Stablecoin Illicit Flows: $141B in 2025, But Less Than 0.5% of Total Volume

The raw illicit flow data is stark: illicit entities received around $141 billion via stablecoins in 2025, the highest level observed in the last five years. This figure, however, must be viewed through the lens of the ecosystem's immense scale. The total stablecoin transaction volume for the year was at least $35 trillion, meaning illicit flows represented less than 0.5% of overall activity. This context is critical-it underscores that the $35 trillion+ annual volume is overwhelmingly legitimate, with stablecoins functioning as core payment infrastructure.

The concentration of this illicit activity reveals its primary driver. Sanctions-related activity accounted for 86% of all illicit crypto flows in 2025, with stablecoins being the dominant vehicle. This is not random crime; it is a targeted use case. The data shows stablecoin usage varies sharply by illicit category, with near-total adoption in sanctions evasion and large-scale money laundering networks. The Russian ruble-pegged token A7A5 exemplifies this, with around half of the $141 billion in stablecoin flows linked to it, operating almost entirely within these sanctioned ecosystems.

The bottom line is one of scale versus systemic risk. While the $141 billion illicit flow is a record high, its share of the total transaction volume remains minuscule. The real risk is not in the total dollar amount, but in the specific, high-value use case: stablecoins as a connective infrastructure for sanctioned actors seeking to move value outside traditional financial controls. This makes them a critical target for regulators, even as the broader ecosystem's legitimacy is reinforced by its sheer size and volume.

The Concentrated Infrastructure: A7 and Networked Intermediaries

The illicit flow data reveals a system built on a few large, specialized networks. The most prominent is the A7 network, a Russian ruble-pegged token that has evolved into a centralized cross-border payment platform. Around half of the $141 billion in illicit stablecoin flows was linked to A7A5, with its activity almost entirely concentrated within sanctions-linked ecosystems. This isn't a fringe operation; it's a full-scale financial infrastructure, handling at least $83 billion in direct volume by 2025.

This institutionalization of sanctions evasion is the core risk. A7 intersects with other state-linked networks, showing how stablecoins serve as a connective infrastructure for sanctioned actors. The platform's scale and centralization make it a critical choke point for enforcement, yet its dominance also highlights the sophistication of the illicit financial systems now operating alongside the legitimate crypto economy.

The primary locus of this risk is not individual criminals, but professional facilitators and networked intermediaries. This includes guarantee marketplaces and front-company exchanges where stablecoins are the default currency. The data shows up to 99% of volume on these services is denominated in stablecoins, turning them into dedicated laundering infrastructure. The flow is concentrated: a handful of high-volume networks like A7 drive the vast majority of illicit stablecoin movement, making them the clear target for regulators seeking to disrupt these sanctioned financial systems.

Price and Liquidity Implications: What to Watch

The concentration of illicit use in specific, networked intermediaries creates identifiable choke points for enforcement, not a broad market contagion. The data shows up to 99% of volume on these services is denominated in stablecoins, turning them into dedicated laundering infrastructure. This means the risk is not systemic to the entire stablecoin ecosystem, but rather tied to a handful of high-volume, specialized platforms like A7. Regulatory pressure on these known networks is the most direct path to disrupting illicit flows without destabilizing the broader, legitimate payment infrastructure.

The critical metric to monitor is the share of illicit flows relative to total stablecoin volume; a rising percentage would signal a degradation of the infrastructure's integrity. While illicit flows hit a record $141 billion in 2025, they still represented less than 0.5% of overall activity. This ratio is the true health check. If the share of illicit transactions grows faster than the total volume, it would indicate the infrastructure is becoming more compromised, which could trigger a loss of institutional confidence and liquidity.

Watch for regulatory pressure on identified networks (like A7) and the adoption of cross-chain tracing tools to disrupt laundering via bridges and DEXs. The rise of cross-chain crime using DEXs and bridges is a growing challenge, with over $21 billion laundered that way in 2025. Tools that enable automatic cross-chain tracing could reduce investigation time from hours to minutes, making it harder for funds to move anonymously. The evolution of this enforcement and technological arms race will determine whether the illicit share of stablecoin volume remains a negligible, contained risk.