The Financial Action Task Force (FATF) has released a sharply focused new analysis spotlighting how criminals are increasingly turning to stablecoins for illicit financial activities, especially through direct peer-to-peer transfers using unhosted digital wallets. Released in Paris on 3 March 2026, the report urges governments and industry players to ramp up defenses without creating entirely new regulatory systems.
Stablecoins, which are digital currencies aiming to maintain steady value through various backing mechanisms, have surged in popularity.
By mid-2025, more than 250 different versions were in circulation, pushing the total market value past $300 billion.
While these assets deliver genuine benefits—fast cross-border payments, liquidity, and seamless integration across blockchains—they have also become magnets for wrongdoing.
Blockchain intelligence firm Chainalysis reported that stablecoins featured in 84 percent of all illegal virtual-asset activity last year.
Perpetrators range from money launderers and terrorist financiers to state-linked hacking groups.
North Korean actors, for instance, have funneled ransomware and phishing proceeds through these coins, while Iranian networks have used them to support weapons-proliferation schemes.
The core vulnerability lies in peer-to-peer transactions that bypass regulated intermediaries entirely.
Unhosted wallets—private digital storage controlled solely by individuals—allow users to swap stablecoins directly, often across multiple blockchains.
This setup makes tracing funds extremely difficult and enables sophisticated layering techniques that hide the origins of dirty money. Issuers themselves struggle to monitor or control activity once coins leave their primary ecosystems.
FATF stresses that existing global standards, particularly Recommendation 15 on virtual assets, already provide the necessary framework.
The organization is not calling for fresh rules but insists on rigorous, risk-based implementation for stablecoin issuers, virtual-asset service providers, banks, and other participants.
Countries must ensure these entities conduct proper customer due diligence, monitor transactions, and maintain records.
For regulators and law-enforcement agencies, the report recommends building specialized expertise in smart contracts, cross-chain bridges, and advanced blockchain analytics.
It also pushes for faster international cooperation mechanisms, including memoranda of understanding that allow rapid information sharing and the ability to freeze or “burn” tainted stablecoins when required.
On the private-sector side, issuers are encouraged to embed powerful controls directly into their technology.
Examples include allow-listing (restricting transfers to approved addresses only), deny-listing (blocking high-risk wallets), and built-in redemption processes that trigger thorough identity checks.
The FATF highlights successful public-private partnerships that have already helped identify emerging typologies and disrupt criminal networks using real-world case studies drawn from more than 50 submissions by its global network.
The message is evident now: stablecoins are here to stay and offer real economic value, but the window to close loopholes is narrowing.
By fully applying current standards and fostering collaboration between authorities and industry, countries can protect the integrity of the financial system while preserving innovation. The FATF warns that delayed or uneven action will only embolden criminals who have already demonstrated their ability to adapt.