Up Front Payment: Unraveling the Multi-Layered Clandestine Infrastructure of Iranian Front Companies In the UAE

WikIran uses internal documents from HMS Trading FZE and Petro Delta Energy Co. to map out the complex infrastructure orchestrated by Bank Shahr’s Rahbar system in the UAE. Dive in with us as we unmask the fronts created by the Iranian Shadow Banking Mechanism in this article and the next to follow.

Lax-regulation jurisdictions are a fertile ground for all kinds of illicit financial shenanigans, especially money-laundering operations. That’s why approximately 50% of Iranian Shadow Banking activities are conducted on UAE soil. This translates to tens of billions of dollars every year that ends up accessible to the regime, later used to oppress their own people and project terror around the globe.

To facilitate these sanction-busting operations and bring them up to scale, a rather sophisticated mechanism has evolved. Its primary goal is to conceal Iranian shady dealings abroad, and it utilized a few types of entities to do so. The materials from the recent leak provide us with great examples to how each entity operates and how they come together to form a well-oiled sanction-bypassing machine.

This article and the ones to follow will provide an overview of the prominent networks and entities, the connections between them, and the sanction circumvention methods they apply.

Rahbar Company – Sanction-Evasion Chief of Operations

The main characters of our story, HMS Trading FZE and Petro Delta Energy Co., are the local Emirati branches of bank Shahr’s Rahbar companies. As explained in our previous article, they are in charge of facilitating sanctionable trade, coordinating transfers of foreign currency and commodities with brokers and exchange houses, managing front companies around the globe, and operating accounts in foreign banks across key jurisdictions. Up until now, we have assessed the Rahbar’s role mainly as a coordinator between parts of the mechanism, but this new leak shows a whole new picture. PDECO and HMS orchestrate a sort of “back office” in the UAE, manned by the Al Marzooqi family. This back office operates front companies and execute trade exclusively on their behalf, in a similar manner to exchange houses or independent brokers. The back office is an integral part of Shahr’s networks and not an external business partner like the other companies we will expose in this article.

Brokers, Intermediators & Exchange Houses – Middle Management

These are private individuals or businesses that facilitate financial activity between Iranian and foreign entities. They rely on personal connections worldwide and controlled front companies to enable this activity. Exchange houses (like Sadaf, Amin and Ehsan Tahayyori’s Arz-Iran) mostly handle forex transfers as part of the shadow banking mechanism, whereas brokers and intermediators like Reza Dindar and Ali Bayandarian (Triliance) also conduct independent trade activity.

Generic Front Company – The Pawn

A company established by one of the mechanisms above and used to receive payments and pay for export-related activities. It has no business of its own, and used only as way to obfuscate the Iranian connection. Almost exclusively registered in a lax regulation hub (UAE, Hong Kong, Turkey) by a person of foreign nationality (Usually Emirati, Indian or Pakistani).

Many of the companies in this leak have appeared in previous leaks on WikIran, and identified for their affiliation with parts of the Iranian security apparatus such as AFGS’s SEJ, MODAFL’s Sahara Thunder and IRGC’s GDCP.

It’s important to note that every network is unique and comprised of a different set of entities and business relations. In our case, Shahr’s network operates its own aforementioned “back office”, as well as engaging business relationships with both brokers and exchange houses.

Case Study: HMS’s Oil Dealings

As mentioned before, HMS and PDECO operate their own networks in order to conduct trade and facilitate oil export. PDECO states that the mission they were tasked with is to “sign correspondence contracts with major companies in the oil and petroleum trading field” for the purpose of facilitating Iranian oil exports and funneling forex revenues back to Iran.

In the following example, we see that HMS has completed a deal to sell oil on behalf of NIOC to one of its known fronts (referred to as “trustee”), Turkiz Fuel Trading LLC, which will resell the oil to its ultimate consumer. It’s important to note that Turkiz was designated on January 2026 alongside HMS. The payment was made to a front of HMS: Qwest Trading. The payers for the commodity were a couple other fronts. AWG and SAA, that are likely related to the HMS network as well.

NIOC invoice for this purchase stating Turkiz Fuel as the buyer:

From information in the dataset exposed, we learn that despite being under American sanctions, Turkiz Fuel is still operational and engages in sanction-busting activity. These are only a drop (of oil) in the sea. Countless more deals and front exist in the materials, waiting to be uncovered.

Case Study: Blue Oil Company LLC and Its Satellite Fronts

Blue Oil is a Georgian oil brokering company that operates in the UAE, and was first exposed on WikIran in 2024, for its role in facilitating oil exports for MODAFL. Even after uncovered, Blue Oil keeps on buying designated Iranian oil.

Based on the HMS’s leaked materials alone, we learn that over the past few years, Blue Oil LLC received and transferred hundreds of millions of dollars via front companies under its control in service of the Shadow Banking Mechanism.

The letters above contain a formal request from Blue Oil addressed to the CEO of Tejarat Hermes Energy Qeshm, for assistance in issuing a 20-million-dollar bank guarantee to facilitate the purchase of Iranian fuel oil from the National Iranian Oil Company (NIOC). As can be seen in the following document, regarding the same contract, PDECO is a crucial party in acquiring said guarantee, as it is the undesignated operational arm of THEQ and Bank Shahr.

Attached below is the NIOC invoice for this deal:

Blue Oil is employing a common Shadow Banking tactic by operating various fronts that perform shady financial transactions on its behalf (similar to HMS). For example, a purchase of 20 million dollars’ worth of naphtha from the Persian Gulf Star Oil Company (PGSOC), in which Blue Oil is using a front company under its control, named Torpedo Mechanical & Engineering Equipment Trading to sign the legal documents needed for the transaction. Blue Oil seeks THEQ and PDECO’s assistance once more for the issuance of a bank guarantee.

This is not an isolated case, but rather an MO of this company. Within the materials, there can be found much evidence of the messy money trails created in effort to blur the true beneficiaries of these deals. The way it works is as follows: Blue Oil purchases sanctioned oil products from national Iranian entities (NIOC, NICO) and utilizes one of its controlled fronts to transfer payment on its behalf to a second front company, assessed to be controlled by PDECO. Eventually, the Iranian seller is given access to these deposited funds through Bank Shahr. Let’s examine one occurrence: In late 2024, Blue Oil procured from NIOC around 90 tons of SRFO (Straight run fuel oil) at the value of 42 million dollars, and utilized a front company named HNK Trading Limited to pay on its behalf. PDECO instructs that the payee in this transaction should be a second front, Bestel General Trading FZE, that we assume to be controlled by Bank Shahr’s Rahbar web.

Won’t You Be My Neighbor? – The Shadow Banking Technique of Address Sharing

A strong telltale sign of fronts is having multiple companies being registered at the same address. In the documents bellow, we can see four supposedly unrelated companies – Yalong Trading Limited, DongFang Keynat Limited, Smooth Horizon Limited and Hong Kong Dongsheng Group Limited – all registered in the exact same address, identical down to the room number and level inside the building.

Although front companies usually don’t have physical offices, physical addresses are still necessary for regulatory and logistical reasons - for example, mail delivery. It’s easier having all your different front companies’ mailboxes located at the same place. Therefore, fronts that belong to the same network or registered by the same money mule tend to be located at the same or very near address.

The documents from HMS Trading and PDECO pull back the curtain on a sophisticated sanction-bypassing machine operating at industrial scale. These findings underscore the critical role that UAE's lax regulatory environment plays as a financial lifeline to Iran. In the current “economic outcast” climate, together with the information we publish today, the risk of UAE returning to FATF’s Increased-Monitoring list (“grey list”) or even being “upgraded” to the High-Risk list (“black list”) increases dramatically. As we continue to expose the remaining nodes in this network in the articles to follow, one thing is clear: the UAE must act to halt Iran's exploitation of its financial system, for the consequences of turning a blind eye will ultimately return to them in the form of financial isolation, ballistic missiles and suicide drones.

As usual, the WikIran team has gathered a list of prominent front companies we were able to identify within the materials: