Illicit cryptocurrency transactions surged to a record $158 billion in 2025, a staggering 145% increase from the previous year, according to the 2026 Crypto Crime Report released by TRM Labs. Yet, the headline number hides a critical discrepancy: while the absolute value of dirty money skyrocketed, its share of total on-chain volume fell to just 1.5%.
The Sanctions Machine
The volume wasn’t driven by retail scams, but by state-level actors. Russian sanctions evasion accounted for the lion’s share of the surge. TRM Labs pinpointed the A7A5 token, a ruble-pegged stablecoin, which processed $72 billion alone. Another $39 billion flowed through the A7 wallet cluster, signaling a deliberate shift toward “crypto-enabled, state-aligned financial infrastructure.”
This institutionalization of illicit finance was compounded by mega-hacks. The report highlighted the massive $1.5 billion exploit of the Bybit exchange in February 2025, attributed to North Korean operatives, as the largest “bank robbery” in crypto history.
“Illicit actors absorbed a smaller proportion of new capital entering the crypto ecosystem,” TRM Labs noted, emphasizing that the 1.5% illicit share is down from 3.5% in 2023.
Market Reaction: Indifference
Traders largely ignored the report, focusing instead on liquidity and macro trends. Bitcoin (BTC) held steady at $91,200, while Ethereum (ETH) traded near $3,150. The market’s muted response suggests that investors now view these figures as a geopolitical byproduct rather than a systemic flaw in the asset class.
The rise in identified illicit flows also reflects sharper tools. The deployment of the Beacon Network, a communication layer for investigators, accelerated the attribution of wallets to sanctioned entities like Garantex and Grinex, inflating the confirmed “illicit” totals while actual unflagged crime may be shrinking.
