AnswersPublished15 sources
How a U.S. Treasury Sanction on a Ransomware VPN Accidentally Took Down Telegram's t.me Links Worldwide
On July 13, 2026, the U.S. Treasury's OFAC sanctioned First VPN Service (1VPNS), a VPN provider used by ransomware gangs.
Published byEdited with DeepSeek-V4-FlashImages generated with GPT Image 1.5
Research answer
Key takeaways
- On July 13, 2026, the U.S. Treasury's OFAC sanctioned First VPN Service (1VPNS), a VPN provider used by ransomware gangs.
- The outage stemmed from a technical limitation: the .me registry could only suspend an entire domain, not a single path like t.me/FirstVPNService.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: Search & fact-check with cited sources for What happened when the U.S. Treasury sanctioned a VPN provider for enabling ransomware, and how d. Article summary: Here is the verified, cited account of what happened.. Topic tags: general, government, general web, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clickbait thumbnails, icons, and tiny thumbnail layouts. Make it useful as an illustrative visual, not as factual evidence.
On July 13, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned a VPN provider called First VPN Service (1VPNS) for enabling ransomware gangs to attack Americans. Buried in the sanctions listing was a single URL—t.me/FirstVPNService—that inadvertently caused a global outage of Telegram's entire t.me short-link domain for roughly a day. Here is the verified, step-by-step account of what happened and why.
The sanctioned entity and why it was targeted
OFAC designated First VPN Service (1VPNS), its administrator Dmytro Rashevskyi, and a Belarusian cryptor provider named Yevgeniy Silayev for providing anonymizing infrastructure to ransomware actors targeting Americans . The Treasury's press release stated that 1VPNS's principal customers were cybercriminals and ransomware distributors . The sanctions were part of a broader U.S. effort to disrupt the infrastructure used by ransomware gangs to hide their activities.
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "How a U.S. Treasury Sanction on a Ransomware VPN Accidentally Took Down Telegram's t.me Links Worldwide"?
On July 13, 2026, the U.S. Treasury's OFAC sanctioned First VPN Service (1VPNS), a VPN provider used by ransomware gangs.
What are the key points to validate first?
On July 13, 2026, the U.S. Treasury's OFAC sanctioned First VPN Service (1VPNS), a VPN provider used by ransomware gangs. The outage stemmed from a technical limitation: the .me registry could only suspend an entire domain, not a single path like t.me/FirstVPNService.