FATF Blacklist Explained: How Iran, North Korea, and Myanmar Use Crypto to Evade Sanctions

The Financial Action Task Force (FATF) keeps a short, scary list of countries that the world watches closely. Right now, three nations sit at the top of this "blacklist": Iran, North Korea, and Myanmar. These aren't just political labels. They are financial warnings. If you run a bank, a crypto exchange, or even a small business dealing with international payments, these names mean higher risk, stricter checks, and potential legal trouble if you slip up.

But here is the twist that keeps regulators awake at night: while traditional banking channels are tightly monitored, cryptocurrency has become the backdoor for these sanctioned states. It’s not just about hiding money anymore; it’s about funding regimes, evading billions in sanctions, and moving wealth across borders without leaving a paper trail. By mid-2026, the battle between global anti-money laundering efforts and state-sponsored crypto crime has never been more intense.

What Is the FATF Blacklist, Really?

To understand why these three countries matter so much, you first need to know who is watching them. The FATF is an intergovernmental organization that sets standards for combating money laundering and terrorist financing. Think of them as the rule-makers for global financial hygiene. When a country gets put on their "High-Risk Jurisdictions Subject to a Call for Action" list-colloquially known as the blacklist-it means they have failed to fix critical weaknesses in their financial systems.

As of June 2025, only three countries remain on this specific high-risk list:

• Iran: Has been subject to renewed countermeasure calls since February 2020 due to weak anti-money laundering controls.
• North Korea: Faces strict countermeasures because its state-run cyber units use digital assets to fund weapons programs.
• Myanmar: Subject to enhanced due diligence measures, though not full countermeasures like the other two, due to ongoing instability and lack of transparency.

This isn't a static list. In June 2025, the FATF updated its monitoring lists, adding places like Bolivia and the British Virgin Islands to "Jurisdictions Under Increased Monitoring" while removing others like Croatia. But Iran, North Korea, and Myanmar? They stay stuck in the highest risk tier. For businesses, this triggers mandatory "enhanced due diligence." You can’t just ignore transactions from these regions; you have to prove you’ve checked every angle.

North Korea: The Billion-Dollar Cyber Heist Machine

If you think of North Korea as isolated, think again. In the world of cryptocurrency, Pyongyang is arguably the most active player on the planet. The regime doesn’t just tolerate crypto crime; it institutionalizes it. State-sponsored hacker groups, often linked to the Reconnaissance General Bureau, treat virtual asset exchanges like ATMs.

The scale is staggering. According to data from Chainalysis, sanctioned jurisdictions received $15.8 billion in cryptocurrency during 2024 alone. That represents nearly 39% of all illicit crypto transactions globally. By the end of 2024, these sanctioned areas accounted for almost 60% of total sanctions-related activity value. Who is driving this? Mostly North Korea.

In February 2025, the threat level hit a new peak when hackers stole an estimated $1.5 billion from the major exchange ByBit. This wasn't a clumsy attempt by script kiddies. It was a sophisticated operation exploiting vulnerabilities in smart contracts and custody solutions. The stolen funds were quickly moved through mixers and privacy-focused coins to obscure their origin. For the FATF, this confirms why North Korea remains blacklisted: their financial system is effectively a vehicle for global cyber theft.

Iran: Crypto as a Lifeline Against Sanctions

While North Korea uses crypto to steal, Iran uses it to survive. Years of heavy economic sanctions have crippled Iran's ability to move money through traditional Western banks. Enter Bitcoin and other cryptocurrencies. For many Iranians, crypto isn't a speculative investment; it's a necessity.

In 2024, Iranian centralized exchanges saw a dramatic surge in usage. Why? Because residents needed a way to preserve their wealth against inflation and move capital out of the country. Bitcoin’s censorship-resistant nature makes it perfect for this. You don’t need a bank account. You just need a seed phrase. If you’re fleeing the country, your entire net worth fits in your pocket.

However, this dual-use nature worries regulators. On one hand, ordinary citizens are using crypto to escape economic hardship. On the other, entities like the Islamic Revolutionary Guard Corps (IRGC) are accused of using decentralized finance (DeFi) protocols and peer-to-peer networks to bypass sanctions and fund military operations. The U.S. Treasury’s Office of Foreign Assets Control (OFAC) responded aggressively in 2024, issuing 13 designations that included specific cryptocurrency addresses-the second-highest number in seven years. The message is clear: we see your wallets, and we will freeze them.

Myanmar: The Wild West of Scam Operations

Myanmar’s situation is different but equally dangerous. Following the military coup and subsequent instability, the country has become a hub for large-scale online scam compounds. These facilities force workers to defraud victims worldwide, often using cryptocurrency to launder the proceeds.

Unlike Iran or North Korea, Myanmar isn't always the source of the initial crime (like a hack), but it is a major transit point for dirty money. Criminal gangs use local exchanges and informal value transfer systems to convert illicit crypto into fiat currency, which then funds local power structures. The FATF keeps Myanmar on the blacklist because the government lacks the capacity-or perhaps the will-to enforce basic anti-money laundering laws. For international firms, any transaction touching Myanmar requires extreme caution and deep background checks.

The Global Compliance Gap

You might wonder: if the rules are so strict, why does this keep happening? The answer lies in a massive compliance gap. As of April 2024, FATF data showed that three-quarters of countries in its global network were either noncompliant or only partially compliant with international standards for virtual assets.

This creates a patchwork quilt of enforcement. A transaction might be blocked in London but slip through cracks in a jurisdiction with lax regulations. Criminal actors exploit this. They use "mixers"-services that shuffle crypto coins to hide their origins-and privacy coins that don’t leave public trails. The Independent Community Bankers of America (ICBA) has even called for expanded measures to combat crimes enabled by these mixing services, highlighting how worried traditional banks are about being dragged into crypto scandals.

The U.S. Financial Crimes Enforcement Network (FinCEN) is leading the charge to close these gaps. They’ve proposed designating certain groups, like the Huione Group, as primary money laundering concerns. They’re also training foreign counterparts through Counter Illicit Finance Teams (CIFT). The goal? To make sure that no matter where you go, the same basic rules apply: know your customer, verify your source of funds, and report suspicious activity.

What This Means for You

If you are a regular user, the news might seem distant. But if you trade crypto, hold significant assets, or work in finance, the implications are immediate. Here is what you need to watch for:

1. Stricter KYC Rules: Exchanges are under pressure to tighten Know Your Customer (KYC) procedures. Expect longer verification times and more questions about your source of funds.
2. Address Screening: Wallets associated with Iran, North Korea, or Myanmar are increasingly flagged. If your wallet interacts with a tainted address, your funds could be frozen by centralized platforms.
3. Mixer Stigma: Using mixing services is becoming riskier. While they offer privacy, they also raise red flags for regulators. Many major exchanges now ban withdrawals from addresses that have recently used mixers.
4. Travel Rule Adoption: More countries are implementing the "Travel Rule," which requires exchanges to share sender and receiver information for transfers above a certain threshold. This makes anonymous cross-border transfers harder.

The era of wild west crypto is ending. Regulators are getting smarter, faster, and more coordinated. The FATF blacklist serves as a constant reminder that geopolitics and blockchain technology are deeply intertwined. Whether you like it or not, your digital assets are part of a global financial system that is under constant surveillance.