Scammers posing as Iranian authorities demand Bitcoin from ships stranded in Strait of Hormuz

Fraudsters impersonating Iranian authorities are demanding Bitcoin and USDT payments from shipping companies stranded near the Strait of Hormuz, with at least one vessel that may have engaged with the scammers subsequently coming under gunfire on April 18.

According to warnings from Greek maritime risk firm MARISKS, unknown actors have been sending deceptive messages to vessel operators stranded west of the strategic waterway, demanding payment in Bitcoin or USDT in exchange for supposed safe passage.

The Hormuz Passage Scam highlights how geopolitical instability is increasingly being exploited by cybercriminals, blending traditional maritime threats with crypto-enabled fraud.

Fraudsters Impersonate Authorities

At the center of the Hormuz Passage Scam is impersonation. MARISKS reports that the attackers appear to be posing as Iranian authorities, lending a false sense of legitimacy to their demands.

In one documented message, the sender instructed shipping firms to submit vessel documentation for “review” by Iranian security services. Following this, companies would be issued a transit fee payable in cryptocurrency promising that payment would ensure ships could pass through the strait “unimpeded at the pre-agreed time.”

This tactic is a hallmark of the Hormuz Passage Scam leveraging fear, urgency, and authority to pressure victims into compliance.

Disruption Creates Opportunity for Scammers

The rise of the Hormuz Passage Scam coincides with significant disruption in the Strait of Hormuz, a chokepoint that typically handles around one-fifth of global oil and liquefied natural gas shipments.

Recent geopolitical tensions have intensified the situation. The United States has maintained a blockade on Iranian ports, while Iran has intermittently imposed and lifted its own restrictions on the strait.

These overlapping measures have left hundreds of vessels stranded in the Gulf, with reports indicating that roughly 20,000 seafarers are affected. In this environment of uncertainty, the Hormuz Passage Scam has found fertile ground.

Shipping firms, facing mounting delays and financial pressure, are more vulnerable to offers that promise expedited passage even when those offers are fraudulent.

Potential Links to Real-World Incidents

MARISKS noted that at least one vessel that attempted to exit the strait on April 18 came under gunfire from Iranian boats, raising concerns that the ship may have interacted with scammers beforehand.

While it remains unclear whether any payments were made, the incident underscores the real-world risks tied to the Hormuz Passage Scam. It is no longer just a digital threat it may intersect with physical security events in a volatile region.

Crypto Payments Add Complexity

The use of cryptocurrency is central to the Hormuz Passage Scam. By requesting payments in Bitcoin or USDT, scammers can operate across borders with reduced traceability, making recovery of funds significantly more difficult.

The fraud also mirrors broader regional discussions. According to reporting from the Financial Times, Iran had previously proposed charging transit fees for vessels during ceasefire negotiations, with payments potentially accepted in crypto.

Hamid Hosseini, a spokesperson for Iran’s Oil, Gas and Petrochemical Products Exporters’ Union, indicated that such tolls could amount to roughly $1 per barrel of oil.

While these proposals are separate from the scam, their existence may lend credibility to fraudulent messages further fueling the Hormuz Passage Scam.

Diplomatic Uncertainty Adds Risk

The timing of the Hormuz Passage Scam also aligns with ongoing diplomatic uncertainty.

Reports from BBC indicate that Donald Trump has stated that the United States will not lift its blockade on Iranian ports until a broader agreement is reached.

With a ceasefire deadline approaching and the possibility of renewed tensions, shipping companies are being forced to navigate both security risks and misinformation campaigns.

This volatile backdrop makes the Hormuz Passage Scam particularly dangerous, as it thrives on confusion and rapidly changing conditions.

Industry Response and Caution

Maritime risk experts are urging companies to remain vigilant and verify all communications through official channels before taking action.

The Hormuz Passage Scam serves as a stark reminder that in high-risk zones, cyber threats can evolve alongside geopolitical developments. Fraudsters are not just targeting individuals they are now exploiting large-scale industrial operations.

For shipping firms, the priority is clear: avoid engaging with unsolicited payment requests, especially those involving cryptocurrency, and rely on verified government or naval communications.

A Growing Threat at the Intersection of Crypto and Geopolitics

The Hormuz Passage Scam represents a new category of risk one where digital finance tools are weaponized within traditional industries like shipping.

As global trade routes face increasing disruption, similar scams could emerge in other strategic regions. The combination of stranded assets, urgent decision-making, and anonymous payment systems creates ideal conditions for exploitation.

For now, the Hormuz Passage Scam is a warning shot. It shows how quickly fraud can adapt to real-world crises and how critical it is for industries to stay ahead of both physical and digital threats in an increasingly interconnected world.