Lede
The total value of cryptocurrency received by illicit addresses reached its highest point in history during 2025, driven primarily by the activities of sanctioned nation-states and their attempts to operate at scale. According to recent blockchain analytics, illicit addresses received at least $154 billion over the course of the year. This figure represents a significant 162% increase year-over-year when compared to the $59 billion recorded in 2024. The surge highlights a shifting landscape where blacklisted entities are increasingly utilizing digital assets to navigate global financial restrictions and evade sanctions.
This growth in illicit volume is largely attributed to the behavior of sanctioned entities seeking to maintain economic activity. As global authorities expanded their use of sanctions, the on-chain footprint of these entities matured and expanded accordingly. The historical peak recorded last year underscores the scale at which illicit actors are now interacting with the crypto ecosystem. Despite the high dollar value, the market remains bifurcated between legitimate growth and the specialized use cases adopted by those under international pressure. These unprecedented volumes associated with nation-state behavior mark a new phase in the maturation of the illicit on-chain ecosystem, where digital assets serve as a critical tool for circumventing international financial blocks.
Context
The rise in illicit transaction volume coincides with a period of intense global regulatory pressure and the widespread application of financial penalties. By May 2025, data suggests there were just under 80,000 total sanctioned entities and persons globally. The United States has been particularly active in this regard; in 2024 alone, the U.S. issued an unprecedented number of sanctions, with 3,135 entities added to its Specially Designated Nationals and Blocked Persons List. These measures have forced many sanctioned parties to seek alternative transaction methods to maintain financial operations and cross-border trade.
Russia has emerged as a prominent example of this trend in the face of ongoing sanctions. Following its invasion of Ukraine, the nation launched its ruble-backed A7A5 token in February 2025, which saw rapid and substantial adoption. In less than one year following its launch, Russia transacted over $93.3 billion using the A7A5 token. This activity demonstrates how nation-states are developing sovereign digital tools to bypass traditional banking blocks and facilitate large-scale value transfers on-chain. The development of such tokens allows sanctioned states to create parallel financial infrastructures that are more difficult for traditional authorities to monitor or control through conventional banking channels.
Impact
Stablecoins have become the dominant medium for illicit activity, mirroring their growing importance and utility in the broader legitimate cryptocurrency market. Currently, stablecoins account for 84% of all illicit transaction volume. This preference is driven by the practical benefits of these assets, which include lower price volatility compared to other cryptocurrencies and the ease of cross-border transferability. As stablecoin volumes have blossomed across the entire ecosystem over the past year, illicit actors have followed suit, utilizing them for a sizable and growing percentage of all crypto activity.
Despite the record-breaking nominal value of illicit transactions, these activities still represent only a small fraction of the total cryptocurrency market. Illicit crypto use remains below 1% of all transaction volume. While the illicit share of all attributed transaction volume did increase slightly from 2024 levels, the vast majority of crypto activity remains entirely legitimate. These illicit volumes are still dwarfed by the broader crypto economy, which largely consists of legitimate transaction volumes. The data suggests that while the dollar amounts are rising due to concentrated state-level activity, the technology is still primarily used for lawful purposes. Transactions that are not related to illicit use indicate that the core of the digital asset market continues to function as a legitimate financial layer.
Outlook
Comparing the cryptocurrency ecosystem to traditional finance provides further context for these illicit volumes and the potential for future monitoring. While crypto crime has hit historical highs in terms of dollar value, its share of total volume remains significantly lower than that seen in the traditional economy. For comparison, global criminal proceeds are estimated to make up an average of 3.6% of global domestic product. In contrast, the less than 1% illicit share in cryptocurrency suggests that digital assets are not yet being utilized for crime at the same scale as traditional fiat currency systems.
The landscape is expected to continue evolving as blockchain analytics firms identify more illicit addresses. It is likely that the value received by illicit crypto addresses will increase as 2026 unfolds and more retrospective data is analyzed. The maturation of the illicit on-chain ecosystem, particularly with the involvement of nation-states and the use of sovereign tokens, indicates that monitoring efforts will need to adapt. The ongoing transition toward digital financial tools suggests that the intersection of statecraft and blockchain will remain a central focus for global regulators and investigators. As the illicit share of transaction volume showed a slight increase recently, the focus will likely remain on stablecoins and sanctioned entities. Future reports are expected to refine these totals as more activity is attributed to specific illicit actors, providing a clearer picture of how the digital asset landscape is being reshaped.
About the Author
