SDNY Targets $61 Million in Crypto Tied to Iranian Oil Sales via Binance

The U.S. Attorney's Office for the Southern District of New York filed a civil forfeiture action on September 14, 2026 seeking $61 million in cryptocurrency tied to Iranian military black-market oil sales. The case opens a new in rem front against crypto flows allegedly linked to sanctioned Iranian oil. SDNY announcement
The filing is docketed as Case 1:26-cv-08010, Document 1. A Justice Department document hosting the complaint addresses the use of Binance accounts to transmit the proceeds of Iranian oil sales. Justice Department filing
That document references $1.5 billion in proceeds from the illicit sale of Iranian oil. The forfeiture target is narrower. Prosecutors seek $61 million in cryptocurrency. The gap between the referenced proceeds and the defendant property is standard in forfeiture practice, where the government moves first against traceable or seized units rather than the full alleged volume.
The complaint centers on routing. Entity A funneled Iranian oil money to IRGC-related money services, according to the SDNY's description of the scheme. The mechanism described is transmission through Binance accounts, placing a centralized exchange ledger at the center of the attribution chain.
The filing in context
The $61 million action is discrete. It does not itself resolve liability for any exchange, intermediary, or individual. Civil forfeiture proceeds against the property. Still, the pleadings matter for compliance desks. They specify venues, flow structure, and counterparty typology.
For sanctions and AML functions, the Entity A to IRGC-related money services allegation is the operational detail to note. It points to oil proceeds entering crypto rails and then moving to money services with Islamic Revolutionary Guard Corps nexus. That pattern, if proven, implicates correspondent screening, counterparty clustering, and on-chain to off-ramp controls.
Congressional scrutiny is already active. Sen. Schiff leads a probe of Binance routing funds to Iran-backed proxy groups. Senate probe The probe cites $260 million funneled between 2024 and 2025 from Binance accounts to accounts with ties to Iranian terrorist financing. The period matters. It postdates Binance's 2023 guilty plea and $4.3 billion fine.
The Justice Department is separately investigating Iran's use of Binance to evade sanctions, as reported in May 2026. WSJ reporting That investigation and the September forfeiture complaint run on parallel tracks. One tests criminal exposure. The other tests recovery.
A compliance history
Binance's Iran exposure is long documented. Reuters reported that Binance processed Iranian transactions worth $8 billion since 2018 despite U.S. sanctions. Reuters investigation Earlier Reuters reporting found Binance served crypto traders in Iran for years despite sanctions, then informed traders in Iran that it would no longer serve them and told them to liquidate their accounts. Reuters reporting
The figures in later U.S. coverage narrowed to specific tranches but remained large. The Wall Street Journal reported that Binance allowed customers in Iran to move at least $899 million, and that Binance received over $100 million from a Russian online drug marketplace. WSJ reporting Those findings formed part of the record around the 2023 guilty plea.
Post-plea conduct is now the focus. The Journal reported that Binance suspended employees who were investigating $1.7 billion in transactions from Chinese clients to Iran-linked digital wallets. Separately, it reported that Binance dismantled an investigation into $1 billion moved to an Iran-backed recipient, and fired staff who flagged $1 billion moving to a sanctioned destination. President Trump pardoned Binance founder Changpeng Zhao, according to February 2026 reporting.
Monitorship is also in play. Binance executives asked Treasury officials in Washington to remove a U.S. monitor overseeing the exchange's compliance. That request was reported in April 2025. For practitioners, the sequence is relevant. Plea, monitorship, alleged continued flows, internal investigation disputes, pardon request, forfeiture filing. Each step reprices counterparty risk.
The broader context here is enforcement leverage. Forfeiture does not require a criminal conviction against the holder. It requires a nexus between the property and specified unlawful activity. The $61 million figure is small against the $1.5 billion in referenced proceeds. It is also small against the $8 billion historical transaction figure and the $260 million 2024 to 2025 figure cited by Senate investigators. The size is not the signal. Persistence across time periods is.
Looking at what this means for balance-sheet risk, exchanges and desks with indirect Binance exposure face three questions. First, wallet clustering and attribution around Entity A and downstream money services. Second, whether post-2023 controls captured Iran nexus activity or merely displaced it. Third, how a court treats commingled accounts where alleged oil proceeds transited alongside unrelated customer funds. Forfeiture complaints often force those tracing disputes early.
In my view, the filing reads less as closure and more as calibration. SDNY has locked a docket number, a property pool, and a transmission theory. The larger $1.5 billion reference frames scope. Congressional and criminal inquiries frame pressure. The compliance history frames credibility. Pricing of exchange risk will turn less on the $61 million outcome and more on whether discovery or parallel action substantiates systematic post-plea evasion.


