IRGC-Linked Crypto Network Moves Hundreds of Millions of Dollars in Crypto During Iran Internet Blackout
Key Takeaways
- Hundreds of millions of dollars in cryptocurrency moved out of Iran during the blackout.
- Transfers occurred amid escalating U.S.-Israel confrontation involving Iran.
- Cyber intelligence analysis underpins the claim.
Crypto Surge During Blackout
During Iran's recent internet blackout, IRGC-linked cryptocurrency networks facilitated the movement of hundreds of millions of dollars in digital assets.
“EXCLUSIVE: Cryptocurrency infrastructure linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) continued operating during the country’s nationwide internet blackout after the Feb”
This occurred despite severe communications restrictions that would normally cripple financial operations.
According to cyber intelligence analysis, the surge in crypto transfers began immediately following the attacks.
Funds flowed out of Iranian-linked accounts at an accelerating pace throughout the blackout period.
'We've seen a surge of funds since the first hours of the war,' stated Omri Raiter, founder and CEO of RAKIA.
Raiter noted that transfers started with tens of millions in the initial hours and quickly grew to hundreds of millions.
This massive movement of digital currency occurred while Iran's broader internet infrastructure was severely restricted.
The situation highlights the resilience of blockchain-based financial systems in circumventing traditional sanctions and communication blackouts.
Iran's Crypto Infrastructure Scale
Iran's cryptocurrency ecosystem has grown significantly, with the IRGC receiving over $3 billion in cryptocurrency during 2025 alone.
This substantial financial activity represents a major expansion of Iran's digital financial infrastructure.
The country's overall cryptocurrency ecosystem reached an estimated $7.78 billion in activity for 2025.
This figure comes from blockchain analysis firm Chainalysis according to RAKIA's internal report.
The data indicates that Iran has developed sophisticated crypto-based financial capabilities.
These capabilities can operate effectively even under heavy sanctions and communications shutdowns.
'The IRGC has been financing proxy operations through the very same crypto corridors that sanctions were designed to shut down,' Raiter explained.
This highlights how Iran has turned cryptocurrency into a tool for circumventing international financial restrictions.
Geographic Network Distribution
Analysis of blockchain networks revealed the geographic distribution of Iran's crypto infrastructure.
“EXCLUSIVE: Cryptocurrency infrastructure linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) continued operating during the country’s nationwide internet blackout after the Feb”
Significant clusters of nodes were located strategically between Tehran and Qom.
This region is known for hosting major government and strategic institutions.
Smaller but important clusters were also identified in cities including Isfahan, Mashhad, Tabriz, and Kermanshah.
This indicates a decentralized yet coordinated network structure.
The presence of these crypto nodes during the internet blackout is particularly significant.
It demonstrates that certain digital financial networks maintained operational continuity.
This occurred even when broader internet services were disrupted across the country.
The geographic distribution suggests Iran has deliberately built a robust, distributed crypto infrastructure.
This infrastructure can withstand targeted internet shutdowns while maintaining financial operations.
Alternative Financial System
Experts believe Iran's crypto development represents a strategic shift toward building alternative financial mechanisms.
These mechanisms can operate outside traditional banking channels despite international sanctions.
Prof. Triveni Singh, a renowned cyber crime expert and former IPS officer, emphasized this trend.
He noted that cryptocurrencies are increasingly important in modern geopolitical conflicts.
'Crypto networks operate outside conventional banking systems,' Singh explained.
He continued: 'If a country or group develops a strong digital financial infrastructure, funds can continue to move even under sanctions and financial pressure.'
This perspective highlights how Iran has successfully leveraged cryptocurrency technology.
Iran has created financial resilience for its IRGC and other entities.
These groups maintain access to global financial networks despite traditional banking restrictions.
Global Security Implications
The revelation of Iran's sophisticated crypto infrastructure has intensified international scrutiny.
“EXCLUSIVE: Cryptocurrency infrastructure linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) continued operating during the country’s nationwide internet blackout after the Feb”
Security agencies across multiple countries will likely monitor digital financial flows.
These flows are connected to conflict zones, particularly those involving Iran.
Analysts predict tighter global monitoring of cryptocurrency exchanges and blockchain networks.
Networks suspected of having links with Iran will face particular attention.
The situation shows that modern warfare has expanded beyond traditional military tactics.
Financial networks, cyber infrastructure, and digital assets are now critical components.
These elements play major roles in geopolitical struggles worldwide.
Experts note that warfare is 'no longer limited to missiles, military forces and territorial control.'
Financial networks, cyber infrastructure and digital assets have become critical components.
This suggests crypto monitoring will be a major focus for global security agencies in coming years.
More on Crypto
Boris Johnson Calls Bitcoin a Ponzi Scheme; Saylor, Eric Trump Defend Crypto
12 sources compared
Bybit Pay Joins Mastercard Crypto Credential Network, Lets Users Send Digital Assets Using Verified Aliases
10 sources compared
U.S. Treasury Freezes Crypto Network Feeding Nearly $800 Million To North Korea's Weapons Programs
10 sources compared
Europol and DOJ Freeze $3.4–$3.5M, Dismantle SocksEscort Proxy Network That Compromised 369,000 Devices
13 sources compared