On July 1, 2026, the U.S. Office of Foreign Assets Control (OFAC) updated its Specially Designated Nationals (SDN) list to include 134 cryptocurrency addresses linked to the Islamic State Khorasan Province (ISKP). These addresses have collectively moved over $2 million. ISKP has relied heavily on USDT since at least 2022, with transactions ranging from $10 to $15,000. In late 2023, the group began publicly soliciting Monero donations through its Voice of Khurasan magazine. TRM Labs has tracked ISKP's crypto financing since 2022, including funds tied to the March 2024 Moscow theater attack that killed over 125 people; blockchain data enabled rapid tracing of funds to ISKP-controlled wallets. Despite disruptions such as the 2025 capture of financier Ozgur Altun near the Afghanistan-Pakistan border, ISKP's fundraising infrastructure has decentralized across multiple subgroups. This marks the second OFAC action targeting ISKP's crypto use, following the July 2023 designation of Ali Shafiu and an address linked to ISIS-K media operations.

Key facts

• OFAC added 134 crypto addresses linked to ISKP on July 1, 2026
• Addresses collectively moved over $2 million in USDT and other crypto
• ISKP began soliciting Monero donations in late 2023 via Voice of Khurasan
• TRM traced funds from the 2024 Moscow attack to ISKP wallets within hours
• Financier Ozgur Altun captured in 2025, but network decentralized further