Banking disruptions persist in Iran after cyberattacks target major banks

Iran’s banking sector continues to face severe service disruptions, with Sepah and Pasargad banks still struggling to fully resume operations after cyberattacks blamed on Israeli-linked groups.

Despite some limited card reactivations, Pasargad’s most banking services remain offline, leaving customers unable to perform routine transactions.

In Tehran, customers report that banks are refusing to process checks, urging clients to wait days for resolution.

During the recent Israeli and US airstrikes on Iran’s nuclear sites, a cyber battle erupted targeting critical Iranian infrastructure.

Sepah Bank, Pasargad Bank, and Nobitex, Iran’s largest cryptocurrency exchange, confirmed cyberattacks against their systems.

Internet banking, mobile banking, and ATMs of these banks remain largely nonfunctional.

A physical malware intrusion in Sepah Bank’s systems prevents successful data backup restoration, prolonging the outage, Rouydad 24 website reported Sunday.

The pro-Israel hacker group Predatory Sparrow, known for prior cyberattacks on Iran’s fuel infrastructure, claimed responsibility for disabling Sepah Bank, writing on X that they paralyzed the state bank.

The bank is responsible for processing the payments of military personnel.

Predatory Sparrow also hacked Nobitex. According to the cryptocurrency exchange's CEO Amir Rad, hackers extracted approximately $100 million from the platform.

While no hacker group has claimed responsibility for the cyberattack against Pasargad Bank, Iranian media are portraying it as part of Israel’s campaign against the Islamic Republic.