The United Kingdom has initiated the formal dissolution of two London-registered companies following evidence that they facilitated 1 billion dollars in transactions for the Iranian Revolutionary Guard Corps. Investigative findings reveal that the entities operated as a unified enterprise to move digital assets through the Tron blockchain while bypassing international anti-money laundering protocols. This regulatory action underscores the increasing use of the British corporate registry by sanctioned state actors to establish offshore financial infrastructure. By targeting these firms, the UK government aims to dismantle a key corridor used to integrate prohibited capital into the global economy. Authorities have emphasized that the appearance of a UK registration does not shield firms from the legal consequences of state-sponsored money laundering.

Sanctions Evasion and the Role of the Iranian Revolutionary Guard Corps

The mechanism of the alleged laundering operation centered on two specific entities, Zedcex and Zedxion, which presented themselves as conventional cryptocurrency trading platforms. According to a comprehensive TRM Labs report, these firms were not independent businesses but functioned as a single enterprise embedded within a broader sanctions evasion ecosystem. Between 2023 and 2025, the network processed approximately 1 billion dollars in funds linked to the Iranian Revolutionary Guard Corps, with activity peaking significantly in 2024. During that peak period, transactions associated with the military organization accounted for an estimated 87 percent of the total volume processed by the platforms. This scale of operation highlights a strategic shift from opportunistic misuse to the establishment of dedicated, exchange-branded infrastructure on foreign soil.

A critical finding in the investigation was the direct link between the corporate trail and Babak Zanjani, a notorious financier with a long history of state-aligned sanctions evasion. Zanjani, who was previously sanctioned for laundering billions in oil revenue, appears to have utilized these UK companies to reconstitute his financial networks using digital asset rails. The use of the Tron blockchain and Tether stablecoins provided the necessary liquidity and low transaction costs to move massive sums across borders without triggering immediate traditional banking alerts. The TRM Labs report notes that this was a deliberate attempt to leverage the reputation of the UK financial system to mask the movement of sanctioned assets. By using the USDT stablecoin, the orchestrators were able to maintain value while operating entirely outside the reach of conventional fiat currency controls.

The involvement of the Iranian Revolutionary Guard Corps in this scheme extended beyond simple currency exchange to the direct financing of regional proxies. On-chain analytics tracked over 10 million dollars in transfers from wallets controlled by the exchange directly to addresses belonging to Sa’id Ahmad Muhammad al Jamal. Al Jamal is a U.S.-sanctioned individual known for managing a smuggling network that provides financial support to the Houthis in Yemen. This direct connection between a UK-registered firm and terrorist financing activities has accelerated the government’s decision to dissolve the entities. The investigation further revealed that funds from these exchanges were routinely funneled into major Iranian platforms such as Nobitex and Wallex, effectively closing the loop on the illicit financial cycle.

Exploitation of Corporate Transparency and Front Entities

The success of the 1 billion dollar laundering operation was predicated on the exploitation of weaknesses in the UK corporate registration process. Both Zedcex and Zedxion utilized a fake front woman and straw person directors to provide a veneer of legitimacy while hiding the true beneficial owners. Corporate filings show that the firms frequently submitted dormant account statements, claiming no active trading operations in the UK while simultaneously processing hundreds of millions in digital assets. This discrepancy between official government filings and actual on-chain activity allowed the IRGC to operate for years without domestic interference. The use of shared virtual office addresses further disguised the physical reality of the operation, making it difficult for regulators to perform physical inspections.

Blockchain forensic analysis played a pivotal role in unmasking the relationship between the two companies and their military sponsors. Investigators utilized small deposits and withdrawals to map the internal wallet infrastructure, eventually identifying a network of 187 addresses previously designated as IRGC-controlled. These addresses were linked to the Administrative Seizure Order ASO-43/25 issued by Israeli authorities, which led to the blocklisting of several wallets by stablecoin issuers. The TRM Labs report highlights that the corporate structure was specifically designed to ensure operational continuity, with one firm being incorporated just days after a key director resigned from the other. This coordinated effort allowed the network to spread its risk across multiple legal shells while maintaining unified control under the IRGC.

The failure of the exchanges to maintain accurate records or conduct proper know your customer checks is a primary focus of the ongoing legal proceedings. By allowing the IRGC to operate as a shadow banking apparatus, the firms posed a significant threat to the security and integrity of the London financial hub. The UK government has responded by utilizing its powers under the Economic Crime and Corporate Transparency Act to strike these companies from the register. This move is part of a broader strategy to prevent the UK from being used as a safe haven for the proceeds of state-sponsored crime. The dissolution process also involves the permanent removal of the firm’s ability to hold assets or enter into contracts within the jurisdiction.

Technical Obfuscation and Global Financial Impact

The technical nature of the laundering scheme involved sophisticated layering techniques on the Tron blockchain to obfuscate the origin of the 1 billion dollars. By using a series of intermediate wallets and high-frequency transactions, the operators attempted to break the link between the Iranian source and the final destination of the funds. However, the persistence of the IRGC in using the same infrastructure allowed forensic analysts to build a comprehensive picture of the network’s activities over a three-year period. The fact that stablecoins were the preferred medium for this activity reflects their utility as a parallel payment rail for sanctioned regimes seeking to participate in global trade. The impact of this discovery has led to increased pressure on stablecoin providers to enhance their monitoring of addresses linked to offshore exchanges.

The revelation of a 1 billion dollar laundering conduit has significant diplomatic implications, particularly regarding the enforcement of international sanctions against the Iranian regime. It demonstrates that the IRGC is capable of infiltrating Western financial systems by adopting the guise of legitimate fintech startups. This case has forced a reevaluation of the risk profiles assigned to small, newly registered crypto firms that report high transaction volumes but list minimal domestic activity. The collaboration between international intelligence agencies and private forensic firms was essential in identifying the scale of the threat. The UK’s decision to dissolve these entities serves as a message that the government will take proactive steps to protect its markets from being weaponized by hostile state actors.

Furthermore, the case highlights the critical importance of moving sanctions enforcement upstream to focus on the governance and ownership of exchange platforms. Identifying a single illicit transaction is less effective than dismantling the entire infrastructure that allows such transactions to occur at scale. The TRM Labs report emphasizes that the real risk lies in who controls the platforms themselves, rather than individual users. As the digital asset market continues to mature, the focus of anti-money laundering efforts is increasingly shifting toward the systemic risks posed by state-aligned financial networks. The dissolution of the UK companies is a major milestone in this transition, marking one of the largest enforcement actions taken against an IRGC-linked crypto operation.

Strategic Response to Transnational Illicit Finance

The strategic response by the UK authorities involves not only the dissolution of the firms but also a comprehensive review of the loopholes that allowed them to operate. This includes enhancing the verification powers of Companies House to ensure that directors and beneficial owners are who they claim to be. The case of the 1 billion dollar stablecoin network has been a primary driver for recent legislative reforms aimed at increasing corporate transparency. By making it more difficult to register shell companies with fake directors, the government hopes to deter other sanctioned groups from attempting similar schemes. The focus remains on ensuring that the UK’s financial infrastructure cannot be easily co-opted by those seeking to bypass the global rule of law.

In conclusion, the dismantling of the IRGC-linked network represents a significant victory for international anti-money laundering efforts. The loss of a 1 billion dollar corridor is a major blow to the financial logistics of the Iranian military, disrupting their ability to fund proxy activities and evade economic restrictions. The transition toward more robust oversight of the crypto sector is essential for maintaining the stability of the international financial system. While technology provides new tools for money launderers, it also provides new ways for investigators to trace and seize illicit assets. The case of Zedcex and Zedxion serves as a definitive example of how transparency and rigorous enforcement can combine to expose and neutralize sophisticated state-sponsored financial crimes.

---

Key Points

• UK authorities have dissolved two London firms after a TRM Labs report revealed they moved 1 billion dollars for the Iranian Revolutionary Guard Corps.
• The operation involved the use of the Tron blockchain and Tether stablecoins to facilitate sanctions evasion and fund regional military proxies.
• Investigators discovered that the firms used proxy directors and dormant filings to hide a unified enterprise controlled by the IRGC and Babak Zanjani.
• The 1 billion dollar figure represents a massive escalation in state-sponsored money laundering through the British corporate registry and digital asset rails.

---

Related Links

• UK Government Financial Sanctions Guidance
• Financial Action Task Force Guidance on Virtual Assets
• Companies House Powers and Regulatory Reform
• FCA Cryptoasset Registration and AML Standards
• TRM Labs Analysis of IRGC Stablecoin Flows

Other FinCrime Central Articles About Iran’s Crypto Sanctions Evasion

• EU Sanctions Iran High-Level Officials After IRGC Designated as Terrorist Group
• Escalated Digital Asset Outflows from Iranian Platforms During Conflict
• The Binance One Billion Dollar Iran Sanctions Gap and Possible AML Tool Failure

Sources: TRM Labs, OCCRP, and MSN

Some of FinCrime Central’s articles may have been enriched or edited with the help of AI tools. It may contain unintentional errors.

Want to promote your brand, or need some help selecting the right solution or the right advisory firm? Email us at info@fincrimecentral.com; we probably have the right contact for you.