American Jewish man accused in Israel of acting as an Iranian spy: only received $1,400 in encrypted compensation
Israel’s prosecution filed espionage charges on July 3 against Eli Lavon, a 21-year-old man with dual U.S.-Israeli nationality. Reporting by The Times of Israel says that while Lavon attended the Mir yeshiva in Jerusalem, in November 2025, he was “absorbed” by an Iranian intelligence unit after receiving messages on Telegram that were disguised as job postings. He then carried out photographing sensitive locations in Jerusalem and sent the intelligence back to handlers in Iran. The entire payment totaled about $1,400, paid in cryptocurrency. Israel arrested him on June 9, 2026, and he was formally indicted on July 3.
This is the first Iranian intelligence case in which a U.S. citizen has been charged by Israel since 2023.
Allegations: 2 counts of contact + 14 counts of information transfer
The prosecution’s specific allegations against Lavon consist of two layers: (1) “contacting foreign intelligence personnel,” 2 counts; and (2) “transmitting information deemed useful to a hostile state,” 14 counts.
The task was to photograph specific sensitive locations within Jerusalem, including key government buildings, military-related facilities, and transportation hubs. All intelligence was sent via Telegram to an overseas contact believed to be a handler for an Iranian intelligence unit. The entire absorption and execution process took about six months (from November 2025 to his arrest in June 2026), with total compensation of about $1,400.
Recruitment method: job ads disguised on Telegram
The absorption method described by Israel’s prosecution matches other recent Iranian intelligence cases: Iranian intelligence units widely broadcast messages on Telegram disguised as job openings, targeting religious communities inside Israel, students, or people with temporary residency. The job ads typically take the form of “photography and data collection work,” but the real tasks gradually escalate into intelligence gathering.
In recent years, Israel has reported a significant increase in Iranian-related espionage activity, and multiple cases have used a similar operational model of Telegram recruitment plus cryptocurrency payment.
Cryptocurrency payments as a low-cost espionage tool: what $1,400 means
The compensation amount in the Lavon case ($1,400) itself carries policy implications. It shows that the Iranian intelligence unit was able to complete cross-border payments at extremely low cost (lower than the spending on typical American intelligence informants) using cryptocurrency, thereby avoiding traditional bank countermeasures and anti–money laundering review. Israeli national security officials have said in recent years that cryptocurrency has become one of the main payment channels for Iranian intelligence activities. Through decentralized networks and anonymous stablecoins, Iran can conduct large-scale recruitment and operations at very low cost—capable of absorbing failures of a single case.
This is the first instance of a U.S. citizen being indicted by Israel using this approach, and it is a concrete example of cryptocurrency payments in cross-border intelligence activity.
This article, “American Jewish man accused in Israel of acting as an Iranian spy: only received $1,400 in encrypted compensation,” appeared first on .
Israel’s prosecution filed espionage charges on July 3 against Eli Lavon, a 21-year-old man with dual U.S.-Israeli nationality. Reporting by The Times of Israel says that while Lavon attended the Mir yeshiva in Jerusalem, in November 2025, he was “absorbed” by an Iranian intelligence unit after receiving messages on Telegram that were disguised as job postings. He then carried out photographing sensitive locations in Jerusalem and sent the intelligence back to handlers in Iran. The entire payment totaled about $1,400, paid in cryptocurrency. Israel arrested him on June 9, 2026, and he was formally indicted on July 3.
This is the first Iranian intelligence case in which a U.S. citizen has been charged by Israel since 2023.
Allegations: 2 counts of contact + 14 counts of information transfer
The prosecution’s specific allegations against Lavon consist of two layers: (1) “contacting foreign intelligence personnel,” 2 counts; and (2) “transmitting information deemed useful to a hostile state,” 14 counts.
The task was to photograph specific sensitive locations within Jerusalem, including key government buildings, military-related facilities, and transportation hubs. All intelligence was sent via Telegram to an overseas contact believed to be a handler for an Iranian intelligence unit. The entire absorption and execution process took about six months (from November 2025 to his arrest in June 2026), with total compensation of about $1,400.
Recruitment method: job ads disguised on Telegram
The absorption method described by Israel’s prosecution matches other recent Iranian intelligence cases: Iranian intelligence units widely broadcast messages on Telegram disguised as job openings, targeting religious communities inside Israel, students, or people with temporary residency. The job ads typically take the form of “photography and data collection work,” but the real tasks gradually escalate into intelligence gathering.
In recent years, Israel has reported a significant increase in Iranian-related espionage activity, and multiple cases have used a similar operational model of Telegram recruitment plus cryptocurrency payment.
Cryptocurrency payments as a low-cost espionage tool: what $1,400 means
The compensation amount in the Lavon case ($1,400) itself carries policy implications. It shows that the Iranian intelligence unit was able to complete cross-border payments at extremely low cost (lower than the spending on typical American intelligence informants) using cryptocurrency, thereby avoiding traditional bank countermeasures and anti–money laundering review. Israeli national security officials have said in recent years that cryptocurrency has become one of the main payment channels for Iranian intelligence activities. Through decentralized networks and anonymous stablecoins, Iran can conduct large-scale recruitment and operations at very low cost—capable of absorbing failures of a single case.
This is the first instance of a U.S. citizen being indicted by Israel using this approach, and it is a concrete example of cryptocurrency payments in cross-border intelligence activity.
This article, “American Jewish man accused in Israel of acting as an Iranian spy: only received $1,400 in encrypted compensation,” appeared first on .