Ariomex Tied to Iran Sanctions Evasion via Large Crypto Flows

A newly obtained database from Iranian cryptocurrency exchange Ariomex suggests the platform may have played a role in sanctions evasion and large-scale capital transfers linked to actors inside the country, according to Infosecurity Magazine. Resecurity said the analysis, covering 2022 to 2025, reviewed 11,826 verified user records with 27 potential matches against sanctions lists, and found about 7,710 records originating from Iran, with others linked to the US, Germany, France, the Netherlands and the UK.

In the data, 70% of traded assets on Ariomex were Tether and Tron, and most transactions were small, though investigators flagged larger requests, including daily transfers between $50,000 and $100,000; some high-value accounts operated with incomplete verification data yet handled substantial balances.

The report notes withdrawal limits were imposed by Ariomex, but verified customers could access up to $50,000 monthly, while some multimillion-dollar transactions were documented, including one example of a user seeking to exchange $19m. The Nobitex incident in June 2025—attributed by investigators to the group Predatory Sparrow—is cited as having similarities to these patterns, and the company says it will continue assisting agencies in identifying crypto-based sanctions evasion networks linked to Iran.