How Dubai-Based Shelbit Allegedly Processed $4 Billion Through an Iran-Linked Crypto Network
2026/08/04 16:32:00
A little-known crypto operation with no obvious public trading platform allegedly processed at least $4 billion in digital assets from May 2024, according to blockchain data reviewed by Reuters. The investigation placed Dubai-based Shelbit at the centre of a complex Iran-linked crypto network involving online gambling businesses, Bitcoin-mining activity, intermediary wallets and international trading platforms. Dubai regulators had already taken action against Shelbit for operating without a virtual-asset licence and failing to apply mandatory customer-verification controls, adding a significant compliance dimension to the case.
However, the headline figure needs to be interpreted carefully. The reported $4 billion represents the total value passing through blockchain addresses attributed to Shelbit; it does not establish that the company earned $4 billion or that every transaction contained illegal proceeds. Shelbit’s former management has also denied knowingly supporting money laundering, sanctions evasion, illegal gambling or Iranian state institutions. The developing dispute therefore combines blockchain evidence, regulatory findings, corporate-identity questions and unresolved claims about who ultimately controlled the funds.
How Shelbit Allegedly Processed $4 Billion Through an Iran-Linked Crypto Network
Shelbit appeared to have a limited public footprint, but investigators allege that its crypto wallet infrastructure supported a high-volume settlement operation. Reuters reported on July 31, 2026, that two crypto-investigation firms and independent blockchain researcher Rich Sanders had identified at least $4 billion in transactions moving through Shelbit-attributed addresses since May 2024. The operation allegedly connected Iranian gambling platforms, mining-related funds, Iran’s central bank and crypto services outside the country, allowing different sources of value to enter the same broader transaction network.
How Iran-Linked Funds Entered Shelbit’s Crypto Wallet Network
Blockchain analysis connected Shelbit with a large ecosystem of Farsi-language gambling websites, several of which reportedly shared software, infrastructure and payment systems. Investigators directly traced tens of millions of dollars in gambling-related crypto to Shelbit, while one website alone was linked to at least $130 million in transactions processed through the operation. The scale and structure suggest that Shelbit may have functioned differently from a normal retail crypto exchange. Rather than serving large numbers of public users through an open website and visible order book, it may have operated more like a private crypto broker or settlement service for higher-volume clients.
Other funds allegedly entered through Iran-linked institutional and commercial sources. Investigators attributed at least $125 million in Shelbit transactions to Iran’s central bank, with a significant portion reportedly transferred directly. They also linked at least $20 million to a suspected Iranian Bitcoin-mining operation, although some of the assets passed through intermediary wallets before reaching Shelbit. These findings indicate that the network may have combined several revenue streams rather than relying only on gambling payments. At the same time, blockchain movements alone cannot establish the purpose of every transaction or prove that each wallet owner knowingly participated in sanctions evasion.
How Shelbit-Linked Funds Reached International Crypto Liquidity
After entering Shelbit-attributed wallets, large amounts of cryptocurrency reportedly moved towards addresses associated with international trading platforms. Investigators traced at least $676 million from Shelbit-linked addresses to wallets connected with a major global crypto exchange. Approximately $540 million of those transfers allegedly occurred after Dubai’s Virtual Assets Regulatory Authority first acted against Shelbit in January 2025. This raised questions about how transaction-monitoring systems handled indirect exposure to an already-flagged crypto service.
The receiving platform said Shelbit itself did not maintain a direct corporate account and stated that relevant customer accounts were investigated, frozen or reported when compliance risks were identified. That distinction is important. A transfer to an exchange-controlled wallet does not necessarily show that Shelbit held an account there, nor does it prove that the platform understood the original source of every asset. Funds can move through brokers, self-custody wallets and customer deposit addresses before reaching a larger exchange, making transaction attribution more complicated than a direct transfer between two identified companies.
How Iranian Gambling Sites, Bitcoin Mining and Crypto Wallets Fed the Shelbit Network
The alleged Shelbit network appears to have relied on several interconnected channels that converted domestic Iranian economic activity into internationally transferable cryptocurrency. Online gambling websites produced customer payments, influencers attracted new users, mining operations generated fresh Bitcoin and layers of digital wallets moved funds between different services. This structure may have reduced reliance on conventional banking relationships while making the complete source and destination of funds harder to identify.
Iranian Gambling Platforms Created a Large Payment Funnel
Investigators linked more than 2,000 Farsi-language gambling websites through shared software, technical infrastructure and operational characteristics. These websites offered products such as online slots, blackjack, roulette and sports betting to Iranian users, despite strict domestic restrictions on gambling. Some reportedly accepted payments through Iran’s domestic banking and card-payment infrastructure, allowing customers to deposit local currency before the value was moved, converted or settled elsewhere. The use of familiar local payment methods may have made the platforms easier to access for users who had limited experience with cryptocurrency. It also created a potential bridge between Iran’s domestic financial system and offshore crypto settlement channels, although the exact conversion process used by each website has not been fully documented.
Social media played a major role in driving traffic to the gambling platforms. Reuters identified more than 60 Iranian influencers promoting websites associated with the wider network, with around half reportedly having more than one million followers. Their posts often combined gambling promotions with luxury cars, travel and displays of wealth, creating an aspirational marketing strategy aimed at users facing inflation and economic uncertainty. This type of promotion may have helped the platforms reach younger audiences and present online gambling as a path to financial success rather than a high-risk activity. The influencers interviewed by Reuters denied knowledge of Iranian state involvement and disputed claims that the platforms belonged to one coordinated operation. Nevertheless, cybersecurity researchers found technical links among many of the supposedly independent websites, including similarities in software, hosting arrangements and other digital infrastructure.
Bitcoin Mining Added Crypto That Did Not Begin as a Bank Transfer
Bitcoin mining mechanics may have supplied the network with another source of digital assets. Mining operations use specialised computing equipment and electricity to validate blockchain transactions, receiving newly issued Bitcoin and transaction fees as rewards. For a sanctioned economy with limited access to international banking, this process can effectively convert domestic energy and computing resources into an asset that can be transferred across borders without relying on conventional correspondent banks. Mined Bitcoin can then be held in private wallets, sold through brokers or exchanged for other digital assets, creating an alternative liquidity channel for businesses and institutions facing financial restrictions. However, the presence of mining-related funds does not by itself prove sanctions evasion, as cryptocurrency mining can also support legitimate commercial and investment activity.
Investigators said at least $20 million reaching Shelbit could be traced to a suspected Iranian mining operation. Some of the cryptocurrency reportedly passed through several wallets before entering Shelbit-linked addresses, making the original source less visible to a receiving platform examining only the final transfer. Moving assets through intermediary addresses can complicate transaction monitoring because each additional wallet creates distance between the mining source and the eventual exchange or settlement service. However, using intermediary wallets is not automatically evidence of criminal activity. Individuals and businesses regularly move assets between self-custody wallets, brokers and exchanges for security, treasury management, settlement or operational reasons. Stronger conclusions generally require wallet-ownership information, customer records, transaction patterns and communications showing who controlled the assets and why the transfers were made.
Layered Crypto Wallets Helped Connect Iran With Global Markets
The wallet structure appears to have been central to the alleged network. Rather than sending funds directly from an Iranian gambling operator or mining pool to an international exchange, assets could move through multiple intermediary addresses and private brokers. Each additional transaction creates more distance from the original source, potentially making sanctions screening and source-of-funds checks more difficult.Public blockchains still provide a permanent transaction record, allowing investigators to follow the movement of assets over time. Yet blockchain transparency has limits. It can show that two addresses interacted, but it cannot independently reveal who held the private keys, whether the parties had a commercial relationship or whether the recipient understood the funds’ full history. This difference between identifying transaction exposure and proving criminal intent is one of the central issues in the Shelbit investigation.
The broader compliance risk is therefore not limited to direct transfers from a sanctioned entity. Cryptocurrency may enter regulated markets through customer accounts that appear ordinary when viewed in isolation but have indirect connections to gambling businesses, mining operations or flagged wallets several transactions earlier. This is why modern crypto compliance increasingly relies on wallet-cluster analysis and transaction histories rather than checking only the address that sends the final deposit.
What Dubai’s VARA Enforcement Action Means for Shelbit and Crypto Compliance
Dubai’s Virtual Assets Regulatory Authority intensified its July 24, 2026 action against Shelbit General Trading L.L.C. after determining that the company continued providing virtual-asset services despite an earlier cease-and-desist order issued in January 2025. VARA said Shelbit operated in and from Dubai without the required licence, marketed crypto services without authorisation and onboarded customers without mandatory Know Your Customer checks. The regulator imposed financial penalties and ordered Shelbit to stop all unlicensed virtual-asset activity immediately, although it did not disclose the value of the fine. For Shelbit, the action creates serious operational and reputational risks, including potential difficulty maintaining banking relationships, accessing regulated crypto platforms and continuing business while its transaction history remains under scrutiny.
Why the Shelbit Case Matters for Crypto KYC and Transaction Monitoring
The enforcement action shows why crypto exchanges, brokers and over-the-counter trading desks cannot depend only on basic identity checks or screening the wallet directly sending a deposit. Cryptocurrency may pass through several intermediary addresses before reaching a regulated platform, making exposure to sanctioned organisations, gambling proceeds or high-risk jurisdictions harder to recognise. Effective crypto AML controls therefore require ongoing transaction monitoring, source-of-funds reviews, sanctions screening, wallet-cluster analysis and enhanced due diligence for unusually large or complex cross-border transfers. VARA’s action sends a wider warning that unlicensed virtual-asset services and weak KYC controls can expose customers, counterparties and the broader financial system to money-laundering and sanctions risks.
In an August 1, 2026 statement, former management of a Georgian entity called Shelbit LLC denied knowingly participating in money laundering, sanctions evasion, illegal gambling, terrorism financing or activity conducted for Iranian state institutions. It claimed the Georgian business began winding down in December 2025 and stopped accepting new customers and funds by January 2026. However, VARA’s enforcement notice concerns Shelbit General Trading L.L.C. in Dubai, while the response largely discusses Shelbit LLC in Georgia. Determining which entity controlled the wallets, customers and crypto operations will be essential to resolving the competing claims.
|
KuCoin is celebrating its 9th anniversary with a special platform campaign filled with exclusive rewards, trading activities, and limited-time offers. Don’t miss the chance to participate and enjoy the benefits as the exchange marks nine years of growth and innovation. Visit the official campaign page now:
|
Conclusion
The Shelbit investigation demonstrates how online gambling, Bitcoin mining, private crypto brokers and layered wallet transfers can combine to create a large cross-border financial network. Blockchain analysts attributed at least $4 billion in transactions to Shelbit-linked addresses from May 2024, but the figure represents total processed value rather than confirmed profits or proven criminal proceeds. Investigators also identified links with Iranian gambling platforms, mining activity, Iran’s central bank and international crypto services, while leaving important questions about wallet ownership, knowledge and final beneficiaries unresolved.
Dubai’s regulatory findings provide a clearer part of the picture. VARA officially determined that Shelbit General Trading L.L.C. operated without a virtual-asset licence, marketed services without approval and failed to apply mandatory KYC controls. The case therefore carries broader lessons for crypto compliance, particularly the need to investigate indirect wallet exposure and complex transaction histories. Until corporate records, customer information and wallet-ownership evidence become public, the most accurate assessment is that Shelbit faces serious regulatory findings and substantial Iran-linked transaction allegations, while direct control by specific state or military organisations has not been conclusively established.
Frequently Asked Questions
How much cryptocurrency did Shelbit allegedly process?
Blockchain investigators estimated that Shelbit-linked wallets processed at least $4 billion in cryptocurrency from May 2024. This amount represents the combined value of transactions moving through addresses attributed to the operation. It should not be interpreted as Shelbit’s revenue, profit or a confirmed total of illegal funds.
Was all $4 billion connected to illegal gambling?
No. Investigators linked part of the transaction network to Farsi-language gambling platforms, but the entire $4 billion was not identified as gambling revenue. The total reportedly included transfers involving mining activity, institutional wallets, private intermediaries and other transactions whose commercial purpose or final destination remains uncertain.
Was Shelbit licensed to provide crypto services in Dubai?
Dubai’s Virtual Assets Regulatory Authority said Shelbit General Trading L.L.C. was not licensed to provide virtual-asset services in or from Dubai. VARA also said the company continued offering and marketing crypto-related services after receiving an earlier cease-and-desist order, which contributed to the regulator’s later enforcement action.
What action did Dubai’s VARA take against Shelbit?
On July 24, 2026, VARA imposed financial penalties and ordered Shelbit to stop all unlicensed virtual-asset activity immediately. The regulator cited unauthorised crypto services, marketing without approval and customer onboarding without mandatory Know Your Customer checks. VARA did not publicly disclose the amount of the financial penalty.
How were Iranian gambling websites allegedly connected to Shelbit?
Investigators linked more than 2,000 Farsi-language gambling websites through shared software, technical infrastructure and payment arrangements. Some crypto associated with the wider gambling ecosystem was traced to Shelbit-linked wallets. However, the available evidence does not establish that Shelbit directly owned or controlled every website in the network.
What role did Bitcoin mining play in the Shelbit network?
A suspected Iranian Bitcoin-mining operation allegedly sent at least $20 million to wallets connected with Shelbit. Bitcoin mining can convert domestic electricity and computing resources into a digital asset that is transferable internationally. This can be especially relevant in countries facing restrictions on conventional banking and cross-border payments.
Disclaimer: This article is for informational purposes only and does not constitute investment advice. Market forecasts, company plans and technology adoption may change, so readers should conduct their own research before making financial decisions.