Chainalysis: IRGC Was Already Running a $3.9B Crypto Operation. The Hormuz Toll Doubles It.

The number nobody underlined

Chainalysis published an Iran crypto analysis on April 10 that the maritime press mostly skipped. Two numbers inside it are the most important data points of the week, and neither made the Bitcoin-price headlines:

1. Iran's total crypto ecosystem in 2025 reached approximately $7.8 billion in notional throughput.
2. In Q4 2025, the Islamic Revolutionary Guard Corps accounted for roughly half of all Iranian crypto activity.

Combine them and you get a quiet bombshell: the IRGC is running approximately $3.9 billion in annualized crypto throughput independent of any Hormuz toll. That is the baseline. That is the capability already in place. Not aspirational. Not prospective. Not being built. Operational. For at least a full year before the toll regime.

This changes the way to read every headline published this week.

What $3.9 billion in IRGC crypto activity actually looks like

The Chainalysis report and corroborating coverage (Bitcoin.com News, CoinSpectator, TRM Labs) attributes IRGC crypto activity to four principal use cases:

1. Weapons procurement. Crypto is used to pay intermediaries in supply chains that Western correspondent banks will not touch. Typical transaction sizes are in the six-to-seven-figure range, which is normal for parts sourcing.

2. Quds Force logistics. Payments to affiliated actors regionally — Lebanon, Iraq, Syria, Yemen — where the receiving party cannot reliably operate USD or EUR accounts under secondary sanctions.

3. Oil sales sanctions evasion. This is the largest category by volume. Crypto payments are used as a settlement overlay on physical cargo deals where the counterparty wants to avoid SWIFT traceability. Stablecoin settlement is preferred here because of the lower price volatility.

4. Revenue repatriation. Converting foreign-currency receivables back into rial-equivalent value for the Iranian state, often routed through exchanges in permissive jurisdictions.

These four flows add up to an IRGC that already has the wallets, the custody arrangements, the exchange relationships, the mixer workflows, and the operational security procedures. Chainalysis tracks much of this activity at the wallet level — which is how the $3.9B number exists at all. The IRGC has a blockchain footprint big enough to be measurable.

What the Hormuz toll adds

Running the Hormuz toll at the advertised $1/barrel rate over pre-crisis volumes of 21M bpd produces approximately $7.6 billion in annualized throughput if every barrel pays. In practice the effective rate is lower — because Tier 1 allies get discounts or waivers, and because current transit is running at <2% of pre-crisis volume — but even at 25% effective utilization the new flow is roughly $1.9B annualized.

At 100% utilization, the Hormuz toll roughly doubles IRGC crypto throughput. Add it to the baseline and the Corps is running approximately $7.8 billion annualized, which would exceed Iran's total 2025 crypto ecosystem.

But the scale number is only half the story. The more important property of the Hormuz toll flow is that it is tied to a physical chokepoint that cannot be turned off.

Prior IRGC crypto flows can be pressured:

• Weapons suppliers can be sanctioned individually.
• Exchange relationships can be revoked.
• Stablecoin issuers can freeze flagged wallets.
• Oil buyers can be threatened with secondary sanctions on correspondent banks.

The Hormuz toll is different. It is collected at the gate of a chokepoint the IRGC physically controls through its own patrol assets. Any non-military response to the toll requires shippers to self-enforce a no-pay policy, which leaves their vessels exposed to the one-way kinetic authority the IRGC has already demonstrated. There is no exchange to freeze. There is no issuer to pressure. There is no bank to sanction (the yuan rail is Chinese; the crypto rail is decentralized). The only intervention surface is the shipper's own decision tree. And that is an operational-grade insight about how qualitatively harder this flow is to shut off compared to prior IRGC revenue.

The Tether question

If the secondary settlement rail is USDT, then Tether (the company) becomes the single most important private actor in the Hormuz story after the IRGC itself. Tether has historically cooperated with US Treasury requests to freeze wallets associated with illicit activity — most famously $225M in Q2 2024 related to sanctions evasion flows, and again in Q3 2025 on OFAC-linked entities.

Tether's incentives are complicated. They are domiciled in El Salvador now, they hold billions in US Treasury bills as reserves, and they cannot afford a falling-out with the US government. At the same time, freezing IRGC-linked Hormuz toll wallets would be an explicit participation in a live US sanctions action against a sitting sovereign, which is a precedent they have historically avoided announcing publicly.

PHOENIX expects — and flags as a judgment call — that Tether will quietly freeze any wallets identified by blockchain intelligence firms as part of the Hormuz toll flow, but only after a formal Treasury request, and only if the transaction volume is small enough that the freeze does not create a visible market dislocation. If the volumes are large — which they would be if the primary rail is crypto rather than yuan — the freeze becomes politically impossible to announce and operationally hard to execute.

Chainalysis and TRM Labs both appear to be bracing for this decision. Their April 10 reporting is consistent with firms that are pre-documenting the flows they expect Treasury to ask Tether to freeze.

The stablecoin-issuer dimension the maritime press is missing

Here is the pattern recognition worth naming: the Hormuz crisis is now a test case for whether stablecoin issuers will participate in live sanctions enforcement against a sovereign chokepoint. That is a qualitatively different question than whether Tether freezes a specific sanctions-exposed wallet on an ordinary day. It is a question of whether a privately-operated dollar-substitute can be turned into an instrument of US foreign policy in real time.

If yes — stablecoins become a more reliable sanctions tool than SWIFT, and every other state actor operating a chokepoint will have to factor that in.

If no — stablecoins are revealed as operationally outside US reach, and the entire crypto regulatory posture shifts overnight. A Tether that will not freeze IRGC-linked Hormuz toll wallets is a Tether that has effectively declared its independence from Treasury. That would be a much larger story than the oil price.

This is the question nobody at the White House was asking on April 8 when Leavitt drafted the 'without limitation' statement, and it is the question Treasury lawyers are almost certainly wargaming on April 11.

What operators should take from this

1. The IRGC is a $3.9B crypto operator before adding Hormuz. Treat the Corps as a tier-one financial actor in any sanctions modeling, not a residual player. This has implications for compliance cost, counterparty risk, and insurance availability.

2. The Hormuz toll doubles IRGC throughput at scale but that assumes full utilization, which the current <2% transit rate makes unlikely in the short term. Base case assumption for : the toll is generating $1-2B annualized right now at current throughput, scaling toward the full number only if transit resumes.

3. The secondary rail is the asymmetric risk. Crypto-rail transactions are Chainalysis-visible. Any Tier 3 operator paying the toll via crypto should assume the wallet will be logged and is downstream-exposed to secondary sanctions enforcement even if the transit itself is permitted today.

4. Watch for the Tether decision. If Tether freezes IRGC-linked wallets, crypto-rail capacity drops overnight and Tier 3 operators lose that option. If Tether does not freeze — that is the real story of the month.

5. The primary rail is still yuan via Kunlun Bank / CIPS, per our companion article. Chainalysis tracks only the crypto slice. The larger flow is happening in a system Western blockchain intelligence firms cannot see, and that is probably by design.

Bottom line

The Chainalysis numbers reframe the entire Hormuz toll story. The IRGC did not build new infrastructure for the toll regime — it activated existing infrastructure it had been scaling for at least a year. The toll is not the debut of a capability; it is the first time that capability has been attached to a physical chokepoint the Corps controls. That combination is the structural innovation.

For every operator, insurer, sanctions attorney, and policy desk reading this: the question is no longer whether Iran can collect crypto tolls. It has been collecting them at scale for four weeks, on top of an already-mature $3.9 billion IRGC crypto operation. The question is whether the rest of the system — Treasury, Tether, Chainalysis, the ceasefire text — has the operational speed to respond before the Management Plan becomes the permanent state of Hormuz.

PHOENIX base case: it does not. The Management Plan is going to outlive the Week-2 ceasefire window.