Illicit stablecoin activity hit a five-year high of $141 billion in 2025, with TRM Labs attributing most of that volume to sanctions evasion. TRM also highlighted concentration risk by pointing to A7A5, a ruble-pegged stablecoin that accounted for about $72 billion of the total.
TRM’s numbers add important context for risk teams: the firm estimated total illicit crypto flows at $158 billion in 2025, while noting illicit stablecoin activity still represented under 0.5% of overall stablecoin turnover. In the same dataset, TRM calculated that roughly 86% of illicit stablecoin activity was tied to sanctions avoidance, described as a 400% increase from 2024, even as total stablecoin volume was cited at more than $35 trillion.
Sanctions Evasion Is Becoming the Dominant Stablecoin Use-Case in Illicit Flows
TRM framed 2025 as a year where sanctioned actors and organized networks leaned more heavily on stablecoins for cross-border value transfer. The report positioned sanctions evasion as the primary illicit typology, while acknowledging that ransomware and terrorist financing also contributed to illicit volumes.
That shift creates a practical monitoring challenge when tokens are issued and circulated outside mature compliance programs and standardized controls. The concentration of illicit value into a small set of instruments creates a clearer enforcement target, but high throughput and layering across multiple protocols can still dilute attribution.
What This Means for Compliance, Listings, and Control Environments
TRM’s take-through for market structure is a tighter expectation on surveillance tuned to stablecoin-specific risks, especially where a token exhibits concentrated counterparty exposure. Firms will need to operationalize stricter onboarding thresholds, automated screening for sanctions-linked infrastructure, and expedited incident response with clear escalation paths. The report also pointed to reserve transparency pressure on issuers and a “shared responsibility” approach supported by broader deployment of advanced blockchain analytics.
The same concentration dynamic is likely to accelerate supervisory attention on custody policy, listing decisions, and mandatory reporting expectations. As scrutiny rises, demand will increase for third-party analytics capable of connecting on-chain activity to sanctions-linked networks at scale.
