Chainalysis said sanctions evasion by state actors including Russia, Iran and North Korea drove crypto-related illicit finance to record levels in 2025. Sanctioned entities received at least $104 billion in cryptocurrency, nearly eight times 2024, pushing illicit on-chain volume to a record $154 billion. Stablecoins now account for roughly 84% of illicit cryptocurrency transaction volume, as Iran’s Islamic Revolutionary Guard Corps and North Korean hackers increasingly rely on these assets to move billions.
A ruble-pegged stablecoin, A7A5, operated as a central conduit for sanctioned Russian businesses, processing $93.3 billion in transactions in under a year. Chainalysis also highlighted an “A7A5 Instant Swapper” service that converts the token into mainstream dollar-pegged stablecoins with few or no KYC checks, and has processed more than $2.2 billion so far.
Iranian addresses tied to the IRGC accounted for more than 50% of value received by Iranian services by late 2025, moving over $3 billion linked to proxy financing, oil trade and procurement networks. North Korea remained the most prolific cyber-theft actor, stealing more than $2 billion in cryptocurrency in 2025, including $1.5 billion from a Bybit hack. The findings illuminate a structural shift in crypto crime toward highly liquid assets that enable rapid cross-border transfers for sanctioned entities, with stablecoins now dominating illicit flows across borders.
Leave a Reply