Cryptocurrency and crime
Cryptocurrency and crime concerns the ways cryptocurrencies are used in, facilitate, or are targeted by criminal activity. Documented areas include investment and romance scams, ransomware payments, thefts and exchange hacks, money laundering and sanctions evasion, darknet-market transactions, and occasional off-chain coercion to obtain private keys. Law-enforcement assessments emphasize that investment fraud and laundering are frequent contexts for criminal use of crypto assets, while noting that public blockchains can also aid tracing, seizures, and arrests.
Background
are digital assets transferred on distributed ledgers without a central administrator. Transfers are borderless, typically irreversible, and control depends on possession of private keys rather than accounts held by a single intermediary.Criminals use cryptocurrencies when they make certain offences easier than traditional methods. For example, to move funds quickly across borders, take payment without going through banks, or launder proceeds through lightly regulated services. These traits suit offences such as theft, investment fraud and "pig-butchering," ransomware payments, darknet-market trade, money laundering and sanctions evasion.
Since 2019, authorities have tried to limit the criminal misuse of crypto by bringing "virtual assets" and virtual-asset service providers into anti-money-laundering and counter-terrorist-financing rules. The standards require licensing or registration, customer due diligence, and the "travel rule" for originator/beneficiary information. Governments pair these with supervision and enforcement and with more cross-border information-sharing among financial-intelligence units and police.
However, offenders still work around these controls. Common methods include routing funds through non-compliant or offshore providers; peer-to-peer transfers and OTC brokers; mixers/tumblers, peel-chain transactions, and cross-chain "hops" via bridges; and other anonymity-enhancing tools, sometimes combined with stolen or synthetic identities at compliant platforms. Uneven implementation of AML/CFT standards across jurisdictions remains a widely noted gap, and decentralised or extra-jurisdictional services can be harder to disrupt; many investigations therefore still focus on identifying fiat on-/off-ramps and coordinating across borders.
Scope and impact
The overall scale of crypto-related crime is difficult to measure and figures below are not directly comparable. Still, recent indicators give a sense of order of magnitude.| Indicator | Latest figure | Scope / coverage / source |
| U.S. consumer fraud where cryptocurrency was the payment method | US$1.42 billion | FTC Consumer Sentinel Data Book 2024; payment-method breakdown. |
| U.S. investment-fraud losses involving cryptocurrency | US$9.27 billion | FBI Internet Crime Report 2024. |
| Estimated global ransomware payments | ~US$813–814 million | Chainalysis 2025 reporting on 2024 payouts. |
| Crypto stolen in hacks | ~US$2.2 billion | Chainalysis year-end estimate for 2024 hacking losses, reported by Reuters. |
| Value received by identified illicit crypto addresses | US$40.9 billion | Chainalysis Crypto Crime report series. |
| Sanctions-related crypto flows | ≈US$15.8 billion | Chainalysis estimate for 2024, reported by AP; see also TRM Labs analysis of sanctions-linked activity. |
| Illegal online gambling via crypto | ~US$81.4 billion | Financial Times, reporting Yield Sec’s estimate of gross gaming revenue at crypto casinos. |
| Darknet-market revenue | ~US$1.5 billion | Chainalysis estimate for annual darknet revenue after the Hydra takedown; provided for scale and historical context. |
| Illicit/high-risk funds obfuscated via cross-chain swaps/DEXs/bridges | US$21.8 billion | Elliptic estimates that >US$21.8 billion of illicit and “high-risk” crypto has been moved via DEXs, cross-chain bridges, and swap services; cumulative and may double-count multi-hop paths. |
Crime Methods
Fraud
Exit scams and Ponzi schemes through initial coin offerings (ICOs)
Most exit scams as well as many ponzi schemes involving cryptocurrencies are performed through Initial Coin Offerings. As an example, according to a report by Satis Group, almost 80% of all projects launched through an ICO in 2017 were scams. These scams usually involve attracting investments from mostly retail investors, inflating the price and the perpetrators subsequently abandoning the project in question after selling off their own shares.The novelty of ICOs accounts for the current lack of governmental regulation. This lack of regulatory measures as well as the pseudonymity of cryptocurrency transactions and their international nature across countless jurisdictions in many different countries can make it much more difficult to identify and take legal action against perpetrators involved in these scams. Since 2017 the SEC has been actively pursuing groups and individuals responsible for ICO-related scams.
Ponzi schemes
Ponzi schemes are another common form of utilizing blockchain-based technologies to commit fraud. Most schemes of this sort use multi-level marketing schemes to encourage investors to conduct risky investments. Onecoin is one of the more notable examples of cryptocurrency-ponzi schemes: Founded in 2014 by Ruja Ignatova, OneCoin is estimated to have generated billion in income. While at least in China some of the investors' funds have been recovered and several members of the organisation arrested in the U.S., Ignatova herself is still at large.Money laundering
Due to the inability of third parties to de-pseudonymize crypto transactions criminal entities have often resorted to using cryptocurrency to conduct money laundering. Especially ICOs lacking KYC guidelines and anti-money laundering procedures are often used to launder illicit funds due to the pseudonymity they offer. By using ICOs criminals launder these funds by buying tokens off of legitimate investors and selling them. This issue is intensified by the lack of measures against money laundering implemented by centralized cryptocurrency exchanges.A well-known early example of money laundering using cryptocurrencies is Silk Road. Shut down in 2013 with its founder Ross Ulbricht indicted for among other counts a money laundering conspiracy, the website was used for several illicit activities including money laundering solely using Bitcoin as a form of payment.
Apart from traditional cryptocurrencies, Non-Fungible Tokens are also commonly used in connection with money laundering activities. NFTs are often used to perform Wash Trading by creating several different wallets for one individual, generating several fictitious sales and consequently selling the respective NFT to a third party. According to a report by Chainalysis, these types of wash trades are becoming increasingly popular among money launderers especially due to the largely anonymous nature of transactions on NFT marketplaces. Auction platforms for NFT sales may face regulatory pressure to comply with anti-money laundering legislation.
Regulatory measures
Canada is generally regarded as the first state actor implementing regulatory measures dealing with money laundering conducted by the usage of cryptocurrencies. By 2013 the Financial Crimes Enforcement Network — in direct reference to the centralized exchange Mt. Gox — issued regulations making it clear that all crypto-to-fiat exchangers had to apply KYC- as well as anti-money laundering methods. Any suspicious transactions have therefore to be reported to the authorities. Centralized exchanges have to register as money transmitters, with the exact definition of who and what constitutes a money transmitter in the crypto sphere being somewhat blurred and regulations differing between the different states of the U.S. An important exemption from these regulations is decentralized exchanges due to the fact that they do not hold any fiat currency.As part of the Fifth Anti-Money Laundering Directive of 2018 and in an effort to combat money laundering and the financing of terrorism, the European Union has issued a directive making all member-states have to make sure that crypto exchanges are licensed and registered. The EU is furthermore planning to take measures to ensure that all customers of cryptocurrency exchanges are to verify their identity as part of the registration process.
Regarding NFTs
Auction platforms for NFT sales may face regulatory pressure to comply with anti-money laundering legislation. A February 2022 study from the United States Treasury assessed that there was "some evidence of money laundering risk in the high-value art market," including through "the emerging digital art market, such as the use of non-fungible tokens." The study considered how NFT transactions may be a simpler option for laundering money through art by avoiding transportation or insurance complications in trading physical art. Several NFT exchanges were labeled as virtual asset service providers that may be subject to Financial Crimes Enforcement Network regulations.The European Union has yet to establish specific regulations to combat money laundering through NFTs. The European Commission announced in July 2022 that it is planning to draw regulations regarding that issue by 2024.
Giveaway scam
A cryptocurrency giveaway scam involves scammers compromising or impersonating celebrities, influencers, or well-known companies to falsely claim they are multiplying cryptocurrency or giving away free cryptocurrency via airdrop. A variety of methods are used to promote these scams, primarily through posts and livestreams on social media.YouTube is a platform commonly used to promote this scam. Popular accounts are hacked to stream pre-recorded videos of the impersonated figure, overlaid with fake giveaway announcements that often encourage viewers to visit the scammer’s website. In July 2020, Apple co-founder Steve Wozniak and 17 other victims filed a lawsuit against YouTube and its parent company, Google, alleging that the platform allowed scammers to use their name, image and likeness in cryptocurrency giveaway scams. After earlier dismissals based on Section 230, a 2024 California Court of Appeal ruling allowed the case to proceed, finding that YouTube’s role may fall outside those legal protections, with the case now pending further proceedings in the lower court.
In the 2020 Twitter account hijacking, 130 high-profile accounts, including those of multi-billionaire Elon Musk and then U.S. president Joe Biden, were used to promote a bitcoin giveaway scam. Within minutes of the initial tweets, more than 320 transactions had been sent to one of the wallet addresses, and over US$110,000 worth of bitcoin had been deposited before the scam messages were removed by Twitter. Coinbase blacklisted the bitcoin address and said they stopped over 1,000 transactions totaling over US$280,000 from being sent.