Hear no evil, See no evil, Speak no evil

Let's talk about important issues

Crypto and the laundering playbook

How wallets, mixers and decentralised exchanges changed the movement of illicit wealth

· Updated · No. 125

Money and business - Hidden money - Cryptocurrency

Criminals use crypto mixers, NFTs, decentralised finance platforms and privacy coins to hide the origin of stolen or illicit money, exploiting gaps in global regulation and enforcement.

Laundering stolen or illicit wealth is evolving rapidly, and cryptocurrency + modern tech tools are becoming increasingly attractive and dangerous additions to the kleptocrat's playbook.

Close-up of a computer monitor showing lines of hexadecimal code, cryptocurrency wallet addresses, and transaction graphs in blue and green
A computer screen displaying blockchain transaction data and cryptocurrency wallet addresses Photo by https://kaboompics.com/ on Pexels

Here's how the game is changing:


How Crypto and Tech Are Used in Money Laundering

1. Crypto Wallets and Mixers

What happens:

  • Funds (in USD, for example) are converted into Bitcoin, Ethereum, or stablecoins using offshore or unregulated exchanges.

  • These coins are then sent through mixers or tumblers (like Tornado Cash) that shuffle transactions, breaking the link between the source and destination.

Result: The original money becomes nearly impossible to trace.

The U.S. Treasury sanctioned Tornado Cash in 2022 for helping launder over $7B, including North Korean cybercrime proceeds.


2. NFTs (Non-Fungible Tokens)

How it works:

  • A corrupt actor creates or buys a worthless NFT.

  • Then they or an associate buy that NFT using dirty money at an inflated price.

  • The NFT is later sold or traded to legitimate buyers, making the profit seem clean.

Result: Funds are moved under the guise of digital art trade.

Same method used in fine art laundering, but now faster, borderless, and with fewer regulations.


3. Decentralized Finance (DeFi)

Why DeFi is risky:

  • DeFi platforms allow users to swap tokens, stake assets, borrow and lend, all without KYC (Know Your Customer).

  • Smart contracts can split large transfers into hundreds of micro-transactions, reducing scrutiny.

Result: Obscures the origin, purpose, and identity of users.

Russian, Iranian, and North Korean hackers are known to use DeFi for laundering ransomware proceeds.


4. Privacy Coins (Monero, Zcash)

What makes them dangerous:

  • Unlike Bitcoin or Ethereum, privacy coins hide wallet balances and transaction histories completely.

  • These are the preferred tools of criminal networks.

Result: Authorities have no visibility, and these coins are almost impossible to trace without seizing devices.


5. Shell Companies + Crypto Exchanges

Old tactic, new twist:

  • Shell companies open accounts on foreign crypto exchanges, often in the Middle East, Caribbean, or Southeast Asia.

  • Dirty funds move through multiple shell-controlled wallets, then are cashed out to fiat or stablecoins.

Result: A digital version of classic layering, but much faster and cheaper.


Real Examples

Lazarus Group (North Korea)

  • Stole $600M+ in crypto from exchanges.

  • Used Tornado Cash and small exchanges to launder it.

  • U.S. and Japan sanctioned wallets tied to the group.

Russian Oligarchs

  • Shifted wealth to crypto wallets after Western sanctions.

  • Using Dubai, Turkey, and Kazakhstan as crypto-friendly havens.

Chinese Underground Banks

  • Facilitate underground trade settlements using USDT (Tether).

  • Cleaned billions by routing funds through gambling platforms and fake e-commerce stores.


Why It's Hard to Stop

  • Crypto is borderless and peer-to-peer.
  • Many countries lack regulation or enforcement.
  • Law enforcement lacks training/tools to track complex chains of transactions.

  • New tools (AI bots, private tokens, DeFi smart contracts) emerge faster than regulations.


What's Being Done

  • Regulators (like FATF, U.S. FinCEN, and EU AML bodies) are:
    • Cracking down on unregistered exchanges

    • Demanding KYC/AML checks for crypto platforms

    • Investigating suspicious NFT marketplaces

  • Chainalysis, Elliptic and others offer blockchain forensics to governments


More on this

Comments

No answered comments yet. Yours could be the first.

Add a comment

Your email address is needed so we can reply, and is never shown on the site. Comments appear here once they have been answered.

Report an issue