Iranian spies are recruiting Americans on Telegram and paying them in crypto

Israeli prosecutors charged Eli Lavon, a 21-year-old dual American-Israeli citizen, with spying for Iran on July 3, 2026. Lavon had been studying at an ultra-Orthodox Jewish seminary in Jerusalem when Israeli authorities arrested him on June 9, 2026. The charges are serious: two counts of contact with a foreign agent and 14 counts of communicating information deemed useful to an enemy.

According to the Israeli prosecution, the recruitment started in November 2025, when Lavon responded to what appeared to be a job advertisement on Telegram. What followed, prosecutors allege, was a series of surveillance tasks: photographing sensitive locations across Jerusalem and passing that intelligence back to Iranian handlers.

The payment for all of this was approximately $1,400 in crypto assets.

Lavon’s case is being described as one of the first documented instances of an American citizen facing Iran-linked espionage charges in Israel, which gives it additional geopolitical weight.

Israeli authorities have reported a significant increase in Iran-linked espionage activity inside the country, and the Lavon case fits a pattern that security officials have been tracking: Iranian intelligence using digital platforms to recruit individuals already inside Israel.

For the crypto industry, cases like this one feed directly into a regulatory conversation that was already happening at full volume. Any exchange that processed the payment to Lavon without flagging it faces potential exposure under existing sanctions enforcement frameworks, regardless of how small the transaction was.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.