Binance and Iran: How a VIP Client Allegedly Moved Sanctions Money
$1.5 billion is the figure U.S. prosecutors put on money sent back to Iran through Binance customers, and a newly reported internal document adds how one Iranian network did it as a favored client.
The Wall Street Journal reported on Oct. 9 that the document sets out how the network routed funds through Binance against Western sanctions, in a story titled "How a Binance ‘High-Value Customer’ Established a Financial Lifeline for Iran" The Wall Street Journal. According to the Journal, the document details the mechanics of the flow and describes the relationship in VIP terms, not as routine small-account activity.
The document is the latest in disclosures that have widened over the past eight months. The prior anchor was a Justice Department account reported on Sept. 15. Prosecutors said several companies used Binance to relay payments for black-market Iranian oil bought by Chinese buyers as part of a scheme to finance Iran The Wall Street Journal. The structure alleged was payments intermediation, not casual person-to-person trading. The exchange layer sat between oil proceeds and onward transfer.
In that case, prosecutors said around $1.5 billion moved through interrelated digital wallets controlled by Binance customers. Investigators group such wallets by clustering, a standard tool for blockchain analytics teams. Shared funding sources, synchronized peel chains that peel off small sums while forwarding the rest, and common end destinations let analysts link separate addresses to one operator. The allegation is that the cluster pointed to a repatriation flow directed to Iran.
Two earlier Journal reports added other sums. In May, the Journal reported a key Iran-regime financier conducted $850 million in transactions on Binance The Wall Street Journal. In February, it reported Binance had dismantled an internal investigation into $1 billion moved to an Iran-backed terror network and fired investigators who uncovered the flow The Wall Street Journal.
The Justice Department is investigating Iran's use of Binance to evade U.S. sanctions, following the shutdown of that internal probe The Wall Street Journal. Binance has said sanctions-related exposure as a share of total exchange volume fell 96.8% between January 2024 and July 2025 Binance.
For context on the legal stakes, timing drives compliance liability. A criminal sanctions case turns less on whether illicit deposits arrived — every large venue receives them — than on what the venue knew, when escalation happened, and whether monitoring, investigation and suspicious-activity reporting continued after internal flags.
The broader context here is the clash between high-speed crypto trading and oil-linked sanctions evasion. Iranian crude sold off-manifest to Chinese buyers leaves a receivables problem. Dollar clearing is blocked. The workaround needs a settlement system outside normal bank channels and a conversion point into usable money. A deep, liquid spot and derivatives exchange with internal ledger transfers, rapid wallet turnover and over-the-counter help meets that need. The exchange never touches the barrel. It settles only the money leg.
In my view, the VIP label is the control to watch. Tiered fees, dedicated account staff, higher limits for automated trading and larger withdrawals are normal retention tools. Used for a sanctions-linked network, those tools cut trading costs and let large sums move with less friction. The question for any venue is whether source-of-funds checks, checks on who truly owns the account and screening for negative news get stricter as trading perks rise, or whether business perks move faster than financial-crime controls.
Looking at what this means for market plumbing, the wallet trail cuts both ways. Linked wallets leave a lasting map that helps prosecutors and tracking firms trace funds after the fact. That is not the same as stopping payments live. Prevention rests on risk scores for deposits, limits for direct and indirect sanctions links, and willingness to freeze and close a paying account. The 96.8% figure is a ratio, not a dollar total. It can fall because the problem amount falls, because total trading grows, or both. Risk officers also watch the dollar amount flagged, how fast accounts are detected and closed, and whether VIP and market-maker flows got extra checks matching the country risk. Whether the ratio includes indirect flows through nested accounts, sub-accounts and middlemen who passed oil money will shape how regulators read the new document against the $1.5 billion, $850 million and $1 billion sums already reported. Those sums cover different customers, periods and alleged end-users, so they cannot simply be added. Together they point to repeated use, not a single entry.
