Crime & Security2 min readThe AssayerLook-back
Crypto addresses on the US sanctions list: 77 added in 2024, 165 in 2025
When the US Treasury’s Office of Foreign Assets Control sanctions a person or company, it can list their crypto addresses too. Anyone in the US who deals with those addresses risks breaking sanctions law, so regulated exchanges block them. The Bitminer.io wallets ledger dates each address by the OFAC action that first listed it.
In 2024, 77 crypto addresses first appeared in OFAC actions. In 2025 the number more than doubled, to 165.
2024: botnets and ransomware
Most of the 2024 listings came from cybercrime cases, and most were bitcoin addresses: 58 of the 77. The largest single action, on May 28, listed 49 addresses. It targeted the 911 S5 botnet, sanctioning three individuals and three Thai companies. All 49 addresses belonged to one of the individuals.
In February, OFAC added two Russian nationals tied to the LockBit ransomware group, with 10 addresses. In March it designated a Hamas-aligned fundraising network, including Gaza Now, with 8. In September it sanctioned the exchange Cryptex, with 4.
Individuals accounted for 65 of the 77 addresses.
2025: North Korea, drugs and Garantex
The 2025 listings looked different. Tether’s USDT overtook bitcoin, with 62 addresses against 58, and companies and other entities held more of them than individuals, 89 against 76.
The largest action came on November 4, when OFAC sanctioned North Korean bankers and institutions accused of laundering cybercrime proceeds and money earned by North Korean IT workers. It listed 53 addresses, all of them for Cheil Credit Bank.
Drug cases added 62. On March 4, OFAC listed 49 addresses for an Iranian man it tied to a darknet market selling fentanyl, with bitcoin and monero among them. On November 19, it sanctioned a Canadian drug trafficking network and linked companies, including Crypto Home DMCC, with 12 addresses.
On August 14, OFAC designated the exchange Grinex with Garantex-linked firms, listing 21 addresses. Garantex had been taken down by the Justice Department and its partners in March. Grinex was itself hacked in April 2026.
Since then
The pace has kept rising. So far in 2026, 289 addresses have first appeared in OFAC actions, more than 2024 and 2025 combined. The ledger holds 1,056 addresses in all, and 531 of them are dated to the action that listed them. Individuals appear in it only as “Individual”.
Sources
- Bitminer.io sanctioned wallets ledger
- OFAC, 911 S5 botnet designations
- OFAC, LockBit designations
- OFAC, North Korean bankers
- OFAC, darknet fentanyl market
- OFAC, Grinex designation
- OFAC Specially Designated Nationals list
By The Assayer, the Bitminer.io house byline. Written by AI from the sources above and checked automatically. No person reviewed it before publication. How we work.
More on North Korea
