{"id":49737,"date":"2026-01-08T08:00:00","date_gmt":"2026-01-08T13:00:00","guid":{"rendered":"https:\/\/bitcoinmagazine.com\/?p=49737"},"modified":"2026-01-07T15:20:00","modified_gmt":"2026-01-07T20:20:00","slug":"crypto-crime-soared-to-154-billion-in-2025","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/news\/crypto-crime-soared-to-154-billion-in-2025","title":{"rendered":"Crypto Crime Soared to $154 Billion in 2025 as Russia, North Korea, and Iran Exploit Blockchain Tech"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div>\n<p>Crypto crime surged to unprecedented levels in 2025, fueled by a combination of nation-state activity, large-scale thefts, and increasingly professionalized criminal infrastructure, according to newly compiled data from <a href=\"https:\/\/bitcoinmagazine.com\/tags\/chainalysis\">Chainalysis<\/a> shared with <em>Bitcoin Magazine<\/em>.<\/p>\n\n\n\n<p>Illicit crypto addresses, an account involved in criminal activities like scams, ransomware, darknet markets, etc, received at least $154 billion over the year \u2014 a 162% increase from 2024 \u2014 with sanctioned entities accounting for a dramatic 694% of that growth.&nbsp;<\/p>\n\n\n\n<p>Even excluding sanctioned actors, 2025 still set a record for illicit crypto activity, highlighting the broadening scope of the threat landscape, according to the report.&nbsp;<\/p>\n\n\n\n<p>While these numbers represent a lower-bound estimate based on known illicit addresses, they signal an ecosystem that is maturing, diversifying, and, increasingly, intersecting with global geopolitical tensions.&nbsp;<\/p>\n\n\n\n<p>The report cautioned that although illicit activity remains under 1% of total crypto volume, the implications for national security, consumer protection, and regulatory oversight are growing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Nation-states are driving new crypto crime records<\/h2>\n\n\n\n<p>Perhaps the most striking trend of 2025 was the rise of nation-state activity on-chain.&nbsp;<\/p>\n\n\n\n<p>Russia\u2019s ruble-backed A7A5 token alone transacted over $93.3 billion within its first year, marking one of the clearest real-world examples of state-backed crypto-enabled sanctions evasion.&nbsp;<\/p>\n\n\n\n<p>Iran, meanwhile, continued to leverage proxy networks for money laundering, illicit oil sales, and arms procurement, funneling more than $2 billion through wallets confirmed in sanctions designations.&nbsp;<\/p>\n\n\n\n<p>North Korea also <a href=\"https:\/\/bitcoinmagazine.com\/news\/prison-secrets-to-north-korea-for-bitcoin\">intensified its operations<\/a>: DPRK-linked hackers stole $2 billion last year, including the largest crypto heist on record, the February Bybit exploit, which netted nearly $1.5 billion, per the report.&nbsp;<\/p>\n\n\n\n<p>These developments underscore a massive shift: nation-states are now participating in the same professionalized crypto service ecosystem originally designed to facilitate cybercrime and organized crime.&nbsp;<\/p>\n\n\n\n<p>By leveraging \u201cfull-stack\u201d illicit infrastructure providers, states can <a href=\"https:\/\/bitcoinmagazine.com\/technical\/bitcoin-privacy-what-it-means-to-keep-your-bitcoin-transactions-private\">conduct large-scale operations<\/a> while minimizing exposure to enforcement.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stablecoins are dominating illicit crypto activity<\/h2>\n\n\n\n<p>Stablecoins emerged as the preferred asset for illicit actors, accounting for 84% of all illicit transaction volume in 2025, according to the report. Stablecoin liquidity, price stability, and ease of cross-border transfer as primary drivers.&nbsp;<\/p>\n\n\n\n<p>As the broader crypto ecosystem relies on stablecoins for transactions and settlements, their dominance in illicit activity highlights a potential blind spot for regulators and compliance teams.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Chinese money laundering networks expanded<\/h2>\n\n\n\n<p>The year also saw the consolidation of Chinese money laundering networks (CMLNs) as major players in the illicit ecosystem. These operations provide a wide range of services, including laundering-as-a-service and technical infrastructure, supporting everything from <a href=\"https:\/\/bitcoinmagazine.com\/news\/north-korea-stole-over-3-billion-in-crypto\">North Korean hack<\/a> proceeds to sanctions evasion and terrorist financing.&nbsp;<\/p>\n\n\n\n<p>By offering end-to-end <a href=\"https:\/\/www.chainalysis.com\/blog\/landscape-of-seizable-crypto-assets-2025\/\" target=\"_blank\" rel=\"noopener\">criminal infrastructure<\/a>, these networks have professionalized illicit finance in ways that mirror legitimate corporate operations, making enforcement increasingly complex.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The human cost of on-chain crime<\/h2>\n\n\n\n<p>While headlines often focus on hacks and sanctions evasion, the report emphasized that crypto crime is increasingly tied to physical-world violence. Human trafficking operations, coercion attacks, and other crimes now intersect with on-chain activity, sometimes timed to exploit cryptocurrency price volatility.&nbsp;<\/p>\n\n\n\n<p>This convergence of digital and physical crime underscores the importance of coordination among law enforcement, regulatory bodies, and crypto platforms, the report claimed. <\/p>\n\n\n\n<p>As the on-chain ecosystem continues to grow, so too does the sophistication of those seeking to exploit it. Nation-states, transnational criminal networks, and professionalized infrastructure providers are converging, creating threats that span finance, security, and public safety.&nbsp;<\/p>\n\n\n\n<p>While illicit activity remains a small fraction of total crypto volume, 2025 demonstrates that even a small share can translate into tens of billions of dollars in illicit volume.&nbsp;<\/p>\n\n\n\n<p>Chainalysis is a blockchain analytics company that provides software and data to governments, law enforcement, exchanges, and financial institutions to track, analyze, and investigate cryptocurrency transactions for compliance and criminal investigations. <\/p>\n\n\n\n<p><br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Crypto crime hit record highs in 2025, with illicit addresses receiving at least $154 billion \u2014 up 162% year over year. <\/p>\n","protected":false},"author":3817,"featured_media":49746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4378],"tags":[],"class_list":{"0":"post-49737","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news"},"author_data":{"id":3817,"name":"Micah Zimmerman","nicename":"micahzimmerman","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/11\/Micah_Zimmerman_Author_Image.jpg"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2026\/01\/Crypto-Crime-Soared-to-154-Billion-in-2025-as-Russia-North-Korea-and-Iran-Exploit-Blockchain-Tech.jpg","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/49737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/3817"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=49737"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/49737\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/49746"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=49737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=49737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=49737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}