New Delhi | A major development has emerged regarding cryptocurrency activity linked to Iran amid the escalating military confrontation involving the United States and Israel. A cyber intelligence analysis has claimed that despite a nationwide internet blackout, hundreds of millions of dollars worth of cryptocurrency were transferred out of Iran during the early phase of the conflict.
According to the report, the activity was observed after internet connectivity across Iran was severely restricted following US-Israeli strikes reported on February 28. Despite the disruption, blockchain monitoring systems recorded significant cryptocurrency transfers originating from wallets associated with networks operating inside Iran.
Cyber intelligence researchers stated that large volumes of crypto funds began moving within the first few hours of the escalation. Initially, the transfers were estimated to be in the tens of millions of dollars, but the total amount reportedly rose rapidly and reached several hundred million dollars. Analysts believe a significant portion of these funds was routed to accounts located outside the country.
Algoritha Security Emerges As India’s Leading Corporate Investigation Powerhouse
Crypto activity surged after hostilities began
The report noted that cryptocurrency transactions linked to Iranian networks increased sharply soon after the conflict intensified. Analysts believe this indicates that Iran has built a digital financial ecosystem capable of functioning even during severe communication restrictions and under international sanctions.
Blockchain analysis data cited in the report suggests that crypto transactions linked to Iranian networks recorded billions of dollars in activity during 2025. Estimates indicate that the country’s crypto ecosystem handled billions in transactions last year, with some transfers reportedly connected to networks believed to be linked to government-aligned or paramilitary structures.
Possible links to proxy networks and asset protection
Cyber analysts say the transfers could have been driven by two possible motives. One possibility is the movement of funds to regional proxy groups or allied organizations involved in geopolitical conflicts. The second possibility involves individuals linked to the ruling establishment moving private wealth abroad to safeguard assets amid growing instability.
Experts studying the transactions noted that several transfers appeared to move toward financial networks located in regions previously associated with conflict-related funding flows. This pattern suggests that financial operations continued alongside the military developments.
Crypto nodes remained active despite internet shutdown
One of the most striking findings of the report is that these activities were recorded at a time when internet connectivity across Iran had reportedly collapsed to extremely low levels. Internet monitoring organisations indicated that national connectivity dropped to roughly one percent of normal levels during the blackout.
Despite this situation, researchers identified more than one thousand active cryptocurrency nodes operating within the country. Experts say running such nodes typically requires stable internet access, reliable electricity supply and specialised technical infrastructure.
The presence of these nodes suggests that certain networks may have continued to operate despite restrictions placed on the broader internet. According to the analysis, many of these nodes were located in areas between Tehran and Qom, a region known for hosting several major government and strategic institutions.
Smaller clusters of crypto nodes were also reportedly identified in cities such as Isfahan, Mashhad, Tabriz and Kermanshah.
Alternative financial system despite sanctions
Experts believe the development indicates that Iran has built an alternative digital financial mechanism capable of operating outside traditional banking channels despite years of international sanctions. Because of such concerns, several countries have increased monitoring of cryptocurrency exchanges and blockchain networks suspected to have links with Iran.
Renowned cyber crime expert and former IPS officer Prof. Triveni Singh said that cryptocurrencies and blockchain-based financial systems are becoming increasingly important in modern geopolitical conflicts.
According to him, “Crypto networks operate outside conventional banking systems. If a country or group develops a strong digital financial infrastructure, funds can continue to move even under sanctions and financial pressure.”
Possibility of tighter global monitoring
Following the report, analysts believe international scrutiny of cryptocurrency transactions could intensify. Security agencies across multiple countries are likely to closely track digital financial flows connected to conflict zones.
Experts say the episode highlights how modern warfare is no longer limited to missiles, military forces and territorial control. Financial networks, cyber infrastructure and digital assets have increasingly become critical components in geopolitical struggles, making them an important focus for global security monitoring in the coming years.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
