UAE crypto sanctions risk moved from theory to paperwork on Friday, after the US Treasury blacklisted two crypto exchanges and a corporate network that includes companies registered in the Emirates. The Office of Foreign Assets Control designated Shelbit Exchange and Iran-based Aban Tether, alongside Iranian national Siavash Kayvanpour and a cluster of firms tied to him in the UAE, Georgia and Poland, accusing the network of moving digital assets for Iran’s Islamic Revolutionary Guard Corps. For compliance teams across Dubai and Abu Dhabi, the practical consequence is immediate: a fresh set of names and addresses that must be screened before the next settlement cycle.
Key takeaways: OFAC designated Shelbit and Aban Tether on 7 August 2026; IRGC-linked wallets sent more than $1 million to Shelbit addresses and received more than $2 million back, per Treasury; the designated network spans UAE, Georgian and Polish corporate registrations; the action follows a Reuters investigation that tied roughly $4 billion in flows to the Shelbit operation.
What OFAC actually designated
According to the Treasury press release, OFAC named Shelbit Exchange and Aban Tether as the two exchange entities in the action. Treasury said IRGC-linked wallets sent over $1 million in crypto to Shelbit addresses, while more than $2 million flowed from Shelbit addresses back to IRGC wallets. Wallets belonging to or controlled by Kayvanpour also sent more than $2 million to Nobitex, Iran’s largest crypto exchange, which Treasury blacklisted in June.
Aban Tether, Treasury said, processed millions of dollars in transactions involving sanctioned Iranian venues including Nobitex, Wallex, Bitpin and Ramzinex. Despite the name, the exchange does not appear to be connected to stablecoin issuer Tether. In a separate designation the same day, OFAC also targeted a network of foreign exchange houses and shell companies it said helped Iran’s shadow banking system move hundreds of millions of dollars, including proceeds from overseas oil sales.
Treasury Secretary Scott Bessent framed the action as evidence that pressure is working, saying the regime’s reliance on digital assets and shadow banking shows the campaign is biting, and that Treasury would pursue illicit networks whether they move dollars, rials or crypto.
Why UAE crypto sanctions screening just got harder
The Emirates connection is the part that matters locally. Several of the companies swept into the designation are registered in the UAE, which means Emirati corporate registries, banking relationships and free-zone service providers are now inside the perimeter of a US sanctions action. That is a different problem from an offshore exchange being blacklisted: it touches onboarding files, beneficial ownership checks and correspondent banking lines that regulated firms in the region depend on.
A Reuters investigation published on 31 July identified Shelbit as the hub of a roughly $4 billion sanctions-evasion operation, reporting that the platform moved crypto on behalf of Iranian counterparties and to addresses linked to the IRGC. Shelbit has rejected allegations that it knowingly participated in money laundering or sanctions evasion and has said it ceased operations in January 2026. Those denials do not change the screening obligation created by the designation.
The compliance workload for VARA and ADGM firms
Dubai’s Virtual Assets Regulatory Authority already tightened the ground rules this year. Guidance published in June requires licensed virtual asset service providers to refresh business risk assessments at least every three months, to build quantitative and data-driven risk scoring rather than static checklists, and to treat FATF high-risk and call-for-action jurisdictions as explicit inputs to that model. Iran sits on the FATF call-for-action list, which means enhanced due diligence was already expected before this week.
What changes now is specificity. Firms are no longer screening an abstract jurisdiction; they are screening named entities, named individuals and named corporate vehicles, several of which carry UAE registrations. Practically, that means re-running lookback checks across historical counterparties, verifying whether any client, introducer or payment agent maps to the designated network, and documenting the outcome in a form a supervisor can inspect.
The UAE has spent the past two years building a licence-first reputation, with more than 100 firms now authorised across five regulators. That reputation is an asset, and it is precisely why designations that touch Emirati corporate registrations get attention. Our earlier coverage of the UAE virtual asset licensing landscape and the rise in sanctions-evasion volumes on-chain sets out how quickly this category has grown.
What it means
This is an enforcement story, not a market story. There is no reason to read it as a signal about prices or about the UAE’s regulatory direction, which has been consistently toward tighter supervision rather than looser. The realistic read is narrower and more useful: sanctions risk in the Gulf is increasingly arriving through corporate structures rather than through obviously offshore exchanges, and the cost of finding out late is rising.
For institutional desks, the actionable point is that jurisdictional screening alone no longer covers the exposure. A UAE free-zone registration is not, by itself, evidence of clean counterparty risk. Entity-level and wallet-level screening, refreshed on the cadence VARA now requires, is the control that actually catches this. Firms that already run continuous screening will treat Friday as a routine list update. Firms that run it quarterly may have a lookback problem.
FAQ
Does the OFAC action mean UAE-licensed crypto firms are under sanction?
No. The designations target Shelbit, Aban Tether, Siavash Kayvanpour and specific companies tied to him, including entities registered in the UAE, Georgia and Poland. VARA-licensed and ADGM-authorised firms are not themselves designated, but they now carry a clear obligation to screen counterparties against the updated Specially Designated Nationals list.
What should a UAE VASP do first after a designation like this?
Re-run counterparty and wallet screening against the refreshed OFAC list, check historical exposure to the named addresses and corporate entities, document the review, and escalate any hits through the firm’s suspicious transaction reporting process under UAE AML rules.
Sources: US Department of the Treasury, CoinDesk, Reuters.
This article is for information only and is not financial, legal or investment advice. Cryptonite does not make price predictions. Always do your own research and consult a qualified professional before making decisions.
