AMBREY THREAT CIRCULAR> Strait of Hormuz Email Scams
Date released: 21 May 2026
Source: This document has been approved for distribution by Ambrey Analytics Ltd.
“Ambrey has identified a sustained campaign of fraudulent communications impersonating Iranian authorities and demanding cryptocurrency payments for Strait of Hormuz transit authorisation. The activity demonstrates increasing sophistication and presents financial, operational, and security risks to shipping companies and crews.”
EXECUTIVE SUMMARY
- Ambrey has seen multiple emails from online scammers impersonating Iranian authorities and requesting payment in return for the safe passage through the Strait of Hormuz.
- Emails claiming to be from Iranian authorities are requesting millions of dollars’ worth of cryptocurrency payments in return for authorisation to transit the Strait.
- Ambrey has seen evidence that scammers have also attempted to receive information allowing for direct communication with crew and crew members’ identities.
- Potential victims of these false emails not only risk financial loss from making any payments, but also risk attempting to transit the Strait of Hormuz without approval from Iranian authorities, who have used force against merchant vessels to prevent unauthorised transits.
SITUATION
Iran selectively closed the Strait of Hormuz on 28 February 2026 14:00 UTC. Demands of payment for safe passage were first reported on 23 March 2026, and an official ‘toll’ was proposed by Iranian authorities at the onset of the 8 April 2026 ceasefire between the US and Iran. It was reported that the toll would be requested in Chinese Yuan or in cryptocurrency payments. On 5 May 2026, Iran established the Persian Gulf Strait Authority to administer the Strait.