TL;DR - OFAC added 14 new digital-currency addresses to its SDN list on September 10, 2026, covering one Monero address tied to ISIL Khorasan and 13 Tron addresses tied to Xinbi Guarantee.
On September 10, 2026, Plastron's automated daily diff against the U.S. Treasury OFAC Specially Designated Nationals (SDN) list picked up 14 new digital-currency addresses. That's a real-time detection, not a manual review - the diff runs against our committed screening dataset every day so new designations get flagged the same day Treasury publishes them.
What happened
Treasury's SDN list gained 14 crypto addresses in this update. Thirteen are Tron (TRX) addresses designated under the Transnational Criminal Organization (TCO) program and attributed to Xinbi Guarantee: TBKpozurdWLrbKkxtDqkveeq1dSB8Axj3V, TDU61o35UEe5hdB3R16c116DrPSV4kiyKz, TEECjwHqVG8sDmM3VtscjuCaRe5p351MU7, TG83Fk56S2mycAUMYHZyZp9wMg6DCf4bUn, TK3n8pGHvDTcK53mpfeDAMzdwjb22qvFU3, TKRNCETxbiMmyyMraCkgdXKdLr1ZkmKxV5, TTWRf2MD6zJ26bS4uKCNrcp84aAr7AmTjm, TW5tokvhEfrb77z98Rc8HqbkzQJ6sxYtGX, TWPma8xH48AEN93x2krdukV9e1j6sPsBeS, TWqcMjV7Wq2RHe2CSiKQHpkn6A7B2AWUPe, TXHX2NUvcgft4zs6MkkUtdNVERPTavHDWN, TYkE8VwX1SGHM3Q2CA29nka5U2F2khKAj5, and TYvjt4ZKfsipHjA52nzgjUjDBF622SLCih. The fourteenth is a Monero (XMR) address, 45ezvPejNsKYntjhyyeb7fbfzi1sxYQozc5Ffseh8jPGW4JZQQVXykNTfK5uGFiij7Hp3qPv3T5HCR7F3Fnmz2mzE1aKQwo, attributed to ISIL Khorasan and designated under both the Foreign Terrorist Organization (FTO) and Specially Designated Global Terrorist (SDGT) programs. Full details sit in Treasury's recent actions feed.
Who is affected
Anyone holding, transferring, or receiving funds tied to these 14 addresses now sits inside sanctioned territory. Xinbi Guarantee's 13-address cluster is the bigger operational concern for most compliance teams: a single entity spread across that many Tron addresses usually means layered payment rails, and any wallet that's touched one of them is worth checking against the rest. The ISIL Khorasan Monero address carries a narrower but heavier designation stack - FTO plus SDGT means exposure isn't a civil-penalty risk, it's a terrorism-financing risk. Exchanges, OTC desks, and individual counterparties who've interacted with any of these 14 addresses, directly or through an intermediary wallet, are affected the moment the designation posts.
Why it matters
This update brings Plastron's screening dataset to 1,040 OFAC digital-currency addresses tracked across chains. Every EVM address in that dataset is flagged Critical the instant our screener sees it touch a wallet under review. Tron and Monero addresses don't screen against Ethereum wallets directly, but that's not the point - designations like this show how sanctioned entities structure across chains and split volume across dozens of addresses to avoid concentration risk. An EVM counterparty that's one hop from a Xinbi Guarantee-linked Tron address, or that's swapped through a bridge touching the ISIL Khorasan address, carries real exposure even though the address on the SDN list itself isn't an Ethereum address.
What to do now
Before sending funds to or accepting funds from an unfamiliar EVM address, run it through an OFAC sanctions check. It takes seconds and it catches direct hits against the full, continuously updated SDN list plus one-hop exposure to known sanctioned clusters. If you're an exchange or payment processor with Tron or Monero rails, cross-reference the 14 addresses above against your transaction history now - don't wait for a batch compliance review. For everyone else, the simplest habit is the most effective one: screen the address with Plastron before you transact, not after.
Treasury adds addresses on an ongoing basis, tied to specific enforcement actions rather than a fixed schedule. Automated daily diffs are the only reliable way to catch a new designation the same day it posts.
Does a Tron or Monero designation affect Ethereum wallets?
Not directly - the address itself only screens against its native chain. But funds frequently move across chains via bridges and swaps, so an EVM wallet with transaction history touching a bridge or exchange that processed one of these addresses can carry indirect exposure.
What does an FTO/SDGT designation mean versus a TCO designation?
FTO (Foreign Terrorist Organization) and SDGT (Specially Designated Global Terrorist) designations attach to terrorism financing and carry the strictest sanctions exposure. TCO (Transnational Criminal Organization) designations target organized criminal networks - both prohibit U.S. persons from transacting with the designated addresses, but the underlying conduct differs.
Where can I verify these designations directly?
Treasury's recent actions page lists every SDN update with source documentation, including the sanctions program citation for each entity.
Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.
About Plastron
Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.