$4 Billion Through Dubai: How a Sanctions-Evasion Crypto Network Funneled Money to Binance

Binance received hundreds of millions from Shelbit after regulatory scrutiny

This is bigger than a single Iran-related scandal. Blockchain data reviewed by Reuters showed at least $676 million moved from Shelbit-linked addresses to Binance since May 2024, while at least $4 billion passed through Shelbit itself. The timing matters: About $540 million of that moved after Dubai regulators cracked down on Shelbit in January 2025. If flagged funds kept reaching a major venue after public enforcement, the issue looks less like a one-off mistake and more like a real-time screening gap.

Why the timing changed the story

The basic debate is straightforward. Bulls can argue this was one toxic on-ramp feeding into a massive network, not proof that broader crypto liquidity is broken. That is the easiest defense for exchanges, and it is why the market could initially shrug it off.

Bears have the stronger case on trust. When most of the Binance-bound flow arrived after regulatory action, the problem stops being merely reputational and starts affecting confidence in how well major platforms screen incoming funds.

Why investors have to care

Investigators said Shelbit sat at the center of a wider Iranian sanctions-evasion network. Reuters reported interactions with Nobitex and wallets linked to the IRGC, while blockchain reviewers said at least $4 billion since May 2024 moved through the exchange. That is why the story matters beyond one platform: investors now have to decide whether Binance's controls were narrowly breached or whether the case reveals a broader market-integrity vulnerability.

Shelbit operated as a hub for gambling proceeds and sanctioned inflows

How the network was structured

Shelbit looked less like a routine crypto desk and more like a collection and distribution hub. Reviewers found at least $4 billion moved through the exchange since May 2024, and a separate Reuters review said it handled at least $250 million for sites linked to a vast illegal gambling network in the same period. That scale suggests a concentrated pipeline rather than random user activity.

Where the funds came from

The main inflow was a Farsi-language gambling network of more than 2,000 websites. That is far larger than a niche retail betting operation. Reuters also reported that Shelbit interacted with Iran's central bank and wallets that Israel has linked to the Islamic Revolutionary Guard Corps, as well as the sanctioned Iranian exchange Nobitex.

The setup also appeared deliberately hard to trace. Shelbit was registered through a Dubai-based shell company, while the gambling network was fronted by two high-profile Iranian influencers with government connections. The network also reportedly had access to Iran's online payments system, which is closely overseen by the country's central bank. That does not prove formal state direction, but it does show how close the operation ran to official financial infrastructure.

Why Dubai and then Binance mattered

Once funds pooled in Dubai, they needed deep liquidity to exit. A shell-company hub can gather sanctioned and illicit flow, but deep exchange order books are where that money can be dispersed more easily. That is why the Binance link matters as a mechanism, not just as a headline: blockchain data showed at least $676 million moved from Shelbit-linked addresses to Binance since May 2024, and About $540 million of that moved after Dubai regulators cracked down on Shelbit in January 2025.

The core problem is not only that suspicious money reached a major venue. It is that the pipeline stayed open after public scrutiny, funneling money from gambling volume and state-linked actors into one of crypto's deepest liquidity pools.

What matters now is whether exchanges change behavior in real time

Dubai's regulator ordered the exchange to stop all unlicensed crypto activity, so the next question is no longer just about reconstructing the pipe. It is about whether exchanges actually tighten how they treat Shelbit-linked flow.

Binance's defense may help limit the immediate fallout. It says Shelbit never held an account and that an outside analytics firm did not flag the flows as risky. If that is accurate, the issue may remain largely one of screening and counterparty checks rather than direct complicity.

But the stronger test is practical, not rhetorical. If linked funds continue reaching deep order books after warnings and fines, investors are likely to view the case as evidence of a real sanctions-leakage problem. If the Dubai order and exchange responses produce a visible break in that flow, the market can more plausibly treat Shelbit as an isolated breach rather than an ongoing structural weakness.