TLDR
Illicit crypto flows linked to sanctioned states reached about $154 billion in 2025, but they still make up less than 1% of total on chain activity.
- The $154 billion figure comes from Chainalysis, counting all illicit addresses, with sanctioned entities driving most of the growth.
- Sanctioned governments, especially Iran, Russia and North Korea, increasingly use crypto and stablecoins for trade, financing and cyber operations.
- Regulators are tightening sanctions enforcement on crypto infrastructure, raising compliance pressure on exchanges and stablecoin issuers.
Deep Dive
1. What The $154 Billion Actually Measures
Blockchain analytics firm Chainalysis reports that illicit crypto addresses received around $154 billion in 2025, up 162% from 2024, with sanctioned entities responsible for most of the increase. This is summarized in coverage of its 2026 Crypto Crime Report, which notes that overall illicit activity still accounts for under 1% of all crypto transaction volume worldwide. Stablecoins made up roughly 84% of illicit transaction volume, reflecting their popularity for fast, dollar linked transfers across borders.
The dollar number is large, but as a share of total crypto usage it remains small, so the space is not dominated by crime, even as sanctions evasion grows quickly.
2. How Sanctioned States Use Crypto
Reports citing the same Chainalysis data say sanctioned governments moved about $104 billion through digital assets in 2025, using crypto as a financial lifeline when cut off from traditional banking. A detailed breakdown highlights a ruble backed stablecoin, A7A5, which processed about $93.3 billion in ten months, likely for cross border trade outside the banking system. North Korean actors reportedly stole over $2 billion in crypto in 2025 via hacks and IT worker schemes, while Iranian Revolutionary Guard linked addresses moved more than $3 billion to support oil trade, militias and procurement networks. These activities typically route through layers of intermediaries, OTC brokers and lesser regulated venues.
3. Regulatory And Market Impact
Authorities in the US, EU and UK are responding with more coordinated sanctions on specific wallets, stablecoins and service providers that facilitate these flows. The EU, for example, has targeted Russian crypto providers and blockchain based settlement systems, while US lawmakers have pressed large exchanges over alleged Iran linked flows, prompting detailed compliance responses and offboarding of suspect partners. At the same time, enforcement cases show that blockchain transparency can enable large seizures and network takedowns when investigators focus on key hubs.
Expect stricter KYC and sanctions screening at major venues, more scrutiny of high volume stablecoins and cross border flows, and occasional disruption when regulators target nodes that illicit users rely on.
Conclusion
Sanctioned states are clearly scaling their use of crypto, especially stablecoins, but they still operate on the margins of a much larger legitimate market. For everyday users and investors, the main impact is not direct exposure to these flows, but rising regulatory pressure on exchanges, stablecoin issuers and cross border payment rails that can affect liquidity, access and compliance requirements over time.
