US Treasury Sanctions Crypto Network, Including a Nigerian Facilitator Accused of Moving Funds to ISIS

OFAC designated three financial facilitators and six money service businesses on June 22 for moving funds to ISIS and its West Africa affiliate.The network allegedly used crypto transfers, hawala systems, and bureaus de change to shift money across Europe, the Middle East, and West Africa.Regulators identified specific TRON wallet addresses signalling growing precision in how authorities pursue crypto-linked financial crime.

The US Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned three individuals and six entities for allegedly routing cryptocurrency to ISIS. They targeted a geographically dispersed financial network spanning Syria, Turkey, France, and Nigeria.

Treasury Targets ISIS Financial Network

OFAC has sanctioned three people and six entities for facilitating financial transactions for ISIS. The sanction aims to disrupt activity across an ISIS-linked financial network that used hawaladars, money service businesses (MSBs), and cryptocurrency to move funds across Europe, the Middle East, and West Africa.

The entities affected by the sanction include a Bitcoin Exchange based in Syria, two money services firms based in Turkiye, and three Nigerian currency bureaus. The management and the individuals who own or operate these entities are also affected by the sanctions.

The Syria-based exchange, called Bitcoin Xchange, sits at the centre of the Syria-to-Europe pipeline. It was launched in late 2020 and is operated by Abdelhakim Boukich, a former Dutch national now based in Syria.

According to the US Treasury, Boukich and Bitcoin Xchange transferred money on behalf of ISIS associates from multiple countries, including Norway, Belgium, the Netherlands, South Africa, and the United States.

OFAC also sanctioned two Turkish MSBs, Spider Gayrimenkul Ve Genel Ticaret Limited Sirketi (Spider) and Alkaram Danismanlik Gayrimenkul Ic Ve Dis Genel Ticaret Limited Sirketi (Alkaram).

Both are owned and controlled by Mohamad Alhmidan, previously designated by OFAC in March 2016. Spider began as a hawala operating in Syria. It was used to transfer money from ISIS-controlled territories in Syria to other regions.

Three bureaus de change in Nigeria, located in Lagos and Kano, were also sanctioned. Nine to Nine Exchange Bureau de Change, Manhattan Bureau de Change, and Generation Currency Bureau de Change are now on the SDN list.

Mkhtar Adamu Muhammad owns or operates all three entities and is considered a financial facilitator for ISWAP. He is now on the SDN list.

How Crypto Was Allegedly Used

OFAC has identified two TRON wallet addresses linked to Miloud Abderrahmane. Abderrahmane is a French national designated for conducting transactions with ISIS affiliates.

According to the US Treasury, he also provided ISIS supporters with instructional and manufacturing information on building explosives.

The two TRON addresses, TBXMiRqUp1XH1zLazWu8cWitMAScv4HsYq and TDFj8tYzfLDkwEMo4MJ2DfrbpMztuCCnan, are now on the SDN list.

Chainalysis Reactor graph analysis shows transactions from mainstream wallets to Abderrahmane’s wallet, and from his wallet to wallets used in Syria- and Gaza-based donation campaigns.

The network combined traditional informal value transfer systems with public blockchain infrastructure.

Hawala networks moved money out of ISIS-controlled territory; money service businesses provided cover for cross-border flows; and TRON wallets facilitated transfers to affiliated recipients.

The New Enforcement Playbook

This action is part of a clear enforcement pattern. In recent years, OFAC has sanctioned Hamas-linked crypto wallets, including a Gaza-based virtual currency exchange and its operator.

Earlier this month, it also sanctioned four Iranian exchanges, including Nobitex, its founders, Amir Hossein Rad, Ali Aghamir, Mohammed Aghamir, and its CEO, Eyed Ali Khoee. Other Iranian exchanges sanctioned include Wallex, Bitpin, and Ramzinex.

In August 2022, OPAC sanctioned the Tornado Cash mixing protocol, alleging it had laundered over $7 billion in virtual currency since 2019. Funds, they say, include over $455 million stolen by the Lazarus Group.

Taken together, these cases show a regulatory approach that has evolved from targeting individual wallets to dismantling entire financial ecosystems. These ecosystems include exchanges, OTC desks, money service businesses, facilitators, and on- and off-ramp providers.

Treasury’s 2026 National Terrorist Financing Risk Assessment noted that sustained pressure from counterterrorism forces has pushed ISIS toward more decentralised cells and reliance on regional facilitators, such as the recently executed Abu-Bilal Al-Minuki of ISWAP.

The current sanctions, therefore, seem to target the facilitators instead of the technology.

What This Means for African Crypto Businesses

The inclusion of three Nigerian bureaux de change in a major OFAC action will resonate across the African fintech and crypto sectors.

Exchanges and payment firms operating cross-border flows, especially those handling transactions with counterparties in conflict-affected regions, should expect heightened scrutiny.

KYC requirements, transaction monitoring obligations, and sanctions screening will all come under greater focus. Correspondent banking relationships, already fragile for many African fintechs, are likely to face tighter conditions as international banks seek assurance of AML controls.

A counterintuitive upside could arise here for firms with well-developed compliance infrastructure. Stricter enforcement could create a cleaner regulatory environment, boosting institutional investors’ confidence. Governments gain visibility, and licensed operators gain a competitive advantage over those cutting corners.

Global exchanges and financial institutions will need to make immediate updates to their sanctions screening and transaction monitoring protocols.

African firms with international operations or correspondent relationships should treat this as a prompt to audit their exposure.

Crypto Leaves a Trail

Many people are drawn to cryptocurrency because of decentralisation and anonymity. One perception that has arisen about cryptocurrency is that it enables anonymous crime.

While in some cases, it unfortunately does, this case and the sanctions thereof illustrate the opposite. Times are changing; crypto leaves a trail.

The identification of specific TRON wallets makes this one of the comparatively rare OFAC actions targeting individual wallets rather than exchanges or custodians.

That level of precision is only possible because public blockchains are transparent by design. It also emphasises the need for blockchain analytics capacity to trace funds and identify downstream exposure.

Firms like Chainalysis, TRM Labs, and Elliptic have built sophisticated tools that allow investigators to follow funds across wallets, exchanges, and borders.

Crypto Regulation Is Maturing Globally

This enforcement action is a useful marker of where crypto regulation stands in 2026. Crypto regulation worldwide is evolving. African governments have taken credible steps towards a broader regulatory infrastructure in 2026.

Authorities are applying the same financial-crime frameworks used for banks, money-transfer operators, and currency exchanges with increasing sophistication and geographic reach.

Compliance, licensing, and transaction monitoring are now critical for crypto businesses across Africa. They provide credibility and are the foundation for legitimate market participation.

Originally published at https://cryptoafrica.news on June 23, 2026.

US Treasury Sanctions Crypto Network, Including a Nigerian Facilitator Accused of Moving Funds to… was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

By

Leave a Reply

Your email address will not be published. Required fields are marked *