Binance, TRM Labs provided key intel in ISIS members’ arrest

The joint investigation with Tajikistan authorities resulted in the arrest of individuals connected to a regional ISIS affiliate

article-image

Dushanbe, Tajikistan’s capitol; Source: Ronan Shenhav/Shutterstock, modified by Blockworks

share

Binance said its investigative team aided in capturing ISIS-linked individuals in Tajikistan and Turkey.

The crypto exchange said it played a role in the arrest of several individuals linked to the Islamic State Khorasan Province (IKSP), an affiliate of the broader militant group, including ranking member Shamil Hukumatov.

“These ISKP members were actively involved in imminent attack planning, and their arrests are regarded as a huge win for counterterrorism efforts both regionally and globally,” Binance said in a blog on Friday. 

Since Dec. 2022, Tajikistan’s Financial Monitoring Department and TRM Labs collaborated with the exchange to mitigate risks from the IKSP, the blog said.

Additional agencies from Tajikistan, like the State Committee for National Security, also participated in the operation.

Tigran Gambaryan, head of financial crime at Binance, told Fortune that the probe entailed scrutinizing a Telegram channel frequented by ISIS affiliates and subsequently identifying the cryptocurrency wallet a terrorist leader used for receiving donations.

A Binance spokesperson told Blockworks that the company’s investigations team members perform routine open-source threat intelligence scans. 

“It was during these routine scans that this particular Telegram group was identified,” they added.

Nonetheless, specifics about how Binance managed to locate the individual were not disclosed.

A spokesperson for the Financial Monitoring Department said that intelligence and investigative assistance from Binance was instrumental in advancing its counterterrorism efforts.

“This led to successful arrests of key ISKP members that we’ve been targeting for a while now,” the spokesperson added.

The move highlights Binance’s involvement in collaborating with law enforcement to track down crypto assets related to organized crime.

Markus Thielen, Matrixport’s research chief, noted that Binance has cooperated with law enforcement on multiple occasions to halt illicit activities and identify the individuals responsible for such transactions.

He expects illicit activities to shift to mixers and decentralized exchanges.

“The result will likely be that more of those illicit activities will move to mixers, such as Tornado Cash, and other decentralized exchanges,” he told Blockworks.

Tornado Cash was sanctioned by the US Treasury last year, meaning that US residents are prohibited from dealing with the crypto mixer.

Binance has previously faced allegations of circumventing legal frameworks, including claims that it bypassed US sanctions to permit trading for customers in Iran and Russia. Additionally, reports suggested the exchange enabled users in China to evade local regulatory barriers.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Marina Bay Sands Singapore

October 7, 2026

DAS Asia is a a single-day summit at Marina Bay Sands Singapore featuring conversations between the builders, investors, and global leaders are shaping the trajectory of the digital asset ecosystem in Asia & North America.

Hilton Park Lane, London

November 10-11, 2026

DAS London is a two-day summit at the Hilton Park Lane in London featuring conversations between the builders, allocators, and policy makers who are shaping the trajectory of the digital asset ecosystem in the UK, Europe, and North America.

recent research

Onchain Gacha Cover Image.png

Research

Onchain gacha platforms sold $284.3 million of digital card packs in July 2026, and Collector Crypt accounted for more than half of that activity. However, it buys back 92.9% of what it sells, which leaves it with a third of the category's revenue on more than half of its volume, and a quarter of its activity arrives through partner apps whose users it does not own. Courtyard runs the opposite model, a consumer app selling smaller packs to thousands of retail buyers who resell the cards to each other, and it took 59.7% of category revenue while growing through a month the category spent contracting. This report compares the five largest platforms on gross activity, buyback intensity, revenue after buybacks, consumer composition, marketplace liquidity, and distribution ownership, and finds Courtyard the strongest performer as of July 2026, with the qualification that none of the five discloses inventory costs or resale proceeds, so no platform in the category can yet be shown to be profitable.

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

PodcastsNewslettersEventsRoundtablesAnalytics