U.S.-China Relations
NextFin News - U.S. federal prosecutors have opened a criminal investigation into whether Binance, the world's largest cryptocurrency exchange, violated American sanctions on Iran by knowingly allowing prohibited trading to proceed on its platform. The inquiry, reported on Monday and handled by the Manhattan U.S. Attorney's Office together with the Justice Department's Criminal Division in Washington, arrives less than three years after Binance agreed to a $4.3 billion settlement for sanctions, anti-money-laundering and money-transmission violations - and it asks a question the 2023 deal was supposed to have answered: did the court-ordered compliance overhaul actually change how the company behaves?
The probe is not a re-litigation of old conduct. It targets post-settlement activity, and it follows a civil forfeiture complaint filed on September 14 seeking $61 million in USDT tied to sanctioned Iranian crude oil sales. The combination is what makes this different from the steady drip of crypto-regulation headlines: a fresh criminal inquiry into knowing conduct, sitting on top of a forfeiture action that alleges more than $1.5 billion in laundered oil proceeds moved through Binance-linked accounts, all while the exchange operates under a federal compliance monitor whose reports were meant to certify that the company had reformed.
The New Probe and the Forfeiture That Preceded It
The criminal inquiry is being run by the Manhattan U.S. Attorney's Office with the Justice Department's Criminal Division in Washington also involved. Authorities are scrutinizing whether Binance knowingly allowed trading tied to Iran to pass through its exchange. The Justice Department declined to comment, and the Manhattan U.S. Attorney's Office could not immediately be reached for comment outside regular business hours.
The forfeiture complaint that set the stage was filed on September 14 with the U.S. District Court for the Southern District of New York. It seeks the forfeiture of $61 million in USDT allegedly tied to sales of sanctioned Iranian crude oil and petroleum products. According to the complaint, Chinese companies Blessed Trust and Hexa Whale used Binance trading accounts to handle the proceeds, which prosecutors say were to be shared with Iranian government and military organizations, including the Islamic Revolutionary Guard Corps. Prosecutors allege the network laundered more than $1.5 billion in proceeds from illegal oil sales.
Two caveats matter here. The forfeiture complaint is focused on the cryptocurrency held in the identified addresses and does not allege any wrongdoing by Binance. And the government itself noted that the allegations in a civil forfeiture complaint are unproven absent a court entering judgment in its favor. This is an allegation, not a finding - but it is the factual predicate on which the criminal probe now rests.
Binance's response was swift and categorical. "We have a zero-tolerance approach to sanctions violations," the company said in a statement. "We fully cooperate with law enforcement, and we remain committed to rooting out and shutting down bad actors." The company said its know-your-customer policy prohibits persons resident or located in Iran from accessing Binance.com, and it disputed the reports, saying it finds no evidence of Iranian involvement.
Binance also laid out its own timeline on the forfeiture entities: contacted by law enforcement in April 2025 regarding transactions involving Hexa Whale and other addresses designated for terrorism financing; KYC and transaction information provided in June; the account delisted from Binance.com in August; and Blessed Trust, which underwent source-of-funds checks, offboarded in January 2026. That sequence describes a company that acted once alerted. It also leaves open what happened before the alert, and why earlier internal flags did not produce faster action.
The 2023 Settlement Was Supposed to Be the Reset
To understand the stakes, start with what the 2023 resolution was meant to accomplish. On November 21, 2023, Binance Holdings Ltd. pleaded guilty to conspiracy to violate the Bank Secrecy Act and to fail to register as a money transmitting business, and to violating the International Emergency Economic Powers Act. The Department of Justice said the exchange "prioritized growth, market share, and profits over compliance with U.S. law in a deliberate and calculated effort to profit from the U.S. market without implementing controls required by U.S. law."
Prioritized growth, market share, and profits over compliance with U.S. law in a deliberate and calculated effort to profit from the U.S. market without implementing controls required by U.S. law.
The terms were historic: a $4.316 billion penalty, founder Changpeng Zhao's guilty plea to anti-money-laundering charges with a $50 million fine and his removal as CEO, and - most important for today's story - independent compliance monitors. The Justice Department appointed Frances McLeod of Forensic Risk Alliance to a three-year monitorship; the Treasury Department's Financial Crimes Enforcement Network selected Sharon Cohen Levin of Sullivan & Cromwell for a five-year term. Their job was to verify, from the inside, that the company that had operated without meaningful controls had built controls that worked.
The underlying conduct was extensive. Between January 2018 and May 2022, prosecutors said, Binance caused more than $898 million to be traded between U.S. users and users ordinarily resident in Iran. The exchange did not begin collecting know-your-customer information until May 2022, and it never filed a single suspicious activity report with FinCEN as the Bank Secrecy Act required. The settlement's bargain was simple: pay the largest penalty in the sector's history, submit to outside oversight, and earn a clean slate.
What the Documents Say Happened After the Settlement
Here is where the new probe bites. The criminal inquiry follows the exchange's dismantling of an internal investigation into more than $1 billion that had recently moved through the platform to a network funding Iran-backed terror groups, according to company documents and people familiar with Binance's operations. A trading account belonging to a close Binance business partner was identified as a primary channel that moved cryptocurrency to the Iranian network. Binance subsequently fired the investigators who had uncovered the transfers - and the network remained active.
A Binance spokeswoman said the investigators were not "suspended or terminated for raising compliance concerns" but instead left "based on individual circumstances." The investigation continued, she said, and resulted in the entities identified being removed from Binance's platform.
Separately, internal Binance compliance reports show that a network run by Babak Zanjani, an Iranian self-described "antisanction" operator, made $850 million in transactions over two years on the exchange, mostly on a single trading account. Zanjani allies - including a sister, a romantic partner and a director of his company - ran additional accounts, all accessed from the same devices, a pattern Binance investigators flagged as evidence of sanctions evasion. Even after multiple internal flags, the main account continued operating over a period of at least 15 months and was open as of January, according to the Binance reports.
And the timing carries its own weight. Weeks after President Trump granted a pardon to convicted Binance founder Changpeng Zhao in October 2025, executives at the crypto exchange dismantled the staff investigation into the $1 billion in Iran-linked flows. The pardon removed Zhao's personal legal exposure; the dismantled investigation, on the account of the documents, removed the internal threat to the network that was moving the money.
Why the Monitor Question Is the Real Story
The most consequential thread is not the probe itself - probes open and close every week - but what the probe implies about the monitor regime that was the centerpiece of the 2023 settlement. A compliance monitor is only as powerful as the findings it produces. If the monitor's reports show post-settlement sanctions breaches that the company did not disclose or remediate, prosecutors can argue the bargain never took hold: the company took the money and the time, but not the reform.
That context makes recent developments pointed. In mid-September 2025, reports emerged that Binance was close to securing an agreement with the Justice Department that would eliminate the compliance monitor requirement from its record settlement - part of a broader softening in the department's approach to court-appointed oversight. Whether that deal closed, and whether it was finalized before or after the internal investigation was dismantled, is precisely the kind of sequence a criminal inquiry will reconstruct.
The second-order consequence is what investors are not pricing. The first-order effect of this news is reputational - another headline, another legal overhang, another fine possibility that the market has learned to absorb. The second-order effect is that the probe tests the core premise of the 2023 settlement: that Binance could be trusted to police itself under supervision. If the answer is no, the next penalty is not a fine but a restriction on the business itself - tighter monitoring, expanded mandates, or limits on U.S. market access. Fines are a cost of doing business; operational restrictions are a threat to the business model.
The Broader Sanctions Enforcement Backdrop
The probe also lands inside a sharply escalating U.S. campaign against Iran's crypto infrastructure. In January 2026, the Treasury Department designated IRGC-linked exchanges Zedcex and Zedxion. In April, it designated two wallets as property of Iran's Central Bank, and Tether coordinated with U.S. law enforcement to freeze $344 million in USDT. In June, OFAC designated Iran's four largest domestic exchanges - Nobitex, Bit Pin, Wallex and Ramzinex - noting they accounted for roughly $7.7 billion, or 78 percent, of Iran's $9.9 billion in attributed 2026 crypto volume. The message from Washington is that crypto is now the central front in Iran sanctions enforcement, not a peripheral concern.
Against that backdrop, a global exchange that processed $898 million in Iran-linked trades before 2023 is being asked to prove it is not still the pipe. The burden of proof has shifted, and the documents described above make that burden heavier.
Market Reaction: A Calm That Sits Uneasily
BNB, the exchange's native token, barely moved on the news, holding in the high-$700 range with a market capitalization above $100 billion. That calm is itself a signal: investors appear to be treating the probe as headline risk rather than an existential one - for now. The market has priced Binance on the assumption that the 2023 settlement bought the company a clean slate and that legal overhangs are a recurring cost rather than an accumulating threat.
But the calm rests on a fragile premise. If the probe escalates to charges, or if the monitor's reports document post-settlement failures, the valuation logic changes - not because of the fine, but because of what the fine would represent: proof that the compliance rebuild did not work.
Cyclical or Structural? The Central Judgment
Is Binance's compliance problem cyclical - a control gap that monitors and procedures fix - or structural, embedded in the incentives of the business? The evidence points to structural.
A cyclical lapse looks like a missed transaction screen or a delayed filing - a control failure that new procedures repair. What the documents describe is different: an internal investigation into $1 billion in Iran-linked flows that was dismantled; investigators who were fired; an account that stayed open for at least 15 months after internal flags; a network that remained active after its channel was identified. Those are not the symptoms of a control gap. They are the symptoms of a priority order - and the priority order, as the Justice Department put it in 2023, placed growth, market share and profits ahead of compliance.
The counter-argument is real and should be stated plainly. Binance says it found no evidence of Iranian involvement. It says it cooperated with law enforcement once contacted, provided information, and offboarded the flagged entities. The forfeiture complaint does not allege wrongdoing by Binance. The fired investigators left for "individual circumstances," not because they raised concerns. On this view, the probe is routine follow-up on old flows, the compliance machine worked once alerted, and the 2023 settlement remains a genuine reset.
That case rests on one fragile premise: that the internal flags were anomalies rather than a pattern. If the monitor's next report shows a pattern - multiple post-settlement breaches, delayed remediation, or undisclosed conduct - the counter-thesis collapses. The falsifying signal is specific: if the monitor's next report finds no post-settlement sanctions violations and the Justice Department closes the probe without charges, the structural-failure thesis is wrong.
What to Watch and the Scenarios Ahead
Three signals will resolve this faster than the headlines suggest. First, the compliance monitor's periodic reports through the end of the three-year DOJ term - specifically whether they identify post-settlement sanctions breaches and how the company remediated them. Second, whether the Manhattan U.S. Attorney's Office and the Criminal Division escalate from a probe to charges, or close the inquiry without action. Third, the outcome of the September 14 forfeiture complaint - a court judgment would convert unproven allegations into established fact.
The base case is that the probe drags on, the monitor reports isolated post-settlement lapses, and Binance pays an additional fine without operational restrictions - the market absorbs another legal cost and moves on. The upside case is that the Justice Department closes the inquiry, Binance is vindicated, and the 2023 settlement is confirmed as a genuine reset - in which case today's muted market reaction was correct. The downside case is that the monitor finds systemic post-settlement failures, prosecutors bring new charges, and Binance faces restrictions on its U.S. access or a new, harsher monitorship - in which case the calm in BNB is a mispricing.
The 2023 settlement was supposed to turn Binance into a compliant company. This probe asks a harder question: whether a company that fired the investigators who found $1 billion in Iran-linked flows can ever be compliant at all - or whether compliance, at Binance, will always lose to the next billion in volume.
Explore more exclusive insights at nextfin.ai.
