OFAC has designated four Iranian cryptocurrency exchanges — Nobitex, Wallex, Bitpin, and Ramzinex — for processing ransom payments on behalf of IRGC-affiliated ransomware operators. Organizations that have paid ransoms routed through these exchanges face strict liability OFAC exposure; immediate legal escalation and retroactive transaction screening are required.