A Dubai-based cryptocurrency exchange allegedly served as a financial hub connecting Iranian gambling operations, the country's central bank, and entities linked to Iran's military, processing at least $4 billion since May 2024 while funneling hundreds of millions to Binance wallets. The discovery underscores how Bitcoin and other digital assets continue to enable sanctions evasion despite years of regulatory crackdowns on major exchanges.

What Is Shelbit and How Did It Operate?

Shelbit, an unlicensed exchange run by Iranian expatriate Siavash Kayvanpour, emerged as a critical node in a sprawling financial network that connected multiple layers of Iranian economic activity. According to blockchain analysis shared with Reuters, the exchange began operations in May 2024 and quickly became a conduit for funds flowing between gambling websites, Iran's central bank, and organizations with alleged ties to the Islamic Revolutionary Guard Corps (IRGC), Iran's elite military unit.

The exchange's customer base included a network of more than 2,000 Farsi-language gambling websites promoted by Iranian influencers Sasha Sobhani and Pooyan Mokhtari. Researchers traced tens of millions of dollars from these sites back to Shelbit, suggesting the exchange played a central role in converting gambling proceeds into cryptocurrency and moving those funds across international borders.

How Much Money Moved Through the Network?

The scale of Shelbit's operations reveals the sophistication of modern sanctions evasion schemes. Blockchain data analyzed by two unnamed investigative firms and researcher Rich Sanders showed that Shelbit processed at least $4 billion in total volume. More specifically, researchers identified at least $125 million originating from Iran's central bank and another $20 million from a suspected Iranian Bitcoin mining operation flowing through the exchange.

The most striking figure involves transfers to Binance, the world's largest cryptocurrency exchange by trading volume. At least $676 million moved from Shelbit-linked addresses to Binance wallets after May 2024. Notably, approximately $540 million of that total moved after Dubai's Virtual Assets Regulatory Authority (VARA) fined Shelbit in January 2025 for operating without a license, suggesting the exchange continued functioning despite regulatory action.

What Are the Key Compliance Failures?

The Shelbit case highlights recurring vulnerabilities in cryptocurrency compliance systems, even at major exchanges with substantial resources. Consider the timeline and key actors involved:

• Detection Lag: Researcher Rich Sanders notified Binance about Shelbit's Iran connections in October 2025, yet the exchange had already processed hundreds of millions in transfers by that point, suggesting monitoring systems may have missed or failed to flag the activity in real time.
• Regulatory Response: Dubai's VARA issued a notice on July 24 ordering Shelbit to halt unlicensed activity, stating that "the exposure identified by VARA extends beyond consumer protection to more egregious cross-border transactions with the propension to impact the integrity of the UAE financial system."
• Binance's Position: Binance told Reuters that Shelbit itself never held an account on the platform, but accounts associated with its users were investigated, frozen, and reported to law enforcement, claiming its "compliance program operated as it should have."

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) is aware of the allegations and is taking them "very seriously," according to a spokesperson.

Why Does This Matter for Bitcoin and Crypto Regulation?

The Shelbit investigation arrives at a critical moment for cryptocurrency regulation. Binance pleaded guilty in 2023 to anti-money-laundering and sanctions violations and agreed to pay a $4.3 billion fine. U.S. officials said the exchange had facilitated approximately $900 million in transactions between American and Iranian users. The Shelbit case suggests that despite that landmark settlement, illicit flows continue to find pathways through the Bitcoin network and other digital assets.

The Block previously reported that Nobitex, Iran's largest domestic cryptocurrency exchange, processed hundreds of millions of dollars tied to Iran's central bank and the IRGC before the U.S. sanctioned it in June. Other investigations have linked billions of dollars in crypto activity to sanctioned Iranian entities operating outside the country. Shelbit appears to represent a new iteration of the same playbook: use an unlicensed exchange in a jurisdiction with weaker oversight, connect it to state actors and illicit networks, and route funds through larger platforms to achieve final conversion or movement.

The individuals allegedly involved in promoting the gambling network denied knowledge of state involvement. Sobhani and Mokhtari stated they were unaware of Iranian government connections to the sites they promoted. Kayvanpour and the Iranian government did not respond to requests for comment from Reuters.

How to Understand Sanctions Evasion in Cryptocurrency

• Layering Technique: Sanctions evasion schemes typically use multiple intermediaries, such as unlicensed exchanges, gambling networks, and mining operations, to obscure the origin and destination of funds and make tracing more difficult for regulators.
• Regulatory Jurisdiction Gaps: Unlicensed exchanges operating in jurisdictions with lighter oversight, such as Dubai before VARA's enforcement, can process large volumes without triggering the compliance checks that licensed platforms maintain.
• Blockchain Transparency Paradox: While Bitcoin transactions are recorded on an immutable public ledger, the identity of wallet holders remains pseudonymous unless explicitly linked to a regulated entity, allowing bad actors to move funds while maintaining plausible deniability.

Dubai's VARA is investigating Shelbit's alleged involvement in money laundering and Iranian sanctions evasion. The regulator's July 24 notice represents one of the first formal enforcement actions against the exchange, but the timing raises questions about how long the operation had been running before detection.

The Shelbit case underscores a persistent challenge for the Bitcoin network and broader cryptocurrency ecosystem: regulatory frameworks continue to lag behind the sophistication of illicit actors. Even as major exchanges implement advanced compliance tools, smaller or unlicensed platforms can still facilitate billions in transfers. The question for policymakers and exchange operators is whether current enforcement mechanisms can keep pace with the speed and scale of digital asset flows.