OFAC Adds 18 New Crypto Addresses to SDN List

TL;DR - Treasury's OFAC SDN list gained 18 new digital-currency addresses on August 25, 2026, tied to five sanctioned individuals across CYBER2, CYBER4, HRIT-IR, and IRAN-EO13902 programs, and 11 of them are Ethereum wallets.

On August 25, 2026, Plastron's daily automated diff against the U.S. Treasury OFAC SDN list flagged 18 new digital-currency addresses. The addition brings Plastron's tracked OFAC digital-currency dataset to 988 addresses across chains, and every Ethereum-compatible address in that set is flagged Critical by the screener the moment a wallet touches it.

What happened

The 18 new entries split across three chains. Eleven are Ethereum addresses, six are Bitcoin addresses (three of them native segwit bc1q... formats), and one is a Tron-based USDT address. None of the addresses were previously present in Plastron's committed screening corpus; the diff run caught all 18 in a single pass and queued them for the dataset update that ships with this post.

OFAC's SDN list already carried multiple entries tied to some of these individuals before today. This update adds addresses, not new names - the sanctions programs attached to each entity (CYBER2, CYBER4, HRIT-IR, IRAN-EO13902) are unchanged designations, now extended to cover more wallets.

Who is affected

Five individuals account for the 18 new addresses:

• MESRI, Behzad (HRIT-IR, CYBER2) - 7 addresses, six Ethereum (0x1CAb8177ACe78b1B6B1c393371F4f2dCAE40CbEB, 0x252a8bd2319d8a555b872990601221b3a2053bce, 0x6Fac4D18c912343BF86fa7049364Dd4E424Ab9C0, 0x7F03679B56d8772530EFA516b58Bb83d4829E881, 0x8ac5381FCD9e7395D14e02986c344aADA84B4bC6, 0xA40cFBFc8534FFC84E20a7d8bBC3729B26a35F6f) and one Bitcoin (12aNKp2iDKuhEde2YfPdd4DFGenRUTKupL).
• BLAGH, Keyvan Fayyaz Gareh (CYBER4) - 5 addresses, two Ethereum (0x4060cbf80734193f521a3cc6fd4e985df2825279, 0x56de1527136f76a809e5b14ded6103eecd072ba7) and three Bitcoin (bc1q4ktvxxhhvf8qhs9qkdsm9arcxfmmeex6rl7n50, bc1qf6zxs4lkp9umh6hf087mh70w0ymcyt8cunp58r, bc1qr2pwmvkpq5tc5um2g9uh34yyu6wepwx89rts70).
• KAHZADIAN, Arman (CYBER4) - 3 addresses, two Ethereum (0xeb507efa9ee692a4c774ad1de9f3cb26fc459da3, 0xef85a6fafa5942a964dc618e94e230881d29ce2a) and one Bitcoin (1JGPiQGK78xTxAVoxA1MjK3Z15M84Rj6BL).
• GHAL'EH-KUHI, Mojtaba (CYBER4) - 2 addresses, one Ethereum (0x1b8579cf6ab12ea6b74ac5fa41f3829a3cb61e6e) and one Bitcoin (1GXeCkFQq7SYo6B7wdLAPkkri6NFTFB7No).
• TSORIS, Almpertos (IRAN-EO13902) - 1 address, a Tron-based USDT wallet: TJCBpxZ3yC7C7oegSRZMFxBcscmUVeSA36.

Why it matters

All 11 Ethereum addresses in today's batch are now Critical-risk under Plastron's screening logic, the same treatment applied to every EVM address already in the 988-address OFAC set. Anyone who sends funds to or receives funds from one of these wallets is transacting with a sanctioned address, regardless of whether they know the counterparty's identity. Exchanges, custodians, and DeFi front ends that screen deposits typically catch this after funds have already landed. A wallet-level check catches it before the transaction is signed.

What to do now

If you're about to send ETH, a token, or any EVM asset to an address you don't fully recognize, run it through Plastron's OFAC sanctions check first. The check pulls against the full, continuously updated SDN digital-currency list, including today's 18 additions, and returns a Critical flag instantly if there's a match. You can screen the address with Plastron for free, no signup required for a single scan.

For the full, current list of OFAC actions, see Treasury's OFAC recent actions page.