Skip to content
You can now search across every topic, entity and event.What's new
European Oil Markets
31JUL

US hits Iran defence procurement ring

4 min read
09:33UTC

OFAC designated eight people and five companies on 29 May for impersonating US firms to smuggle bug-detecting hardware to Iran's military, the same week Trump withheld his signature from the war-ending deal.

EconomicDeveloping
Key takeaway

Treasury signed coercion against Iran's defence supply chain the same week it withheld the war-ending deal.

OFAC, the US Treasury's Office of Foreign Assets Control, designated eight people and five companies on 29 May for a scheme that impersonated American small businesses to defraud US technology vendors and supply Iran's military. 1 The target was a procurement ring run for SAIRAN, Iran's state-owned military-electronics manufacturer that operates procurement under the SAAFTA trading name, a firm controlled by MODAFL, Iran's Ministry of Defence and Armed Forces Logistics. The goods were spectrum analysers and non-linear junction detectors: the equipment a counter-surveillance unit uses to sweep a room for hidden microphones.

Ali Majd Sepehr set up domains posing as real US companies and tricked dozens of American IT vendors into shipping hardware, then re-routed it through two Dubai fronts, Green Light Computer Co LLC and Al Kawther Neon LLC, into Iran. 2 A Rome-based dual Iranian-Italian national, Saeid Zahedi, ran the money through a US financial account to pay for domain registration. That US account and the vendor fraud move the case from sanctions evasion, an administrative matter, into wire fraud, a federal crime. The FBI Los Angeles field office and the Commerce Department co-ordinated the action, and the State Department posted a $15 million Rewards for Justice bounty on IRGC financial networks. 3

This was OFAC's third distinct Iran track in two weeks. Previous rounds hit the Persian Gulf Strait Authority and more than 50 shipping entities , and the Hengli refinery licence lapsed without guidance . This one reaches the defence-electronics supply chain instead. The non-linear junction detectors named are TSCM-grade tools, the kit a service uses to find listening devices, suggesting MODAFL is hardening internal security after losing senior commanders to strikes inside a single week. A mid-tier procurement designation reads as routine Treasury housekeeping on its own. Paired with Bessent's sanctions threat against Oman the same week, it reads as a maximum-pressure pattern timed to the unsigned memorandum.

Deep Analysis

In plain English

Iran's military wanted specialised scanning equipment that can detect hidden microphones and surveillance bugs. US export law bans selling that equipment to Iran, so a network of people set up fake websites pretending to be American businesses, tricked real US technology companies into shipping the hardware, then rerouted it through Dubai into Iran. America's Treasury Department (OFAC, its sanctions bureau) named eight people and five companies involved in the scheme on 29 May. One of them, Saeid Zahedi, lived in Italy but used a US bank account to pay for the fake domain names, which gives American courts the right to prosecute him under federal wire-fraud law. The FBI's Los Angeles field office is leading the criminal investigation. The US government also offered $15 million to anyone who provides information on IRGC financial networks.

Deep Analysis
Root Causes

MODAFL's requirement for Western-manufactured spectrum analysers and non-linear junction detectors reflects a gap Iran's domestic defence industry cannot close. Spectrum analysers from US vendors (Keysight, Tektronix) operate at sensitivities and frequency ranges that Chinese and Russian equivalents do not match for counter-surveillance applications. SAIRAN's procurement need is therefore structurally locked to Western supply chains, which creates the vulnerability OFAC exploited.

The use of identity impersonation rather than traditional front-company purchase orders reflects a specific adaptation to tightened post-2019 Know Your Customer requirements on US IT vendors.

OFAC's 2019 advisory warned vendors about Iranian end-users; SAIRAN's response was to impersonate the US vendors themselves rather than create new intermediary entities. Saeid Zahedi's Italy-based US-account use is the residual Western financial-system footprint that conventional procurement through UAE fronts alone would have avoided.

What could happen next?
  • Risk

    Federal wire-fraud charges against Saeid Zahedi create extradition exposure for dual nationals with EU residency inside OFAC networks, potentially deterring European-based nodes in future procurement rings.

  • Precedent

    OFAC's simultaneous use of sanctions designation and criminal referral for the same network sets a template for parallel-track enforcement against Iranian procurement rings that US allies may follow.

First Reported In

Update #112 · Treasury opens a second Iran sanctions front

US Department of the Treasury· 30 May 2026
Read original
Different Perspectives
Sanctions compliance officer reviewing a Lukoil International GmbH bid
Sanctions compliance officer reviewing a Lukoil International GmbH bid
OFAC's amended FAQ 1224 gives a compliance desk its first published standard: full severance from Lukoil and a US-jurisdiction blocked account for sale proceeds. The conditions name neither ISAB nor Italy, so a Priolo Gargallo-linked bid answers a different question than a Neftochim Burgas or Petrotel Ploiesti one.
Managed-money funds on Brent Last Day
Managed-money funds on Brent Last Day
CFTC data for the week to 21 July showed managed money flipping 74,400 contracts to a net long of 15,665 against 1,410 short on the Brent Last Day contract, code 06765T. A fund that held that short through July has now covered it, and the spent short base raises the bar for the next leg higher.
Saudi crude exporters
Saudi crude exporters
Saudi-linked tanker transits through Bab el-Mandeb fell to about 7.5 a day after the 24 July underwriting withdrawal, pushing more barrels onto the longer route round the Cape or through the Yanbu terminal. Every diverted barrel ties up a ship for longer, and a fleet that turns slower charges more.
Tanker owners on the Bab el-Mandeb route
Tanker owners on the Bab el-Mandeb route
Lloyd's-market syndicates withdrew war-risk cover from Saudi-linked hulls on 24 July, leaving owners of that class of vessel to sail Bab el-Mandeb uninsured or not at all. Tanker transits on the route fell to roughly 7.5 a day, and cover, once withdrawn, does not return on a shipowner's timetable.
Eni
Eni
Eni's board approved second-quarter results on 29 July, swinging refining EBIT to a EUR0.08bn profit from a year-earlier loss even as group profit doubled, and named Red Sea freight cost as a cap on that improvement. A refiner absorbing higher shipping costs on Saudi-linked crude while its numbers improve treats the freight line as a drag, not a crisis.
Asian buyers (India, Japan, China, South Korea)
Asian buyers (India, Japan, China, South Korea)
Asian refiners are absorbing 62% of Yanbu's 3.75m b/d flow, the bulk of Saudi Arabia's rerouted crude now clearing east rather than into the Atlantic basin. That destination split leaves Asian buyers more exposed to any single Yanbu-specific disruption than under the kingdom's normal multi-terminal export pattern.