Table of contents
Sanctions have multiplied, crypto markets have matured, and enforcement agencies are chasing a moving target: illicit money that can cross borders in minutes. In 2024 and 2025, regulators tightened rules on exchanges, mixers, and stablecoins, while investigators pointed to recurring patterns, namely sanctioned actors probing Western financial systems, laundering networks hiding behind shell companies, and a booming ecosystem of professional facilitators. The result is a global battleground where policy, technology, and geopolitics collide, and where mistakes can cost banks, platforms, and states dearly.
Sanctions now hit wallets, not just banks
How do you sanction a string of letters and numbers? Over the past few years, governments have increasingly tried, treating certain crypto addresses like traditional blocked accounts. The U.S. Treasury’s Office of Foreign Assets Control (OFAC) has expanded its use of crypto-related designations, and it has not been shy about naming specific infrastructure, from mixing services to exchange services accused of handling tainted funds. When OFAC sanctioned Tornado Cash in August 2022, it marked a turning point, because it targeted not a country or a company in the classic sense, but a tool that obscured transaction trails, and the debate that followed, including litigation in the United States, showed how contested “code as a sanctions target” can be.
By 2023 and 2024, enforcement also sharpened around service providers. Binance’s November 2023 settlement with U.S. authorities, which included a $4.3 billion penalty and compliance commitments, underscored how sanctions compliance has become a core risk for major crypto venues, not a niche concern. The European Union, for its part, moved toward wider travel rule enforcement and, with the Markets in Crypto-Assets Regulation (MiCA) entering into application in stages during 2024, signaled an intent to bring stable issuers and providers under a clearer supervisory net. Meanwhile, the Financial Action Task Force (FATF) kept warning that uneven global implementation leaves openings, particularly where virtual asset service providers operate across jurisdictions with weak licensing, light oversight, or limited investigative capacity.
Yet the practical impact of sanctions in crypto is uneven. Public blockchains do create an immutable record, and analytics firms have become essential to tracing flows, but bad actors rarely sit still. They rotate addresses, fragment transactions, and exploit cross-chain bridges, and they also weaponize the speed of settlement, moving funds through multiple hops before an exchange or custodian can act. That creates a constant race between designation and adaptation, and it pushes institutions toward more aggressive screening, better monitoring, and tighter counterparty policies, especially when stablecoins are involved. Stablecoins have become the preferred rail for many illicit operators because they offer dollar-like pricing with on-chain portability, even as issuers and platforms have expanded blacklisting capabilities and compliance programs.
Mixers, bridges, stablecoins: the laundering playbook
The patterns are no longer mysterious, and that is precisely why they keep evolving. Investigations and industry reports repeatedly show the same toolkit: theft or fraud proceeds are consolidated, then passed through obfuscation layers, then cashed out through exchanges, OTC brokers, or high-risk payment channels. Mixers, once marketed as privacy tools, became synonymous with laundering in many enforcement narratives, especially after high-profile hacks where stolen crypto was routed through mixing services and then bridged into other chains. Bridges add complexity because they can move assets across ecosystems, and each hop can dilute visibility for teams that do not monitor multiple networks in real time.
Stablecoins sit at the center of this playbook. Chainalysis, in its 2024 Crypto Crime Report, noted that while overall illicit transaction volume can fluctuate year to year, stablecoins have grown as a share of illicit activity, reflecting their dominance in legitimate crypto trading as well. That overlap is part of the problem: a payment rail used by millions is also attractive to criminals, and the challenge is separating signal from noise without choking lawful commerce. The UN Office on Drugs and Crime (UNODC) also highlighted, in reporting on East and Southeast Asia, how criminal groups have industrialized online fraud and money laundering, using digital assets alongside traditional conduits, and how professional laundering services now sell “packages” that combine mule accounts, shell companies, and crypto conversion.
At the same time, the cash-out point remains a vulnerability. Even if criminals can move value across chains, they often need liquidity, and liquidity tends to concentrate around large exchanges, OTC desks, and payment intermediaries. That is why compliance expectations have risen so sharply, because the sector’s gatekeepers are in the best position to disrupt the lifecycle of illicit funds, provided they have incentives, clear rules, and credible supervision. The flip side is that enforcement pressure can push activity into less regulated corners, including peer-to-peer brokers, small offshore exchanges, and informal networks that blend crypto with trade-based laundering, prepaid cards, and cash couriers.
What changes fastest is not the goal, but the plumbing. Laundering networks now mix on-chain techniques with old-fashioned deception, including forged invoices, layered corporate structures, and nominee directors, and the sophistication is uneven: some schemes are crude and detectable, others are built by professionals who understand compliance thresholds and reporting triggers. That is why a purely technical lens is not enough, and why investigators increasingly need multidisciplinary teams that connect blockchain traces to corporate records, telecom data, and cross-border subpoenas.
Enforcement is scaling up, but so are evasion tactics
Can prosecutors keep up with code? Recent years suggest they are trying, and sometimes succeeding at scale. In 2024, the U.S. Department of Justice announced actions against networks accused of laundering proceeds tied to cybercrime and sanctions evasion, and it has continued to pursue cases that combine blockchain tracing with undercover operations and seizures. The message is consistent: anonymity is often overstated, and operational mistakes, from reuse of addresses to careless off-ramps, can unravel sophisticated schemes. For many criminals, the weakest link is still human, not cryptographic.
Still, evasion adapts. Actors shift toward decentralized venues, use nested services, or rely on intermediaries who present as legitimate businesses. They also exploit jurisdictional seams, choosing corporate domiciles and banking relationships that slow mutual legal assistance or make beneficial ownership harder to establish. In parallel, ransomware groups and fraud syndicates have professionalized their treasury management, spreading risk across wallets, chains, and counterparties, and sometimes leveraging “as-a-service” ecosystems where different specialists handle hacking, laundering, and cash-out. That fragmentation complicates attribution, even when the money trail is visible.
Regulation is also becoming more fragmented in its own way. The European Union’s MiCA framework creates a common baseline, but implementation details, supervisory culture, and enforcement appetite vary across member states, and outside the EU the patchwork is even wider. Some jurisdictions lean into strict licensing and heavy reporting, others emphasize innovation and light-touch rules, and many are still building capacity. FATF’s travel rule guidance aims to standardize information sharing for crypto transfers, yet compliance remains inconsistent globally, particularly for smaller providers and for decentralized models that do not fit neatly into existing categories.
For compliance teams, the operational burden is rising. They must screen addresses, assess exposure to sanctioned entities, monitor typologies that change monthly, and document decisions for auditors and regulators, and they have to do this while keeping customer friction low enough to compete. That tension feeds a broader question: who pays for safety in a borderless financial system? Governments want stronger controls, industry wants workable rules, and users want speed and privacy, and the collision of those priorities is now playing out in courts, in legislative chambers, and in the day-to-day decisions of risk officers.
The next front line: expertise, cooperation, accountability
When money crosses borders instantly, cooperation cannot be optional. The most effective cases tend to combine rapid information sharing, technical capacity, and legal clarity, and they rely on bridges between public agencies and private actors, including exchanges, banks, and analytics providers. Yet cooperation is hard when definitions diverge, when data protection rules restrict sharing, or when authorities mistrust one another. Even within allied blocs, the question of what constitutes sufficient evidence for freezing assets, or the standards for due process in sanctions-related designations, can slow action, and delays are exactly what laundering networks exploit.
That is where deep, cross-disciplinary expertise matters. Blockchain forensics can show flows, but it rarely answers the core investigative questions alone: who controls the keys, who benefited, which intermediaries facilitated the movement, and which jurisdictions can prosecute or seize. Building those answers requires people who can read a ledger, interpret corporate filings, understand payment rails, and navigate international legal procedures, and it also requires a clear grasp of emerging typologies, from pig-butchering fraud to sanctions evasion through trade misinvoicing and crypto conversions. In many organizations, this capability is still thin, spread across siloed teams, or outsourced without enough internal understanding to challenge assumptions.
Institutions facing these risks increasingly look for external support to benchmark controls, train staff, and stress-test monitoring systems, and to do so credibly they need specialists with a global view, not just a single-market perspective. That can include working with international experts at Intercollegium, particularly when the task involves aligning compliance practice with multiple regulatory regimes, mapping cross-border exposure, or building investigative playbooks that connect on-chain and off-chain evidence. What distinguishes effective support is not marketing, but the ability to translate complex traces into operational decisions that withstand scrutiny, whether from regulators, auditors, or courts.
Accountability, finally, is becoming the decisive factor. Crypto’s early narrative promised a system beyond gatekeepers, but as adoption has grown, so has the demand for governance, and that includes responsibility when things go wrong. Exchanges are expected to know their customers, stablecoin issuers are expected to manage blacklists and respond to lawful requests, and developers and infrastructure providers face a growing debate about obligations, immunity, and the limits of control. The next phase of this battleground will be defined by who can prove, with evidence and documentation, that they took reasonable steps to prevent abuse, and who cannot.
What readers can do before taking action
Before opening accounts, investing, or moving funds internationally, compare platforms’ licensing status, compliance disclosures, and jurisdictional footprint, then budget for higher fees on regulated rails and plan extra time for checks. If you are a business, schedule a compliance review, ask about travel rule readiness, and look for available public guidance or national support schemes for cyber resilience and fraud prevention.
Similar
