When the United States and Israel conducted a joint strike on Iran in February 2026, Iranian authorities responded by imposing a near-total internet shutdown that left almost the entire population cut off from the global network, with access apparently restricted to users on a government whitelist. In that digital blackout, one financial service continued operating without interruption: Nobitex, a cryptocurrency exchange serving approximately 11 million Iranians — nearly 12% of the country's population. The platform's continued operation during a state-imposed internet shutdown is not a coincidence. Nobitex has deep connections to Iran's ruling elite, with its founders — brothers Ali and Mohammad Kharrazi — linked to one of Iran's most influential political and clerical families according to a Reuters investigation. One of the exchange's largest early investors was Mohammad Baqer Nahvi, vice president of Safiran Airport Services, a company placed on the US Treasury's SDN List in 2022 for organizing flights to supply Iranian drones to Russia. The exchange processes estimated asset flows in the billions of dollars, with TRM Labs recording approximately $5 billion in observed volume between 2025 and March 2026 alone — making it far larger than all other Iranian exchanges combined according to Chainalysis data.

What makes Nobitex particularly significant is not its retail operations but its apparent function as a national financial infrastructure for a country cut off from SWIFT and the international banking system. In January 2026, blockchain analytics firm Elliptic published a report documenting systematic purchases of USDT stablecoin by Iran's central bank totaling at least $507 million, conducted through a UAE broker with assets sent primarily to Nobitex. Since those stablecoins can be sold for Iranian rials, the central bank was effectively conducting foreign exchange interventions entirely outside the international banking system — using a retail crypto exchange as a shadow central banking mechanism. Separately, Elliptic and Chainalysis have documented Nobitex's links to wallets associated with Hamas, the Houthi Ansar Allah movement, the propaganda outlet Gaza Now, and the sanctioned Russian exchange Garantex. Leaked source code from June 2025 revealed modules for generating stealth addresses, transaction splitting, endpoint switching, and logic specifically designed to bypass compliance checks, alongside an internal document titled "Nobitex Privacy" that explicitly described a strategy for evading FinCEN tools and Western blockchain analytics.