Illicit cryptocurrency volume reached $154 billion in 2025, nearly three times the $59 billion recorded in 2024, according to Chainalysis data.
The jump is not explained by market growth alone. The composition of the crime has changed.
What the Numbers Show
The Chainalysis chart tracks total cryptocurrency value received by illicit addresses from 2020 through 2025. The progression is $11 billion in 2020, $29 billion in 2021, $56 billion in 2022, $50 billion in 2023, $59 billion in 2024, and $154 billion in 2025. The 2025 figure is not a gradual increase. It is a near-vertical jump that dwarfs every prior year on the chart.
The composition of that $154 billion spans a wide range of criminal categories. Sanctioned entities represent the largest single segment, driven by a 694% increase in sanctioned entity activity year over year. Stolen funds from hacks exceeded $2 billion. Scams, ransomware, darknet markets, drug vendors, terrorist financing, and child abuse material all contribute to the total across the color-coded breakdown.
The 694% increase in sanctioned entity volume is the most structurally significant figure. Sanctioned entities are not opportunistic criminals. They are state actors, organized groups, and designated organizations deliberately using crypto infrastructure to move value outside the reach of traditional financial sanctions. A 694% increase in a single year suggests either a dramatic expansion of who is being sanctioned or a dramatic expansion of how aggressively sanctioned entities are using crypto, or both.
What Industrialized Means
Chainalysis describing crypto crime as becoming industrialized is a specific characterization. It means the criminal use of cryptocurrency is no longer primarily individual bad actors making opportunistic moves. It is organized, scaled, and increasingly professionalized.
The evidence for that framing is in the category breakdown. Scam operations at the scale visible in 2025 require infrastructure, recruitment, customer service pipelines, and money laundering networks. Ransomware groups operate with corporate structures including HR departments and affiliate programs. Darknet markets run logistics and dispute resolution. These are not crimes of opportunity. They are businesses.
The Honest Tension in This Data
The $154 billion figure will be used in regulatory arguments against crypto broadly, and that use deserves scrutiny. Total legitimate cryptocurrency volume in 2025 ran into the tens of trillions. Illicit volume at $154 billion is significant in absolute terms and alarming in its year-over-year growth rate. As a percentage of total crypto activity it remains a fraction, smaller than the estimated percentage of illicit flows through traditional banking systems.
That context does not minimize the $154 billion. The 694% increase in sanctioned entity activity and $2 billion in hack-related theft are real numbers with real victims. It does mean the data should inform policy proportionately rather than drive blanket conclusions about the asset class.
