Listen to this Post
Introduction: A Record Year for Crypto-Linked Crime
Illicit cryptocurrency activity reached its highest level in five years during 2025, according to new blockchain intelligence reports, reigniting global debate around digital assets, sanctions evasion, and financial crime. While cryptocurrencies continue to mature as a legitimate financial technology, they are also being exploited by sanctioned states, cybercriminal groups, and organized crime networks. The latest figures show a sharp rise in funds flowing into illegal wallets, even as their share of the broader crypto economy quietly declines. This contrast reveals a more complex reality: crypto crime is growing in absolute numbers, but shrinking in relative influence.
Summary of the Original Report
Record-Breaking Inflows Into Illicit Wallets
Blockchain analytics firm TRM Labs estimates that illicit cryptocurrency wallets received approximately $158 billion in 2025. This marks the highest level observed in the past five years and represents a dramatic 145% increase from the previous year, when illicit wallets received about $64.5 billion. TRM Labs cautioned, however, that changes in its analytical methodology make direct year-over-year comparisons imperfect.
Independent Data Confirms the Trend
A separate report from Chainalysis, published shortly before TRM Labs’ findings, reached a similar conclusion. Chainalysis estimated that illicit crypto wallets received $154 billion in 2025, with an even steeper 162% annual increase. The close alignment between the two firms suggests a consistent and credible picture of escalating illicit activity.
Sanctions Evasion Drives Much of the Growth
One of the most significant contributors to the surge was an increase in crypto-based sanctions evasion. Countries such as Venezuela, Iran, and especially Russia turned more aggressively to digital assets as Western governments expanded economic embargoes. TRM Labs reported that the value of crypto linked to sanctions evasion surged by over 400% year-on-year, making it one of the fastest-growing categories of illicit activity.
Improved Detection Amplifies Reported Numbers
Another key factor behind the sharp rise was improved identification of illegal crypto activity. TRM Labs credited the Beacon Network, a collaborative intelligence-sharing framework, with uncovering previously unidentified wallets and transaction flows. This enhanced visibility naturally inflated reported totals, even where the underlying activity may have existed earlier.
Large-Scale Hacks Skew the Data
The year also saw a small number of exceptionally large crypto thefts. Among them was the Bybit breach, attributed to North Korean-linked actors, which alone accounted for a substantial volume of illicit inflows. Such high-impact incidents significantly influence annual figures.
Expansion of Blocklisted Wallet Activity
TRM Labs also pointed to a rise in blocklisted activity across multiple crime categories. Stablecoin issuers, particularly Tether, increased enforcement actions against wallets linked to sanctions evasion, terrorism financing, fraud, and hacking. While this reflects stronger compliance, it also results in better attribution of illicit flows.
Darknet and Illicit Market Growth Remains Modest
Despite headlines, traditional crypto crime sectors grew at a slower pace. Crypto flows related to darknet markets increased by about 20% year-on-year, while illicit goods and services saw a 12% increase. These figures suggest steady but not explosive growth in conventional crypto crime.
Data Remains a Moving Target
Both TRM Labs and Chainalysis emphasized that their estimates are not final. Historical data shows that illicit volume estimates tend to rise over time as investigations progress, sanctions are issued, and new intelligence becomes public. For example, TRM Labs’ estimate for 2023 grew from $34.8 billion at publication to over $58 billion as new data emerged.
Illicit Activity Shrinks as a Share of the Market
Despite the absolute growth, illicit activity accounted for a smaller share of total blockchain flows. TRM Labs found that illicit activity represented 1.5% of total attributed on-chain volume in 2025, down from 1.7% in 2024 and far below the 2023 peak of 3.5%.
Incoming Liquidity Tells the Same Story
When measured against incoming liquidity from virtual asset service providers (VASPs), illicit entities received 2.7% of inflows in 2025, compared to 2.9% in 2024 and 6.0% in 2023. This indicates that legitimate crypto adoption continues to outpace criminal use.
What Undercode Say:
Absolute Numbers Can Be Misleading
At first glance, the $158 billion figure is alarming. However, focusing solely on raw inflows risks distorting the broader picture. Crypto markets expanded significantly in 2025, meaning more capital overall entered the ecosystem. As liquidity grows, even a shrinking criminal share can translate into larger absolute numbers.
Sanctioned States Are the Real Growth Engine
The data makes one thing clear: the biggest driver of illicit crypto flows is no longer darknet markets or retail fraud. Instead, state-level sanctions evasion now dominates growth. Russia’s increasing reliance on crypto rails to bypass financial restrictions marks a structural shift in how geopolitical conflict intersects with blockchain technology.
Better Tools Create Bigger Numbers
Improved analytics and intelligence-sharing frameworks such as the Beacon Network have fundamentally changed measurement. What looks like a surge in crime is partly a surge in visibility. Wallets that were previously unclassified are now being confidently attributed to illicit actors.
Stablecoin Issuers Are Becoming De Facto Enforcers
The role of stablecoin issuers, especially Tether, is no longer passive. By freezing and blocklisting wallets, issuers are actively shaping the enforcement landscape. This introduces a semi-centralized layer of control that challenges the long-standing narrative of crypto as an entirely permissionless system.
Hacks Still Distort Yearly Metrics
Large, state-sponsored hacks continue to skew annual data. A single North Korean operation can move billions, making year-over-year comparisons volatile. This reinforces the need to separate systemic trends from outlier events when interpreting reports.
Crime Is Losing the Adoption Race
The most important takeaway lies in the declining percentages. Criminals are absorbing a smaller slice of new capital entering crypto markets each year. This suggests that institutional adoption, regulated exchanges, and compliance-driven infrastructure are collectively diluting the influence of bad actors.
Regulation Is Quietly Working
While often criticized, regulatory pressure appears to be having an effect. Enhanced KYC requirements, improved on-chain analytics, and cross-border cooperation are constraining illicit actors without halting innovation. The data supports a narrative of gradual normalization rather than systemic failure.
Crypto’s Transparency Remains Its Strength
Unlike traditional finance, blockchain transactions leave permanent trails. As analytical tools improve, historical activity becomes easier to reconstruct. This is why past years’ estimates keep rising—and why crypto crime is increasingly traceable rather than invisible.
The Risk Has Shifted, Not Disappeared
Crypto crime is evolving, not vanishing. The risk is moving upstream toward geopolitical and state-aligned actors, away from small-scale retail abuse. This demands new policy responses focused on international sanctions enforcement rather than consumer-level fraud alone.
Public Perception Lags Behind Reality
Headlines emphasizing record highs fail to capture proportional declines. This gap between perception and data risks driving reactionary policy decisions that misunderstand where the real threats now lie.
The Ecosystem Is Maturing Under Pressure
Ultimately, the numbers reflect a maturing ecosystem under stress. Crypto is being tested by global politics, cyber warfare, and regulatory scrutiny—and so far, it is adapting faster than many expected.
Fact Checker Results
Data Consistency Across Firms
✅ TRM Labs and Chainalysis independently reported similar figures, strengthening credibility.
Methodology Transparency
✅ Both firms clearly disclosed limitations and revision risks.
Market Share Context
❌ Headlines often omit the declining percentage of illicit activity.
Prediction
Sanctions-Driven Crypto Use Will Intensify
🌍 As geopolitical tensions persist, sanctioned states will further explore crypto rails.
Illicit Percentages Will Continue Falling
📉 Legitimate adoption is likely to outpace criminal usage despite rising totals.
Analytics Will Reshape Enforcement
🧠 Advanced attribution tools will make crypto crime harder to hide and easier to prosecute.
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: www.infosecurity-magazine.com
Extra Source Hub (Possible Sources for article):
https://www.quora.com/topic/Technology
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
Bing
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
