If you're running a business in Iran, the short answer is: yes, but it is far from a simple "plug-and-play" process. Unlike some countries where you can just drop a Bitcoin address on your website, Iran has built a highly controlled environment where the government watches every single satoshi that moves. If you try to bypass the official channels, you aren't just risking a fine-you're risking a total shutdown of your operations.
The core problem is that the Iranian government views Cryptocurrency is a digital asset that can either stabilize the economy or facilitate massive capital flight. To prevent the latter, they've shifted from a vague "grey area" to a strict, licensed framework. If you want to accept crypto legally, you have to play by the rules of the Central Bank of Iran (CBI), which acts as the sole gatekeeper for all digital asset activities.
The Legal Ground Rules for Merchants
As of 2026, the legal landscape is dictated by Presidential Directive No. 1403/12456. This isn't a suggestion; it's the law. The most critical thing to understand is that crypto legal Iran operations are not direct. You cannot simply take a payment from a customer's wallet into your own and call it a day.
To stay legal, businesses must use CBI-approved exchanges. These exchanges act as the mandatory middleman. Every transaction must be transparent, and the CBI maintains 100% data access rights. This means the government knows who paid you, how much, and when. If you use an unauthorized payment processor or a private peer-to-peer arrangement for business sales, you are operating illegally.
Another huge hurdle is the FX Card (Foreign Exchange Card). Under the "Resilience of the Foreign Exchange System" Bill, businesses are required to use this specialized card. The catch? If you receive crypto and convert it, you are often obligated to return an equivalent amount of foreign currency to the FX Card system within one year. This is essentially a government mechanism to ensure that crypto doesn't just become a way for money to leave the country permanently.
Step-by-Step: How to Get Licensed
Getting the green light to accept crypto isn't as fast as signing up for a Shopify account. It's a bureaucratic marathon. Based on recent data, the average processing time is about 23 business days, and the rejection rate for small businesses can be as high as 32%.
- Document Gathering: You'll need to submit 17 different documents. This includes your commercial registration, tax ID, and-crucially-energy consumption certificates to prove you aren't running an illegal mining farm in your back office.
- CBI Verification: Your application goes through a three-tier verification system. The CBI checks if your business is legitimate and if your intended use of crypto aligns with national monetary goals.
- Technical Integration: Once approved, you must integrate the CBI's API gateway. This isn't a lightweight plugin. It requires 55 specific data points per transaction. Be warned: this adds about 4.7 seconds to your checkout time, which can be a killer for conversion rates.
- Accounting Setup: You cannot mix your crypto books with your regular rial accounts. You must maintain separate records and file Form CR-2025/07 every single month.
The True Cost of Compliance
Legality comes with a price tag that goes beyond just exchange fees. You need to factor in the "hidden" costs of operating within this regulated bubble.
| Expense Type | Value / Impact | Note |
|---|---|---|
| FX Card Fees | ~1.8% additional per transaction | Added cost compared to unregulated P2P |
| Capital Gains Tax | 15% to 35% | Based on profits; 25% flat rate for most mid-size gains |
| Accounting Overhead | ~8.3 hours / month | Time spent on mandatory CBI reporting |
| Financing Cost | ~22.4% annual interest | Average rate for loans to meet repatriation rules |
Then there is the advertising ban. You can't run a flashy Instagram ad saying "We Accept Bitcoin!" Promoting crypto payments through any media channel is prohibited. You can let customers know once they are in your store or on your checkout page, but you cannot actively market it as a feature to attract new business.
Stablecoins and the "Tether Risk"
If you're a business, you probably don't want the volatility of Bitcoin. You want stability. For years, Tether (USDT) was the gold standard in Iran. However, that changed in July 2025 when Tether froze 42 Iranian-linked addresses, locking up millions of dollars. This sent a shockwave through the merchant community.
Smart businesses have since pivoted. There is a massive shift toward DAI and other decentralized stablecoins, often utilizing the Polygon network. Why? Because it's harder for a single central entity to freeze your funds. If you are setting up your business today, relying solely on USDT is a gamble you probably can't afford.
Comparing Iran to the Rest of the World
Iran's approach is unique. It's not a total ban like China's, but it's certainly not the "Bitcoin City" dream of El Salvador. While El Salvador encourages any business to accept BTC, Iran mandates that all transactions pass through a government-approved filter.
In some ways, it looks like Russia's Digital Financial Assets framework, but Iran is stricter. While Russia might give you six months to handle certain currency obligations, Iran's one-year repatriation window for the FX Card is a rigid requirement that creates significant cash-flow stress for about 74% of businesses.
Common Pitfalls to Avoid
- Ignoring Energy Audits: Don't try to mine and sell on the side. The government has been aggressive, shutting down unlicensed operations and charging 200% of electricity costs as fines.
- Using Unapproved Gateways: Even if a third-party gateway promises "discreet" transactions, the CBI's API monitoring is sophisticated. If the money flow doesn't match your reported FX Card activity, you'll get flagged.
- Forgetting the Tax Threshold: Remember that profits exceeding 50 million rials are subject to the Law on Taxation of Speculation and Profiteering. Don't wait until the end of the year to calculate your tax liability.
Can I accept crypto via a personal wallet instead of an exchange?
For a business, no. Legally, all business transactions must go through CBI-approved exchanges using the FX Card system. Using a personal wallet for business payments is considered a violation of the foreign exchange regulations and can lead to severe penalties.
How long does it take to get the CBI license for a business?
On average, it takes about 23 business days. You'll need to provide 17 different documents, including tax and energy certificates. Be aware that small businesses face a higher rejection rate (around 32%).
What happens if I can't return the foreign currency to the FX Card?
Failure to meet the one-year repatriation requirement is a serious compliance breach. Many businesses take out high-interest short-term loans (averaging 22.4% annually) to cover the gap, but failure to comply can result in the revocation of your crypto license.
Is USDT still safe to use for Iranian businesses?
It is riskier than before. After the July 2025 freeze of numerous Iranian addresses, many businesses are moving toward DAI and the Polygon network to avoid the centralized control of Tether.
Do I have to pay tax on all crypto transactions?
You are taxed on profits, not necessarily every transaction. Under the Law on Taxation of Speculation and Profiteering, profits over 50 million rials are taxed. The rate is progressive, ranging from 15% for lower profits to 35% for those over 500 million rials.
Next Steps for Business Owners
If you are just starting, don't try to do this alone. There are currently over 130 registered crypto compliance consultants in Iran who specialize in the 17-document CBI application process. Hiring one can be the difference between a 32% rejection rate and a successful license.
For those already operational, audit your stablecoin holdings. If you're heavily exposed to Tether, look into diversifying into DAI. Also, set a calendar reminder for your monthly Form CR-2025/07 filings; the CBI does not take "I forgot" as an excuse when they have 100% visibility into your API data.