Record Surge in Illicit Crypto Activity Reported
According to data from blockchain intelligence company TRM Labs cryptocurrency transactions connected to Russian-backed illegal activities reached their highest point in five years during 2025 because they generated approximately $158 billion in total incoming value.
The current figure shows a significant growth compared to last year while the previous multi-year drop in crypto criminal activity has been reversed because certain networks and structures enabled illegal financial operations to become more common.
What Fueled the Increase? Russia-Linked Structures
The increase in activity comes from Russian-backed cryptocurrency operations. The A7 and A7A5 stablecoin wallet clusters processed a total of $10 billion in transactions during the year 2025. The A7A5 token alone handled an estimated $72 billion, while A7 wallets managed around $39 billion in incoming illicit flows.
Activities related to these clusters involved exchange platforms Garantex and Grinex, which both functioned as instruments for sanctions evasion and operations tied to sanctions restrictions.
How Illicit Crypto Activity Is Defined
Illicit crypto activity involves multiple criminal financial activities which include:
- Sanctions evasion by nation-state actors and affiliated organizations.
- Criminals use non-custodial services and over-the-counter brokers to conduct money laundering operations.
- Decentralized finance platforms serve as the main target for fraud and scam networks which operate in this space.
The total volume of illicit crypto activity increased during the period but showed a decrease since legitimate crypto transactions experienced strong growth throughout that time.
Geopolitical Implications
The research demonstrates that geopolitical sanctions have created conditions which force certain actors to use cryptocurrency networks for transferring value beyond controlled financial systems. Russia-connected entities played a major role in this shift, accounting for a disproportionate share of the total illicit volume.
The financial security agencies and national security authorities operate within the existing system of sanctions enforcement which they deem ineffective.
Broader Crypto Crime Trends
The 2026 Crypto Crime Report from TRM Labs indicates that the 2025 spike may signify a broader trend of professionalization and specialization in illicit on-chain networks. The networks use decentralized technologies for two purposes which enable them to escape detection while they handle substantial amounts of value.
The global law enforcement agencies have increased their investigation efforts but the extensive growth from digital asset misuse still creates ongoing difficulties for international tracking and prevention.
