Chainalysis finds $154B in illicit crypto flows

TLDR

Chainalysis reports that illicit addresses received at least $154 billion in crypto in 2025, driven mostly by sanctions evasion and heavy use of stablecoins.

1. Chainalysis 2026 Crypto Crime Report estimates illicit on-chain flows hit a record $154 billion in 2025, with about $104 billion sent to sanctioned entities such as Russia, Iran, and North Korea.
2. Stablecoins accounted for roughly 84% of illicit transaction volume, with a ruble-pegged stablecoin A7A5 and a handful of laundering networks handling a large share of flows.
3. Illicit activity still made up less than 1% of total crypto volume, but regulators are focusing on stablecoins, peer to peer transfers, and on and off ramps, which could tighten compliance expectations for users and platforms.

Deep Dive

1. What The $154 Billion Number Covers

Chainalysis latest Crypto Crime Report finds that addresses it labels illicit received at least $154 billion in crypto in 2025, up about 162% year over year. Reports from CoinDesk and others note that roughly $104 billion of that was tied to sanctioned entities, meaning the biggest jump came from state linked actors using crypto to route around traditional banking.

Chainalysis stresses this figure is about identified on chain activity going to addresses linked to categories such as sanctions evasion, hacks, scams, and laundering services, not an estimate of all global crime. As with past reports, totals may rise over time as more addresses are attributed.

2. Stablecoins And Sanctions Evasion

Multiple summaries of the report say stablecoins made up around 84% of illicit crypto transaction volume in 2025, reflecting their role as liquid, dollar linked settlement rails for both legitimate and illicit use. Chainalysis and TRM Labs both highlight a Kyrgyzstan registered ruble stablecoin, A7A5, which processed about $93.3 billion in transactions in under a year and is linked to sanctioned Russian businesses using it as a cross border settlement rail.

Overall, Chainalysis estimates sanctioned entities moved roughly $104 billion through crypto, with Russia, Iran, and North Korea the main contributors. North Korean actors alone stole over $2 billion in 2025, including a roughly $1.5 billion exploit of Bybit, while Iran associated networks moved over $3 billion tied to oil sales and proxy financing.

3. Scale Versus Total Crypto And Regulatory Fallout

Despite the record $154 billion figure, Chainalysis and FATF reiterate that illicit transactions still represent less than 1% of total crypto activity by volume, given that overall stablecoin and spot volumes frequently exceed $1 trillion per month. The concern for regulators is not share, but the systemic role of stablecoins and peer to peer flows via self custody wallets.

FATF and other watchdogs are using these findings to justify tighter anti money laundering controls on stablecoin issuers, more screening around unhosted wallet interactions, and tools like wallet freezing on sanctioned or clearly illicit flows. Exchanges and issuers are under pressure to deepen analytics and KYC, and users should expect more scrutiny around large or cross border stablecoin transfers.

Conclusion

Chainalysis $154 billion estimate shows a rapid expansion of illicit crypto flows in absolute terms, driven mostly by sanctioned states and professional laundering networks using stablecoins as settlement infrastructure. At the same time, illicit activity remains a small fraction of total crypto volume, which is why regulators are targeting specific chokepoints such as stablecoin issuers, exchanges, and peer to peer blind spots rather than banning crypto outright. For market participants, the key is tracking how this enforcement focus reshapes stablecoin usage, cross border flows, and the compliance burden on platforms over the next few years.