Sanctions Evasion & State-Sponsored Activity Fuel Record Illicit Crypto Flows in 2025

Crypto's shadow economy just hit a new high-water mark—and geopolitics wrote the check.

Forget the lone-wolf hackers and darknet drug dealers of crypto's early lore. The latest surge in illicit blockchain activity wears a suit, flies a flag, and operates with the chilling efficiency of a national treasury. 2025's record-breaking flows reveal a stark new reality: digital assets have become the weapon of choice for state-level financial warfare.

The Sanctions Bypass Playbook

Traditional financial sanctions? They're looking increasingly like a leaky dam. Nation-states and sanctioned entities are now running entire economic lifelines through decentralized networks. They mix sophisticated chain-hopping techniques with compliant fiat off-ramps, creating financial corridors that bypass entire continents of banking regulation. It's less a hack and more a parallel financial system being built in real-time.

When the State is the Actor

The most significant shift isn't the volume—it's the provenance. A substantial portion of 2025's illicit volume traces back to state-sponsored or state-condoned activity. We're talking about national mining operations masking revenue, state-backed hacking groups funding operations, and sanctioned governments paying for critical imports. The line between 'illicit flow' and 'national monetary policy' is blurring by the transaction.

The Compliance Arms Race Heats Up

This isn't going unnoticed. Regulatory bodies and blockchain analytics firms are in a frantic tech arms race, deploying AI-driven forensics and pushing for stricter VASP controls. But it's a game of whack-a-mole played on a global, pseudonymous ledger. Every new compliance tool seems to birth two new obfuscation techniques.

So, what's the real takeaway? The crypto ecosystem is maturing—just not in the way Wall Street's compliance departments hoped. It's proving to be the most efficient, neutral settlement layer ever created, for better and for worse. The very features that promise financial inclusion—permissionlessness, borderlessness, censorship-resistance—are the same ones that empower geopolitical end-runs. Call it the ultimate double-edged sword of decentralized finance. And as one cynical trader might note: 'Turns out, the most bullish case for crypto isn't an ETF—it's a new round of international sanctions.' The market, it seems, has found its risk-on, geopolitics-off switch.

In brief

• Sanctioned entities drove $154B in on-chain flows in 2025, marking a 162% yearly increase as global financial restrictions continued to widen.
• Nation-states recorded unprecedented on-chain activity, signaling a shift in how governments respond to sanctions and limited banking access.
• Stablecoins represented 84% of illegal transaction volume, reflecting demand for price stability and efficient cross-border transfers.
• Illegal activity stayed below 1% of total usage, while most criminal finance still relies on traditional fiat-based systems.

Sanctioned Entities Drive Record $154 Billion in On-Chain Transactions in 2025

According to a Chainalysis report released Thursday, illicit cryptocurrency addresses received at least $154 billion in 2025. That total represents a 162% increase from $59 billion in 2024 and marks the highest level recorded to date. Most of the increase stemmed from sanctioned actors seeking workarounds to traditional financial channels as restrictions expanded worldwide.

Throughout 2025, there were “unprecedented volumes associated with nation-states’ on-chain behavior.

State-linked activity was particularly pronounced. Chainalysis reported “unprecedented volumes” tied to government actors, describing the period as a turning point in the illicit on-chain ecosystem. 

In February 2025, Russia—facing extensive sanctions following its invasion of Ukraine—introduced a ruble-backed token known as A7A5. Blockchain records show the token processed more than $93.3 billion in less than a year, placing it among the most active state-affiliated crypto instruments observed so far.

Sanctions continued to expand throughout the year. The Global Sanctions Inflation Index estimated nearly 80,000 sanctioned individuals and entities worldwide as of May 2025. 

Separate research from the Center for a New American Security found that the United States added 3,135 names to its Specially Designated Nationals and Blocked Persons List in 2024, the largest annual increase on record.

Nation-State Activity and Stablecoins Reshape Illicit Crypto Flows

Stablecoins featured prominently in illicit crypto activity. Usage patterns in illegal transactions closely mirrored those in legitimate markets, reflecting their price stability and ease of transfer.

Key developments shaping illicit crypto activity in 2025 included:

• Stablecoins accounting for 84% of illicit transaction volume.
• Sanctioned entities driving most year-over-year growth.
• Greater direct participation by nation-states in on-chain activity.
• Increased cross-border transfers amid narrowing banking access.
• Preference for stablecoins due to lower price volatility.

Despite the sharp rise in illicit transaction volume, illegal crypto use remained limited in scope. Chainalysis estimates that legitimate transactions accounted for more than 99% of all cryptocurrency activity, with the illicit share of attributed volume remaining below 1%.

Criminal finance continues to rely primarily on traditional money. Estimates from the United Nations Office on Drugs and Crime place global criminal proceeds at roughly 3.6% of worldwide GDP, far exceeding crypto-related figures. While illicit crypto totals are expected to rise in 2026 as additional addresses are identified, analysts note that the broader ecosystem remains overwhelmingly lawful.

Maximize your Cointribune experience with our "Read to Earn" program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.