Key Takeaways
- U.S. Treasury’s OFAC designated 134 cryptocurrency addresses connected to ISIS-K operations, featuring 131 TRON network wallets and 3 Monero addresses
- These digital addresses processed more than $1.4 million in incoming transactions from 2023 onward and facilitated outgoing transfers exceeding $880,000
- Tether immediately responded by blocking access to all 131 TRON wallet balances after the official designation
- Simultaneously, OFAC targeted Brazilian nationals and entities linked to PCC criminal operations that moved over $30 million through cryptocurrency channels
- Blockchain intelligence providers such as Chainalysis quickly integrated these addresses into their tracking systems
On July 1, 2026, the Office of Foreign Assets Control (OFAC) within the U.S. Treasury Department expanded its sanctions registry to include 134 digital currency addresses associated with ISIS-Khorasan, the terrorist organization’s branch operating in Afghanistan and Pakistan.
The designation encompasses 131 addresses operating on the TRON blockchain network alongside 3 Monero wallet addresses. In swift response, Tether took immediate action to restrict all balances held within the 131 TRON-based addresses.
ISIS-K received its initial designation as a Specially Designated Terrorist Group back in September 2015. The organization maintains active operations throughout Afghanistan, Pakistan, and neighboring Central Asian regions, having executed numerous attacks against civilian populations across multiple nations.
The terrorist group’s propaganda division, known as al-Azaim Media Foundation, has deployed cryptocurrency fundraising initiatives to secure operational financing. These solicitation efforts have surfaced across various websites and encrypted communication channels, accepting donations in TRON, Monero, and Bitcoin.
Transaction Patterns and Wallet Activity
The 131 TRON wallet addresses targeted in this enforcement action accumulated incoming transfers totaling over $1.4 million beginning in 2023. During the same timeframe, these accounts distributed more than $880,000 in outbound transactions.
Blockchain forensic examination reveals the addresses maintained connections to established cryptocurrency platforms. Multiple wallets also transferred funds to Syria-based digital currency exchange operators, based on data from Chainalysis.
This enforcement action represents the latest in OFAC’s ongoing efforts against ISIS-related cryptocurrency operations. In 2023, authorities sanctioned a Maldives-based ISIS-K operative whose TRON wallet infrastructure connected to Iranian exchange services. More recently last month, OFAC designated a network of Syrian money service operators utilized for converting digital funds on behalf of ISIS financial coordinators.
PCC Criminal Network Simultaneously Sanctioned
In concurrent enforcement activity on the same date, OFAC imposed sanctions against two individuals from Brazil and four corporate entities affiliated with Primeiro Comando da Capital, commonly referred to as PCC.
PCC operates as a major Latin American criminal enterprise headquartered in São Paulo with operational cells throughout the United States. OFAC documentation indicates the organization processed more than $30 million in narcotics revenue, utilizing cryptocurrency infrastructure to repatriate funds from U.S. territory back to Brazil.
This marks OFAC’s third enforcement action directed at PCC operations. The organization initially received designation status in December 2021. Additional sanctions followed in March 2024 focusing on a specific individual engaged in financial laundering activities for the criminal network.
The aggregate transaction volume across all 134 newly designated addresses surpasses $2 million, according to analysis conducted by TRM Labs.
Blockchain compliance technology providers including Chainalysis confirm they have promptly incorporated the designated addresses into their surveillance infrastructure, enabling financial institutions to detect potential exposure.
For cryptocurrency service providers and banking institutions, these designations mandate immediate implementation of updated sanctions screening protocols and enhanced transaction surveillance mechanisms.





