Just as Binance continues to navigate the fallout from one of the largest cyber thefts in cryptocurrency history, the world’s largest digital asset exchange now finds itself confronting a second challenge, one that involves allegations of ignored sanctions concerns, terminated investigators, and renewed scrutiny from U.S. authorities.
According to a recent Forbes investigation, a former senior financial crimes investigator has reportedly told the IRS that Binance leadership ignored repeated requests to pursue an internal investigation into approximately 2,000 accounts suspected of links to Iran. The investigation, internally known as “Operation Loclock,” allegedly involved accounts that moved roughly $1.2 billion through the platform.
The allegations arrive at a particularly sensitive moment for Binance.
The company is still working through the aftermath of the recent $6.3-$6.4 billion cryptocurrency hack, while simultaneously facing questions about executive departures, compliance oversight, and whether the exchange’s years-long effort to rehabilitate its regulatory reputation is beginning to show cracks.
At the heart of the controversy is the claim that Binance investigators discovered activity indicating potential sanctions-related concerns involving Iran-linked users and entities.
The former investigator reportedly informed IRS agents that management failed to pursue a deeper examination of roughly 2,000 suspected accounts despite repeated internal requests. According to warrant information cited by Forbes, approximately $1.2 billion moved through those accounts
The investigation reportedly raised concerns that some cryptocurrency transactions may have involved entities connected to Iran, including wallets allegedly linked to the Islamic Revolutionary Guard Corps (IRGC), a U.S.-designated terrorist organization.
Binance strongly disputes the characterization of events.
The company has maintained that investigators were not terminated for pursuing sanctions-related inquiries. Instead, Binance has stated that employee departures were related to violations of customer data privacy policies and that the underlying account investigation was never shut down. The company has also stated it continues to cooperate with law enforcement authorities.
Importantly, no new charges related to these allegations have been reported, and federal investigations remain ongoing.
If these allegations prove accurate, the issue extends well beyond internal corporate disagreements.
For regulators, sanctions compliance is not a secondary issue. It is often viewed as one of the most critical responsibilities for any financial institution, whether traditional or digital.
The concern for regulators is not merely whether questionable transactions occurred. Rather, the question becomes whether warnings were identified internally and subsequently ignored.
That distinction can dramatically change how enforcement agencies view a company.
A compliance failure can sometimes be attributed to weak systems.
Ignoring identified risks after employees have already raised concerns is an entirely different matter.
That is why reports that the Department of Justice and IRS have reportedly expanded subpoenas and investigative actions are drawing significant attention across both the financial and digital asset sectors.
What makes the situation more concerning for observers is the timing.
The sanctions-related scrutiny comes as Binance remains under a microscope following its massive security breach, an event that resulted in billions of dollars in stolen digital assets being moved across multiple blockchains through increasingly sophisticated laundering operations.
Separately, reports throughout 2026 have described significant turnover among compliance and investigative personnel within the organization. Fortune previously reported that investigators who surfaced evidence of potentially Iran-linked activity were among several compliance professionals who ultimately departed the company.
While executive departures are not uncommon following major corporate crises, they often attract heightened attention when they coincide with broader regulatory inquiries.
For institutional investors, regulators, and banking partners, leadership turnover can sometimes signal internal disagreements over strategy, risk management, governance, or compliance priorities.
It does not necessarily prove any wrongdoing.
It does, however, invite further questions.
For Binance, this may ultimately be less about sanctions allegations and more about credibility.
Since its landmark 2023 settlement with U.S. authorities, the company has spent years attempting to rebrand itself as a mature, compliance-focused financial institution rather than a disruptive startup operating at the edges of regulation. That settlement included more than $4 billion in penalties and public commitments to strengthen oversight procedures.
Every new allegation therefore carries additional weight.
Regulators will likely ask whether past compliance shortcomings have truly been addressed.
Institutional counterparties will want assurance that internal controls are functioning properly.
Users will want confidence that leadership remains focused on transparency and operational resilience.
And investors will want to know whether these events represent isolated incidents or symptoms of deeper organizational challenges.
The immediate threat to Binance is unlikely to come from headlines alone.
The more significant risk is the possibility of expanded investigations.
If federal authorities determine that warnings regarding sanctions exposure were knowingly disregarded, the consequences could extend beyond financial penalties to include additional monitoring requirements, restrictions, or enforcement actions.
Conversely, if Binance successfully demonstrates that investigations continued internally and that employee terminations were unrelated to sanctions findings, the company may ultimately emerge with its compliance framework validated.
For now, the facts remain contested.
What is clear is that Binance finds itself managing two of the most damaging challenges any financial platform can face simultaneously: questions about security after a historic cyber theft and questions about compliance from the very people once tasked with investigating financial crime inside the company.
In traditional finance, either issue would be serious.
Facing both at the same time creates a test of credibility that may ultimately prove far more consequential than any single hack or investigation.
