Illicit activity in cryptocurrency markets reached an unprecedented level in 2025, driven largely by the growing use of digital assets by sanctioned states and state-aligned actors. According to the latest Crypto Crime Report from Chainalysis, illegal cryptocurrency inflows climbed to at least $154 billion last year, marking a 162% increase from the previous year and setting a new record for crypto-related crime.
The sharp rise was overwhelmingly fueled by a surge in transactions linked to sanctioned entities. The report estimates that wallets associated with sanctioned jurisdictions — most notably Russia, Iran, and North Korea — recorded a 694% year-on-year increase in value received. This shift signals a structural change in the crypto crime landscape, where nation-states are increasingly adopting tools and infrastructure once dominated by cybercriminal groups.
Nation-states move on-chain
Investigators note that the crypto underworld has become far more organized and professionalized over recent years. What began as fragmented criminal activity has evolved into a mature ecosystem of laundering services, on-chain infrastructure providers, and cross-border payment rails. In 2025, nation-states began actively plugging into this system — either by leveraging existing illicit service providers or by developing state-backed crypto mechanisms designed explicitly to bypass international sanctions.
Russia’s rollout of its ruble-linked A7A5 token marked a pivotal moment. Launched in early 2025, the token processed more than $93 billion in transactions within a year, highlighting how digital assets are being weaponized for large-scale sanctions evasion. Iran, meanwhile, continued to route proceeds from illegal oil sales, arms procurement, and money laundering through crypto channels, with confirmed volumes exceeding $2 billion. North Korean hackers were linked to some of the largest thefts ever recorded in the sector, including multi-billion-dollar exploits tied to sophisticated cyber intrusions.
Stablecoins dominate illicit flows
Another defining feature of 2025 was the overwhelming role of stablecoins in illegal crypto activity. The report finds that 84% of all illicit transaction volume now involves stablecoins, reflecting their growing dominance across the broader crypto economy. Their low volatility, ease of cross-border transfer, and deep liquidity have made them the preferred instrument for both criminals and sanctioned actors.
Despite the record figures, analysts caution that illicit activity still represents less than 1% of total attributed crypto transaction volume. However, the absolute scale and strategic use of crypto by state actors significantly elevate the risks for global financial security and consumer protection.
Criminal infrastructure scales up
Beyond state-level activity, the report highlights the rise of full-stack illicit service providers — entities that offer everything from laundering-as-a-service to bulletproof hosting, domain registration, and malware distribution. These platforms support a wide range of threats, including ransomware operations, fraud networks, child exploitation platforms, and terrorist financing, while being deliberately engineered to resist takedowns and sanctions enforcement.
Chinese-linked money laundering networks have emerged as especially influential, operating large, integrated ecosystems that connect fraud rings, hacking groups, and sanctions-evasion channels into a single, highly efficient pipeline.
From digital crime to physical harm
Crucially, crypto crime is no longer confined to online environments. Investigators report a growing overlap between on-chain activity and real-world violence. Human trafficking operations increasingly rely on cryptocurrency for payments, while cases of physical coercion — where victims are assaulted and forced to transfer digital assets — are rising, often timed around peaks in crypto prices.
Higher stakes ahead
While legitimate crypto use continues to dwarf illicit volumes, the report underscores that the strategic adoption of crypto by nation-states has fundamentally changed the risk landscape. As illicit on-chain ecosystems converge with geopolitical conflict, enforcement agencies, regulators, and crypto businesses face mounting pressure to respond.
According to Chainalysis, closer coordination across borders and sectors will be essential to prevent digital assets from becoming a permanent pillar of sanctions evasion, organized crime, and state-sponsored illicit finance. The message from 2025 is clear: crypto crime has entered a new phase — broader in scope, more institutionalized, and far more consequential than before.
