Blockchain analytics firm Chainalysis has released its latest findings on cryptocurrency crime, revealing a dramatic escalation in 2025 driven primarily by nation-state actors exploiting digital assets to bypass international sanctions. According to the report, illicit cryptocurrency transactions surged to an unprecedented $154 billion last year—a 162% increase from 2024.
The biggest factor? Sanctioned entities received at least $104 billion, a staggering 694% jump year-over-year. What was once limited to basic evasion tactics has evolved into sophisticated, blockchain-powered national strategies for cross-border trade and procurement.
Russia emerged as a prime example of this shift.
Following new legislation in 2024, the country integrated crypto into its economy, using the ruble-backed A7A5 stablecoin to process a massive $93.3 billion in transactions within just 10 months.
This platform served as a vital bridge for Russian businesses seeking global market access despite restrictions.
Successor exchanges like Grinex, which took over from the previously sanctioned Garantex, handled billions more.
The EU responded swiftly with its 19th sanctions package in October 2025, explicitly banning transactions involving A7A5.
Iran’s crypto ecosystem also exploded to over $7.78 billion in 2025, heavily influenced by the Islamic Revolutionary Guard Corps (IRGC).
State-linked networks accounted for more than half of inflows in the final quarter, channeling over $3 billion to support proxy groups through oil, arms, and commodity deals.
Even civilian users turned to self-custody Bitcoin during political unrest and internet blackouts, while the Central Bank relied on DeFi bridges and stablecoins for laundering.
A major cyberattack on Iran’s largest exchange, Nobitex, drained $90 million but highlighted the ecosystem’s resilience.
North Korea achieved its most profitable year yet, stealing more than $2 billion in crypto to fund weapons programs.
The regime embedded IT workers worldwide and collaborated with partners in Iran and Russia.
Meanwhile, Venezuelan flows reached $44.6 billion, offering ordinary citizens a hedge against hyperinflation through global exchanges and peer-to-peer platforms, though regime-linked stablecoin-for-oil swaps persisted via overseas brokers.
Enforcement intensified globally. U.S., EU, and UK authorities coordinated designations targeting exchanges, mixers, and infrastructure providers, adopting an “infrastructure-centric” approach to raise costs for bad actors.
Notable actions included delisting the Tornado Cash mixer after a court ruling and seizing $15 billion from Southeast Asian scam networks tied to the Prince Group.
Chainalysis predicts sanctions evasion will remain concentrated among capable states, with stablecoins and centralized services continuing to provide liquidity.
Tactics like chain-hopping and rebranding will persist, yet blockchain transparency offers investigators powerful advantages.
The report from Chainalysis emphasizes that, if properly regulated, crypto could eventually support legitimate reconstruction and financial inclusion in sanctioned economies.
The Chainalysis update concluded that this past year bas marked a turning point where crypto became embedded in state financial infrastructure—both for illicit gains and strategic necessity—underscoring the urgent need for stronger public-private collaboration in enforcement.