Reuters links Dubai crypto exchange to Iranian gambling network using more than 2,000 sites and $4 billion in sanctions evasion flows

A Reuters investigation says a Dubai-based crypto exchange was tied to an illegal Iranian gambling network that ran through more than 2,000 websites and moved $4 billion in transactions while bypassing sanctions. For PSPs and acquirers, the point is not the headline number; it is the mechanics: crypto rails, gambling traffic, and sanctioned flows can end up in the same stack.

1. Reuters said the network used more than 2,000 sites and processed $4 billion in flows. That scale matters because high-risk operators and their payment providers are not dealing with a single merchant problem here, but with a distributed network that can keep reopening under fresh domains.
2. The investigation connected the network to Iran and described it as illegal gambling. For payment providers, that combination is a familiar red flag: gambling acquisition on one side, sanctions exposure on the other, with crypto often used as the bridge between them.
3. The Dubai crypto exchange named in the report sits in a jurisdiction that has become a recurring transit point for cross-border crypto and high-risk activity. The practical takeaway for PSPs is straightforward: KYB, source-of-funds checks, and counterparty screening are not box-ticking exercises when the merchant base includes gambling and crypto.
4. The Reuters report frames the activity as sanctions evasion, not just ordinary illicit gaming. That distinction matters for banks and acquirers, because sanctions risk tends to escalate the response from simple merchant offboarding to broader correspondent and partner-bank scrutiny.

For high-risk payment teams, the useful lesson is the same old one, just with a larger number attached: a merchant can look like crypto, gambling, or media on the surface and still be part of a wider sanctions-linked network underneath. The underwriting question is whether your controls are built for a single site or for a web of sites that can be swapped out faster than the compliance team can refresh a spreadsheet.