Iran's Hormuz Toll Booth Ran on Bitcoin. Treasury Just Sanctioned the Cashier.
OFAC's designation of Tehran-based BitBank is the clearest public case yet of a state using crypto rails to collect protection money — and of why those rails cut both ways.

The US Treasury sanctioned a Tehran-based bitcoin exchange on September 17 for a reason that has almost nothing to do with crypto. BitBank, according to the Office of Foreign Assets Control, was the cashier for a shipping toll.
The toll is real, and it predates the exchange. What OFAC alleges is that Iran found a way to collect it in a currency the US cannot freeze at the correspondent-bank layer — and that BitBank processed hundreds of millions of dollars in bitcoin over roughly two months to do it, with proceeds flowing to the Islamic Revolutionary Guard Corps. The designation follows an earlier action against the scheme's front, an entity US authorities call Hormuz Safe, and was reported by The Block, CoinDesk, CoinTelegraph and Decrypt.
For readers arriving from traditional finance, this case is worth understanding in detail. It is not a story about a new crypto crime. It is a story about what happens when a state actor swaps out one payment processor for another, and discovers that the replacement keeps better records than the original.
The toll booth
The Strait of Hormuz is roughly 21 nautical miles across at its narrowest point, and the navigable shipping lanes inside it are narrower still. Something on the order of 20 million barrels of oil per day move through it — a fifth of global petroleum liquids consumption, by the US Energy Information Administration's long-running estimate. There is no alternate route for most of that volume. Pipelines bypassing the strait exist, but their combined capacity covers a fraction of the flow.
That geography is the entire business model. A vessel transiting Hormuz passes within territorial waters patrolled by the IRGC Navy, which has a documented history of boarding, detaining and seizing commercial ships. Treasury's position, per the reporting above, is that Hormuz Safe operationalized that risk into a fee schedule: pay, and your transit is uneventful.
In plain language, this is a protection racket with a payment portal. The innovation is not the extortion. It is the collections infrastructure.
Why the payment rail is the story
US sanctions are not, mechanically, a prohibition on trade. They are an access-control system layered on top of the dollar. The enforcement point is the correspondent bank — the institution that clears a dollar-denominated payment through the US financial system. A shipping company in Greece cannot wire six figures to an IRGC-linked entity because the correspondent bank in the chain will screen the counterparty, block the transfer and file a report. The dollar's utility is the leverage; the clearing layer is where the leverage is applied.
A toll denominated in dollars is therefore uncollectable for Iran at any meaningful scale. A toll denominated in bitcoin is not. Bitcoin is a bearer instrument with no correspondent bank, no clearing intermediary and no entity positioned to refuse the transfer. The shipping operator sends, the recipient receives, and no US-regulated institution sits in the middle with a veto.
That is the full appeal. There is no ideology in it. Iran's central bank has spent a decade building workarounds to dollar clearing — barter arrangements, oil-for-goods deals, hawala networks, gold. Bitcoin is the newest entry in an old category, and its advantage over the others is settlement speed and the absence of a physical logistics problem. You cannot fly a pallet of gold to a tanker captain in the Gulf. You can send him a payment address.
The useful analogy for anyone coming from TradFi is not "digital gold." It is hawala with a public ledger — an informal value-transfer system that clears outside the banking perimeter. That last clause is where the comparison breaks.
The part that doesn't appear in the pitch
Hawala's defining feature is opacity. Its records are private, informal and frequently destroyed. Bitcoin's defining feature is the opposite: a permanent, public, globally replicated record of every transfer, available to anyone with a full node and the patience to cluster addresses.
This is why the BitBank designation matters more than the dollar figure attached to it. Once OFAC names an entity and publishes associated wallet addresses, those addresses become radioactive across every compliant venue on earth. Screening against the Specially Designated Nationals list is a standard control at any exchange with a banking relationship, which is to say any exchange that matters for converting bitcoin into something the IRGC can spend on payroll, procurement or proxies.
And that conversion is the choke point. Collecting a toll in bitcoin solves the receiving problem. It does not solve the spending problem. Unless Iran intends to hold the proceeds indefinitely — an unlikely posture for an entity with operational funding needs — the money has to exit through an off-ramp somewhere, and every off-ramp with a bank account is a surface where the designation bites. The sanction is not aimed at stopping the transfers. It is aimed at stripping the exit liquidity.
There is a second cost that is easy to miss. A dollar payment blocked at a correspondent bank generates a suspicious activity report and little else. A bitcoin payment completed on-chain generates a permanent evidentiary record that investigators can walk backward and forward at leisure, years later, with tooling that improves every year. Iran traded a system that refuses to move its money for a system that moves it and then testifies about it.
What the public record establishes, and what it doesn't
The Miner's standing position on OFAC actions: a designation is an administrative determination, not a judicial finding. Treasury does not have to prove its case to a court before acting, and the evidentiary basis is generally not published. That is a feature of the sanctions regime, not a defect in the reporting — but it means the claims here carry a specific epistemic status, and readers should hold them accordingly.
Three things are worth marking as unresolved.
The volume figure is Treasury's characterization. "Hundreds of millions of dollars in two months" comes from the designation and is repeated across the four outlets covering it. As of publication we have seen no independent on-chain corroboration — no published clustering analysis from Glassnode, Kaiko, CryptoQuant or a named Dune author tying specific address sets to that total. The number may be conservative. It may also aggregate flows through BitBank that had nothing to do with the toll scheme. Treat it as an allegation with a government's credibility behind it, not as a measured quantity.
The asset composition is unclear. Every headline says bitcoin. Sanctions-evasion flows in practice frequently run through dollar-pegged stablecoins, which offer price stability that a protection racket with fixed fees would obviously prefer. Whether the Hormuz collections were genuinely BTC-denominated, or whether "bitcoin" is functioning as shorthand for crypto generally, is not established by the public reporting.
BitBank's posture is asserted, not demonstrated. There is a meaningful difference between an exchange built to launder IRGC revenue and a domestic Iranian exchange that a state actor used because it was the only venue available inside the jurisdiction. Treasury's designation implies the former. The published record does not distinguish between them, and in a country under comprehensive sanctions the distinction may be academic — but it is the difference between a criminal enterprise and a captured utility.
Enforcement is moving from institutions to infrastructure
BitBank is the latest entry in a pattern Treasury has been building since it designated the exchange Suex in 2021 — the first crypto venue added to the SDN list. The strategy has been consistent: rather than chase individual bad actors across a permissionless network, identify and sanction the small number of chokepoints where crypto touches the conventional financial system. Exchanges. Mixers. Payment processors. The nodes that have bank accounts, corporate structures and humans who answer to jurisdictions.
This approach has a clean legal foundation when the target is a company. It gets contested when the target is software. Treasury's 2022 designation of the Tornado Cash mixer triggered years of litigation over whether immutable smart contracts constitute sanctionable "property" at all, and the department ultimately delisted the protocol in 2025 following an adverse appellate ruling. BitBank sits on the easy side of that line. It is an operating business with operators, in a jurisdiction already under comprehensive sanctions, allegedly servicing a designated scheme. There is no novel legal question here.
Which is precisely why it is instructive. The hard cases get the headlines and the law review articles. The routine cases — an exchange, a designation, a set of poisoned addresses — are where the enforcement regime actually does its work, and they are accumulating faster than the contested ones.
The builder's read
For anyone constructing infrastructure rather than reading about it, the operative lesson is about where compliance actually lives. It does not live on the chain. Bitcoin's base layer will validate a transaction from an SDN-listed address exactly as readily as any other, and no amount of regulatory pressure changes that. Compliance lives at the edges — the fiat ramps, the custodians, the market makers, the stablecoin issuers with freeze functions in their contracts.
That asymmetry produces a specific design question, one we're taking apart in this week's Wednesday thread: when a sanctions list becomes a de facto soft-consensus layer enforced by every venue with a banking relationship, what is the actual censorship-resistance property of the system, and which layer holds it? The answer is not "none." But it is narrower than the marketing suggests, and the BitBank case maps the boundary with unusual clarity.
Crypto did not make the Hormuz toll possible. The IRGC has been extracting value from vessels in that strait for years, with or without a payment processor. What crypto did was make the toll collectable at scale — and make the ledger of collections permanent. Treasury is wagering that the second property is worth more to it than the first is worth to Tehran.
SOURCES
- CoinDesk · accessed 2026-09-19
- CoinTelegraph · accessed 2026-09-19
- Decrypt · accessed 2026-09-19
- The Block · accessed 2026-09-19