UK Moves to Dissolve London Crypto Firms Tied to $1 Billion IRGC Laundering Network

The United Kingdom has initiated formal proceedings to dissolve two London-registered companies after uncovering evidence that they facilitated approximately $1 billion in transactions for the Iranian Revolutionary Guard Corps (IRGC). Authorities found that the firms operated as a coordinated enterprise, moving digital assets through the TRON blockchain while deliberately bypassing international anti-money laundering controls. This case highlights growing concerns over the misuse of the UK corporate registry by sanctioned state actors seeking to establish offshore financial infrastructure. Officials have stressed that UK registration offers no protection from legal consequences tied to state-sponsored financial crime.

At the center of the investigation are two entities, Zedcex and Zedxion, which presented themselves as conventional cryptocurrency exchanges. However, findings from TRM Labs revealed that the firms functioned as a single, unified operation embedded within a broader sanctions evasion network. Between 2023 and 2025, the platform processed roughly $1 billion in funds linked to the IRGC, with activity peaking in 2024. During that period, approximately 87 percent of total transaction volume was tied directly to the military organization. This scale suggests a deliberate shift from opportunistic exploitation toward the creation of dedicated exchange infrastructure abroad.

Investigators also uncovered a direct link to Babak Zanjani, a financier with a long history of sanctions evasion. Previously targeted for laundering billions in oil revenues, Zanjani appears to have rebuilt elements of his network using these UK-registered entities and digital asset channels. The use of the TRON blockchain alongside Tether enabled high liquidity and low transaction costs, allowing large volumes of capital to move across borders without triggering traditional banking alerts. According to TRM Labs, this strategy was designed to exploit the credibility of the UK financial system while masking illicit flows. By relying on stablecoins, the network preserved value entirely outside conventional fiat oversight.

The IRGC’s involvement extended beyond simple financial transfers, reaching into the direct funding of regional proxy operations. Blockchain analysis traced more than $10 million in transactions from wallets associated with the exchanges to addresses linked to Sa’id Ahmad Muhammad al Jamal. Al Jamal is known for managing a smuggling network that provides financial support to the Houthis in Yemen. This clear connection between a UK-registered firm and terrorist financing activities accelerated the government’s decision to dissolve the companies. Investigators also found that funds were routinely funneled into major Iranian crypto platforms such as Nobitex and Wallex, effectively completing a closed-loop system for illicit finance.

The operation’s success relied heavily on exploiting weaknesses within the UK’s corporate registration framework. Both Zedcex and Zedxion reportedly used a fabricated front woman and nominee directors to create a veneer of legitimacy while concealing their true ownership. Corporate filings frequently listed the firms as dormant, claiming no active trading activity in the UK even as hundreds of millions of dollars flowed through their platforms. This discrepancy between official filings and blockchain activity allowed the network to operate undetected for years. The use of shared virtual office addresses further obscured their physical presence, complicating regulatory oversight.

Blockchain forensic analysis played a critical role in exposing the network’s structure and its links to the IRGC. Investigators used small test transactions to map wallet connections, eventually identifying a cluster of 187 addresses previously designated as IRGC-controlled. These addresses were tied to Administrative Seizure Order ASO-43/25, which resulted in several wallets being blocklisted by stablecoin issuers. The corporate structure appeared deliberately engineered for resilience, with one entity incorporated shortly after key personnel departed the other, ensuring operational continuity across multiple legal shells.

Regulators have emphasized the companies’ failure to maintain accurate records and implement proper know-your-customer procedures. By effectively operating as a shadow banking system for the IRGC, the firms posed a serious threat to the integrity of London’s financial sector. In response, the UK government invoked its powers under the Economic Crime and Corporate Transparency Act to strike the companies from the register. This action permanently removes their ability to hold assets or conduct business within the jurisdiction.

Technically, the laundering scheme relied on sophisticated layering techniques within the TRON blockchain to obscure the origin of funds. Operators used chains of intermediary wallets and rapid transaction cycles to sever traceable links between source and destination. Despite these efforts, consistent reuse of infrastructure allowed analysts to reconstruct the network’s activity over a three-year period. The preference for stablecoins reflects their increasing role as alternative payment rails for sanctioned entities seeking access to global markets. The case has intensified pressure on stablecoin issuers to enhance monitoring of wallets associated with offshore exchanges.

The exposure of this $1 billion laundering pipeline carries significant geopolitical implications, particularly for the enforcement of international sanctions against Iran. It demonstrates how state-affiliated actors can infiltrate Western financial systems by presenting themselves as legitimate fintech ventures. The case has prompted a reassessment of risk among newly registered crypto firms that report high transaction volumes while maintaining minimal domestic presence. Cooperation between international intelligence agencies and private blockchain analytics firms proved essential in uncovering the scale of the operation. The UK’s decision to dissolve these entities signals a broader commitment to protecting its financial infrastructure from exploitation.

Authorities are now shifting focus toward systemic solutions, emphasizing the need to target the ownership and governance structures of exchange platforms rather than isolated transactions. As highlighted in the TRM Labs report, the primary risk lies in who controls these platforms, not merely how they are used. This reflects a broader evolution in anti-money laundering strategies toward addressing structural vulnerabilities within the digital asset ecosystem. The dissolution of Zedcex and Zedxion stands as one of the most significant enforcement actions taken against a crypto network linked to the IRGC.

At the same time, the UK government is conducting a comprehensive review of the regulatory gaps that allowed the scheme to operate. Strengthening verification requirements at Companies House is a central priority, ensuring that listed directors and beneficial owners are legitimate and identifiable. The case has already influenced legislative reforms aimed at increasing corporate transparency and reducing the misuse of shell companies. By tightening these controls, authorities aim to deter other sanctioned actors from attempting similar operations.

Ultimately, dismantling this network represents a major disruption to the IRGC’s financial infrastructure. Eliminating a $1 billion channel significantly constrains its ability to fund proxy operations and evade economic restrictions. The case underscores the dual nature of financial technology: while it offers new tools for illicit actors, it also equips investigators with powerful capabilities to trace and expose wrongdoing. The story of Zedcex and Zedxion serves as a clear demonstration of how coordinated enforcement and technological transparency can dismantle even highly sophisticated state-backed financial networks.

By fLEXI tEAM