISIS-K received its initial designation as a Specially Designated Terrorist Group back in September 2015. The organization maintains operations throughout Afghanistan, Pakistan, and portions of Central Asia, having orchestrated numerous attacks against civilian populations across multiple nations.
The terror group’s propaganda division, known as al-Azaim Media Foundation, has implemented cryptocurrency fundraising initiatives to generate financial support. These solicitation campaigns have surfaced across various websites and encrypted messaging applications, accepting donations in TRON, Monero, and Bitcoin.
Transaction Activity and Wallet Usage Patterns
The 131 TRON wallet addresses targeted in this enforcement measure accumulated incoming transfers totaling more than $1.4 million beginning in 2023. During the identical timeframe, these same addresses distributed outgoing payments exceeding $880,000.
Blockchain forensic analysis reveals the wallets maintained connections to established cryptocurrency platforms and services. Multiple addresses transmitted funds to Syria-based cryptocurrency exchange operators, based on data compiled by Chainalysis.
This action represents a continuation of OFAC’s ongoing efforts against ISIS-affiliated cryptocurrency operations. During 2023, the agency sanctioned an ISIS-K operative based in the Maldives whose TRON wallet infrastructure connected to Iranian cryptocurrency exchanges. Just last month, OFAC designated a network of Syrian money transmission businesses utilized for converting digital assets into cash for ISIS financial coordinators.
PCC Crime Syndicate Faces Sanctions
In a coordinated enforcement measure announced the same day, OFAC sanctioned two individuals holding Brazilian citizenship along with four corporate entities affiliated with Primeiro Comando da Capital, commonly referenced as PCC.
PCC operates as a transnational criminal syndicate headquartered in São Paulo with operational cells throughout the United States. According to OFAC’s findings, the organization processed more than $30 million in narcotics proceeds, utilizing cryptocurrency infrastructure to transfer funds from U.S. territory back to Brazil.
This marks OFAC’s third enforcement action directed at PCC. The organization initially received designation status in December 2021. An additional designation occurred in March 2024 focusing on an individual participant engaged in money laundering operations benefiting the syndicate.
The aggregate transaction volume across all 134 newly sanctioned cryptocurrency addresses surpasses $2 million, according to tracking data maintained by TRM Labs.
Blockchain compliance service providers including Chainalysis have confirmed the rapid integration of these flagged addresses into their surveillance systems, enabling financial institutions to identify and prevent exposure.
For virtual asset service providers and banking institutions, these designations mandate immediate implementation of updated sanctions filtering protocols and enhanced transaction surveillance mechanisms.


