Federal prosecutors are investigating whether Binance Holdings, the operator of the world's largest cryptocurrency exchange, violated US sanctions on Iran by failing to stop certain trading on its platform, Bloomberg reported on Tuesday, citing people familiar with the matter.
The report was corroborated by Reuters and Bloomberg Law, and the inquiry is being run by the US Attorney's Office for the Southern District of New York together with the Justice Department's Criminal Division, according to CoinDesk and Gizmodo, which cited both outlets.
The investigation is at a reporting stage only: no charges have been filed, and neither the Justice Department nor Binance has publicly confirmed the probe. Bloomberg's sources said prosecutors are examining whether trades involving Iran-linked funds continued on the platform despite US sanctions prohibitions — and, according to secondary reports, whether the compliance controls Binance adopted after its 2023 settlement were adequate to stop them.
The 2023 Settlement Shadow
The probe lands on a company already operating under the largest enforcement settlement in crypto history. In November 2023, Binance pleaded guilty to violations of the Bank Secrecy Act and US sanctions programs and agreed to pay roughly $4.3 billion in penalties, with founder Changpeng Zhao stepping down as CEO and serving a prison sentence.
That settlement resolved Binance's historical conduct — including acknowledged trading by users in Iran and other sanctioned jurisdictions — but it did not immunize the company against new allegations. A fresh finding that Iran-linked trading continued after the settlement, or that post-settlement controls were knowingly weak, would raise materially different questions about the monitorship and compliance undertakings Binance gave the US government.
The $61 Million Forfeiture Thread
The reported probe follows a related court action already on the public record. On September 15, prosecutors in New York filed a civil forfeiture complaint seeking approximately $61 million in cryptocurrency accumulated through black-market sales of sanctioned Iranian oil and petroleum products by two China-based companies — Blessed Trust and Hexa Whale — which allegedly used Binance trading accounts to launder the proceeds, with funds intended to benefit the Iranian government and military.
TrustGrade reported that action when it was unsealed. The forfeiture complaint described exchange accounts as the laundering rail; the new reporting suggests prosecutors have since widened the question from who used the platform to whether the platform itself failed to stop them.
Why Compliance Failures Are Security Failures
Sanctions and AML controls sit at the intersection of compliance and security engineering: detecting Iran-linked activity requires the same capability stack as any other threat — identity and geolocation signals, deposit-address clustering, transaction monitoring and rapid freeze execution. The 2023 plea established that Binance's stack was inadequate for years. The open question in the reported probe is whether the rebuilt version performs under sustained testing by determined actors.
For institutions interacting with the exchange — counterparties, custodians, and corporate clients onboarded since the settlement — the practical risk is counterparty and settlement continuity if enforcement escalates. The 2023 precedent shows the DOJ's preferred remedies include monitors and independent compliance overseers rather than shutdown, but the case is a reminder that an exchange's control environment is part of its security posture.
All conduct described remains alleged and under investigation; no new charges have been brought against Binance, and the company has not publicly commented on the reported probe.
TrustGrade scores exchanges on compliance and security posture as part of its registry. Verified trust data: trustgrade.ai.