FATF Blacklist Explained: How Iran, North Korea, and Myanmar Use Crypto to Evade Sanctions

Imagine trying to hide a billion dollars in plain sight. For regimes under heavy international pressure, traditional banking systems are locked doors. But the blockchain? That’s an open window. As of mid-2026, three nations sit at the very top of the FATF blacklist: Iran, North Korea, and Myanmar. These aren’t just names on a diplomatic list; they represent the epicenter of global financial crime, where state-sponsored actors use cryptocurrency to bypass sanctions, fund military operations, and launder billions.

If you work in finance, compliance, or even just hold crypto in your wallet, understanding this dynamic is no longer optional. The Financial Action Task Force (FATF) calls these jurisdictions "High-Risk Jurisdictions Subject to a Call for Action." This means every bank, exchange, and fintech company on earth is expected to treat transactions from these countries with extreme caution-or cut them off entirely. Yet, despite these warnings, illicit flows continue to surge. Why? Because the technology moves faster than the laws meant to contain it.

The FATF Blacklist: What It Actually Means

To understand the threat, we first need to define the regulator. The Financial Action Task Force (FATF) is an intergovernmental body that sets standards for combating money laundering and terrorist financing. When a country lands on its "blacklist," it signals that their anti-money laundering (AML) and counter-terrorist financing (CFT) frameworks are critically weak or non-existent.

As of June 2025, only three countries remain on this elite list of high-risk jurisdictions:

• Iran: Subject to renewed countermeasure calls since February 2020 due to persistent gaps in transparency and enforcement.
• North Korea (DPRK): Flagged for using cyber-enabled crimes to finance weapons proliferation programs.
• Myanmar: Placed under enhanced due diligence measures following political instability and weakened regulatory oversight.

This isn't just paperwork. When De Nederlandsche Bank (the Netherlands Central Bank) updates its risk assessments, European banks immediately tighten credit lines. If your business partners with entities in these regions, you’re not just facing regulatory fines; you’re risking reputational collapse. The FATF doesn’t just suggest action; it demands it. Member countries must apply specific countermeasures, such as denying correspondent banking relationships or restricting access to capital markets.

North Korea: The Billion-Dollar Cyber Heist Machine

Among the three, North Korea stands out as the most aggressive predator in the crypto space. While Iran uses crypto largely for economic survival, North Korea uses it as a primary revenue stream for its regime. According to data from Chainalysis, sanctioned jurisdictions received $15.8 billion in cryptocurrency during 2024 alone. That number represents roughly 39% of all illicit crypto transactions globally.

How do they get it? They steal it. North Korean hacker groups, often linked to the Reconnaissance General Bureau, have become sophisticated enough to target major exchanges directly. In February 2025, the ByBit exchange suffered a massive breach resulting in the theft of $1.5 billion. This wasn’t a small-time glitch; it was a coordinated attack demonstrating the scale of state-sponsored cyber warfare.

By the end of 2024, sanctioned jurisdictions accounted for nearly 60% of total sanctions-related activity value. This shift is crucial. Previously, regulators focused on individual criminals. Now, entire nation-states are acting as criminal enterprises. The U.S. Treasury’s Office of Foreign Assets Control (OFAC) responded by issuing 13 designations in 2024 that included specific cryptocurrency addresses-the second-highest number in seven years. This marks a pivot from punishing people to punishing digital infrastructure.

Iran: Crypto as a Lifeline Amidst Economic Crisis

While North Korea steals, Iran adapts. For Iranians, cryptocurrency isn’t just about crime; it’s about survival. Facing decades of crushing economic sanctions and a volatile local currency, millions of citizens have turned to Bitcoin and stablecoins to preserve wealth. Iranian centralized exchanges saw a dramatic surge in usage throughout 2024, with transaction patterns indicating widespread capital flight.

Here’s the dilemma for regulators: Bitcoin is censorship-resistant. It requires no bank account, no government permission, and only a seed phrase to store. For a citizen fleeing economic turmoil or political crackdowns, this is freedom. For the International Atomic Energy Agency and Western governments, it’s a loophole. Iran continues to face scrutiny for weak AML controls, yet the sheer volume of grassroots adoption makes enforcement nearly impossible.

The Islamic Revolutionary Guard Corps (IRGC) has also been implicated in leveraging these informal networks. The U.S. and allied nations have escalated actions against IRGC-linked crypto wallets, but the decentralized nature of peer-to-peer (P2P) trading creates a cat-and-mouse game. Every time one exchange is shut down, dozens of smaller, less regulated platforms emerge to fill the void.

Myanmar: Instability Breeds Illicit Flows

Myanmar presents a different kind of risk. Following political instability and the weakening of central authority, the country has become a hub for scam centers and money laundering operations. Unlike the state-directed efforts in North Korea, much of Myanmar’s crypto activity is driven by organized crime syndicates operating in legal gray zones.

The FATF keeps Myanmar on the blacklist because its judicial and law enforcement institutions lack the capacity to address transnational financial crimes effectively. Criminal actors exploit this vacuum, using virtual asset mixing services to obscure the origins of funds stolen from victims across Southeast Asia and beyond. The result is a steady flow of dirty money entering the global crypto ecosystem, complicating compliance for legitimate businesses.

The Compliance Gap: Why Regulators Are Losing Ground

You might wonder why these bans don’t stop the flow. The answer lies in a massive compliance gap. As of April 2024, FATF data revealed that three-quarters of Global Network countries were either noncompliant or only partially compliant with international standards governing virtual assets. This statistic is alarming. It means that while the FATF sets the rules, most of the world hasn’t built the fences to enforce them.

Criminal actors know this. They increasingly use privacy-enhancing technologies, such as mixers and tumblers, to launder proceeds from heists. FinCEN (the U.S. Financial Crimes Enforcement Network) has proposed new rules to designate groups like Huione Group as primary money laundering concerns, specifically targeting mixer-enabled crimes. However, legislation lags behind innovation. By the time a regulation passes, hackers have already moved to a new protocol or chain.

The Independent Community Bankers of America (ICBA) supports these stricter measures, recognizing that without robust tracking tools, traditional banking remains vulnerable to infiltration by illicit crypto proceeds. The challenge is balancing privacy rights with security needs-a debate that continues to rage in Washington, Brussels, and Beijing.

What This Means for You and Your Business

If you run a business that accepts crypto or operates in fintech, the FATF blacklist isn’t abstract news. It’s a daily operational reality. Here is how you should adjust your strategy in 2026:

1. Enhance Due Diligence: Any customer or partner with ties to Iran, North Korea, or Myanmar requires heightened scrutiny. Don’t rely on automated filters alone; manual review is essential.
2. Monitor Mixing Services: Transactions involving known mixers or privacy coins should trigger immediate alerts. These are red flags for laundered funds.
3. Stay Updated on OFAC Lists: The U.S. Treasury frequently updates lists of sanctioned crypto addresses. Integrate these feeds into your compliance software.
4. Train Your Team: Employees need to recognize the signs of state-sponsored cyber threats versus ordinary fraud. North Korean hacks look different from Nigerian scams.

Ignoring these risks can lead to frozen assets, hefty fines, and exclusion from the global financial system. Conversely, proactive compliance can become a competitive advantage, signaling trustworthiness to institutional investors who are wary of crypto’s wild west reputation.

The Future of Sanctions Enforcement

Looking ahead, the FATF is refining its approach. Recent updates in June 2025 added the British Virgin Islands and Bolivia to its "Jurisdictions Under Increased Monitoring" list, while removing Croatia, Mali, and Tanzania. This shows that the blacklist is dynamic. Countries can improve-and fall off-but the bar is rising.

For Iran, North Korea, and Myanmar, the path off the list is steep. It requires not just signing treaties, but implementing effective judicial systems capable of prosecuting financial crimes. Until then, expect more aggressive enforcement from the U.S., EU, and Asian allies. Counter Illicit Finance Teams (CIFT) are expanding training programs to help other nations build capacity, creating a global net that is slowly tightening around illicit actors.

The intersection of geopolitics and blockchain is messy. Legitimate users seeking financial freedom overlap with state actors seeking war funds. But one thing is clear: the era of anonymous crypto is ending. Transparency is becoming the price of admission.