A Reuters investigation published July 31, 2026 identified Shelbit, an over-the-counter crypto brokerage operating above a budget hotel in Dubai's Deira district, as the financial backbone of a sprawling ecosystem of illegal Iranian gambling platforms. Blockchain tracing shows at least $676 million in Shelbit-linked funds reached Binance. Of that total, $540 million moved after Dubai's Virtual Assets Regulatory Authority issued an enforcement action against Shelbit in 2025, a finding that means the brokerage continued operating for more than a year after regulators first intervened. VARA then issued a separate formal cease-and-desist order on July 24, 2026, citing unlicensed operation, KYC failures, and money laundering and terrorism financing concerns.

The U.S. Treasury said it is "aware of these allegations and taking them very seriously."

A No-Website Brokerage at the Center of a $4 Billion Flow

Shelbit had no public-facing platform. It functioned as a settlement layer for more than 2,000 Farsi-language gambling sites offering slots, blackjack, and roulette to Iranian users, a market where gambling is illegal. CoinDesk has characterized the network as the largest alleged Iranian sanctions-evasion scheme in the crypto era. Those sites were promoted through Iranian social media influencers, including Sasha Sobhani (3.7 million Instagram followers, based in Madrid) and Pooyan Mokhtari, both of whom were convicted in Iran in 2023. The exchange's operator, Siavash Kayvanpour, is an Iranian expatriate who was also convicted in Iran that year on gambling-related charges.

Researchers traced at least $125 million from Iran's sanctioned central bank, Bank Markazi, to Shelbit. Wallet flows also link the network to addresses the Israeli government has associated with the Islamic Revolutionary Guard Corps. John Wojcik, a TRM Labs analyst and former UN Office on Drugs and Crime investigator, called it "by far the biggest Iranian illegal gambling network ever discovered." Independent blockchain researcher Rich Sanders, in comments reported by TFTC and Outlook India, was more direct: "It's an IRGC operation, and that's plain as day."

The network relied primarily on USDT transferred on the Tron blockchain. Freshly mined bitcoin also entered the flow, a technique that exploits a gap in automated screening: coins with no custodial history are harder for real-time blockchain screening tools to flag as suspicious before they are exchanged. A state-linked bitcoin mining operation is also implicated in the network's infrastructure.

Binance Disputes Methodology, Confirms Account Freezes

Binance told Reuters that Shelbit "never held an account" on its platform and that accounts associated with the exchange "were investigated, frozen and reported to law enforcement where appropriate." The company did not dispute that it processed hundreds of millions of dollars for users connected to Shelbit but said an unnamed blockchain analytics firm did not classify those transactions as high risk. Binance also pointed to a reported 96.8 percent reduction in sanctions-related volume exposure between early 2024 and July 2025.

That record faces scrutiny. In November 2023, Binance settled with U.S. authorities for $4.3 billion, including $968 million paid specifically to OFAC for transactions involving users in Iran, Cuba, Crimea, and Syria. Following that settlement, Binance pledged to expand its compliance team by 34 percent. Despite that commitment, industry reporting published by AInvest and CryptoRank in early 2026 indicated that at least five compliance investigators were dismissed in 2025 after raising Iran-related concerns internally. Binance has disputed that characterization.

A Year of Escalating U.S. Enforcement

The Shelbit revelations land at the peak of a sustained U.S. crackdown on Iranian crypto infrastructure. In January 2026, OFAC designated the Zedcex and Zedxion exchanges. In April 2026, OFAC sanctioned two Bank Markazi crypto wallets in what marked the first-ever direct blockchain designation of Iranian sovereign crypto reserves; Tether immediately froze $344.2 million in USDT.

In May 2026, FinCEN published Alert FIN-2026-Alert002, warning financial institutions about IRGC money-laundering tactics and identifying specific behavioral red flags used in Iranian sanctions evasion. That same month, the U.S. government seized approximately $1 billion in Iranian crypto assets. In June 2026, OFAC sanctioned four Iranian exchanges in a single day: Nobitex, Wallex, Bitpin, and Ramzinex. A July 16 action added four more Bank Markazi wallets; Tether froze an additional $131 million. Total USDT frozen across Bank Markazi addresses in 2026 now stands at approximately $475 million. Chainalysis data shows state-driven sanctions evasion on-chain surged 694 percent year-over-year in 2025.

Why This Matters Outside the United States

For users and platforms in South Asia and Africa, the risks are indirect but real. Dubai is a critical financial corridor for South Asian diaspora communities in Pakistan, India, Bangladesh, and Sri Lanka. FinCEN's May 2026 alert explicitly flagged UAE free trade zones and exchange houses as common vehicles for Iranian money laundering, putting South Asian-owned exchange houses and informal money service operators in Dubai under greater scrutiny. Separately, the same alert listed unregistered peer-to-peer exchangers as a distinct red-flag pattern, one that maps closely onto India and Pakistan's large informal crypto markets.

The $475 million in USDT frozen across Bank Markazi addresses in 2026 carries a direct warning for South Asian users as well. Tether acts swiftly on OFAC instructions with no grace period, and those freezes are not reversible. For users in Pakistan and India who rely on USDT for remittances and informal trading, any exposure to Iranian-linked wallet clusters carries immediate, non-reversible financial risk.

For Africa, the concern centers on Binance's dominance. The exchange is the primary onramp for retail users in Nigeria, Kenya, Ghana, and South Africa. Any further U.S. regulatory action against Binance, including tightened KYC requirements or service suspensions, would fall hardest on African retail users who have few regulated alternatives. Nigeria's peer-to-peer USDT markets closely mirror the FinCEN red-flag patterns identified for Iranian evasion activity, a parallel that could draw increased scrutiny from correspondent banks already cautious about Nigerian transaction flows. The 694 percent surge in state-driven sanctions evasion is also prompting compliance vendors including Chainalysis, TRM Labs, and Elliptic to update their screening databases more aggressively, raising the probability that African wallets touching Iranian-linked chains are flagged even without any intent on the part of the user.

What Comes Next

Treasury's public statement signals formal action may follow. If Shelbit is formally designated by OFAC, platforms anywhere in the world that processed Shelbit-linked USDT could face secondary sanctions exposure under OFAC's June 2026 guidance, which was issued in connection with the four designated Iranian exchanges. Legal analysts also warn of a Tornado Cash-style liability risk: developers and protocols that interacted with Shelbit-linked addresses may face exposure regardless of intent, a precedent with broad implications for decentralized infrastructure. More structurally, the accelerating use of USDT freezes as an enforcement instrument underscores that the stablecoin is increasingly functioning as a tool of U.S. foreign policy. Any platform using USDT as a primary settlement layer must now treat that geopolitical exposure as a core operational risk.

VARA, Dubai's crypto regulator, has grown more aggressive in 2026, fining 19 firms for unlicensed operations in June alone, and further enforcement actions tied to the Shelbit investigation are widely anticipated.