TRM report flags $158B illicit crypto flows

TLDR

TRM Labs reports that wallets linked to illicit activity handled about 158 billion dollars of crypto in 2025, reversing several years of declines in criminal flows.

1. Illicit crypto volume jumped to 158 billion dollars in 2025, up roughly 145% year on year, but still only about 1.2% of total on chain activity.
2. The surge is driven mainly by sanctions evasion and stablecoins, with Russia linked networks and a single A7A5 stablecoin handling tens of billions of dollars.
3. Expect tighter controls on stablecoins, exchanges, and privacy tools, while AI powered scams make social engineering more convincing and harder to spot.

Deep Dive

1. What The 158 Billion Dollars Represents

TRM Labs 2026 Crypto Crime Report estimates that wallets associated with illicit activity received around 158 billion dollars in crypto in 2025, up from about 64.5 billion dollars in 2024, a 145% increase year on year.Illicit flows summary

Despite the big dollar number, TRM says illicit activity fell as a share of total blockchain volume, from about 1.3% in 2024 to roughly 1.2% in 2025, implying that legitimate usage grew faster than crime.Share of activity detail

Historically, they note a decline in criminal flows after 2021 followed by this 2025 spike, so this looks more like a cyclical reversal than proof that most crypto is crime.

2. Who And What Is Driving The Flows

TRM attributes much of the increase to sanctions evasion, especially Russia related networks such as Garantex, Grinex, and the A7 or A7A5 stablecoin, which alone processed around 72 billion dollars.Sanctions and A7A5 data

They report sanctions evasion flows growing more than 400%, with stablecoins making up about 95% of inflows to sanctioned entities, concentrated on chains like Bitcoin, Ethereum, TRON, BNB Smart Chain, and Polygon.

Scam wallet revenues actually ticked down slightly to around 35 billion dollars, suggesting that sanctions and related activity, not classic retail scams, explain most of the 2025 jump.Crime composition detail

3. AI Scams, Regulation And What To Watch

TRM highlights a sharp rise in AI assisted fraud, with criminals using large language models, deepfake video, and voice cloning to scale social engineering scams at lower cost.AI scam techniques

For the industry, the combination of high profile sanctions evasion and stablecoin dominance in illicit flows increases pressure for stricter KYC on off ramps, blacklist controls in stablecoins, and more aggressive enforcement against mixers and high risk venues.

For everyday users, the main practical risk is more convincing scam outreach, often packaged as investment pitches, tax demands, or support contacts, so verification habits and skepticism become more important than ever.

Conclusion

TRMs figure of 158 billion dollars in illicit crypto flows signals that criminal usage is growing again in absolute terms, even as it shrinks as a share of total activity. The main structural impact is likely in policy, with regulators tightening oversight of stablecoins, sanctioned actors, and privacy tools, while AI driven scams raise the bar for user vigilance rather than fundamentally changing cryptos long term role.