Scammers posing as Iranian agents demand crypto from ships

Fraudsters claiming to be Iranian security services have contacted shipowners near the Strait of Hormuz, demanding Bitcoin or USDt for alleged clearance, maritime risk firm Marisks warned.
Marisks, a maritime risk firm, said unknown groups contacted shipowners of vessels stranded west of the Strait of Hormuz and demanded payment in Bitcoin or USDt in exchange for clearance and safe passage.
The messages instruct recipients to submit documentation for verification and say a fee will be assigned before transit is permitted. In an alert issued Monday, Marisks wrote: “These specific messages are a scam,” and added they do not originate from Iranian authorities. Tehran has not commented on the claims.
One example cited by Marisks stated the sender claimed Iranian security services would assess eligibility and then determine payment in BTC or USDt. Marisks also said at least one vessel that was later targeted by gunfire while trying to exit the strait may have received similar fraudulent instructions; that link has not been independently verified.
The Strait of Hormuz remains largely closed following a recent outbreak of conflict in the Middle East. The waterway previously carried roughly one-fifth of the world’s oil and liquefied natural gas exports.
Earlier this month reports said Iran had considered a Bitcoin toll for ships in Strait of Hormuz, allowing empty tankers free passage while charging other vessels about $1 per barrel.
Kaitlin Martin, senior intelligence analyst at Chainalysis, cautioned that payments tied to Iranian-controlled waterways could be treated as “material support” and might violate U.S. and international sanctions targeting entities such as the Islamic Revolutionary Guard Corps. She warned such transfers could expose companies to serious sanctions risk.
Marisks urged ship operators to treat unsolicited messages requesting cryptocurrency payments as fraudulent and to verify any clearance instructions directly with official maritime or government channels before taking action. The firm did not identify the message senders or provide evidence linking them to a specific group.
The incidents underscore cyber and fraud risks for shipping firms operating near contested sea lanes; companies and insurers face both physical security threats and potential legal exposure when responding to such demands.
The material on GNcrypto is intended solely for informational use and must not be regarded as financial advice. We make every effort to keep the content accurate and current, but we cannot warrant its precision, completeness, or reliability. GNcrypto does not take responsibility for any mistakes, omissions, or financial losses resulting from reliance on this information. Any actions you take based on this content are done at your own risk. Always conduct independent research and seek guidance from a qualified specialist. For further details, please review our Terms, Privacy Policy and Disclaimers.








