Chainalysis reports $154B in illicit crypto in 2026, $2B stolen by DPRK hackers, and a 694% surge in sanctioned entity activity.
Global cryptocurrency adoption continues to expand, yet criminal use of digital assets remains a concern for regulators and investigators.
The Chainalysis 2026 Crypto Crime Report states that illicit cryptocurrency activity reached about $154 billion.
The report also describes how organized crime groups and state-linked actors are using blockchain networks to move funds, conduct cyber operations, and operate complex financial structures.
Illicit Crypto Activity Reaches $154 Billion
Chainalysis reported that total illicit cryptocurrency volume reached around $154 billion in 2026. The estimate reflects activity connected to fraud, theft, ransomware, and illegal marketplaces.
Researchers stated that criminal groups are now operating structured financial systems using digital assets. These operations often include payment channels, laundering services, and coordinated transaction networks.
The report also explains that organized groups are using blockchain networks in ways similar to supply chains. Digital assets move through several services before reaching final destinations.
According to Chainalysis, cryptocurrency allows criminals to move funds across borders quickly. At the same time, blockchain records provide data that investigators can study.
Many criminal networks now combine traditional illegal operations with cryptocurrency transactions. These include fraud groups, cybercrime organizations, and dark web marketplaces.
Chainalysis noted that blockchain transparency allows analysts to estimate criminal flows with greater accuracy.
Sanctioned Entities and State Actors Expand Activity
The report recorded a sharp rise in transactions linked to sanctioned entities. Chainalysis data shows a 694% increase in activity connected to these groups.
The Chainalysis 2026 Crypto Crime Report is now LIVE! Crypto crime is becoming industrialized — organized crime groups are running digital-asset supply chains, and nation-state actors are plugging into the same rails.
Key findings:
🔹$154B illicit volume
🔹+694% sanctioned… pic.twitter.com/o7wO74LbZU— Chainalysis (@chainalysis) March 5, 2026
Researchers said several sanctioned organizations are using decentralized finance tools and exchanges. These services can help move funds across multiple blockchain networks.
Nation-state actors also appeared in the report as active participants in cyber-related cryptocurrency activity. These groups often conduct hacking campaigns against exchanges and digital platforms.
Chainalysis reported that North Korean cyber groups were responsible for more than $2 billion in stolen cryptocurrency. These attacks included exchange breaches and other cyber intrusions.
The stolen assets were later transferred through multiple wallets and blockchain networks. These steps are often used to reduce the traceability of funds.
Chainalysis wrote that organized cyber groups are building structured financial networks that support large-scale cyber operations.
Related Reading: Chainalysis Flags Hundreds of Millions in Crypto Tied to Trafficking Groups
Blockchain Transparency Supports Investigations
The report also explains how investigators use blockchain data to track criminal activity. Every blockchain transaction creates a permanent public record.
Law enforcement agencies now rely on blockchain analytics platforms to follow suspicious transactions. These tools help track funds across exchanges, wallets, and decentralized services.
Chainalysis also analyzed settlement flows connected to the A7A5 network. The report estimates that around $93 billion moved through these settlement channels.
Investigators use transaction patterns and wallet data to identify criminal networks. These methods allow authorities to trace funds even after several transfers.
In some cases, blockchain analysis has helped authorities recover stolen cryptocurrency. Investigations have also resulted in arrests and asset seizures.
Chainalysis stated that blockchain transparency continues to support financial crime investigations and monitoring efforts.
Leave feedback about this