AI Scams: The $30 Billion Flood and Stablecoin Inflows

The illicit crypto economy is now a liquidity event of staggering scale. In 2025, scam-related activity alone accounted for an estimated $30 billion in volume, a figure that TRM Labs notes likely understates the true total. This isn't just growth; it's an explosion. The firm observed a roughly 500% increase in AI-enabled scam activity over the past year, industrializing fraud from a labor-intensive operation into a machine-scaled ecosystem. The conduit for this flood is clear: stablecoins are the primary vehicle for verified fraud inflows.

Stablecoins made up 84% of verified fraud inflows, acting as the essential bridge between illicit gains and spendable value. This dominance is critical. It means the $30 billion scam flood didn't just move on-chain; it flowed through the most liquid, dollar-pegged assets in crypto, effectively laundering billions through the system's most stable layer. The AI acceleration compounds the problem, with autonomous agents now capable of splitting funds and executing complex cross-chain transfers with minimal human oversight, drastically reducing the time window for detection.

The bottom line is a liquidity event of unprecedented scale and speed. The $30 billion in 2025 scams, fueled by 500% AI-driven growth and channeled overwhelmingly through stablecoins, represents a massive, industrialized outflow of capital that the ecosystem must now absorb and trace.

The AI Engine: Automation and Liquidity Capture

The AI engine powering this flood is built on autonomous execution. These agents can autonomously split funds, select cross-chain bridges, and execute decentralized platform exchanges, slashing the time window for detection from hours to minutes. This isn't just faster fraud; it's a fundamental shift in scale. Criminals now operate with a strategic asymmetry, able to run thousands of micro-campaigns at low cost while defenders face legal and evidentiary constraints. The result is an industrialized ecosystem where speed and volume are the primary weapons.

This automation creates a massive liquidity event. The $158 billion in illicit flows in 2025 represents a staggering volume of capital moving through the system. Yet the critical metric reveals the defensive challenge: illicit entities captured only 2.7% of incoming VASP liquidity last year. That slight decline from 2024's 2.9% shows that even as total illicit volume soars, the share of new liquidity being siphoned remains a small, but growing, fraction of the total pool.

The bottom line is a liquidity event of unprecedented scale and speed. The AI-driven automation allows criminals to move billions through the system's most stable layer-stablecoins-while the defensive side struggles to keep pace. The asymmetry is clear: attackers deploy thousands of micro-campaigns, while defenders must monitor a vastly larger, ever-expanding pool of legitimate liquidity.

Catalysts and Risks: The Liquidity Battle Ahead

The central battle for the health of the crypto liquidity pool hinges on a race. On one side, criminals are deploying AI agents that can autonomously split funds and execute cross-chain transfers, scaling micro-campaigns at will. On the other, automated compliance tools must catch up. The outcome will determine if the 2.7% illicit capture rate stabilizes or expands as the broader ecosystem grows.

A key risk is underreporting. The $30 billion scam estimate is likely a floor, not a ceiling. TRM Labs notes that underreporting pushes the true figure significantly higher. This hidden volume represents a persistent, unmeasured drain on the system's liquidity, making it harder to gauge the real pressure on compliance and capital allocation.

The watchpoint is clear. In 2025, illicit entities captured 2.7% of incoming VASP liquidity, a slight decline from the prior year. As the total pool of deployable capital expands, even a stable percentage translates to more absolute dollars in illicit hands. The system's structural advantage-on-chain transparency-remains, but the asymmetry of speed and scale favors attackers. The next phase will test whether defensive tools can close the gap before the illicit share of liquidity begins to climb again.