TLDR
Recent blockchain analysis finds sanctioned states and entities routed about $104 billion through crypto in 2025, making sanctions evasion the largest driver of illicit on chain activity.
- Chainalysis estimates illicit addresses received $154 billion in crypto in 2025, with sanctioned entities accounting for roughly $104 billion and a near 700 percent year over year jump.
- Activity is heavily concentrated in stablecoins and a few rails such as the ruble pegged A7A5 token, plus networks linked to Russia, Iran and North Korea.
- Regulators are responding with tighter scrutiny on stablecoins, exchanges and wallets, but illicit flows still represent under 1 percent of overall crypto usage.
Deep Dive
1. What The $104B Figure Represents
Chainalysis 2026 Crypto Crime Report says sanctioned entities received at least $104 billion in cryptocurrency in 2025, an almost 700 percent increase on 2024 and the bulk of illicit on chain volume. Reports from outlets like CoinDesk and AMBCrypto note that total illicit addresses took in about $154 billion, meaning roughly two thirds of criminal or prohibited flows were sanctions related, not retail scams or generic hacks. Other coverage summarizing the same dataset puts illicit activity at less than 1 percent of all crypto transactions, so most on chain use remains legitimate even as the absolute illicit numbers grow.
The headline number is large in dollars, but it reflects a narrow slice of total crypto activity that is increasingly concentrated in a few state aligned networks.
2. How Sanctioned States Use Crypto
Multiple reports highlight that around 84 percent of illicit crypto flows now happen in stablecoins, which offer price stability and deep liquidity for cross border transfers. Chainalysis singles out the Kyrgyzstan registered, ruble pegged stablecoin A7A5, which processed about $93.3 billion in less than a year as a settlement rail for sanctioned Russian businesses, and is linked to sanctioned exchanges Grinex and Meer. The same research describes Iran related wallets tied to the Islamic Revolutionary Guard Corps moving more than $3 billion, often for oil trade and proxy financing, while North Korean actors stole over $2 billion in crypto via hacks.
Sanctioned governments are not mainly using Bitcoin as money; they are plugging into dollar like stablecoin rails and niche tokens that mimic traditional trade finance.
3. Regulatory Response And What To Watch
The Financial Action Task Force has warned that stablecoins are now the primary virtual asset tool for sanctions evasion and money laundering, urging stricter oversight of issuers and peer to peer flows. Western authorities have already sanctioned specific tokens and exchanges, including A7A5 linked platforms, and are expanding blacklists of wallets associated with Russian, Iranian and North Korean networks. At the same time, analytics firms stress that blockchain transparency enables investigators to trace these flows, even as criminals adopt more sophisticated cross chain laundering services.
Expect tighter rules around stablecoins, address screening and exchange compliance, with the focus on specific rails and jurisdictions rather than a blanket clampdown on all crypto.
Conclusion
Sanctioned states routing about $104 billion through crypto shows how digital assets have become part of geopolitical finance, particularly via stablecoins and specialized settlement tokens. For the broader market, the key tension is between preserving open, liquid rails and limiting their use for sanctions evasion, a balance regulators are now reshaping around stablecoins and high risk infrastructure rather than everyday crypto users.
CoinsKid.Com