The U.S. Department of Justice has opened a new investigation into whether Iranian networks used Binance, the world's largest cryptocurrency exchange by volume, to circumvent American sanctions. The probe, reported by the Wall Street Journal on March 11, 2026, centers on more than $1 billion in T...
"There were no direct transactions between the exchange and any sanctioned entity." — Richard Teng, CEO, Binance
The U.S. Department of Justice has opened a new investigation into whether Iranian networks used Binance, the world's largest cryptocurrency exchange by volume, to circumvent American sanctions. The probe, reported by the Wall Street Journal on March 11, 2026, centers on more than $1 billion in Tether transactions that allegedly reached Iran-linked wallets via the Tron blockchain between March 2024 and August 2025. Binance's own internal compliance investigators reportedly identified the flows before the review was shut down.
On the same day the DOJ investigation became public, Binance filed a defamation lawsuit against Dow Jones & Company, publisher of the Wall Street Journal, in the U.S. District Court for the Southern District of New York. The suit challenges a February 23 article alleging Binance fired staff who flagged $1.7 billion moving to sanctioned Iranian entities. Binance says the departures resulted from data-protection policy breaches, not whistleblower retaliation.
The timing is notable. The investigation unfolds against an active U.S.-Iran military conflict that has disrupted shipping through the Strait of Hormuz, driven oil prices up over 60% year-to-date, and placed sanctions enforcement under heightened political scrutiny. Binance operates under a three-year DOJ compliance monitor imposed as part of its $4.3 billion settlement in November 2023 — a monitor the DOJ was reportedly considering removing before the new allegations surfaced.
The DOJ probe focuses on a specific allegation: that over $1 billion in USDT (Tether) moved through Binance to Iran-linked wallets via two Hong Kong-based intermediaries, identified as Hexa Whale and Blessed Trust. According to documents cited by the Wall Street Journal and company records gathered by Binance's internal investigators, these entities facilitated fund transfers for Iranian government bodies and affiliated groups.
Senator Richard Blumenthal opened a parallel Senate inquiry, citing reporting that indicated $1.7 billion in total had been transferred from two Binance accounts to "terrorist proxies." Blumenthal's letter to Binance CEO Richard Teng raised specific questions about why the exchange "chose to suspend or terminate compliance personnel who discovered illicit Iranian activity."
On March 6, Binance responded to the Senate probe by stating that an internal review found "no evidence of direct transactions between its platform and Iranian entities." The exchange acknowledged only "indirect exposure to potentially Iran-linked wallets," said it had removed the associated accounts, and stated it cooperated with law enforcement.
It remains unclear whether Binance itself is a target of the DOJ investigation or whether the inquiry is focused on the Iranian networks that used the platform.
Binance's defamation suit against Dow Jones challenges the core claim of the February 23 WSJ article: that the exchange fired compliance staff who raised concerns about Iran-linked fund flows. The complaint, filed March 11 in the Southern District of New York, alleges the article contained "false and defamatory statements."
Binance's position is that the staff departures were the result of violations of internal data-protection policies — essentially, that the employees were terminated for mishandling confidential information, not for flagging suspicious transactions. The distinction is legally significant: the former is a routine HR action, the latter could constitute whistleblower retaliation under multiple federal statutes.
The lawsuit is unusual in the crypto industry. Major exchanges have historically avoided suing mainstream media outlets, preferring to issue statements or blog posts to counter negative coverage. The decision to pursue litigation suggests either a high degree of confidence in Binance's factual position or a calculated strategic move to reframe the narrative ahead of further DOJ proceedings.
Binance's current regulatory standing is the product of a turbulent three-year period:
November 2023: Binance reached a $4.3 billion settlement with the DOJ, pleading guilty to violating the Bank Secrecy Act, operating an unlicensed money services business, and willfully violating the International Emergency Economic Powers Act (IEEPA). Founder Changpeng "CZ" Zhao pleaded guilty personally and agreed to pay $50 million, stepping down as CEO.
April 2024: Zhao was sentenced to four months in federal prison. He was released in September 2024.
Post-Settlement: Binance agreed to a three-year independent compliance monitor and a five-year monitor under the OFAC settlement. The exchange expanded its compliance team to approximately 1,500 employees — roughly 25% of total headcount.
Measurable Improvement: According to internal and third-party audits, Binance's direct exposure to illicit activity dropped 96% between January 2023 and June 2025. Sanctions-related exposure fell from 0.284% of transaction volume in January 2024 to 0.009% in July 2025 — a 96.8% reduction.
October 2025: President Trump granted Zhao a full pardon. The White House stated Zhao had been "prosecuted by the Biden Administration in their war on cryptocurrency."
Early 2026: The DOJ was reportedly considering early removal of the compliance monitor based on "significant improvements in Binance's compliance infrastructure." That review is now complicated by the new Iran-related allegations.
The data presents a contradiction. By quantitative compliance metrics, Binance improved substantially. Yet the qualitative allegation — that internal investigators were sidelined after discovering large Iran-linked flows — suggests the compliance infrastructure may have structural blind spots, or that the metrics do not capture all relevant risk.
The investigation exists within an exceptionally charged political context.
The Iran-U.S. Conflict: As of March 2026, the United States and Israel are engaged in active military operations against Iran. The Strait of Hormuz, through which approximately 20% of daily global oil exports pass, has been partially disrupted by reported Iranian mine deployments. Oil prices have surged over 60% year-to-date, with crude briefly touching $110 per barrel. The conflict has elevated sanctions enforcement from a bureaucratic function to a national security imperative.
The CZ Pardon and Trump-Binance Nexus: The October 2025 presidential pardon of Zhao drew scrutiny over the relationship between Binance and Trump-affiliated entities. In May 2025, Abu Dhabi state-owned firm MGX made a $2 billion investment in Binance, settling the transaction using USD1, a stablecoin created by World Liberty Financial — a crypto venture with significant financial ties to the Trump family. Binance had assisted in creating the initial code for USD1. Senators Elizabeth Warren and Jeff Merkley sought records on the deal, calling it "a staggering vehicle for corruption."
Compliance Monitor Removal Talks: The DOJ's reported consideration of early monitor removal — before the new Iran allegations — raises questions about whether the pardon influenced the regulatory posture toward Binance. There is no direct evidence of a connection, but the optics are difficult.
These threads — active war, presidential pardon, financial ties between the exchange and the president's family, and a fresh sanctions evasion probe — create a situation where the legal, political, and market implications are deeply intertwined.
Binance's centrality to cryptocurrency markets makes any regulatory action against it a systemic event.
The exchange processes approximately 39.6% of global spot trading volume, handling $3.54 trillion in spot trades from August 2025 through January 2026. The next nine largest exchanges each hold between 6.1% and 8.2% market share. In 2025, Binance processed $7.3 trillion in total volume.
This concentration means a severe enforcement action — a potential trading halt, asset freeze, or loss of banking relationships — would not merely affect Binance's users. It would propagate across the entire crypto market through liquidity fragmentation, spread widening, and cascading liquidations on connected platforms.
The Strait of Hormuz crisis has already demonstrated crypto's role as a 24/7 settlement venue. When traditional equity and commodity markets closed during weekend military operations, decentralized crypto exchanges became the primary venue for real-time price discovery in oil, gold, and other assets. Any disruption to the largest centralized exchange during a period of geopolitical stress would amplify volatility at a time when crypto infrastructure is being stress-tested as a parallel financial system.
The core technical question is whether Binance can reasonably be held responsible for the end-use of funds that traverse its platform via intermediaries.
The alleged Iran-linked flows moved through two Hong Kong-based entities acting as front companies. The funds traveled on the Tron blockchain in USDT — a stablecoin with limited on-chain transparency features relative to regulated banking rails. Attribution of Tron-based USDT flows to specific nation-state actors requires blockchain analytics capabilities that are improving but remain imperfect.
Binance claims its compliance systems flagged and removed the associated accounts. The dispute is over timing and response: did Binance act promptly upon detection, or were internal investigators sidelined before the accounts were addressed?
This question has implications beyond Binance. Every centralized exchange faces the same technical challenge. If the legal standard is that exchanges must detect and block all indirect exposure to sanctioned entities in real time — including flows that pass through front companies on pseudonymous blockchains — then the compliance cost for the industry rises substantially. If the standard is that good-faith efforts and post-detection remediation are sufficient, the current compliance framework is broadly adequate.
The DOJ's ultimate position on this question will set precedent for how sanctions law applies to cryptocurrency intermediaries during wartime conditions.
The Binance-Iran probe tests whether the crypto industry's compliance infrastructure can withstand scrutiny during a period of active geopolitical conflict. The exchange's statistical improvements are real — a 96.8% drop in sanctions exposure is measurable and significant. But compliance is not solely a quantitative exercise. The allegation that internal investigators were terminated after discovering large Iran-linked flows, if substantiated, would indicate a structural flaw that no percentage can capture.
For the broader market, the case is a stress test. Binance's 40% market share means it is, by volume, more dominant in crypto than any single entity is in most traditional financial markets. The convergence of a DOJ probe, a wartime sanctions environment, and political entanglements around the CZ pardon creates a situation where the outcome will shape regulatory expectations for every major exchange.
The defamation lawsuit against the Wall Street Journal adds a combative dimension that is new for the industry. Whether it succeeds or fails, it signals that the largest crypto exchanges no longer intend to absorb negative coverage passively.
Data is still emerging. The DOJ has not disclosed the scope of its investigation or whether Binance is a target versus a venue. The lawsuit is in its earliest stage. The Iran conflict remains fluid. What is clear is that the intersection of sanctions enforcement, crypto market structure, and political relationships has produced a situation with no historical precedent in digital asset markets.