ARTICLE · 28 JANUARY 2019

Targeting Iran-Based Cyber Malfeasors, OFAC Identifies Associated Digital Currency Addresses

A&O Shearman

Contributor

A&O Shearman

Introducing A&O Shearman Unparalleled global depth for a changing world. Today more than ever,...

View firm profile

Explore more from A&O Shearman

On November 28, OFAC took action against two Iranian individuals, Ali Khorashadizadeh and Mohammad Ghorbaniyan, for their alleged role facilitating payment ...

IranTechnology

Author LinkedIn connections

On November 28, OFAC took action against two Iranian individuals, Ali Khorashadizadeh and Mohammad Ghorbaniyan, for their alleged role facilitating payment to Iranian cyber hackers involved in the multi-year SamSam ransomware attacks. More specifically, Khorashadizadeh and Ghorbaniyan are alleged to have helped exchange digital currency (bitcoin) ransom payments generated by the scheme into Iranian rial. OFAC stated that the pair converted millions of US dollars' worth of digital currency into fiat payments to the hackers by processing the payments through two digital currency addresses, which OFAC also identified. The action marked the first time that OFAC has publically attributed digital currency addresses to designated individuals.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Iran Conflict Spurs CISA Warning For US Critical Infrastructure

GlobalTechnology

NCSC Issues Warning As Middle East Events Heighten Cyber Risk

Report Provides New Data On Cryptocurrencies And Sanctions Evasion

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Technology
- FinTech

Related Comparative Guides

Comparative Guide

Artificial Intelligence

Comparative Guide

Fintech

Comparative Guide

Blockchain & Crypto Assets

See more popular content from

TechnologyA&O Shearman

Iran Conflict Spurs CISA Warning For US Critical Infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA), together with other federal partners, issued a joint advisory on April 7, 2026 warning of ongoing Iranian‑affiliated cyber activity targeting U.S. critical infrastructure, including the energy, water, healthcare and manufacturing sectors.

GlobalTechnology

NCSC Issues Warning As Middle East Events Heighten Cyber Risk

Events in the Middle East are a sharp reminder that geopolitical instability can quickly disrupt supply chains and escalate cyber risks.

Report Provides New Data On Cryptocurrencies And Sanctions Evasion

The report cautions that financial institutions should supplement all sanctions risk mitigation strategies to ensure that cryptocurrencies are not being used to transact with sanctioned countries.

Amendments To The Act On The Protection Of Personal Information Promulgated

Japan has enacted sweeping amendments to its Act on the Protection of Personal Information, introducing an administrative surcharge regime with monetary penalties for data protection violations, new protections for children under 16 and biometric data, and expanded exceptions for data utilization in statistical analysis and AI development. The reforms, which take effect in stages through 2028, fundamentally reshape Japan's privacy enforcement landscape by granting the Personal Information Protection Commiss

SEC Issues “Innovation Exemption” To Facilitate Trading Of Tokenized NMS Stock

The SEC has issued a groundbreaking Innovation Exemption allowing tokenized securities venues to facilitate trading of tokenized NMS stocks using automated market makers and liquidity pools. This temporary five-year exemption from exchange and dealer registration requirements establishes conditions for permissioned blockchain-based trading while granting public companies a 30-day window to object to third-party tokenization of their securities.

United StatesFinance and Banking

Delaware Chancery Invalidates Buyer Termination And Orders Specific Performance Of Obligations To Seek Regulatory Clearance For Merger

A Delaware Court of Chancery decision examines whether an acquiror can terminate a $2.35 billion merger agreement when antitrust approval is delayed beyond the outside date. The case centers on whether the acquiror's abandonment of discussions with a competitor—which triggered an FTC investigation—constitutes "willful conduct" that prevents the buyer from walking away from the deal.

United StatesCorporate/Commercial Law

Hong Kong SFC Issues Circular On The Use Of Generative AI Language Models

The Hong Kong Securities and Futures Commission (SFC) has issued a circular that sets forth comprehensive guidelines and expectations for licensed corporations (LCs) regarding the responsible use...

Hong KongTechnology

The EU’s Proposed Industrial Accelerator Act: What The Battery Industry Needs To Know—and Do

The European Commission's Industrial Accelerator Act proposes to reshape battery supply chains by conditioning access to EU public procurement and support schemes on strict origin requirements. As China controls over 80% of global battery manufacturing capacity, the legislation introduces escalating component-count thresholds that could fundamentally alter market access, financing structures, and supplier eligibility across the battery value chain.

GlobalGovernment, Public Sector

EU Packaging And Packaging Waste Regulation—what International Corporate Groups Should Know

The European Union's new Regulation on packaging and packaging waste has fundamentally transformed compliance requirements for companies placing packaged goods on the EU market, replacing decades-old directive-based frameworks with directly applicable product-law rules. While promising regulatory harmonization across member states, the reality presents a complex dual-compliance landscape where businesses must navigate both EU-wide packaging standards and diverging national implementation approaches.

European UnionEnvironment

Court Of Chancery Imposes Sanctions For Spoliation Of Signal Messages

The Delaware Court of Chancery imposed significant sanctions in a merger litigation case after finding that the company's controlling stockholder and senior officers recklessly destroyed Signal messages following legal hold notices. The court shifted the burden of proof by presuming certain facts favorable to plaintiffs, requiring defendants to rebut these presumptions with clear and convincing evidence rather than a preponderance standard.

United StatesLitigation, Mediation & Arbitration

How Spain’s Draft Data Center Rules Could Transform Digital Infrastructure Investment

Spain's draft Royal Decree introduces stringent energy sustainability, environmental, resilience and digital sovereignty requirements for data centers, including renewable additionality, hourly correlation, and efficiency standards. The regulation applies to all access and connection permits obtained after entry into force, with specific compliance deadlines for projects in progress and those with granted permits not yet connected to the grid.

SpainEnergy and Natural Resources

California Passes Suite Of Bills Advancing Child Online-safety Push

California has enacted a comprehensive package of four bills that fundamentally reshape online safety protections for minors, targeting addictive design features, data privacy practices, age verification systems, and platform liability. These new laws establish strict requirements for social media companies, including mandatory stripped-down interfaces for users under 16, enhanced privacy defaults, and potential damages up to $1 million for negligent harm to children. The legislation represents one of the m

United StatesMedia, Telecoms, IT, Entertainment

SEC Proposes Regulation Crypto Assets: Tailored Pathways For Covered Investment Contracts

The U.S. Securities and Exchange Commission has proposed Regulation Crypto Assets, introducing two tailored exemptions from Securities Act registration requirements for certain offerings of covered investment contracts involving crypto assets. The proposal establishes a startup exemption allowing up to $5 million in offerings over four years and a two-tier fundraising exemption permitting offerings up to $75 million...

United StatesFinance and Banking