Iran, Binance, and the Trail of Digital Clues That Nobody Wanted to Find

A well-kept lawn and trees encircle a white villa in Singapore that is situated behind a gate. From the outside, it appears unremarkable; it’s the type of address that shows up in corporate documents without much notice. However, that conversation between a Chinese businessman whose corporate office was listed on a U.S. trade blacklist and the CEO of a little-known payment processor called Blessed Trust turned out to be just one part of a much larger tale. A story that had been in the public eye for more than a year before it began to appear on the front pages in early 2026.

For Binance, the biggest cryptocurrency exchange in the world, Blessed Trust handled back-office processing duties. It also used Binance’s platform to transfer $1.2 billion, which eventually went to organizations associated with Iran, including allegedly Houthi militants in Yemen, according to company records and documents examined by the New York Times. Internal investigators tracked at least two accounts totaling $1.7 billion. A portion of those funds went through the account of a 78-year-old Chinese man, whose transactions revealed hundreds of millions of dollars flowing through in an unsettling pattern, according to the Times. The hints weren’t hidden. They appeared in Binance’s own transaction logs, on a U.S. government blacklist, and in public business records in Hong Kong and Singapore.

More than 1,500 people work for Binance, and part of their duties include keeping an eye out for precisely this kind of activity on the platform. The business was aware of the regulatory risks. In 2023, it had already entered a guilty plea to money laundering charges, paid a criminal fine of nearly $1.81 billion, and consented to an additional forfeiture of $2.51 billion. The company explicitly promised to take action against bad actors, particularly Iranian customers, as part of that settlement. What transpired next is more difficult to explain in light of that context. It wasn’t until January 2026—roughly a year after the warning signs had surfaced in records that anyone with an internet connection and a few hours could have found—that the company terminated its relationship with Blessed Trust.

When they were discovered, the internal investigators did not fare well. At least four workers were suspended or fired after bringing up the matter with Binance’s executives, according to reports from several media outlets. When the individuals who were fired were the ones who reported a potential billion-dollar sanctions breach, the company’s stated reason—violations of company protocol pertaining to client data handling—carries its own kind of charge. In a statement, Binance refuted this claim, stating that no investigator was fired for voicing concerns about compliance. The timing is hard to ignore, but it’s still unclear exactly what internal discussions occurred and at what level.

As you read through the events, you get the impression that there are layers to this story that haven’t yet been fully revealed. Beyond the financial specifics, the timing is noteworthy. President Trump pardoned Binance’s founder, Changpeng Zhao, in October 2025, a few weeks before the Iranian transactions allegedly became an apparent problem within the company. Trump told reporters that Zhao had been persecuted by the Biden administration and that the crimes weren’t actually crimes at all, downplaying Zhao’s earlier guilty plea. Zhao had attended an event at Mar-a-Lago, and Trump’s family cryptocurrency company, World Liberty Financial, had collaborated with Binance. It’s really unclear how any of that relates to how the internal investigation is being handled. However, it is difficult to overlook the constellation of relationships.

The larger picture of Iran’s cryptocurrency activity strengthens the argument that this is important for more than just one business. Cryptocurrency flows out of Iran have increased since the Middle East’s military conflict began. More than $10 million in cryptocurrency left Iranian exchange platforms in an exceptionally concentrated movement in the days immediately following Israeli-U.S. airstrikes in late February, with almost a third being transferred to foreign exchanges in a matter of days. Over $3 billion in cryptocurrency was used to fund wallets connected to Iran’s Revolutionary Guards in 2025, accounting for more than half of the nation’s total cryptocurrency activity, according to blockchain analysis firm Chainalysis. Stablecoins, dollar-pegged digital assets that avoid the volatility of Bitcoin while still moving through channels that are difficult for traditional financial systems to track, have been shown to be preferred by the Guards and Iran’s central bank.

With cryptocurrency as a key tool, what Iran has created appears more like a purposeful alternative financial infrastructure than opportunistic evasion. According to Craig Timm of the anti-money laundering group ACAMS, it is true “shadow banking” because it is quicker than wire transfers, less expensive, more difficult to track down, and takes advantage of holes in international regulatory frameworks. Iran has used cryptocurrency to finance allied armed groups, sell embargoed oil, and even sell ballistic missiles and drones, according to a Financial Times report earlier this year. Bitcoin, a currency of last resort kept in private wallets outside the regime’s control, has been used by common Iranians as a hedge against inflation, which was close to 50% prior to the conflict’s intensification.

As this develops, it’s hard to avoid the conclusion that the laws governing cryptocurrency and sanctions are lagging far behind the real activity they are meant to regulate. In March 2026, the Justice Department initiated a formal investigation into Binance’s involvement, and the Senate has been posing inquiries. For its part, Binance claims that it did not break any sanctions laws and that the problem was found through its compliance program. In a limited legal sense, that might be technically true. However, a press release does not adequately address the more general question of how a company with 1,500 compliance employees and a history of precisely this kind of enforcement action missed, for about a year, what its own internal investigators ultimately discovered.

The Singaporean villa remains intact. The company’s records are still available to the public. By most accounts, the money has already been transferred.