Sanctioned Canadian Crypto OTCs Served Iran and Drug Cartels
Chainalysis examined eight Canadian crypto OTCs sanctioned by OFAC and found they moved millions of dollars for Iran’s IRGC and drug cartels. The report shows over $6 M from sanctioned Iranian sources and $6.8 M to the Ryan Wedding cartel.
Key points
- OTCs received >$6 M from Iranian sanctioned wallets and exchanges.
- More than $8.8 M was sent to the Ryan Wedding criminal enterprise.
- OTCs act as a bridge between Iranian regime finance and drug‑money laundering.
- OFAC’s first‑of‑its‑kind designations target Canadian crypto intermediaries.
- Disrupting one illicit network requires addressing the shared OTC infrastructure.
- Iran inflows
- $6 M
- Sanctioned entities
- $3.7 M
- Terrorist‑financing wallets
- $2.3 M
- Wedding Cartel outflows
- $8.8 M
- Other cartel outflows
- $2.5 M
- Total to Wedding org
- $6.8 M
- Sanctioned jurisdictions6 USD
- Sanctioned entities3.7 USD
- Terrorist‑financing wallets2.3 USD
Scope and Question
Chainalysis set out to determine how a cluster of Canadian over‑the‑counter (OTC) money‑service businesses fits into Iran’s sanctioned financial ecosystem and whether they also serve other criminal actors. The core question was whether these OTCs are merely conduits for Iranian regime‑linked crypto or if they support a broader illicit economy.
Data and Methodology
Using blockchain tracing tools, Chainalysis mapped inflows from wallets flagged on the NBCTF Seizures List and the OFAC sanctions list, then followed outbound transfers to known criminal wallets. The analysis covered transaction values, counterparties, and wallet attribution to entities such as the IRGC, Hamas, the Houthis, and the Ryan Wedding Criminal Enterprise.
Main Findings
The investigation uncovered more than $6 M in inflows from sanctioned jurisdictions, ≈$3.7 M from sanctioned entities, and an additional $2.3 M linked to terrorist‑financing actors. Outbound, the OTCs moved over $8.8 M to the Wedding Cartel and $2.5 M to other cartel‑linked wallets, converting bulk cash into USDT for drug traffickers. The same infrastructure therefore serves both Iran’s illicit finance network and high‑level narcotics operations.
Caveats
Chainalysis relies on wallet attribution, which can miss hidden relationships or misclassify benign activity. The reported figures represent identified flows; actual volumes could be higher. Moreover, the analysis focuses on eight designated OTCs and may not capture the full Canadian crypto OTC landscape.
Implications for Readers
The overlap of state‑sponsored sanctions evasion and transnational drug money laundering highlights a converging illicit finance ecosystem. Regulators and compliance teams should monitor not only sanctioned jurisdictions but also the crypto service providers that bridge disparate criminal economies. For investors, the findings underscore heightened AML risk in crypto OTC markets, especially those targeting niche linguistic communities.