UK links delayed crypto wallet attribution to 14-year jail risk

The UK added Iran’s Islamic Revolutionary Guard Corps to Schedule 6A of the National Security Act 2023 on July 17 and created a new offence, section 17C, that makes obtaining, accepting or retaining a benefit supplied by or on behalf of a designated body a criminal act when the recipient knew, or ought reasonably to have known, the source. Conviction on indictment for obtaining, accepting or retaining can carry up to 14 years in prison; agreeing to obtain, accept or retain a benefit can carry up to 10 years. A separate offence, section 17B, covers conduct intended to materially assist a designated body.

The statutory text covers “money or anything of value supplied directly or indirectly.” That language can reach stablecoins and other on-chain transfers even though the law does not name crypto assets. Prosecutors must establish a link between the benefit and the designated body and show the recipient had the required mental state: actual knowledge or what they ought reasonably to have known from the facts available.

Timing and attribution are central operational issues for crypto firms. Blockchain transfers can settle in seconds while wallet attribution-the process of linking an address or cluster to an Iran-linked actor-may arrive later via analytics or intelligence. The Office of Financial Sanctions Implementation has noted that incoming blockchain transactions cannot be rejected at network level and that addresses may be attributed retrospectively.

A deposit that cannot be unwound at network level may become the subject of a criminal inquiry if later information ties the sending address to the IRGC and the recipient’s records do not show what was known at the time of receipt. Records that can support a defensible position include transaction timestamps, wallet-risk data available at receipt, customer and intermediary details, the timing and basis of any attribution alert, the confidence level attached to that alert and the steps taken after escalation. Some token issuers and account operators can restrict later movement of value when they retain control.

Schedule 6A designation is separate from UK financial sanctions. Listing under Schedule 6A does not by itself trigger asset freezes, non-dealing obligations or reporting duties that arise under sanctions legislation. The government’s impact assessment says the Act imposes no new business reporting duty but encourages firms that hold or transfer funds for a designated body to use existing suspicious-activity and consent processes.

The Act extends to UK persons and conduct connected to the UK, including bodies incorporated under UK law and transactions provided in or from the UK. Section 35 exposes officers to criminal responsibility when an offence is committed with their consent or connivance or because of their neglect. The first legal tests are expected to focus on whether UK-linked recipients can reconstruct a clear chronology showing what was known when and how they responded as wallet intelligence changed.