$154 Billion in Illicit Crypto Flows Puts Stablecoin Compliance Under Pressure

Illicit cryptocurrency transactions reached an all-time high of $154 billion in 2025, according to data compiled by blockchain analytics firm Chainalysis, marking a 162% increase from the revised 2024 figure of $57.2 billion [1]. The data, which represents a conservative floor estimate based on confirmed illicit addresses, has placed the compliance infrastructure surrounding stablecoins under intense scrutiny as regulators and financial institutions grapple with the scale of the problem.

Stablecoins Overtake Bitcoin as Criminal Instrument of Choice

The most structurally significant finding in the Chainalysis data is the near-complete reversal in asset preference among illicit actors over a five-year period. In 2020, Bitcoin accounted for approximately 70% of illicit crypto transactions while stablecoins represented around 15%. By 2025, those figures had inverted entirely: stablecoins now account for 84% of all illicit transaction volume, while Bitcoin's share has fallen to approximately 7% [1].

The drivers are practical. Stablecoins offer price stability that eliminates the mark-to-market risk of holding volatile assets during the laundering process, while their architecture enables rapid cross-border transfers outside traditional financial surveillance systems. Despite built-in compliance features, including the technical ability of issuers to freeze addresses, bad actors have demonstrated sustained ability to operate at scale.

Source: Chainalysis 2025 Crypto Crime Report [1]

Nation-States Are the Primary Growth Driver

The headline figure masks a critical distinction. Funds directed to sanctioned entities surged by 694% year-on-year in 2025, indicating that the explosion in illicit volume is not primarily an expansion of retail crime but rather the entry of nation-state actors operating at geopolitical scale [2].

Eric Jardine, head of research at Chainalysis, placed this in context:

"Sanction evasion by a nation-state at scale can hit tremendously large volumes."

The data documents specific national programmes. Russia launched its ruble-backed A7A5 token in 2025, explicitly designed to facilitate sanctions evasion. The instrument processed over $93.3 billion in transactions within its first year of operation [2]. Iran's proxy networks funnelled more than $2 billion through confirmed sanctioned wallets for covert oil exports, arms procurement, and IRGC-linked activities [2]. North Korean hackers, operating under the Lazarus Group umbrella, stole approximately $2 billion during 2025, including the $1.5 billion Bybit exploit in February, the largest cryptocurrency theft in recorded history [2].

OFAC Responds: UK Exchanges Sanctioned

The United States Treasury's Office of Foreign Assets Control (OFAC) has responded with an escalating series of designations targeting crypto infrastructure. In a notable action on 30 January 2026, OFAC sanctioned two UK-registered exchanges, Zedcex and Zedxion, for operating in Iran's financial sector and processing cryptocurrency transactions for the Islamic Revolutionary Guard Corps (IRGC) [3]. This marked the first time digital asset exchanges had been sanctioned specifically for activity within Iran's financial system.

On-chain analysis confirmed that Zedcex alone had processed over $94 billion in transactions and showed verifiable overlap with wallets previously identified as IRGC-controlled. The action signals that OFAC is prepared to pursue enforcement directly against exchange infrastructure, not merely individual actors [3].

Chainalysis noted in its analysis of the sanctions landscape that the tactic of including wallet addresses as SDN identifiers, which it pioneered in coordination with regulators from 2018 onward, is now being applied to entire service providers rather than discrete individuals. The operational implication is that exchanges with any exposure to Iran-linked networks face immediate compliance risk regardless of their physical domicile [3].

The Compliance Paradox

The data presents stablecoin issuers and their regulators with a structural dilemma. Stablecoins derive their utility from the same properties that make them attractive to illicit actors: instant settlement, 24-hour availability, borderless transfer, and minimal friction at the point of execution. Any compliance intervention that meaningfully addresses these vulnerabilities by introducing delays, geographic restrictions, or counterparty screening also reduces the efficiency advantages that justify adoption.

Chainalysis was direct in its assessment of the current state:

"The industry still hasn't found a solution to prevent criminals from exploiting the technology, and until it does, expanding access without enhanced guardrails mostly expands harm."

Illicit activity still constitutes less than 1% of total crypto transaction volume, a figure Chainalysis uses to contextualise its findings without minimising them. The firm emphasised that the $154 billion figure is a lower-bound estimate; historical revisions have consistently moved figures upward as additional illicit addresses are identified. The 2024 estimate, initially published at $40.9 billion, was subsequently revised to $57.2 billion as more addresses were confirmed [2].

Regulatory and Market Implications

For market participants, the data crystallises several near-term regulatory risks. The GENIUS Act's 1:1 backing and AML requirements establish a floor for US stablecoin compliance, but the 2025 data demonstrates that issuer-level controls are insufficient to address network-level misuse, particularly when state actors are funding the circumvention effort. Expectations are growing that regulators in multiple jurisdictions will require stablecoin platforms to implement real-time transaction monitoring at protocol level, not merely at the point of exchange [2].

The data also raises questions about the adequacy of freeze mechanisms. While major issuers including Tether and Circle maintain technical capability to immobilise suspected addresses, the 84% illicit share figure suggests that bad actors are either rotating addresses faster than freeze orders can be executed, exploiting decentralised bridges that bypass issuer controls, or operating through intermediary networks that obscure the ultimate beneficial owner of funds.

References

[1] MENA Fintech Association, "$154B in Illicit Crypto Flows Raises Stablecoin Questions", 25 February 2026. https://mena-fintech.org/news/154b-in-illicit-crypto-flows-raises-stablecoin-questions

[2] Gizmodo, "Illicit Crypto Flows Climbed to $154 Billion in 2025 as Nation States Evade Sanctions", 9 January 2026. https://gizmodo.com/illicit-crypto-flows-climbed-to-154-billion-in-2025-as-nation-states-evade-sanctions-report-finds-2000708055

[3] Chainalysis, "OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime", 14 January 2026. https://www.chainalysis.com/blog/ofac-sanctions/