New UK Legal Measures Against the IRGC: Implications for the Crypto Sector
The UK’s official designation of Iran’s Islamic Revolutionary Guard Corps (IRGC) under the National Security Act 2023 has introduced a rigorous new legal framework for UK-linked individuals and businesses. Taking effect on July 17, this measure specifically targets the receipt or retention of value supplied by the group, creating significant criminal exposure for those who fail to vet their financial counterparties. By adding the IRGC to Schedule 6A, the government has signaled a zero-tolerance approach to national security threats, placing the onus of compliance directly on the private sector.
Criminal Penalties and the Burden of Knowledge
Under Section 17C of the Act, obtaining or retaining a material benefit from the IRGC can result in a prison sentence of up to 14 years. The law applies not only to those with direct knowledge of the group’s involvement but also to those who "reasonably ought to know" that a benefit originated from the designated body. This broad "indirect" scope means that value funneled through intermediaries, shell companies, or third-party entities is still subject to prosecution. Unlike standard financial sanctions that trigger automatic asset freezes, these offenses focus on the "mental element" and the subsequent handling of funds after their origin is discovered.
Technical Hurdles for Crypto Compliance
The cryptocurrency industry faces unique operational challenges under this regime because blockchain transactions settle before identity attribution often occurs. Since a recipient cannot technically "reject" an incoming transfer on a decentralized network, the legal focus shifts to what happens after the transaction is finalized. A UK-linked exchange or user may only discover a wallet’s link to the IRGC through post-transaction analytics or updated intelligence alerts. To mitigate risk, businesses must maintain a defensible timeline that documents when a wallet was identified, what risk data was available at the time of receipt, and what actions were taken to restrict or report the assets once the link was established.
Distinguishing Between Designations and Sanctions
It is critical for compliance officers to distinguish between these new national security offenses and existing financial sanctions managed by OFSI. A body listed under Schedule 6A does not automatically trigger the same asset-freeze and reporting duties as a standard sanctions list unless it is separately designated for those purposes. This creates a potential "gap" where a wallet might not be flagged for an automatic freeze by an issuer like Tether, yet still carries criminal liability for the recipient under the National Security Act. Ultimately, UK-linked entities must integrate specialized attribution tools to bridge this gap, ensuring they can reconstruct a clear chronology of knowledge and action to avoid long-term imprisonment.
