Sanctuary Research

TRM Labs identified a record $15.8 billion in illicit crypto flows in 2025. Chainalysis reported that illicit addresses received at least $51 billion, with estimates rising as attribution improves. Different methods, different totals, same direction: the dollar number went up.
That should not be read as "crypto is mostly crime." It should be read as "crypto is large enough that small percentages become large dollar figures." Compliance teams have to live in that tension.
The share of illicit activity can look small next to total transaction volume. A bank, issuer, desk, or exchange still has to handle the specific wallet in front of it. A 0.1% market-wide rate does not help when the address on your deposit page is tied to ransomware or sanctions.
Risk is not averaged across the market. It arrives as one transfer, one counterparty, one release decision.
The mistake is treating published crime reports as PR ammunition instead of operating data. The point is not to argue whether crypto looks good or bad. The point is to map which categories are growing: sanctions evasion, stolen funds, scam infrastructure, laundering services, and high-speed stablecoin movement.
Those categories become screening rules, escalation triggers, and watchlist priorities. Anything else is theatre.
TRM Labs, 2026 crypto crime report: https://www.trmlabs.com/resources/blog/2026-crypto-crime-report-key-insights-trm-identifies-record-usd-158-billion-in-illicit-crypto-flows-in-2025-reversing-a-multi-year-decline
Chainalysis, 2026 crypto crime report introduction: https://www.chainalysis.com/blog/2026-crypto-crime-report-introduction/
Scam alerts, new sanctions, and investigation techniques. One email per week. Unsubscribe anytime.