Notifications
Clear all
Topic starter
12/07/2026 12:20 pm
TL;DR: Sanctioned entities received 694% more crypto in 2025 and illicit addresses handled a record $154 billion, driven by state actors embedding digital assets into financial infrastructure and policy goals, while North Korea stole over $2 billion and A7A5 processed more than $93 billion, according to Chainalysis. Crypto sanctions evasion is no longer a niche compliance issue; it is an infrastructure, liquidity, and attribution problem that changes how security and risk teams think about control boundaries.
NHIMG editorial — based on content published by Chainalysis: 2026 Crypto Crime Report coverage of sanctions evasion and state-backed crypto activity
By the numbers:
- Sanctioned entities received 694% more crypto in 2025.
Questions worth separating out
Q: What breaks when sanctions monitoring focuses only on wallets?
A: Wallet-only monitoring misses the intermediary layer where sanctioned actors actually keep value moving.
Q: Why do stablecoin rails create persistent sanctions risk?
A: Stablecoins combine liquidity, speed, and broad interoperability, which makes them attractive for legitimate settlement and illicit bypass alike.
Q: What do security teams get wrong about chain hopping?
A: They often treat chain hopping as a forensic inconvenience rather than a governance signal.
Practitioner guidance
- Map intermediary exposure across payment rails Inventory exchanges, OTC brokers, bridges, and swap services that can move value across jurisdictions.
- Harden onboarding for high-risk service providers Require enhanced due diligence before any platform, broker, or infrastructure provider can handle cross-border value movement.
- Implement continuous offboarding for compromised intermediaries Do not rely on one-time approval decisions for third-party services that remain in the transaction path.
What's in the full report
Chainalysis's full analysis covers the operational detail this post intentionally leaves for the source:
- Country-by-country breakdowns of sanctioned crypto activity and proxy network behaviour.
- Detailed case analysis of A7A5, Grinex, and other infrastructure-linked evasion patterns.
- Transaction-flow evidence showing how bridges, OTC desks, and swap services support movement across jurisdictions.
- Regulatory response timelines from OFAC, the EU, OFSI, and allied authorities.
👉 Read Chainalysis's analysis of state-backed crypto sanctions evasion in 2025 →
Crypto sanctions evasion is becoming an infrastructure problem?
Explore further
12/07/2026 12:34 pm
Crypto sanctions evasion has become an infrastructure governance problem, not a wallet-level anomaly. The article shows that the decisive risk sits in exchanges, brokers, bridges, and hosting layers that keep value moving even after specific addresses are identified. That shifts the control conversation from detection alone to service-provider lifecycle governance, counterparty review, and flow interdiction. Practitioners should treat infrastructure trust as a security boundary.
A question worth separating out:
Q: Who is accountable when a service provider helps sanctions evasion?
A: Accountability sits with the organisation that approves, monitors, and continues the relationship with the provider, not just with the service itself. When intermediaries route suspicious flows, governance should include onboarding due diligence, continuous reassessment, and documented offboarding. That is especially important where the provider can change labels without changing capability.
👉 Read our full editorial: Crypto sanctions evasion is becoming a state-scale infrastructure
