Marisks warns Hormuz “safe passage” messages demanding BTC or USDT are a scam
Chainalysis says any crypto payments tied to Iranian-controlled waterways could still create sanctions exposure.
Maritime risk firm Marisks warned that unknown groups are contacting shipowners near the Strait of Hormuz, posing as Iranian security services and demanding Bitcoin or USDt for “safe passage.” While Marisks says the outreach is fraudulent, Chainalysis cautioned that payments linked to Iranian-controlled waterways could still be treated as sanctions-triggering “material support.”
Key Takeaways
- Shipowners with vessels stranded west of the Strait of Hormuz have been targeted with messages demanding BTC or USDT for alleged transit clearance.
- Marisks said the “safe passage” outreach is fraudulent and does not originate from Iranian authorities.
- Chainalysis warned that crypto payments connected to Iranian-controlled waterways could be treated as “material support,” creating sanctions exposure.
- The messages reportedly request documentation for verification before assigning a crypto-denominated “fee” and a pre-agreed transit time.
Marisks Flags BTC/USDT “Safe Passage” Demands Near Hormuz
Marisks issued a warning that unknown groups are contacting shipowners whose vessels are stranded west of the Strait of Hormuz, claiming to represent Iranian security services and demanding transit “fees” in Bitcoin (BTC) or USDt (USDT) in exchange for “safe passage” through the strait.
The firm characterized the outreach as fraudulent. “These specific messages are a scam,” Marisks said, adding that the messages do not originate from Iranian authorities.
Tehran had not publicly commented on the claims at the time of publication, leaving the information environment lopsided. In practice, that pushes both traders and compliance teams toward private-risk advisories and on-chain monitoring rather than waiting for an official confirmation or denial.
How the Impersonation Scam Is Supposed to Work
The reported playbook is operationally specific. Recipients are instructed to submit documentation for verification, after which they are assigned a “fee” payable in cryptocurrency. The pitch then promises that transit would be granted at a pre-agreed time once the crypto payment is made.
In one example cited by Marisks, the message said Iranian security services would assess eligibility before determining payment in BTC or USDT, framing the transfer as a condition for unimpeded passage.
That step-by-step workflow matters because it looks designed for time-constrained victims. If a shipowner believes passage is gated by a narrow window, any payment decision becomes harder to unwind, and any subsequent compliance response becomes messier.
Marisks also suggested at least one vessel recently targeted by gunfire while attempting to exit the strait may have received such fraudulent instructions, though that detail was not independently verified.
Sanctions Risk: Why a Scam Can Still Create Real Compliance Exposure
Even if the outreach is fake, the demanded payment rails are real. Using BTC and USDT ties the episode to sanctions and compliance risk, not organic “Iran adoption” narratives. That distinction matters for stablecoin watchers because the market reaction tends to come from enforcement and screening pressure, not from incremental transactional demand.
Chainalysis senior intelligence analyst Kaitlin Martin warned that shipping companies considering paying transit fees in cryptocurrency to Iran could face serious sanctions exposure. She said payments linked to Iranian-controlled waterways could be treated as “material support,” potentially violating US and international sanctions targeting entities such as the Islamic Revolutionary Guard Corps.
The backdrop is a chokepoint with outsized stakes. The Strait of Hormuz is described as a critical route for global energy flows and previously handled around one-fifth of the world’s oil and liquefied natural gas exports before hostilities escalated in the region.
What Could Confirm or Escalate the Risk Narrative From Here
The first catalyst is an official statement. Any public denial or confirmation from Iranian officials would immediately reprice the credibility of the narrative, especially with Tehran having made no public comment so far.
Second, traders should watch for follow-on advisories from maritime risk firms or insurers that indicate whether any shipowners actually paid BTC or USDT in response to the messages. Confirmation of payments would shift the story from attempted fraud to realized flows.
Third, any compliance guidance or enforcement actions that explicitly reference crypto payments connected to Iranian-controlled waterways would tighten the constraint set for stablecoin intermediaries and counterparties.
Finally, if payment addresses or instructions surface, on-chain indicators of unusual USDT or BTC flows consistent with extortion-style demands tied to Hormuz transit would turn a rumor-driven headline into something measurable.
The Tradeable Angle Is Compliance Shock, Not ‘Iran Adoption’
I treat this as a compliance headline wearing a geopolitical mask. Marisks calling the messages a scam reduces the odds of a state-directed “crypto toll,” but it does not remove the sanctions tail risk if any operator pays and that payment is later linked, even indirectly, to Iranian-controlled waterways.
The threshold that matters is whether this produces identifiable addresses, confirmed payments, or formal compliance guidance. If that happens, the setup starts to look structural rather than narrative-driven, because it forces tighter screening around USDT and BTC flows tied to Iran-adjacent shipping routes.
