Topic starter
12/07/2026 12:20 pm
TL;DR: Sanctioned entities received 694% more crypto in 2025 and illicit addresses handled a record $154 billion, driven by state actors embedding digital assets into financial infrastructure and policy goals, while North Korea stole over $2 billion and A7A5 processed more than $93 billion, according to Chainalysis. Crypto sanctions evasion is no longer a niche compliance issue; it is an infrastructure, liquidity, and attribution problem that changes how security and risk teams think about control boundaries.
Editorial analysis by NHI Mgmt Group, based on content published by Chainalysis: “2025年の暗号資産犯罪を牽引したのは、国家主導の制裁回避：取引量は694%急増”.
By the numbers:
- Sanctioned entities received 694% more crypto in 2025.
Key questions
Q: What breaks when sanctions monitoring focuses only on wallets?
A: Wallet-only monitoring misses the intermediary layer where sanctioned actors actually keep value moving.
Q: Why do stablecoins and exchanges increase sanctions-evasion risk?
A: They reduce friction in cross-border settlement and make it easier to move value quickly across jurisdictions.
Q: What signs indicate a sanctions-evasion network is becoming infrastructure-based?
A: Look for repeated reuse of the same service providers, rapid successor branding, dependency on instant swap services, concentration of flows through specific intermediaries and growth that outpaces normal retail or commercial usage patterns.
Practitioner guidance
- Map sanctions exposure across the full value chain Identify exchanges, OTC brokers, bridges, stablecoin issuers and infrastructure providers that can move funds across borders, then classify where control is direct, delegated or indirect.
- Tighten counterparty governance for intermediary services Require lifecycle controls for high-risk counterparties, including onboarding diligence, ownership verification, periodic review and rapid offboarding when service relationships become sanctions-sensitive.
- Monitor rebranding and service substitution patterns Watch for renamed entities, successor exchanges, instant swap services and repeated wallet reuse that preserve the same transaction path after enforcement action.
Bottom line: Crypto sanctions evasion has moved beyond isolated wallets into a service-layer problem built on exchanges, bridges, brokers and stablecoin rails.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
12/07/2026 12:34 pm
Sanctions evasion has become a trust-chain problem, not a wallet problem. The article shows that states and proxies no longer rely on a single hidden endpoint; they rely on exchanges, brokers, bridges and settlement tokens to keep value moving. That shifts the real governance question from transaction visibility to lifecycle control over the intermediaries that make the flow possible. Practitioners should treat the enablement layer as the unit of risk.
A question worth separating out:
Q: How should compliance teams respond when sanctioned activity is embedded in shared infrastructure?
A: Treat the shared infrastructure as part of the risk object, not just the customer or wallet. That means stronger counterparty due diligence, ongoing monitoring of service dependencies, faster escalation when intermediary relationships change and coordinated action across sanctions, AML and cyber governance so that operational enablers are addressed alongside the transactions themselves.
👉 Read our full editorial: Crypto sanctions evasion is becoming a state-scale infrastructure