NextFin News - The on-chain money laundering ecosystem grew from $10 billion in 2020 to more than $82 billion in 2025, an eightfold expansion that has little to do with the usual narrative of anonymous hackers and everything to do with a quieter transformation: the professionalization of illicit finance and its migration onto stablecoin rails operated by specialized laundering networks. Blockchain analytics firm Chainalysis laid out the shift in its 2026 Crypto Crime Report, and the numbers point to a conclusion that cuts against the grain of both crypto boosters and crypto skeptics. The plumbing of dirty money is no longer a fringe service; it is an industrialized, state-tolerated, and in some cases state-run layer of the global financial system.
The report's most striking figure is not the $82 billion. It is that laundering activity has grown 7,325 times faster than illicit inflows to centralized exchanges since 2020 — evidence that criminals are not just receiving more crypto, they are routing it through an entirely different set of intermediaries. And the single largest driver of the broader crime surge is not theft or fraud, but sanctions evasion by nation-states, whose on-chain receipts jumped 694% in 2025 to $104 billion.
The $82 Billion Laundering Boom: What the Number Actually Measures
Chainalysis draws a sharp line between two things that headlines routinely conflate: illicit inflows, meaning funds received by addresses tagged as criminal, and the laundering ecosystem, which reflects the activity of moving, layering, and integrating those funds rather than the underlying crimes themselves. That distinction matters. The $82 billion is a measure of the service economy built on top of crime — the mixers, gambling fronts, over-the-counter brokers, and Chinese-language money laundering networks that fragment, consolidate, and reassemble value so it can re-enter the legitimate system.
"The on-chain money laundering ecosystem — a portion of the overall illicit crypto ecosystem that reflects the laundering of funds rather than the underlying inflows associated with illicit activity — has grown dramatically in recent years, increasing from $10 billion in 2020 to over $82 billion in 2025."
That growth tracks two forces. First, the topline illicit economy itself expanded: addresses linked to illicit activity received at least $154 billion in 2025, a 162% increase year over year. Second, and more important, laundering became a specialized, outsourced function. Chainalysis identifies six distinct service types within the Chinese-language laundering ecosystem alone, each playing a role in the classic three-phase laundering playbook — placement, layering, integration — now executed on-chain at machine speed.
There is also a measurement caveat built into the headline. Chainalysis calls the $154 billion a lower-bound estimate; totals rise over time as more illicit addresses are identified and historical activity is incorporated. When last year's report was published, 2024 was estimated at $40.9 billion. One year later, the revised estimate for 2024 stands at $57.2 billion. Part of what looks like a 162% surge is better visibility, not just more crime.
Stablecoins: The New Lifeblood of Illicit Finance
If 2025 had a single winning asset class in the criminal economy, it was stablecoins. They accounted for 84% of all illicit transaction volume in 2025, completing a multi-year handoff from Bitcoin. The reasons are mundane rather than ideological: stablecoins offer price stability, easy cross-border transferability, and broad utility — the same features that attract legitimate users.
The mechanics follow a recognizable pattern. Illicit actors channel stolen or fraud-derived assets such as Bitcoin through a mixer to break the direct link to the original wallet, then quickly swap into stablecoins. Those stablecoins are transferred to a new wallet, severing the traceable connection to the criminal source, and eventually converted to fiat, often through over-the-counter brokers who prefer stablecoins. In effect, Bitcoin has become the asset criminals steal, and stablecoins have become the asset they spend.
This is not merely a criminal adaptation; it mirrors the broader market. Stablecoins occupy a growing share of all crypto activity, and their dominance in illicit flows is partly a reflection of their dominance in legitimate flows. The policy implication is uncomfortable for regulators: the very properties that make stablecoins useful for commerce — speed, finality, borderlessness — are the properties that make them useful for laundering. A regulatory regime built around freezing funds at centralized exchanges, which Chainalysis notes criminals are increasingly avoiding, is fighting the last war.
Chinese-Language Networks: The Intermediaries Taking Market Share
The most concrete evidence of laundering's professionalization is the rise of Chinese-language money laundering networks, or CMLNs. They have increased their share of known illicit laundering activity to approximately 20% in 2025, and processed an estimated $16.1 billion last year — roughly $44 million per day across more than 1,799 active wallets. Chainalysis describes this growth as 7,325 times faster than the growth of illicit inflows to centralized exchanges since 2020.
These networks are not monolithic. Chainalysis has identified behavioral fingerprints for six distinct service types, including services that fragment large transactions into small amounts to evade detection, and over-the-counter services that do the reverse — consolidating small transactions into large amounts for integration. The off-ramping patterns tell the same story: CMLNs now consistently launder more than 10% of funds stolen in pig-butchering scams, as criminals move away from centralized exchanges that can freeze funds.
The emergence of CMLNs as a dominant laundering channel is a direct consequence of enforcement pressure elsewhere. The closure of Garantex, the sanctioned Russian exchange, and the likely U.S. special-measures designation of Cambodia-based Huione Group — a Chinese-language service that processed more than $70 billion in inflows — reshaped how criminals move money. Displacement, not deterrence, is the observed effect: activity migrates to other platforms, other languages, other jurisdictions.
The Real Driver: Nation-States Went On-Chain
Beneath the laundering figures sits the force that actually moved the needle in 2025. Value received by sanctioned entities surged 694% last year, totaling $104 billion and accounting for the majority of the record $154 billion in total illicit receipts. This is no longer a story of rogue traders finding workarounds. It is a story of states building parallel financial infrastructure.
North Korean hackers stole more than $2 billion. Russia launched a ruble-backed token, tracked under the ticker A7A5, that processed more than $93.3 billion in cross-border settlement activity — a sanctions-evasion rail operating at a scale that rivals mid-sized national payment systems. Iran-aligned proxy networks used crypto to fund terrorism, illicit oil sales, and arms procurement, with the Islamic Revolutionary Guard Corps and its proxies accounting for more than 50% of value received in the fourth quarter of 2025, and more than $3 billion in transfers for the full year.
"Sanctions evasion has traditionally been viewed as a game of financial shell companies and hidden bank accounts. While those opaque traditional structures remain the bedrock of illicit finance, the mechanism has expanded to the blockchain at scale."
The strategic implication is what separates 2025 from prior years. Earlier cycles of crypto crime were dominated by opportunistic theft and fraud — cyclical, profit-driven, and in principle containable through better security and enforcement. The 2025 surge is structural: it is driven by actors for whom crypto is not a get-rich shortcut but a survival mechanism, a way to keep a national economy functioning under sanctions. That changes the expected trajectory. Profit-driven crime responds to risk-adjusted returns; state-driven evasion responds to geopolitical necessity, which is far less price-sensitive.
Why the Scare Headlines Miss the Point
For all the record-setting figures, the crypto ecosystem's illicit share of all attributed transaction volume remained below 1% in 2025. That does not make $154 billion trivial — it is not — but it does mean the growth in laundering is, in large part, a function of the growth in the legitimate ecosystem beneath it. A fixed percentage of a much larger pie produces a much larger absolute number without any change in the underlying rate of criminality.
This is the central tension in the data. The absolute numbers are alarming and rising; the relative share is small and stable. Both statements are true, and policy that focuses on only one of them will fail. Emphasizing the share alone underweights a real and growing problem; emphasizing the absolute number alone invites proportionally excessive responses that could stifle legitimate innovation.
The Counter-Thesis: Better Tracing, Not More Crime
The strongest challenge to the "crime is exploding" reading is methodological. Chainalysis itself notes that its figures are lower-bound estimates that grow over time as identification methodologies improve and historical data is re-attributed. The 2024 estimate was revised upward by roughly 40% — from $40.9 billion to $57.2 billion — within a single year, without any new crime having occurred. On that view, a meaningful slice of the 162% year-over-year jump is a measurement artifact: we are seeing more because we are looking harder.
That argument has real force, and it should temper any conclusion that criminal activity literally more than doubled in twelve months. But it does not explain away the structural signals. The 84% stablecoin share, the 7,325x outperformance of laundering networks versus exchange inflows, and the 694% rise in state receipts are compositional shifts, not measurement noise. Better tracing can raise the level of the estimate; it cannot by itself rewire which assets criminals use, which intermediaries they choose, or why nation-states are suddenly the largest marginal buyer of illicit crypto services. Even if the true growth rate is half of what the headline suggests, the direction and the mechanism remain the same.
The falsifying signal is specific: if Chainalysis's next annual revision shows the 2025 figure being revised downward toward the $60 billion to $70 billion range — a 40%-plus haircut mirroring the 2024 revision — while stablecoin share and state-linked volumes hold flat or decline, then the "structural shift" thesis is wrong and the surge was predominantly a re-attribution artifact. Until that revision arrives, the burden of evidence sits with the structural reading.
What Comes Next: Three Horizons
Short term (6 to 12 months): Expect continued pressure on centralized exchanges and OTC brokers as enforcement targets the off-ramps. The signal to watch is whether CMLN wallet counts and daily throughput keep climbing despite exchange freezes — sustained growth would confirm displacement is outpacing disruption. Stablecoin issuers will face mounting demands for address-level freezing and screening, which introduces a new tension: the more censorable stablecoins become, the more attractive uncensorable alternatives look to illicit users.
Medium term (1 to 3 years): The battleground shifts to the service layer. Laundering is now a professional service industry with identifiable behavioral fingerprints; the regulatory response will follow the same path as traditional anti-money-laundering rules — licensing, reporting, and liability for intermediaries. The exposed parties are not the protocols but the on- and off-ramps: OTC desks, gambling platforms, and any service that touches both crypto and fiat. Beneficiaries, conversely, are the compliance and blockchain-analytics vendors selling the tooling to police it.
Long term (3-plus years): The structural question is whether state-driven sanctions evasion becomes a permanent feature of the crypto ecosystem. If it does, crypto's role in the global financial system will be dual-use by design: a settlement layer for legitimate commerce and a parallel rail for sanctioned economies. That outcome is not reversible through enforcement alone; it would require either a change in the geopolitical conditions that make evasion necessary, or a level of protocol-level control that is incompatible with the open networks criminals rely on.
Base case: laundering volumes continue to grow in absolute terms while holding below 1% of total activity, with stablecoins entrenched as the dominant medium and state actors the marginal driver. Upside case: coordinated stablecoin controls and CMLN disruption slow the growth rate and force criminals back onto slower, riskier rails. Downside case: state adoption deepens, ruble- and yuan-adjacent settlement tokens proliferate, and the illicit share begins to rise alongside the absolute number — the point at which the "below 1%" reassurance stops holding.
The $82 billion figure will age, and the next report will revise it. What will not age is the pattern underneath: crypto crime in 2025 stopped being a story about hackers and became a story about infrastructure — and infrastructure, once built, is far harder to dismantle than any single criminal enterprise.
Explore more exclusive insights at nextfin.ai.
