OFAC Sanctions 134 ISIS-K Crypto Addresses, Tether Freezes All 131 Tron Wallets Instantly
OFAC designated 134 ISIS-K crypto addresses on July 1, 2026-131 Tron, 3 Monero, and Tether froze every Tron balance the moment the SDN List updated. The mechanism being normalized here is the story.
The Treasury's July 1 action is a working demonstration of how stablecoin issuers function as real-time enforcement arms of U.S. sanctions.
Key takeaways
- OFAC added 134 crypto wallet addresses (131 Tron, 3 Monero) linked to ISIS-K to the Specially Designated Nationals List on July 1, 2026; Tether froze all 131 Tron addresses immediately.
- A simultaneous action targeted Brazil's Primeiro Comando da Capital criminal network, whose members laundered more than $30 million using crypto across the United States and Brazil.
- The Tether freeze required zero judicial process at the wallet level, confirming that TRON-based stablecoins are permissioned infrastructure, and underscoring why self-custody and Bitcoin matter.
The U.S. Treasury's Office of Foreign Assets Control added 134 cryptocurrency wallet addresses tied to ISIS-K to the SDN List on July 1, 2026, per the OFAC recent actions page. Tether froze all 131 Tron address balances the moment the designation posted, according to Chainalysis. Nobody had to go to court.
The 134 addresses break down to 131 TRON (TRX) wallets and 3 Monero (XMR) wallets. Zero Bitcoin addresses were included in this batch. The ISIS-K media arm, al-Azaim Media Foundation, solicited donations in Tron, Monero, and Bitcoin through its publication Voice of Khorasan, but the wallets OFAC actually sanctioned here are Tron and Monero only.
What the Addresses Actually Moved
The 131 Tron wallets received more than $1.4 million since 2023 and sent more than $880,000, per Chainalysis. That is a real number for a real terror financing network, and OFAC's escalating enforcement cadence reflects it.
The July 1 action followed a June 22 OFAC action targeting three individuals and six entities, including Syria-based Bitcoin Xchange and Turkish money services business Spider, for moving crypto to ISIS across Europe, the Middle East, and West Africa. In the June 22 press release covering that action, Treasury Secretary Scott Bessent said: "ISIS continues to seek new methods and tools to finance terrorist attacks. The United States will leverage every tool at its disposal to crush ISIS's remaining capabilities and protect American lives."
The same July 1 update also designated two Brazilian nationals and four companies linked to Primeiro Comando da Capital, which Treasury describes as Latin America's largest criminal gang. That network laundered more than $30 million in U.S.-generated illicit proceeds using crypto, routing funds back to Brazil. It is OFAC's third enforcement action against PCC, per the Treasury press release on the action, following the December 2021 designation of PCC as an organization and a March 2024 designation of a PCC operative. Named individuals are Victor Henrique de Oliveira Shimada and Stella Stefanie Nunes Henrique de Oliveira. Named companies include Victory Trading, Pixwave, Wave, and Portugal-based Avenidas Flutuantes.
The Mechanism Is the Story
Nobody at TFTC is going to argue that freezing ISIS-K fundraising wallets is a bad outcome. It isn't. The target here is unambiguous.
The mechanism being built and normalized is the issue. Step one: OFAC lists an address. Step two: a private issuer (Tether) freezes the balance instantly. Step three: U.S.-based exchanges and custodians screen and block it. That chain executed in real time on July 1, with no judicial review at the wallet level, no appeal process, and no delay.
Tether has done this dozens of times. Each instance adds a data point: TRON-based stablecoins are not censorship-resistant money. They are a permissioned payment rail that a single private company can freeze at the direction of a government list update. The target today is a terror group. The infrastructure built to freeze that target is the same infrastructure that freezes anything else OFAC decides to list, for any reason, at any time.
Bitcoin held in self-custody is insulated from steps one and two because there is no issuer to compel. OFAC can list a Bitcoin address on the SDN List and compel U.S. exchanges and custodians to block transactions touching it, but if the coins are in self-custody, there is no third party holding the balance to freeze. That distinction is not academic. It is the entire point. Prior Iran-linked OFAC actions targeting Bitcoin toll schemes illustrate the same enforcement boundary: custodians comply, the protocol does not.
The falsifiable test: if OFAC successfully compelled a Bitcoin mining pool or base-layer protocol participant to censor or reverse a transaction at the protocol level, not at a custodian, the distinction collapses. That has not happened.
What to Watch
OFAC's crypto enforcement cadence is accelerating. The gap between the June 22 facilitator action and the July 1 address batch was nine days. Watch whether Treasury issues a standalone press release specifically covering the ISIS-K address designations or continues routing address-level actions through the SDN update page without a named release. The former signals further escalation into stablecoin-issuer coordination; the latter suggests address-level freezes are now routine enough to require no announcement. Either way, the compliance infrastructure is tightening. Anyone holding material savings in TRON-based stablecoins at a custodian is one list update away from a frozen balance, for whatever reason Treasury decides is sufficient next time.
Sources
Frequently Asked Questions
ISIS-K's media wing historically solicited Bitcoin donations alongside Tron and Monero, but the 134 addresses OFAC sanctioned in this July 1 batch are Tron and Monero only. No Bitcoin addresses were included in this action.
OFAC can list a Bitcoin address on the SDN List and compel U.S.-based exchanges and custodians to block transactions involving it. But Bitcoin held in self-custody has no issuer or custodian for OFAC to compel. There is no third party holding the balance to freeze at the protocol level.
Any stablecoin issued by a centralized entity, including Tether's USDT and Circle's USDC, can be frozen by the issuer at the request of law enforcement or regulators. The July 1 action is the latest live confirmation of that capability, executed at scale and in real time. Tether has not issued a standalone public statement on this specific freeze; the action is confirmed by Chainalysis blockchain data and multiple outlets.
