Babak Morteza Zanjani has been a ghost before. The Iranian financier was convicted in US federal court in 2016 for sanctions violations and bank fraud, served his sentence, and slipped back into the shadow economy where he'd always operated. Last week, the US Treasury's Office of Foreign Assets Control ripped him back into the light, naming him as the alleged architect of a scheme that repurposes Bitcoin as marine insurance for ships running the Strait of Hormuz, through entities called Persian Gulf Marine Insurance Company and HormuzSafe Marine Services Authority.
Then came the detail that made me stop scrolling. According to OFAC's designation narrative, Zanjani's network moved roughly $850 million through Binance โ across accounts that had been flagged multiple times. Chasing the alpha through the digital fog, I've learned to hunt for the space between what regulators announce and what their own data reveals. This is such a space. A man already convicted in US federal court, moving nearly a billion dollars through the world's largest exchange, repeatedly flagged, and the money kept flowing anyway.
The US is calling this a protection racket disguised as an insurance product. That characterization is precise, and it matters more than most crypto headlines this year. The Treasury's language describes a maritime extortion network, one that exists to extract so-called premiums from civilian shipping. But the real story is not that Bitcoin enables sanctions evasion. The real story is that America's sanctions machinery reached into the blockchain, followed the money, and found Binance holding the bag.
The Vacuum
This is not a technology story. Or rather, it is โ but not the way the headlines will frame it.
Rebuild the timeline. The war in the Strait of Hormuz began in February 2026. A memorandum of understanding was signed in June. Military strikes resumed on July 13. Ceasefire talks surfaced in late July, collapsed into escalation by early August. Along that arc, conventional marine insurers โ the P&I Clubs, the Lloyd's syndicates, the entire apparatus that prices maritime risk โ retreated. The strait carries roughly a fifth of the world's crude oil and a third of its liquefied natural gas; when it becomes a live-fire zone, underwriters face a choice between unpriced existential risk and vacant coverage lines. Many chose vacancy.
War-risk premiums spiked beyond what most shipping firms could absorb. The shadow fleet โ tankers with opaque ownership, disabled transponders, and crews paid in cash โ had already grown around Iranian crude exports, and those are exactly the operators no legitimate insurer will touch. Into that void stepped companies with Islamic Revolutionary Guard Corps linkages, offering "safe transit" insurance, payable in Bitcoin. Shipowners who want to run the gauntlet now face a stark choice: sail uninsured into a shooting war, or pay premiums in BTC to an OFAC-sanctioned network. Mapping the invisible architecture of value, the scheme sits not in the technology layer, but in the gap between state-backed risk pricing and geopolitical reality. That gap is the story.
The Technical Contradiction
Technically, the operation is almost banal. No smart contracts. No new protocol. No tokens, no governance, no yield, nothing to audit. It is Bitcoin used the way smugglers use a tunnel โ an existing pathway with a specific property set: borderless, impossible to freeze at the protocol level, denominated outside the dollar system. I've audited enough DeFi protocols to recognize when something warrants a technical deep dive and when it doesn't. This doesn't. But the absence of code is not the absence of risk; it's where the analytical trap snaps shut.
The scheme's foundational assumption is that Bitcoin confers operational anonymity. That assumption died years ago. The blockchain is the most transparent accounting ledger humanity has built; every satoshi carries provenance. OFAC doesn't need to crack mixers or coerce validators. It needs one genuinely compliant exchange, one subpoena, one solid chain-analysis report. The irony curdles cleanly: the very property that makes Bitcoin attractive to a sanctions evader โ immutability โ is the property that converts his financial history into permanent, admissible evidence.
Notably, the scheme reportedly runs on Bitcoin rather than stablecoins like USDT. That choice tells an analyst a great deal. Issuers can freeze stablecoin balances; Tether has demonstrated its willingness to cooperate with law enforcement on sanctions-related requests. Bitcoin offers no kill switch โ but it also leaves a trail that no VPN churn or offshore proxy can obscure. Anyone who believes they are anonymous on Bitcoin is operating on circa-2015 intelligence.
The Treasury's report identifies Zanjani as a "fallen regime financier," whatever that phrase is worth โ a courier between Iranian shadow networks and the international payment system, going back at least a decade. The insurance operation was managed by the IRGC-linked Persian Gulf Marine Insurance, with HormuzSafe Marine Services Authority acting as the front office. In other words: the same forces that control the strait are selling safety from the strait. The toll is collected in crypto because the dollar is off-limits and the SWIFT network is a surveillance corridor under hostile control.
The Exchange Chokepoint
The real chokepoint, though, was never the protocol. It was Binance.
I've spent years watching exchange compliance teams reconcile the tension between liquidity and law. Sanctions screening works only when the identity behind an account is knowable. Structured transfers, shell-company registrations in Dubai or Istanbul, layered corporate fronts โ that's the standard evasion playbook. The fact that Zanjani's network moved $850 million through a post-settlement Binance suggests two possibilities: either the screening engine was structurally incapable of connecting those flags to his prior conviction, or the network distributed flows across accounts that never individually tripped a threshold. Based on my experience auditing compliance architectures, I suspect both. The system was optimized to catch obvious violators and systematically underweighted the profitable ones.
Pause on that. Binance already paid $4.3 billion in its 2023 settlement with the Department of Justice. OFAC praised its cooperation. If the designation narrative holds, Zanjani was moving millions through the platform in the years after. Institutional compliance is not a fixed state; it is a continuous negotiation between growth incentives and enforcement pressure. The market has priced exchange compliance as a sunk cost rather than a living system. This event suggests otherwise.
When OFAC adds a wallet address to the SDN list, the obligation ripples outward automatically: exchanges must screen against the roster, freeze matched balances, and file reports within hours. The centers of gravity in this story are not miners or nodes; they are customer-onboarding desks in a handful of exchanges scattered across Dubai, Singapore, and the Cayman Islands.
There is also the matter of scale. If a scheme like this achieves even a fraction of what its operators are reportedly aiming for โ sums that, according to regional officials, could reach ten figures in nominal payments โ that converts into real on-chain volume. It feeds fee revenue to miners, yes, but more importantly it feeds a regulatory narrative. Every Bitcoin payment to a protection racket becomes a data point in the argument that crypto requires stricter infrastructure-level controls. In this market, the narrative is the new liquidity, and this story mints it for the regulatory side.
The Shipowner's Dilemma
Then there are the shipowners โ the human layer most crypto coverage will miss. There's an anthropology of the tokenized soul here. The average bulk-carrier operator running Iranian crude is not a crypto enthusiast. He is a risk manager whose insurance just vanished, and the only provider of peace of mind is the same naval force that controls the strait.
The "premium" is protection money. The "policy" is the assurance that your vessel won't be singled out for boarding, inspection, or something worse. Paying means transacting with an OFAC-sanctioned entity and exposing yourself to secondary sanctions. Not paying means sailing uninsured through a chokepoint where the IRGC has already demonstrated its willingness to act. This is not a rational market. It is a coercion market wearing the costume of finance โ a shadow fleet of unwilling participants paying invisible tolls to the state that threatens them. History has names for this arrangement that predate cryptocurrency by several centuries.
The Contrarian View
Now the contrarian reading.
The default narrative writes itself: crypto enables sanctions evasion; regulators must crack down. The opposite interpretation is more accurate and more consequential: this episode is a case study in how easily the US reaches into cryptocurrency flows when it actually wants to. OFAC identified the scheme, mapped the players, and sanctioned them by name. The blockchain was not an obstacle โ it was the investigative instrument. Zanjani isn't a crypto-anarchist mastermind. He's a convicted bank fraudster who found a rail that worked for a while, then got caught again, in full daylight.
The deeper story is the failure of marine insurance as a market, not the rise of Bitcoin as a threat. P&I Clubs abandoned Hormuz coverage because the risk became actuarially unpriceable โ no model accounts for a regional power operating a toll booth through its own navy. The IRGC filled a vacuum that conventional finance left open. Bitcoin was the gap-filler. Stories that move money faster than code are still stories; this one just has missiles in the background.
The uncomfortable corollary: this episode accelerates the exact regulation that makes crypto harder for everyone. OFAC has been moving enforcement toward the infrastructure layer for years โ listing crypto addresses on the SDN roster, proposing rules that would pull DEXs and self-custody products into AML frameworks. Every headline connecting Bitcoin to an Iranian protection racket feeds that trend. The industry insists, correctly, that this is just a payment rail. Regulators hear "sanctions evasion at the speed of code." They are not entirely wrong.
The "illicit demand is still demand" crowd will point to this as proof of Bitcoin's utility. It would be a mistake to agree. The plan's survival depends on access to compliant fiat on-ramps โ the same exchanges that, under pressure, will freeze and seize without hesitation. The demand is real, but it is demand for a tool the regulators can see clearly now. Meanwhile, the quiet beneficiaries are the chain-analytics firms, sanctions-screening vendors, and forensic accountants. Every designation validates their product. The compliance-technology demand curve is the one line in this story pointing straight up.
What to Watch
Watch three signals over the coming months.
First, whether OFAC publishes the specific Bitcoin addresses tied to HormuzSafe. If it does, every compliant exchange must freeze them on sight, and the scheme's payment channel collapses overnight. The speed of that freeze is a real-time test of whether exchange compliance is a mechanical checkbox or a meaningful control. Second, whether Binance faces renewed enforcement for the Zanjani flows; a second major action against the same exchange resets the compliance conversation industry-wide. Third, whether imitation schemes appear in other chokepoints โ the Red Sea, Malacca, the South China Sea โ anywhere state-aligned actors control access and conventional insurers have retreated. That would confirm this as a durable pattern, not an anomaly.
The deeper question, the one I keep circling as I close this piece: what happens when crypto's neutral-ground mythology collides with a superpower's determination to map the gravity of global capital? The blockchain made the battlefield easier to navigate โ and easier to surveil. For the shipowner in Hormuz, for the compliance officer in Dubai, for the convicted financier who believed he'd found a clean rail: the ledger remembers. Hunting ghosts in the blockchain ledger turns out to be straightforward work when the ghosts keep using the same exchange.
The Strait of Hormuz was always about passage. Now passage has a toll, and the toll has a transaction hash. The ghosts, for once, are the easy part to find.