In recent weeks, Elon Musk has followed president Donald Trump’s lead, slamming Iranian government officials and supporting the thousands of protesters railing against the regime. He even provided free access to his Starlink satellites in the midst of a nationwide internet blackout.

But while publicly proclaiming his support of the protesters, Musk’s company X appears to be profiting from the very same government officials he railed against, potentially violating US sanctions in the process, according to a new report from the Tech Transparency Project (TTP) shared exclusively with WIRED.

TTP identified more than two dozen X accounts allegedly run by Iranian government officials, state agencies, and state-run news outlets which display a blue checkmark, indicating they have access to X’s premium service. These accounts were sharing state-sponsored propaganda at a time when ordinary Iranians had no access to the internet, and their messages appeared to be artificially boosted to increase reach and engagement, which is a key aspect of X’s premium service. An X Premium subscription, which is the only way to receive a blue checkmark, costs $8 a month, while a Premium+ subscription, which removes ads and boosts reach even further, costs $40 a month.

At a time when the Trump administration is threatening Iran with possible military action if it does not meet demands related to nuclear enrichment and ballistic missiles, X appears to be undermining those efforts by providing a social media bullhorn for the Iranian government to spread its message.

“The fact that Elon Musk is not just platforming these individuals, but taking their money to boost their content through these premium subscriptions and give them extra features also means he’s undermining the sanctions that the US and the Trump administration are actually applying,” Katie Paul, the director of the TTP, tells WIRED.

X did not respond to a request for comment, but within hours of WIRED flagging several X accounts belonging to Iranian officials, their blue checkmarks were removed. The rest of the accounts identified by TTP but not shared with X continue to display a blue checkmark.

The White House directed WIRED to the Treasury when asked for comment. A Treasury spokesperson said they do not comment on specific allegations but “we take allegations of sanctionable conduct extremely seriously.”

At the end of last year, protests broke out in the Iranian capital of Tehran on December 28 over the continuing devaluation of the Iranian rial against the dollar and a widespread economic crisis in the country. Over the following days, tens of thousands of protesters poured onto the streets in cities across the country, calling for regime change and the end of Supreme Leader Ayatollah Ali Khamenei’s 37-year reign.

In response, the regime brutally cracked down on protesters, arresting tens of thousands of people and killing thousands more. The true death toll is still unknown but could be much higher than currently reported.

Trump signaled his support for the protesters in a post on Truth Social on January 2, promising to come to their rescue. “We are locked and loaded and ready to go,” he wrote. Musk quickly followed Trump, calling Khamenei “delusional.”

On January 5, Gholamhossein Mohseni-Ejei, the head of Iran’s judiciary, who had a blue checkmark at the time, wrote in a post on X, “This time, we will show no mercy to the rioters.” Ejei was among the accounts whose blue checkmarks were removed on Wednesday after WIRED contacted the company.

A few days later, X changed the Iranian flag emoji on the platform to one used before the 1979 revolution, featuring a lion and sun. On January 14, Musk announced that anyone with a Starlink device would be free to access the internet in Iran without a subscription. At the time, Starlink devices were the only viable way of getting online after the government imposed a near total internet blackout.