Chainalysis Report Finds $154 Billion in Illicit Crypto Flows for 2025

<p>Chainalysis's 2026 Crypto Crime Report found that illicit cryptocurrency addresses received at least $154 billion in 2025, a figure the blockchain analytics firm describes as a conservative lower-bound estimate based on identified illicit clusters. The report documented a 694% surge in inflows to sanctioned entities, underscoring how significantly crypto has become intertwined with state-level sanctions evasion efforts over the past year.</p>
<p>The report's central theme is the industrialization of crypto crime, with Chainalysis describing organized crime groups now running sophisticated digital-asset supply chains while nation-state actors increasingly plug into the same illicit financial rails. That framing marks a shift from earlier years, when crypto crime was more commonly associated with opportunistic individual hackers or smaller-scale scam operations rather than coordinated, industrial-scale criminal enterprises.</p>
<p>North Korea remained a dominant nation-state actor in the illicit crypto ecosystem, with North Korean hackers stealing more than $2 billion in 2025 alone, continuing a pattern of state-sponsored crypto theft that analysts have linked to funding the country's weapons programs amid ongoing international sanctions. Russia's role centered on a different mechanism, launching its ruble-backed A7A5 token to facilitate more than $93.3 billion in sanctions evasion flows, giving the country a state-backed crypto tool specifically designed to circumvent Western financial restrictions.</p>
<p>Chinese money laundering networks have emerged as a dominant force within the broader illicit on-chain ecosystem, according to the report, operating sophisticated full-service criminal enterprises that provide laundering-as-a-service capabilities to other bad actors rather than limiting their activity to laundering their own illicit proceeds. That laundering-as-a-service model has effectively created illicit financial infrastructure available to a broader range of criminal actors globally.</p>
<p>The report's findings on next-generation fraud schemes, advanced scam architectures, and cross-chain criminal activity suggest illicit crypto activity continues evolving in sophistication alongside the broader legitimate crypto industry's own technical advancement. For regulators and law enforcement, the industrialization trend documented in the report presents an increasingly complex challenge, as illicit actors adopt organizational structures and cross-border coordination that mirror legitimate multinational business operations rather than isolated criminal schemes.</p>