Crypto Crime Skyrockets: Illicit Volume Surges 145% Year-Over-Year to Record High

Crypto's dark side just got darker—illicit activity isn't just growing, it's exploding.

The Scale of the Surge

Forget gradual increases. The latest metrics reveal a staggering 145% year-over-year jump in crypto-related crime. That's not a blip; it's a vertical line on a chart that would make any compliance officer's blood run cold. The narrative that blockchain is inherently transparent is getting a brutal stress test.

Where's the Pressure Point?

The surge cuts across sectors—from DeFi exploits that bypass traditional security to old-fashioned scams finding new life on-chain. It highlights a critical tension: the very features that make crypto revolutionary (permissionless access, pseudonymity) are the same ones bad actors leverage. Regulatory bodies worldwide are scrambling, often with the subtlety of a sledgehammer, trying to hit a target that moves at the speed of code.

The Bullish Counter-Narrative

Here's the twist for the optimists: this isn't a story of failure, but of growing pains. Surging illicit volume often correlates with surging total adoption—you don't rob empty vaults. The 145% figure, while alarming, represents a shrinking slice of a massively expanding pie. Every high-profile incident forces smarter security, sharper analytics, and more robust infrastructure from the legitimate players. The industry isn't being defeated by this crime wave; it's being hardened by it.

The Bottom Line

Let's be cynical for a second: Wall Street had centuries to perfect its flavor of crime—crypto's just playing an aggressive game of catch-up in record time. The path forward isn't about eliminating risk, but about building systems where the cost of crime outweighs the reward. The next generation of crypto security isn't coming from a regulator's memo; it's being built right now by developers who are tired of getting hacked. The race is on, and the stakes just got 145% higher.

Crypto Crime Volume Jumps To $158 Billion 

TRM Labs estimates that illicit cryptocurrency wallets received approximately $158 billion in incoming funds in 2025, up from $64.5 billion in 2024. This represents the highest level recorded over the past five years. 

The surge followed a prolonged downturn in illicit inflows, which had steadily fallen from $85.9 billion in 2021 to $75.4 billion in 2022 and $73.3 billion in 2023, before hitting a low point last year.

Despite the sharp rise in absolute dollar terms, the report notes that illicit activity continued to account for a smaller share of the overall crypto market. 

As a percentage of total attributed on‑chain transaction volume, illicit activity declined slightly to 1.2% in 2025, down from 1.3% in 2024 and well below the peak of 2.4% recorded in 2023. Illicit entities received 2.7% of all incoming flows to virtual asset service providers in 2025, compared with 2.9% the year before and 6.0% in 2023. 

The report highlights sanctions‑related activity as a major driver behind the 2025 increase. Volumes linked to sanctioned entities and jurisdictions ROSE sharply, led by roughly $72 billion in inflows associated with the A7A5 token. An additional $39 billion was tied to the A7 wallet cluster. 

TRM Labs noted that this activity was highly concentrated, with the vast majority of sanctions‑linked volume connected to Russia‑linked actors, including platforms and entities such as Garantex, Grinex, and A7.

Illicit Activity Reshaped By State Actors

Geopolitical developments played a central role in reshaping illicit crypto activity during the year. According to TRM Labs, state and state‑aligned actors increasingly turned to crypto as a Core component of their financial infrastructure rather than using it only as a last‑resort tool. 

While Russia‑linked networks were the primary contributors to sanctions‑related flows, the report emphasized a broader and more consequential shift: the growing institutionalization of crypto rails by other sanctioned actors around the world.

China continues to occupy a leading position in the illicit crypto landscape, particularly as a hub for illicit financial services infrastructure. TRM’s analysis shows that activity linked to Chinese‑language escrow services and underground banking networks has expanded dramatically. 

Adjusted crypto volumes associated with these networks grew from roughly $123 million in 2020 to more than $103 billion in 2025, reflecting their increasing scale and influence.

Featured image from DALL-E, chart from TradingView.com